last executing test programs: 1m9.884171153s ago: executing program 0 (id=149): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x54}}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m9.866650353s ago: executing program 0 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003740)={{r0}, &(0x7f0000000400), &(0x7f0000003700)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa8086dd60f53a0400303a00fe"], 0x0) 1m9.850245364s ago: executing program 0 (id=151): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='mm_page_free\x00', r0, 0x0, 0x8080000001}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) 1m9.831893484s ago: executing program 0 (id=152): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14004, &(0x7f0000000340), 0xfe, 0x272, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 1m9.621404529s ago: executing program 0 (id=158): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 1m9.204165277s ago: executing program 0 (id=176): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f00000001c0)=0x1001, 0x4) 1m9.182042518s ago: executing program 32 (id=176): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f00000001c0)=0x1001, 0x4) 47.528882579s ago: executing program 3 (id=762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0004010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) 47.5285912s ago: executing program 3 (id=763): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 47.50718135s ago: executing program 3 (id=765): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}}) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x890b, &(0x7f0000000000)) 47.459099461s ago: executing program 3 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 47.392310543s ago: executing program 3 (id=769): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x46d, &(0x7f0000001580)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000380)={0x0, 0x3, 0x3, 0x7fff, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfff) 47.03287992s ago: executing program 3 (id=775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)=@newtfilter={0x8b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x884, 0x2, [@TCA_MATCHALL_ACT={0x880, 0x2, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x5a9, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x6, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x6, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x3, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0xf, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x1, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x5, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 47.03247647s ago: executing program 4 (id=777): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 46.99606631s ago: executing program 33 (id=775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)=@newtfilter={0x8b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x884, 0x2, [@TCA_MATCHALL_ACT={0x880, 0x2, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x5a9, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x6, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x6, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x3, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0xf, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x1, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x5, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 46.920066302s ago: executing program 4 (id=780): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x8, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) rmdir(&(0x7f00000001c0)='./file0\x00') 46.866627293s ago: executing program 4 (id=782): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) unshare(0x22020600) r2 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 46.761606105s ago: executing program 4 (id=784): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@grpjquota, 0x2e}], [], 0x2e}, 0x0, 0x450, &(0x7f0000000480)="$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") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 46.372334983s ago: executing program 4 (id=788): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) listen(r1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) 45.800362625s ago: executing program 4 (id=792): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") 45.675911417s ago: executing program 34 (id=792): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") 2.509668279s ago: executing program 5 (id=2090): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 2.005481979s ago: executing program 5 (id=2100): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x270) syz_open_dev$tty1(0xc, 0x4, 0x1) rt_sigaction(0x1, &(0x7f0000000080)={&(0x7f00000000c0)="c461f9134200c482f5293b66262465f2c543aaaa676666420fadf4c461dd6b651dc4a12966dbc461fc1069e468859a71a4000092663b663b", 0x88000000, 0x0, {[0x7]}}, 0x0, 0x8, &(0x7f00000002c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r0, 0x80000000457, 0x0) 1.92861829s ago: executing program 5 (id=2104): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) close(r0) 1.278029714s ago: executing program 6 (id=2120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}}, 0x8000) 1.257251924s ago: executing program 6 (id=2121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 1.191361745s ago: executing program 6 (id=2134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000009c0)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.157391626s ago: executing program 6 (id=2136): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1}) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1.101960547s ago: executing program 2 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) unshare(0x2c020400) r1 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r1, 0x8ba, 0x696d, 0x20, 0x0, 0x0) 1.068153858s ago: executing program 5 (id=2126): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='-\\@][,-\x00') r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 1.00518631s ago: executing program 5 (id=2127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0xba87, 0x9, 0x1ff, 0x0, 0x2, 0x2, 0xfe, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) 982.03423ms ago: executing program 1 (id=2129): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 828.648243ms ago: executing program 1 (id=2130): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x920d8a6154485a1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 828.372993ms ago: executing program 2 (id=2131): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 784.535254ms ago: executing program 7 (id=2133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000001714000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe93, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 781.945334ms ago: executing program 1 (id=2135): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) timer_create(0x3, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) 775.951914ms ago: executing program 2 (id=2137): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0) 522.306619ms ago: executing program 6 (id=2138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 492.96492ms ago: executing program 2 (id=2139): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40000f63c) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x1000000000000}, 0x18) 492.34654ms ago: executing program 7 (id=2140): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 464.01805ms ago: executing program 1 (id=2141): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='-\\@][,-\x00') r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 457.179921ms ago: executing program 7 (id=2151): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403a, 0x81, 0x800, 0x6, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 321.862643ms ago: executing program 1 (id=2142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 294.102304ms ago: executing program 7 (id=2143): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 234.220515ms ago: executing program 1 (id=2144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) unshare(0x2c020400) r1 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r1, 0x8ba, 0x696d, 0x20, 0x0, 0x0) 86.558848ms ago: executing program 2 (id=2145): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000341200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000500850000008200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 86.375158ms ago: executing program 6 (id=2146): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001180)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000001240)={0x0, 0x9}, 0x8) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 61.638289ms ago: executing program 2 (id=2147): socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000400)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 46.802809ms ago: executing program 7 (id=2148): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x1a8, &(0x7f00000002c0)={0x0, 0xe182, 0x1000, 0x1, 0x2c}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x13, &(0x7f0000001bc0), 0x2) 19.8887ms ago: executing program 7 (id=2149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5002, 0x0) 0s ago: executing program 5 (id=2150): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): n [ 67.215858][ T372] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.234654][ T5561] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.241055][ T5561] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 67.321911][ T5561] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.784: attempt to clear invalid blocks 2 len 1 [ 67.354194][ T5547] lo speed is unknown, defaulting to 1000 [ 67.395025][ T5561] EXT4-fs (loop4): Remounting filesystem read-only [ 67.418433][ T5561] EXT4-fs (loop4): 1 truncate cleaned up [ 67.440518][ T5561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.534692][ T5515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.544503][ T5572] serio: Serial port ttyS3 [ 67.611531][ T372] bond1 (unregistering): (slave geneve2): Releasing active interface [ 67.685464][ T372] bond0 (unregistering): Released all slaves [ 67.707174][ T372] bond1 (unregistering): Released all slaves [ 67.897736][ T5580] loop2: detected capacity change from 0 to 1024 [ 67.921695][ T5580] EXT4-fs: Ignoring removed bh option [ 67.954103][ T5580] EXT4-fs: inline encryption not supported [ 67.982725][ T5580] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.091676][ T5580] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 68.146372][ T372] hsr_slave_0: left promiscuous mode [ 68.153963][ T372] hsr_slave_1: left promiscuous mode [ 68.160246][ T5580] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.791: lblock 2 mapped to illegal pblock 2 (length 1) [ 68.178214][ T5580] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.791: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.192454][ T372] veth1_macvtap: left promiscuous mode [ 68.220248][ T372] veth0_macvtap: left promiscuous mode [ 68.225990][ T372] veth1_vlan: left promiscuous mode [ 68.231273][ T372] veth0_vlan: left promiscuous mode [ 68.243356][ T5580] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.791: Failed to acquire dquot type 0 [ 68.283976][ T5580] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 68.333248][ T5580] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.791: mark_inode_dirty error [ 68.378410][ T5580] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 68.423259][ T5580] EXT4-fs (loop2): 1 orphan inode deleted [ 68.444432][ T4893] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.460244][ T5580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.483532][ T4893] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:22: Failed to release dquot type 0 [ 68.507263][ T3377] lo speed is unknown, defaulting to 1000 [ 68.513194][ T3377] syz2: Port: 1 Link DOWN [ 68.526297][ T5580] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.791: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.533378][ T5547] chnl_net:caif_netlink_parms(): no params data found [ 68.576157][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.682069][ T5600] SELinux: failed to load policy [ 68.738487][ T5547] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.746055][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.783409][ T5547] bridge_slave_0: entered allmulticast mode [ 68.790064][ T5547] bridge_slave_0: entered promiscuous mode [ 68.824159][ T5547] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.831353][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.853302][ T5547] bridge_slave_1: entered allmulticast mode [ 68.859861][ T5547] bridge_slave_1: entered promiscuous mode [ 69.049937][ T5547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.096660][ T5547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.129262][ T5586] chnl_net:caif_netlink_parms(): no params data found [ 69.235232][ T372] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.280492][ T5547] team0: Port device team_slave_0 added [ 69.295092][ T5547] team0: Port device team_slave_1 added [ 69.349334][ T372] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.400520][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.407639][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.433685][ T5547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.486884][ T5617] vlan2: entered allmulticast mode [ 69.497739][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.505044][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.531558][ T5547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.569670][ T372] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.607054][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.614300][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.645797][ T5586] bridge_slave_0: entered allmulticast mode [ 69.662642][ T5586] bridge_slave_0: entered promiscuous mode [ 69.668638][ T5623] loop2: detected capacity change from 0 to 764 [ 69.675787][ T5623] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 69.681516][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.690901][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.723447][ T5586] bridge_slave_1: entered allmulticast mode [ 69.735516][ T5586] bridge_slave_1: entered promiscuous mode [ 69.768050][ T372] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.832043][ T5547] hsr_slave_0: entered promiscuous mode [ 69.843626][ T5547] hsr_slave_1: entered promiscuous mode [ 69.871376][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.910634][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.807'. [ 69.919614][ T5631] netlink: 'syz.5.807': attribute type 18 has an invalid length. [ 69.936693][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.957818][ T4885] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.973293][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.807'. [ 69.982233][ T5631] netlink: 'syz.5.807': attribute type 18 has an invalid length. [ 70.016145][ T4885] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.059214][ T5586] team0: Port device team_slave_0 added [ 70.068200][ T5586] team0: Port device team_slave_1 added [ 70.074691][ T4885] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.086438][ T4885] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.124799][ T5640] netlink: 20 bytes leftover after parsing attributes in process `syz.5.810'. [ 70.165789][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.172847][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.199417][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.212052][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.219069][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.245309][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.257040][ T372] bridge_slave_1: left allmulticast mode [ 70.262794][ T372] bridge_slave_1: left promiscuous mode [ 70.268594][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.278074][ T372] bridge_slave_0: left allmulticast mode [ 70.283824][ T372] bridge_slave_0: left promiscuous mode [ 70.289545][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.346189][ T372] bond0 (unregistering): (slave geneve2): Releasing active interface [ 70.406518][ T372] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.422134][ T372] bond_slave_0: left promiscuous mode [ 70.436805][ T372] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.450715][ T372] bond_slave_1: left promiscuous mode [ 70.457400][ T372] $Hÿ (unregistering): Released all slaves [ 70.467254][ T372] bond1 (unregistering): Released all slaves [ 70.488396][ T372] bond0 (unregistering): Released all slaves [ 70.551184][ T5586] hsr_slave_0: entered promiscuous mode [ 70.559179][ T5586] hsr_slave_1: entered promiscuous mode [ 70.565627][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 70.571438][ T5586] Cannot create hsr debugfs directory [ 70.587040][ T372] hsr_slave_0: left promiscuous mode [ 70.592964][ T372] hsr_slave_1: left promiscuous mode [ 70.599701][ T372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.607209][ T372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.615993][ T5664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5664 comm=syz.5.820 [ 70.633546][ T372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.641110][ T372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.655375][ T372] veth1_macvtap: left promiscuous mode [ 70.660894][ T372] veth0_macvtap: left promiscuous mode [ 70.669693][ T372] veth1_vlan: left promiscuous mode [ 70.675476][ T372] veth0_vlan: left promiscuous mode [ 70.743494][ T372] team0 (unregistering): Port device team_slave_1 removed [ 70.752791][ T372] team0 (unregistering): Port device team_slave_0 removed [ 70.799263][ T5669] wg2: entered promiscuous mode [ 70.804234][ T5669] wg2: entered allmulticast mode [ 70.866090][ T5676] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 70.873945][ T5547] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 70.875059][ T5676] SELinux: failed to load policy [ 70.894377][ T5547] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 70.909747][ T5547] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 70.934463][ T5547] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 70.957781][ T5681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.827'. [ 70.985257][ T5681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.827'. [ 71.010575][ T5586] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 71.042174][ T5586] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 71.058928][ T5586] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 71.074001][ T5547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.081843][ T5586] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 71.122033][ T5547] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.123490][ T5694] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 71.139370][ T3411] IPVS: starting estimator thread 0... [ 71.141560][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.152001][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.166486][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.182681][ T5547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.193178][ T5547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.207371][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.214618][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.235610][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 71.235627][ T29] audit: type=1326 audit(1758913871.724:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 71.242999][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.272046][ T5702] IPVS: using max 2400 ests per chain, 120000 per kthread [ 71.308936][ T5708] netlink: 256 bytes leftover after parsing attributes in process `syz.5.833'. [ 71.318659][ T29] audit: type=1326 audit(1758913871.754:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 71.342117][ T29] audit: type=1326 audit(1758913871.764:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 71.365555][ T29] audit: type=1326 audit(1758913871.764:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 71.388861][ T29] audit: type=1326 audit(1758913871.764:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 71.412215][ T29] audit: type=1326 audit(1758913871.764:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 71.435615][ T29] audit: type=1326 audit(1758913871.764:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 71.459253][ T29] audit: type=1326 audit(1758913871.764:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 71.482951][ T29] audit: type=1326 audit(1758913871.764:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 71.506459][ T29] audit: type=1326 audit(1758913871.764:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 71.534773][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.541992][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.550897][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.558055][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.719559][ T5547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.867058][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.981779][ T5742] SELinux: failed to load policy [ 72.063380][ T5547] veth0_vlan: entered promiscuous mode [ 72.115825][ T5547] veth1_vlan: entered promiscuous mode [ 72.177823][ T5771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.847'. [ 72.192979][ T5547] veth0_macvtap: entered promiscuous mode [ 72.209116][ T5547] veth1_macvtap: entered promiscuous mode [ 72.229551][ T5586] veth0_vlan: entered promiscuous mode [ 72.247313][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.255378][ T5586] veth1_vlan: entered promiscuous mode [ 72.271768][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.312603][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.335273][ T5586] veth0_macvtap: entered promiscuous mode [ 72.342617][ T5586] veth1_macvtap: entered promiscuous mode [ 72.365347][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.378707][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.388707][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.415150][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.424155][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.456412][ T4903] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.495945][ T4903] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.534636][ T4903] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.566894][ T4903] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.676102][ T5807] loop5: detected capacity change from 0 to 512 [ 72.700533][ T5807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.825343][ T5807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.897189][ T5807] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.004241][ T5807] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 73.025159][ T5826] loop7: detected capacity change from 0 to 1024 [ 73.042366][ T5826] EXT4-fs: Ignoring removed bh option [ 73.052138][ T5807] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 73.084369][ T5826] EXT4-fs: inline encryption not supported [ 73.103886][ T5826] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.123346][ T5807] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 73.145596][ T5807] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 73.163405][ T5826] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 73.165972][ T5807] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 73.186514][ T5826] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.867: lblock 2 mapped to illegal pblock 2 (length 1) [ 73.205969][ T5826] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.867: lblock 0 mapped to illegal pblock 48 (length 1) [ 73.230458][ T5834] openvswitch: netlink: Message has 6 unknown bytes. [ 73.237734][ T5826] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.867: Failed to acquire dquot type 0 [ 73.253985][ T5826] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 73.267330][ T5826] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.867: mark_inode_dirty error [ 73.283629][ T5826] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 73.284472][ T3894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.303026][ T5826] EXT4-fs (loop7): 1 orphan inode deleted [ 73.309236][ T5826] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.322114][ T4903] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:32: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.344343][ T4903] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:32: Failed to release dquot type 0 [ 73.376948][ T5826] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.867: lblock 0 mapped to illegal pblock 48 (length 1) [ 73.408245][ T5586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.431572][ T5838] openvswitch: netlink: Message has 6 unknown bytes. [ 73.486915][ T5844] loop2: detected capacity change from 0 to 128 [ 73.503665][ T5844] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.520378][ T5844] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.803821][ T5869] netlink: 100 bytes leftover after parsing attributes in process `syz.7.886'. [ 74.559522][ T5913] 9pnet: p9_errstr2errno: server reported unknown error [ 74.596160][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 74.677547][ T5917] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.915927][ T5933] netlink: 5 bytes leftover after parsing attributes in process `syz.7.915'. [ 74.946571][ T5933] 0ªX¹¦D: renamed from gretap0 (while UP) [ 74.964265][ T5933] 0ªX¹¦D: entered allmulticast mode [ 74.972834][ T5933] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 75.004864][ T5938] loop6: detected capacity change from 0 to 128 [ 75.032546][ T5938] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 75.053273][ T5938] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.157070][ T5547] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.291770][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.926'. [ 75.458925][ T5974] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 75.536870][ T5983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5983 comm=syz.7.938 [ 75.586079][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.7.938'. [ 75.738341][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 75.745958][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 75.753437][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 75.760849][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 75.768491][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 75.776065][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 75.798758][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 75.806275][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 75.813957][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 75.821549][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 75.890478][ T3377] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 75.966865][ T6018] loop2: detected capacity change from 0 to 128 [ 75.988801][ T6011] fido_id[6011]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.087339][ T6027] ucma_write: process 35 (syz.6.956) changed security contexts after opening file descriptor, this is not allowed. [ 76.212457][ T6040] syz.2.961: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 76.227169][ T6040] CPU: 0 UID: 0 PID: 6040 Comm: syz.2.961 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.227205][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.227241][ T6040] Call Trace: [ 76.227250][ T6040] [ 76.227260][ T6040] __dump_stack+0x1d/0x30 [ 76.227284][ T6040] dump_stack_lvl+0xe8/0x140 [ 76.227305][ T6040] dump_stack+0x15/0x1b [ 76.227327][ T6040] warn_alloc+0x12b/0x1a0 [ 76.227371][ T6040] __vmalloc_node_range_noprof+0x9c/0xe00 [ 76.227466][ T6040] ? __futex_wait+0x1ff/0x260 [ 76.227523][ T6040] ? __pfx_futex_wake_mark+0x10/0x10 [ 76.227558][ T6040] ? __rcu_read_unlock+0x4f/0x70 [ 76.227585][ T6040] ? avc_has_perm_noaudit+0x1b1/0x200 [ 76.227666][ T6040] ? should_fail_ex+0x30/0x280 [ 76.227769][ T6040] ? xskq_create+0x36/0xe0 [ 76.227789][ T6040] vmalloc_user_noprof+0x7d/0xb0 [ 76.227836][ T6040] ? xskq_create+0x80/0xe0 [ 76.227858][ T6040] xskq_create+0x80/0xe0 [ 76.227881][ T6040] xsk_init_queue+0x95/0xf0 [ 76.227921][ T6040] xsk_setsockopt+0x3f5/0x640 [ 76.228003][ T6040] ? __pfx_xsk_setsockopt+0x10/0x10 [ 76.228044][ T6040] __sys_setsockopt+0x184/0x200 [ 76.228075][ T6040] __x64_sys_setsockopt+0x64/0x80 [ 76.228104][ T6040] x64_sys_call+0x20ec/0x2ff0 [ 76.228126][ T6040] do_syscall_64+0xd2/0x200 [ 76.228203][ T6040] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.228239][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.228268][ T6040] RIP: 0033:0x7fa3e525eec9 [ 76.228287][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.228329][ T6040] RSP: 002b:00007fa3e3cbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.228349][ T6040] RAX: ffffffffffffffda RBX: 00007fa3e54b5fa0 RCX: 00007fa3e525eec9 [ 76.228362][ T6040] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 76.228374][ T6040] RBP: 00007fa3e52e1f91 R08: 0000000000000004 R09: 0000000000000000 [ 76.228389][ T6040] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.228402][ T6040] R13: 00007fa3e54b6038 R14: 00007fa3e54b5fa0 R15: 00007fffec2d5508 [ 76.228425][ T6040] [ 76.228443][ T6040] Mem-Info: [ 76.327037][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.331569][ T6040] active_anon:22761 inactive_anon:1 isolated_anon:0 [ 76.331569][ T6040] active_file:22824 inactive_file:2257 isolated_file:0 [ 76.331569][ T6040] unevictable:0 dirty:118 writeback:0 [ 76.331569][ T6040] slab_reclaimable:3411 slab_unreclaimable:14861 [ 76.331569][ T6040] mapped:38771 shmem:11822 pagetables:1208 [ 76.331569][ T6040] sec_pagetables:0 bounce:0 [ 76.331569][ T6040] kernel_misc_reclaimable:0 [ 76.331569][ T6040] free:1849682 free_pcp:25711 free_cma:0 [ 76.376239][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.392127][ T6040] Node 0 active_anon:88492kB inactive_anon:4kB active_file:91528kB inactive_file:9028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155780kB dirty:472kB writeback:0kB shmem:44736kB kernel_stack:4368kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 76.535859][ T6040] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 76.564565][ T6040] lowmem_reserve[]: 0 2883 7862 7862 [ 76.569967][ T6040] Node 0 DMA32 free:2949300kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952832kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 76.600983][ T6040] lowmem_reserve[]: 0 0 4978 4978 [ 76.606428][ T6040] Node 0 Normal free:4429544kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101252kB inactive_anon:4kB active_file:93384kB inactive_file:9028kB unevictable:0kB writepending:472kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:91476kB local_pcp:85532kB free_cma:0kB [ 76.638797][ T6040] lowmem_reserve[]: 0 0 0 0 [ 76.643386][ T6040] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 76.656307][ T6040] Node 0 DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949300kB [ 76.672735][ T6040] Node 0 Normal: 543*4kB (UME) 400*8kB (UM) 2*16kB (U) 186*32kB (UM) 120*64kB (UM) 68*128kB (UM) 17*256kB (ME) 12*512kB (UME) 5*1024kB (UME) 4*2048kB (UME) 1067*4096kB (UM) = 4421980kB [ 76.691475][ T6040] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 76.700954][ T6040] 41573 total pagecache pages [ 76.705688][ T6040] 1 pages in swap cache [ 76.709889][ T6040] Free swap = 124992kB [ 76.714109][ T6040] Total swap = 124996kB [ 76.718275][ T6040] 2097051 pages RAM [ 76.722096][ T6040] 0 pages HighMem/MovableOnly [ 76.726841][ T6040] 80443 pages reserved [ 76.777485][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.6.962'. [ 76.882519][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 77.003389][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 77.003408][ T29] audit: type=1400 audit(1758913877.484:1055): avc: denied { read append } for pid=6067 comm="syz.5.974" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.033384][ T29] audit: type=1400 audit(1758913877.494:1056): avc: denied { open } for pid=6067 comm="syz.5.974" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.159805][ T29] audit: type=1400 audit(1758913877.644:1057): avc: denied { mount } for pid=6077 comm="syz.6.978" name="/" dev="configfs" ino=1828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 77.192806][ T29] audit: type=1400 audit(1758913877.674:1058): avc: denied { search } for pid=6077 comm="syz.6.978" name="/" dev="configfs" ino=1828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.215298][ T29] audit: type=1326 audit(1758913877.674:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.6.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 77.239145][ T29] audit: type=1326 audit(1758913877.674:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.6.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 77.262573][ T29] audit: type=1326 audit(1758913877.674:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.6.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 77.286020][ T29] audit: type=1400 audit(1758913877.674:1062): avc: denied { search } for pid=6077 comm="syz.6.978" name="/" dev="configfs" ino=1828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.308207][ T29] audit: type=1400 audit(1758913877.674:1063): avc: denied { search } for pid=6077 comm="syz.6.978" name="/" dev="configfs" ino=1828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.330464][ T29] audit: type=1326 audit(1758913877.674:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.6.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 77.469330][ T6066] netlink: 'syz.2.973': attribute type 13 has an invalid length. [ 77.477198][ T6066] netlink: 'syz.2.973': attribute type 17 has an invalid length. [ 77.511572][ T6066] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.539672][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 77.721274][ T6104] netlink: 96 bytes leftover after parsing attributes in process `syz.7.989'. [ 77.750057][ T6106] loop2: detected capacity change from 0 to 512 [ 77.796956][ T6106] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.850102][ T6106] EXT4-fs (loop2): mount failed [ 77.931666][ T6123] binfmt_misc: register: failed to install interpreter file ./file0 [ 78.019664][ T6134] bond_slave_1: mtu less than device minimum [ 78.194620][ T6156] netlink: 'syz.1.1012': attribute type 4 has an invalid length. [ 78.202419][ T6156] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1012'. [ 78.212309][ T6155] SELinux: failed to load policy [ 78.217373][ T6156] .`: renamed from bond0 (while UP) [ 78.492249][ T6175] process 'syz.7.1020' launched './file1' with NULL argv: empty string added [ 78.579365][ T6179] syz_tun: entered allmulticast mode [ 78.590875][ T6179] syz_tun: left allmulticast mode [ 78.884388][ T6194] loop7: detected capacity change from 0 to 8192 [ 78.962922][ T6201] vlan2: entered allmulticast mode [ 78.998814][ T6204] loop7: detected capacity change from 0 to 512 [ 79.015086][ T6204] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.065656][ T6204] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 79.084070][ T6204] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 79.108583][ T6204] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 79.126582][ T6204] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 79.137720][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 79.162784][ T6204] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 79.181442][ T6204] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 79.205067][ T6204] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 79.219949][ T6204] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 79.230689][ T6204] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 79.260962][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1044'. [ 79.281998][ T6230] loop5: detected capacity change from 0 to 256 [ 79.335308][ T6230] FAT-fs (loop5): Directory bread(block 64) failed [ 79.358576][ T6230] FAT-fs (loop5): Directory bread(block 65) failed [ 79.370392][ T6230] FAT-fs (loop5): Directory bread(block 66) failed [ 79.377839][ T6230] FAT-fs (loop5): Directory bread(block 67) failed [ 79.385160][ T6230] FAT-fs (loop5): Directory bread(block 68) failed [ 79.391885][ T6230] FAT-fs (loop5): Directory bread(block 69) failed [ 79.409113][ T6230] FAT-fs (loop5): Directory bread(block 70) failed [ 79.428894][ T6230] FAT-fs (loop5): Directory bread(block 71) failed [ 79.451069][ T6247] capability: warning: `syz.6.1054' uses deprecated v2 capabilities in a way that may be insecure [ 79.453665][ T6230] FAT-fs (loop5): Directory bread(block 72) failed [ 79.470231][ T6230] FAT-fs (loop5): Directory bread(block 73) failed [ 79.946138][ T6274] syz_tun: entered allmulticast mode [ 79.958248][ T6273] syz_tun: left allmulticast mode [ 80.238769][ T386] kworker/u8:6: attempt to access beyond end of device [ 80.238769][ T386] loop5: rw=1, sector=1224, nr_sectors = 96 limit=256 [ 80.261601][ T6307] __nla_validate_parse: 2 callbacks suppressed [ 80.261625][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1080'. [ 80.277012][ T6307] netlink: 'syz.7.1080': attribute type 18 has an invalid length. [ 80.280323][ T386] kworker/u8:6: attempt to access beyond end of device [ 80.280323][ T386] loop5: rw=1, sector=1352, nr_sectors = 32 limit=256 [ 80.300819][ T386] kworker/u8:6: attempt to access beyond end of device [ 80.300819][ T386] loop5: rw=1, sector=1416, nr_sectors = 32 limit=256 [ 80.316177][ T386] kworker/u8:6: attempt to access beyond end of device [ 80.316177][ T386] loop5: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 80.319389][ T6307] vxlan0: entered promiscuous mode [ 80.338349][ T386] kworker/u8:6: attempt to access beyond end of device [ 80.338349][ T386] loop5: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 80.356160][ T386] kworker/u8:6: attempt to access beyond end of device [ 80.356160][ T386] loop5: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 80.370085][ T4903] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.390727][ T4903] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.416042][ T6313] loop2: detected capacity change from 0 to 1024 [ 80.418407][ T4903] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.431990][ T6313] EXT4-fs: Ignoring removed orlov option [ 80.437858][ T6313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.444743][ T386] kworker/u8:6: attempt to access beyond end of device [ 80.444743][ T386] loop5: rw=1, sector=1704, nr_sectors = 32 limit=256 [ 80.460624][ T4903] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.470715][ T386] kworker/u8:6: attempt to access beyond end of device [ 80.470715][ T386] loop5: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 80.502103][ T386] kworker/u8:6: attempt to access beyond end of device [ 80.502103][ T386] loop5: rw=1, sector=1864, nr_sectors = 32 limit=256 [ 80.516830][ T386] kworker/u8:6: attempt to access beyond end of device [ 80.516830][ T386] loop5: rw=1, sector=1928, nr_sectors = 32 limit=256 [ 80.529472][ T6313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.627165][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.244248][ T6366] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1100'. [ 81.283765][ T6371] loop5: detected capacity change from 0 to 128 [ 81.290377][ T6371] EXT4-fs: Ignoring removed nobh option [ 81.294890][ T6375] loop2: detected capacity change from 0 to 512 [ 81.308575][ T6375] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 81.317491][ T6371] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.327091][ T6375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 81.337865][ T6371] ext4 filesystem being mounted at /189/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.348903][ T6375] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1106: corrupted in-inode xattr: e_value size too large [ 81.364319][ T6375] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1106: couldn't read orphan inode 15 (err -117) [ 81.377312][ T3894] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.377672][ T6375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.428093][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1107'. [ 81.495313][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1108'. [ 81.551341][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.626173][ T6402] loop2: detected capacity change from 0 to 512 [ 81.639718][ T6402] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.656458][ T6402] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1109: invalid indirect mapped block 4294967295 (level 0) [ 81.672078][ T6402] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1109: invalid indirect mapped block 4294967295 (level 1) [ 81.689850][ T6402] EXT4-fs (loop2): 1 orphan inode deleted [ 81.695919][ T6402] EXT4-fs (loop2): 1 truncate cleaned up [ 81.723676][ T6402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.834966][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.872869][ T6416] capability: warning: `syz.2.1119' uses 32-bit capabilities (legacy support in use) [ 81.950038][ T6420] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1122'. [ 82.030048][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 82.030067][ T29] audit: type=1400 audit(1758913882.514:1182): avc: denied { shutdown } for pid=6421 comm="syz.6.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.096359][ T6426] loop5: detected capacity change from 0 to 8192 [ 82.132530][ T29] audit: type=1326 audit(1758913882.614:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.6.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 82.156236][ T29] audit: type=1326 audit(1758913882.614:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.6.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 82.179796][ T29] audit: type=1326 audit(1758913882.614:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.6.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 82.203263][ T29] audit: type=1326 audit(1758913882.614:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.6.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 82.226688][ T29] audit: type=1326 audit(1758913882.614:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.6.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 82.250205][ T29] audit: type=1326 audit(1758913882.624:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.6.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 82.273835][ T29] audit: type=1326 audit(1758913882.624:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.6.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 82.297465][ T29] audit: type=1326 audit(1758913882.624:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.6.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 82.321087][ T29] audit: type=1326 audit(1758913882.624:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.6.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 82.323206][ T3926] loop5: p1 p2[DM] p4 [ 82.351434][ T3926] loop5: p1 size 196608 extends beyond EOD, truncated [ 82.368064][ T3926] loop5: p2 start 4292936063 is beyond EOD, truncated [ 82.375070][ T3926] loop5: p4 size 50331648 extends beyond EOD, truncated [ 82.400834][ T6426] loop5: p1 p2[DM] p4 [ 82.405334][ T6426] loop5: p1 size 196608 extends beyond EOD, truncated [ 82.413511][ T6426] loop5: p2 start 4292936063 is beyond EOD, truncated [ 82.420347][ T6426] loop5: p4 size 50331648 extends beyond EOD, truncated [ 82.490801][ T6449] netlink: '+}[@': attribute type 7 has an invalid length. [ 82.504521][ T4769] udevd[4769]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 82.522572][ T3926] udevd[3926]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 82.608981][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 82.611227][ T3926] udevd[3926]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 82.665875][ T6457] SELinux: failed to load policy [ 82.691843][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1144'. [ 82.764582][ T6476] sd 0:0:1:0: device reset [ 82.957596][ T6494] loop5: detected capacity change from 0 to 8192 [ 83.097805][ T6507] sd 0:0:1:0: device reset [ 83.177989][ T6514] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 83.313318][ T6525] loop2: detected capacity change from 0 to 256 [ 83.352431][ T6528] loop5: detected capacity change from 0 to 128 [ 83.376625][ T6525] FAT-fs (loop2): error, invalid FAT chain (i_pos 196, last_block 1024) [ 83.385186][ T6525] FAT-fs (loop2): Filesystem has been set read-only [ 83.540299][ T6532] syzkaller1: entered promiscuous mode [ 83.546292][ T6532] syzkaller1: entered allmulticast mode [ 83.634116][ T6536] loop5: detected capacity change from 0 to 8192 [ 83.666345][ T6538] SELinux: failed to load policy [ 83.686391][ T3926] loop5: p1 p2[DM] p4 [ 83.690704][ T3926] loop5: p1 size 196608 extends beyond EOD, truncated [ 83.703257][ T3926] loop5: p2 start 4292936063 is beyond EOD, truncated [ 83.710394][ T3926] loop5: p4 size 50331648 extends beyond EOD, truncated [ 83.739392][ T6536] loop5: p1 p2[DM] p4 [ 83.743726][ T6536] loop5: p1 size 196608 extends beyond EOD, truncated [ 83.754354][ T6536] loop5: p2 start 4292936063 is beyond EOD, truncated [ 83.761367][ T6536] loop5: p4 size 50331648 extends beyond EOD, truncated [ 83.811598][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1179'. [ 83.922573][ T6555] loop6: detected capacity change from 0 to 512 [ 83.954792][ T6555] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 83.991369][ T6555] EXT4-fs (loop6): 1 truncate cleaned up [ 84.003398][ T6555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.095021][ T6571] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 84.128617][ T6571] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 84.213988][ T5547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.255548][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1193'. [ 84.306888][ T6587] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.357948][ T6591] syzkaller1: entered promiscuous mode [ 84.363605][ T6591] syzkaller1: entered allmulticast mode [ 84.422336][ T6600] loop5: detected capacity change from 0 to 256 [ 84.809715][ T6634] random: crng reseeded on system resumption [ 84.864089][ T6638] loop6: detected capacity change from 0 to 1024 [ 84.872867][ T6638] EXT4-fs: Ignoring removed bh option [ 84.873632][ T6640] IPv4: Oversized IP packet from 127.202.26.0 [ 84.885133][ T6638] EXT4-fs: inline encryption not supported [ 84.911834][ T6638] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.935646][ T6638] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 84.974930][ T6638] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.1218: lblock 2 mapped to illegal pblock 2 (length 1) [ 84.998779][ T6644] netlink: 'syz.7.1220': attribute type 13 has an invalid length. [ 85.020695][ T6638] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.1218: lblock 0 mapped to illegal pblock 48 (length 1) [ 85.074783][ T6638] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1218: Failed to acquire dquot type 0 [ 85.096529][ T6638] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 85.140095][ T6638] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.1218: mark_inode_dirty error [ 85.182244][ T6638] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 85.232980][ T6638] EXT4-fs (loop6): 1 orphan inode deleted [ 85.243367][ T31] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.257981][ T6638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.297885][ T31] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 85.343722][ T6638] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.1218: lblock 0 mapped to illegal pblock 48 (length 1) [ 85.435077][ T5547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.466546][ T6661] SELinux: failed to load policy [ 85.546041][ T6663] vhci_hcd: invalid port number 96 [ 85.551246][ T6663] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 85.699569][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.706971][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.735498][ T6650] loop2: detected capacity change from 0 to 512 [ 85.774322][ T6670] SELinux: failed to load policy [ 85.796398][ T6650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.840805][ T6650] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.895681][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.941319][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.113126][ T4891] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.145417][ T4891] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.174066][ T4885] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.191009][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.203424][ T4885] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.254698][ T6691] __nla_validate_parse: 2 callbacks suppressed [ 86.254718][ T6691] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1243'. [ 86.296981][ T6695] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.407876][ T6705] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1248'. [ 86.505553][ T6718] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1255'. [ 86.524567][ T6721] 9pnet: p9_errstr2errno: server reported unknown error [ 86.571481][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.578796][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.654839][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.682811][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.757208][ T6728] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.787010][ T6718] 0ªX¹¦D: renamed from gretap0 (while UP) [ 86.798631][ T6718] 0ªX¹¦D: entered allmulticast mode [ 86.813294][ T6718] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 86.833140][ T372] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.842120][ T372] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.925259][ T6731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1260'. [ 86.944039][ T372] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.953110][ T372] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.968582][ T6708] loop7: detected capacity change from 0 to 512 [ 86.983687][ T372] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.992616][ T372] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.031584][ T372] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.040626][ T372] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.051922][ T6708] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.064754][ T6708] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.084352][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 87.084369][ T29] audit: type=1326 audit(1758916465.568:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 87.116639][ T29] audit: type=1326 audit(1758916465.568:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 87.140285][ T29] audit: type=1326 audit(1758916465.568:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 87.171456][ T29] audit: type=1326 audit(1758916465.568:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 87.195068][ T29] audit: type=1326 audit(1758916465.568:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 87.218741][ T29] audit: type=1326 audit(1758916465.568:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 87.242345][ T29] audit: type=1326 audit(1758916465.568:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 87.266220][ T29] audit: type=1326 audit(1758916465.568:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 87.289797][ T29] audit: type=1326 audit(1758916465.568:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 87.313551][ T29] audit: type=1326 audit(1758916465.568:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 87.338388][ T6747] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1266'. [ 87.381247][ T6755] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1271'. [ 87.412921][ T6755] 0ªX¹¦D: renamed from gretap0 [ 87.432336][ T6755] 0ªX¹¦D: entered allmulticast mode [ 87.440810][ T6755] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 87.480196][ T5586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.514931][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.522269][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.534249][ T6765] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.558797][ T6759] wg2: left promiscuous mode [ 87.563982][ T6759] wg2: left allmulticast mode [ 87.602480][ T6759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.629745][ T6759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.760153][ T4885] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.773954][ T4885] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.794745][ T4885] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.812144][ T4885] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.909112][ T6792] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1288'. [ 87.920928][ T6792] 0ªX¹¦D: renamed from gretap0 [ 87.949558][ T6792] 0ªX¹¦D: entered allmulticast mode [ 87.971786][ T6792] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 88.004789][ T6801] syzkaller1: entered promiscuous mode [ 88.004938][ T6802] loop2: detected capacity change from 0 to 128 [ 88.010442][ T6801] syzkaller1: entered allmulticast mode [ 88.047660][ T6806] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.084155][ T6802] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 88.117391][ T6802] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.272172][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.301107][ T6821] loop6: detected capacity change from 0 to 512 [ 88.320093][ T6825] loop7: detected capacity change from 0 to 1024 [ 88.346916][ T6825] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 88.356823][ T6825] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 88.378114][ T6821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.391884][ T6825] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 88.425328][ T6821] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.436279][ T6825] EXT4-fs error (device loop7): ext4_get_journal_inode:5800: inode #32: comm syz.7.1310: iget: special inode unallocated [ 88.472178][ T6825] EXT4-fs (loop7): no journal found [ 88.477588][ T6825] EXT4-fs (loop7): can't get journal size [ 88.494238][ T6825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.547263][ T6825] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 88.604206][ T6844] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1305'. [ 88.620301][ T6845] 9pnet: p9_errstr2errno: server reported unknown error [ 88.630716][ T5586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.653750][ T6844] 0ªX¹¦D: renamed from gretap0 [ 88.665769][ T6844] 0ªX¹¦D: entered allmulticast mode [ 88.676858][ T6844] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 88.704483][ T6847] syzkaller1: entered promiscuous mode [ 88.710011][ T6847] syzkaller1: entered allmulticast mode [ 88.716650][ T5547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.782008][ T6859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6859 comm=syz.2.1312 [ 88.797321][ T3948] hid_parser_main: 29 callbacks suppressed [ 88.797353][ T3948] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 88.797375][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1312'. [ 88.803265][ T3948] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.803294][ T3948] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.834714][ T3948] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.842130][ T3948] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.849576][ T3948] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.857432][ T6859] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 88.913949][ T6859] bond1: (slave vcan1): Error -95 calling set_mac_address [ 88.940244][ T6863] netlink: 'syz.1.1313': attribute type 1 has an invalid length. [ 89.041230][ T6872] netlink: 'syz.7.1328': attribute type 1 has an invalid length. [ 89.044879][ T3948] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.056511][ T3948] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.064003][ T3948] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.071425][ T3948] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 89.117874][ T6878] loop2: detected capacity change from 0 to 1024 [ 89.132509][ T6878] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 89.133251][ T3948] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 89.142480][ T6878] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 89.163408][ T6878] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 89.183216][ T6878] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: inode #32: comm syz.2.1320: iget: special inode unallocated [ 89.207893][ T6878] EXT4-fs (loop2): no journal found [ 89.213208][ T6878] EXT4-fs (loop2): can't get journal size [ 89.224229][ T6886] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1324'. [ 89.234254][ T6878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.252653][ T6886] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 89.259392][ T6888] loop7: detected capacity change from 0 to 512 [ 89.279758][ T6886] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 89.329460][ T6888] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.347449][ T6878] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 89.375102][ T6897] syzkaller1: entered promiscuous mode [ 89.380750][ T6897] syzkaller1: entered allmulticast mode [ 89.402825][ T6899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6899 comm=syz.6.1329 [ 89.425883][ T5586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.446771][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.495087][ T6899] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 89.516823][ T6899] bond1: (slave vcan1): Error -95 calling set_mac_address [ 89.604171][ T6904] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.612115][ T6881] loop5: detected capacity change from 0 to 512 [ 89.624626][ T6881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.638961][ T6881] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.664956][ T6914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6914 comm=syz.1.1342 [ 89.665985][ T6913] netlink: 'syz.6.1332': attribute type 1 has an invalid length. [ 89.729726][ T6920] syz.6.1337: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 89.744421][ T6920] CPU: 0 UID: 0 PID: 6920 Comm: syz.6.1337 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.744451][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.744468][ T6920] Call Trace: [ 89.744475][ T6920] [ 89.744485][ T6920] __dump_stack+0x1d/0x30 [ 89.744513][ T6920] dump_stack_lvl+0xe8/0x140 [ 89.744538][ T6920] dump_stack+0x15/0x1b [ 89.744579][ T6920] warn_alloc+0x12b/0x1a0 [ 89.744619][ T6920] __vmalloc_node_range_noprof+0x9c/0xe00 [ 89.744657][ T6920] ? __futex_wait+0x1ff/0x260 [ 89.744751][ T6920] ? __pfx_futex_wake_mark+0x10/0x10 [ 89.744791][ T6920] ? __rcu_read_unlock+0x4f/0x70 [ 89.744813][ T6920] ? avc_has_perm_noaudit+0x1b1/0x200 [ 89.744880][ T6920] ? should_fail_ex+0x30/0x280 [ 89.744903][ T6920] ? xskq_create+0x36/0xe0 [ 89.744924][ T6920] vmalloc_user_noprof+0x7d/0xb0 [ 89.745022][ T6920] ? xskq_create+0x80/0xe0 [ 89.745038][ T6920] xskq_create+0x80/0xe0 [ 89.745056][ T6920] xsk_init_queue+0x95/0xf0 [ 89.745170][ T6920] xsk_setsockopt+0x3f5/0x640 [ 89.745208][ T6920] ? __pfx_xsk_setsockopt+0x10/0x10 [ 89.745298][ T6920] __sys_setsockopt+0x184/0x200 [ 89.745338][ T6920] __x64_sys_setsockopt+0x64/0x80 [ 89.745363][ T6920] x64_sys_call+0x20ec/0x2ff0 [ 89.745442][ T6920] do_syscall_64+0xd2/0x200 [ 89.745472][ T6920] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.745495][ T6920] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.745530][ T6920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.745575][ T6920] RIP: 0033:0x7f6c8eb3eec9 [ 89.745589][ T6920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.745610][ T6920] RSP: 002b:00007f6c8d5a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.745680][ T6920] RAX: ffffffffffffffda RBX: 00007f6c8ed95fa0 RCX: 00007f6c8eb3eec9 [ 89.745696][ T6920] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 89.745710][ T6920] RBP: 00007f6c8ebc1f91 R08: 0000000000000004 R09: 0000000000000000 [ 89.745757][ T6920] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.745773][ T6920] R13: 00007f6c8ed96038 R14: 00007f6c8ed95fa0 R15: 00007ffd9ccc6a78 [ 89.745793][ T6920] [ 89.745799][ T6920] Mem-Info: [ 89.773441][ T6922] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 89.776773][ T6920] active_anon:57721 inactive_anon:4 isolated_anon:0 [ 89.776773][ T6920] active_file:25546 inactive_file:2275 isolated_file:0 [ 89.776773][ T6920] unevictable:0 dirty:342 writeback:0 [ 89.776773][ T6920] slab_reclaimable:3507 slab_unreclaimable:15371 [ 89.776773][ T6920] mapped:28875 shmem:51064 pagetables:1017 [ 89.776773][ T6920] sec_pagetables:0 bounce:0 [ 89.776773][ T6920] kernel_misc_reclaimable:0 [ 89.776773][ T6920] free:1813903 free_pcp:23481 free_cma:0 [ 89.782843][ T6922] bond0: (slave vcan1): Error -95 calling set_mac_address [ 89.785542][ T6920] Node 0 active_anon:230884kB inactive_anon:16kB active_file:102184kB inactive_file:9100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115500kB dirty:1368kB writeback:0kB shmem:204256kB kernel_stack:4256kB pagetables:4068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 89.882234][ T6926] loop7: detected capacity change from 0 to 8192 [ 89.885189][ T6920] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.096086][ T6920] lowmem_reserve[]: 0 2883 7862 7862 [ 90.101467][ T6920] Node 0 DMA32 free:2949300kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952832kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 90.132030][ T6920] lowmem_reserve[]: 0 0 4978 4978 [ 90.137133][ T6920] Node 0 Normal free:4290952kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:235060kB inactive_anon:16kB active_file:102184kB inactive_file:9216kB unevictable:0kB writepending:1600kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:85744kB local_pcp:3976kB free_cma:0kB [ 90.169476][ T6920] lowmem_reserve[]: 0 0 0 0 [ 90.174069][ T6920] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 90.187013][ T6920] Node 0 DMA32: 3*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949300kB [ 90.203353][ T6920] Node 0 Normal: 36*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 1*64kB (U) 2*128kB (ME) 1*256kB (U) 1*512kB (E) 3*1024kB (ME) 3*2048kB (UME) 1045*4096kB (UM) = 4290856kB [ 90.220699][ T6920] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 90.230462][ T6920] 79958 total pagecache pages [ 90.235287][ T6920] 4 pages in swap cache [ 90.239462][ T6920] Free swap = 124980kB [ 90.243762][ T6920] Total swap = 124996kB [ 90.247940][ T6920] 2097051 pages RAM [ 90.251769][ T6920] 0 pages HighMem/MovableOnly [ 90.256500][ T6920] 80443 pages reserved [ 90.266778][ T3894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.284030][ T6924] 0ªX¹¦D: left allmulticast mode [ 90.332172][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.339419][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.431149][ T6928] netlink: 'syz.5.1349': attribute type 1 has an invalid length. [ 90.439459][ T6930] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 90.448229][ T6930] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 90.464346][ T372] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.496968][ T6932] syzkaller1: entered promiscuous mode [ 90.502571][ T6932] syzkaller1: entered allmulticast mode [ 90.517826][ T372] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.550960][ T6936] loop5: detected capacity change from 0 to 1024 [ 90.557641][ T372] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.577920][ T372] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.596991][ T6936] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 90.607675][ T6936] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 90.632609][ T6936] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 90.644342][ T6936] EXT4-fs error (device loop5): ext4_get_journal_inode:5800: inode #32: comm syz.5.1343: iget: special inode unallocated [ 90.658343][ T6936] EXT4-fs (loop5): no journal found [ 90.663700][ T6936] EXT4-fs (loop5): can't get journal size [ 90.679141][ T6936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.702264][ T6936] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 90.738967][ T3894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.762735][ T6949] Falling back ldisc for ttyS3. [ 90.791850][ T6960] loop6: detected capacity change from 0 to 128 [ 90.817252][ T6962] loop7: detected capacity change from 0 to 1024 [ 90.824545][ T6962] EXT4-fs: Ignoring removed bh option [ 90.844309][ T6962] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.867614][ T5586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.893010][ T6968] 0ªX¹¦D: left allmulticast mode [ 90.922706][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.930096][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.971970][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.983950][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.023056][ T6968] vxlan0: left promiscuous mode [ 91.041717][ T372] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.050851][ T372] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.067915][ T372] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.076908][ T372] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.091392][ T372] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.100371][ T372] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.109560][ T372] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.118664][ T372] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.190782][ T6999] loop7: detected capacity change from 0 to 128 [ 91.238749][ T7003] loop7: detected capacity change from 0 to 512 [ 91.255514][ T7003] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.268557][ T7003] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.316475][ T7003] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.1372: corrupted inode contents [ 91.328836][ T7003] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #18: comm syz.7.1372: mark_inode_dirty error [ 91.340581][ T7003] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.1372: corrupted inode contents [ 91.354090][ T7003] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm syz.7.1372: mark_inode_dirty error [ 91.367549][ T7003] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm syz.7.1372: mark inode dirty (error -117) [ 91.381499][ T7003] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 91.419625][ T5586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.626427][ T7027] __nla_validate_parse: 4 callbacks suppressed [ 91.626525][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1382'. [ 91.700565][ T7031] loop5: detected capacity change from 0 to 128 [ 91.925992][ T7041] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1390'. [ 92.115755][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1395'. [ 92.184114][ T7058] binfmt_misc: register: failed to install interpreter file ./file0 [ 92.205614][ T7066] bond_slave_1: mtu less than device minimum [ 92.264209][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 92.264380][ T29] audit: type=1326 audit(1758916470.748:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 92.326139][ T29] audit: type=1326 audit(1758916470.738:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 92.349899][ T29] audit: type=1326 audit(1758916470.748:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 92.373485][ T29] audit: type=1326 audit(1758916470.778:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 92.396749][ T29] audit: type=1326 audit(1758916470.778:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 92.420459][ T29] audit: type=1326 audit(1758916470.778:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 92.444007][ T29] audit: type=1326 audit(1758916470.778:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 92.467403][ T29] audit: type=1326 audit(1758916470.778:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 92.491046][ T29] audit: type=1326 audit(1758916470.778:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 92.514695][ T29] audit: type=1326 audit(1758916470.778:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 92.542844][ T7083] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1409'. [ 92.551967][ T7083] unsupported nla_type 65024 [ 92.616109][ T7091] loop6: detected capacity change from 0 to 512 [ 92.639423][ T7091] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.701686][ T7091] EXT4-fs (loop6): mount failed [ 92.828799][ T7105] SELinux: failed to load policy [ 92.844090][ T7112] sd 0:0:1:0: device reset [ 93.468811][ T7149] loop7: detected capacity change from 0 to 512 [ 93.500751][ T7153] syz_tun: entered allmulticast mode [ 93.507409][ T7149] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.534508][ T7153] syz_tun: left allmulticast mode [ 93.539762][ T7149] EXT4-fs (loop7): mount failed [ 93.757482][ T7181] netlink: 'syz.6.1454': attribute type 4 has an invalid length. [ 93.765453][ T7181] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1454'. [ 93.790301][ T7181] .`: renamed from bond0 [ 93.916012][ T7191] loop6: detected capacity change from 0 to 128 [ 93.946346][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1460'. [ 93.946905][ T7191] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.034298][ T7191] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.220349][ T5547] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.256996][ T7206] loop6: detected capacity change from 0 to 128 [ 94.278706][ T7206] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 94.286694][ T7206] FAT-fs (loop6): Filesystem has been set read-only [ 94.295122][ T7206] bio_check_eod: 248 callbacks suppressed [ 94.295143][ T7206] syz.6.1464: attempt to access beyond end of device [ 94.295143][ T7206] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 94.315510][ T7206] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 94.323513][ T7206] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 94.333218][ T7206] syz.6.1464: attempt to access beyond end of device [ 94.333218][ T7206] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.347368][ T7206] syz.6.1464: attempt to access beyond end of device [ 94.347368][ T7206] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.362029][ T7206] syz.6.1464: attempt to access beyond end of device [ 94.362029][ T7206] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.382593][ T7206] syz.6.1464: attempt to access beyond end of device [ 94.382593][ T7206] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.397890][ T7206] syz.6.1464: attempt to access beyond end of device [ 94.397890][ T7206] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.417001][ T7206] syz.6.1464: attempt to access beyond end of device [ 94.417001][ T7206] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.431147][ T7206] syz.6.1464: attempt to access beyond end of device [ 94.431147][ T7206] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.451758][ T7206] syz.6.1464: attempt to access beyond end of device [ 94.451758][ T7206] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.470781][ T7215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7215 comm=syz.7.1467 [ 94.483406][ T7206] syz.6.1464: attempt to access beyond end of device [ 94.483406][ T7206] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.588392][ T7223] netlink: 'syz.7.1471': attribute type 4 has an invalid length. [ 94.596456][ T7223] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1471'. [ 94.637514][ T7223] .`: renamed from bond0 [ 94.773711][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1474'. [ 94.846210][ T7236] syz_tun: entered allmulticast mode [ 94.852275][ T7235] syz_tun: left allmulticast mode [ 95.063782][ T7256] batman_adv: batadv0: Adding interface: dummy0 [ 95.070164][ T7256] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.095529][ T7256] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 95.402514][ T7295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.424124][ T7295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.702971][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1515'. [ 95.760239][ T7332] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 96.021659][ T7366] loop2: detected capacity change from 0 to 128 [ 96.053600][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1546'. [ 96.217448][ T7377] SELinux: failed to load policy [ 96.267190][ T7391] netlink: 'syz.1.1543': attribute type 18 has an invalid length. [ 96.284482][ T7391] vxlan0: entered promiscuous mode [ 96.290981][ T372] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.317728][ T372] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.325870][ T7388] netlink: 'syz.5.1557': attribute type 13 has an invalid length. [ 96.327428][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.343615][ T4891] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.343835][ T4891] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.351931][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.395197][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.404031][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.499736][ T7406] SELinux: failed to load policy [ 96.529292][ T7409] loop6: detected capacity change from 0 to 256 [ 96.542787][ T7409] FAT-fs (loop6): Directory bread(block 64) failed [ 96.549355][ T7409] FAT-fs (loop6): Directory bread(block 65) failed [ 96.557335][ T7409] FAT-fs (loop6): Directory bread(block 66) failed [ 96.564074][ T7409] FAT-fs (loop6): Directory bread(block 67) failed [ 96.570876][ T7409] FAT-fs (loop6): Directory bread(block 68) failed [ 96.579577][ T7409] FAT-fs (loop6): Directory bread(block 69) failed [ 96.586277][ T7409] FAT-fs (loop6): Directory bread(block 70) failed [ 96.594089][ T7409] FAT-fs (loop6): Directory bread(block 71) failed [ 96.601489][ T7409] FAT-fs (loop6): Directory bread(block 72) failed [ 96.608256][ T7409] FAT-fs (loop6): Directory bread(block 73) failed [ 96.646637][ T7416] SELinux: failed to load policy [ 96.822872][ T7426] __nla_validate_parse: 1 callbacks suppressed [ 96.822890][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1565'. [ 96.885771][ T7429] loop2: detected capacity change from 0 to 1024 [ 96.925980][ T7429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.275203][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 97.275218][ T29] audit: type=1326 audit(1758916475.749:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 97.305234][ T29] audit: type=1326 audit(1758916475.759:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 97.328832][ T29] audit: type=1326 audit(1758916475.759:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 97.352549][ T29] audit: type=1326 audit(1758916475.759:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 97.394431][ T29] audit: type=1326 audit(1758916475.869:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 97.418221][ T29] audit: type=1326 audit(1758916475.869:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 97.441773][ T29] audit: type=1326 audit(1758916475.869:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 97.465451][ T29] audit: type=1326 audit(1758916475.869:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 97.489117][ T29] audit: type=1326 audit(1758916475.869:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 97.512654][ T29] audit: type=1326 audit(1758916475.869:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 97.578374][ T7462] loop7: detected capacity change from 0 to 512 [ 97.585345][ T7462] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 97.598075][ T7462] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1583: invalid indirect mapped block 4294967295 (level 0) [ 97.613176][ T7462] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1583: invalid indirect mapped block 4294967295 (level 1) [ 97.629879][ T7462] EXT4-fs (loop7): 1 orphan inode deleted [ 97.635726][ T7462] EXT4-fs (loop7): 1 truncate cleaned up [ 97.642454][ T7462] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.679788][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.690189][ T5586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.774202][ T7479] syzkaller1: entered promiscuous mode [ 97.779831][ T7479] syzkaller1: entered allmulticast mode [ 97.786620][ T7481] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1590'. [ 97.885448][ T7491] loop7: detected capacity change from 0 to 256 [ 97.920796][ T7491] FAT-fs (loop7): Directory bread(block 64) failed [ 97.930021][ T7491] FAT-fs (loop7): Directory bread(block 65) failed [ 97.960339][ T7491] FAT-fs (loop7): Directory bread(block 66) failed [ 97.981873][ T7491] FAT-fs (loop7): Directory bread(block 67) failed [ 98.000360][ T7491] FAT-fs (loop7): Directory bread(block 68) failed [ 98.022380][ T7491] FAT-fs (loop7): Directory bread(block 69) failed [ 98.028952][ T7491] FAT-fs (loop7): Directory bread(block 70) failed [ 98.060142][ T7491] FAT-fs (loop7): Directory bread(block 71) failed [ 98.061582][ T7505] loop6: detected capacity change from 0 to 512 [ 98.083981][ T7505] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 98.084721][ T7491] FAT-fs (loop7): Directory bread(block 72) failed [ 98.105721][ T7491] FAT-fs (loop7): Directory bread(block 73) failed [ 98.115916][ T7505] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1600: invalid indirect mapped block 4294967295 (level 0) [ 98.147018][ T7505] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1600: invalid indirect mapped block 4294967295 (level 1) [ 98.192718][ T7505] EXT4-fs (loop6): 1 orphan inode deleted [ 98.198517][ T7505] EXT4-fs (loop6): 1 truncate cleaned up [ 98.235771][ T7505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.310616][ T5547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.350582][ T7521] netlink: 'syz.6.1606': attribute type 1 has an invalid length. [ 98.358446][ T7521] netlink: 'syz.6.1606': attribute type 2 has an invalid length. [ 98.377455][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1606'. [ 98.390355][ T3365] IPVS: starting estimator thread 0... [ 98.481728][ T7522] IPVS: using max 2400 ests per chain, 120000 per kthread [ 98.564337][ T372] IPVS: stop unused estimator thread 0... [ 98.659820][ T7540] SELinux: failed to load policy [ 98.852496][ T7557] sd 0:0:1:0: device reset [ 98.889612][ T7564] loop7: detected capacity change from 0 to 128 [ 98.896755][ T7564] EXT4-fs: Ignoring removed nobh option [ 98.904283][ T7564] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.918063][ T7564] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.930674][ T7568] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1619'. [ 98.951228][ T5586] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.007684][ T7574] SELinux: failed to load policy [ 99.015343][ T7576] loop6: detected capacity change from 0 to 128 [ 99.027484][ T7576] EXT4-fs: Ignoring removed nobh option [ 99.038374][ T7576] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.061581][ T7576] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.092067][ T7583] loop7: detected capacity change from 0 to 8192 [ 99.102986][ T5547] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.194833][ T7595] netlink: '+}[@': attribute type 7 has an invalid length. [ 99.292967][ T7607] openvswitch: netlink: Message has 6 unknown bytes. [ 99.408302][ T7623] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1640'. [ 99.755328][ T7663] netlink: 132 bytes leftover after parsing attributes in process `-\@][,-'. [ 99.947366][ T7689] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1666'. [ 99.985498][ T7694] loop6: detected capacity change from 0 to 256 [ 100.040342][ T7694] FAT-fs (loop6): error, invalid FAT chain (i_pos 196, last_block 1024) [ 100.048902][ T7694] FAT-fs (loop6): Filesystem has been set read-only [ 100.057250][ T7698] loop7: detected capacity change from 0 to 2048 [ 100.076487][ T7698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.103751][ T7698] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.1680: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 100.111023][ T7700] sd 0:0:1:0: device reset [ 100.121431][ T7698] EXT4-fs (loop7): Remounting filesystem read-only [ 100.150297][ T5586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.159313][ T7704] SELinux: failed to load policy [ 100.204317][ T7708] netlink: 'syz.7.1682': attribute type 12 has an invalid length. [ 100.299416][ T7729] loop7: detected capacity change from 0 to 256 [ 100.350320][ T7729] FAT-fs (loop7): error, invalid FAT chain (i_pos 196, last_block 1024) [ 100.358992][ T7729] FAT-fs (loop7): Filesystem has been set read-only [ 100.367294][ T7735] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 100.413433][ T7744] sd 0:0:1:0: device reset [ 100.427338][ T7740] SELinux: failed to load policy [ 100.442483][ T7747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7747 comm=syz.6.1700 [ 100.458382][ T7748] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1690'. [ 100.687096][ T7775] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 100.704014][ T7775] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 100.994016][ T7794] loop6: detected capacity change from 0 to 8192 [ 101.012501][ T7794] loop6: p1 p2[DM] p4 [ 101.016722][ T7794] loop6: p1 size 196608 extends beyond EOD, truncated [ 101.029576][ T7794] loop6: p2 start 4292936063 is beyond EOD, truncated [ 101.036490][ T7794] loop6: p4 size 50331648 extends beyond EOD, truncated [ 101.751146][ T7811] loop7: detected capacity change from 0 to 512 [ 101.759497][ T7811] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 101.765186][ T7807] SELinux: failed to load policy [ 101.769358][ T7811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 101.782451][ T7811] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.1728: corrupted in-inode xattr: e_value size too large [ 101.796910][ T7811] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1728: couldn't read orphan inode 15 (err -117) [ 101.810652][ T7811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.863161][ T7822] loop5: detected capacity change from 0 to 256 [ 101.887373][ T7823] __nla_validate_parse: 2 callbacks suppressed [ 101.887389][ T7823] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1727'. [ 101.938008][ T5586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.043193][ T7822] FAT-fs (loop5): error, invalid FAT chain (i_pos 196, last_block 1024) [ 102.051704][ T7822] FAT-fs (loop5): Filesystem has been set read-only [ 102.277101][ T7842] random: crng reseeded on system resumption [ 102.298970][ T7842] Restarting kernel threads ... [ 102.313254][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 102.313260][ T7842] Done restarting kernel threads. [ 102.313271][ T29] audit: type=1326 audit(1758919058.799:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 102.359878][ T29] audit: type=1326 audit(1758919058.839:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 102.383630][ T29] audit: type=1326 audit(1758919058.839:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 102.407803][ T29] audit: type=1326 audit(1758919058.839:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 102.431306][ T29] audit: type=1326 audit(1758919058.839:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 102.454847][ T29] audit: type=1326 audit(1758919058.839:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 102.478604][ T29] audit: type=1326 audit(1758919058.839:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 102.502431][ T29] audit: type=1326 audit(1758919058.839:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 102.526068][ T29] audit: type=1326 audit(1758919058.839:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 102.549800][ T29] audit: type=1326 audit(1758919058.839:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7844 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78fd94eec9 code=0x7ffc0000 [ 102.769894][ T7870] openvswitch: netlink: Message has 6 unknown bytes. [ 102.874482][ T7886] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7886 comm=syz.2.1764 [ 102.887036][ T7886] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7886 comm=syz.2.1764 [ 103.002850][ T7904] netlink: 'syz.5.1772': attribute type 1 has an invalid length. [ 103.010652][ T7904] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.1772'. [ 103.252070][ T7930] loop7: detected capacity change from 0 to 1024 [ 103.264743][ T7930] EXT4-fs: Ignoring removed orlov option [ 103.278503][ T7930] EXT4-fs: Ignoring removed nobh option [ 103.284375][ T7930] EXT4-fs: Ignoring removed bh option [ 103.333403][ T7930] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.361138][ T7930] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.1784: Allocating blocks 481-513 which overlap fs metadata [ 103.408204][ T7930] EXT4-fs (loop7): pa ffff8881071dd1c0: logic 352, phys. 465, len 3 [ 103.416365][ T7930] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 103.542768][ T5586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.547630][ T7949] 0ªX¹¦D: entered promiscuous mode [ 103.569614][ T7949] vlan2: entered promiscuous mode [ 103.669623][ T3383] hid_parser_main: 29 callbacks suppressed [ 103.669649][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.683113][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.690619][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.728582][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.736203][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.743846][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.751438][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.758855][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.766381][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.773860][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.791325][ T7974] only policy match revision 0 supported [ 103.791343][ T7974] unable to load match [ 103.809982][ T3383] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 103.865898][ T7980] loop7: detected capacity change from 0 to 512 [ 103.879016][ T7980] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 103.902123][ T7980] EXT4-fs (loop7): 1 truncate cleaned up [ 103.910509][ T7980] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.027924][ T5586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.062451][ T8001] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1814'. [ 104.118693][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1817'. [ 104.266021][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1818'. [ 104.487728][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1827'. [ 104.648894][ T8041] netlink: 'syz.1.1833': attribute type 7 has an invalid length. [ 104.656711][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1833'. [ 104.750893][ T8051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.772638][ T8051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.177526][ T8079] loop2: detected capacity change from 0 to 256 [ 105.185227][ T8077] SELinux: failed to load policy [ 105.200378][ T8069] Set syz1 is full, maxelem 65536 reached [ 105.231546][ T8081] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 105.259478][ T8085] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1854'. [ 105.331216][ T8089] loop5: detected capacity change from 0 to 1024 [ 105.347817][ T8089] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.358904][ T8089] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 105.372322][ T8089] JBD2: no valid journal superblock found [ 105.378159][ T8089] EXT4-fs (loop5): Could not load journal inode [ 105.399394][ T8089] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 105.456522][ T8107] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 105.463090][ T8107] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.470642][ T8107] vhci_hcd vhci_hcd.0: Device attached [ 105.500983][ T8108] vhci_hcd: cannot find the pending unlink 2869 [ 105.511243][ T8117] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 105.516160][ T8108] vhci_hcd: connection closed [ 105.518959][ T4885] vhci_hcd: stop threads [ 105.528182][ T4885] vhci_hcd: release socket [ 105.532777][ T4885] vhci_hcd: disconnect device [ 105.549007][ T3383] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 105.603405][ T8125] ------------[ cut here ]------------ [ 105.609170][ T8125] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)(1) [ 105.629699][ T8125] WARNING: CPU: 1 PID: 8125 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 105.640159][ T8125] Modules linked in: [ 105.644126][ T8125] CPU: 1 UID: 0 PID: 8125 Comm: syz.6.1873 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.653896][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.661891][ T8133] loop2: detected capacity change from 0 to 512 [ 105.664337][ T8125] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 105.677359][ T8125] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 82 81 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 105.697424][ T8125] RSP: 0018:ffffc9000bfbb440 EFLAGS: 00010292 [ 105.703550][ T8125] RAX: 9139d262813c8e00 RBX: ffff88810b7a7040 RCX: 0000000000080000 [ 105.711565][ T8125] RDX: ffffc90004491000 RSI: 000000000001aa31 RDI: 000000000001aa32 [ 105.719563][ T8125] RBP: 0000000000000000 R08: 0001c9000bfbb27f R09: 0000000000000000 [ 105.725649][ T8133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.727667][ T8125] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88810b7a7000 [ 105.727683][ T8125] R13: ffff888104b90000 R14: ffff888104b90000 R15: ffff88810b7a7038 [ 105.727702][ T8125] FS: 00007f6c8d5a76c0(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000 [ 105.741783][ T8133] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.748186][ T8125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.782699][ T8125] CR2: 0000001b32c24220 CR3: 0000000121faa000 CR4: 00000000003506f0 [ 105.790727][ T8125] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.798786][ T8125] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 105.806894][ T8125] Call Trace: [ 105.810196][ T8125] [ 105.813254][ T8125] reg_set_min_max+0x1eb/0x260 [ 105.818089][ T8125] check_cond_jmp_op+0x1080/0x16e0 [ 105.823289][ T8125] do_check+0x332a/0x7a10 [ 105.827674][ T8125] do_check_common+0xc3a/0x12a0 [ 105.832640][ T8125] bpf_check+0x942b/0xd9e0 [ 105.837105][ T8125] ? __rcu_read_unlock+0x4f/0x70 [ 105.842109][ T8125] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 105.848250][ T8125] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 105.854015][ T8125] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 105.859940][ T8125] ? css_rstat_updated+0xb7/0x240 [ 105.865024][ T8125] ? pcpu_block_update+0x24e/0x3b0 [ 105.870645][ T8125] ? _find_next_zero_bit+0x29/0xa0 [ 105.875765][ T8125] ? pcpu_block_refresh_hint+0x157/0x170 [ 105.881476][ T8125] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 105.887847][ T8125] ? css_rstat_updated+0xb7/0x240 [ 105.892951][ T8125] ? __rcu_read_unlock+0x4f/0x70 [ 105.897919][ T8125] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 105.903842][ T8125] ? should_fail_ex+0x30/0x280 [ 105.908714][ T8125] ? selinux_bpf_prog_load+0x36/0xf0 [ 105.914044][ T8125] ? should_failslab+0x8c/0xb0 [ 105.918895][ T8125] ? __kmalloc_cache_noprof+0x189/0x320 [ 105.924518][ T8125] ? selinux_bpf_prog_load+0xbf/0xf0 [ 105.929918][ T8125] ? security_bpf_prog_load+0x2c/0xa0 [ 105.935351][ T8125] bpf_prog_load+0xedd/0x1070 [ 105.940076][ T8125] ? security_bpf+0x2b/0x90 [ 105.944664][ T8125] __sys_bpf+0x462/0x7b0 [ 105.949103][ T8125] __x64_sys_bpf+0x41/0x50 [ 105.953709][ T8125] x64_sys_call+0x2aea/0x2ff0 [ 105.958441][ T8125] do_syscall_64+0xd2/0x200 [ 105.963010][ T8125] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.969124][ T8125] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.974905][ T8125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.980890][ T8125] RIP: 0033:0x7f6c8eb3eec9 [ 105.985324][ T8125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.005175][ T8125] RSP: 002b:00007f6c8d5a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.013670][ T8125] RAX: ffffffffffffffda RBX: 00007f6c8ed95fa0 RCX: 00007f6c8eb3eec9 [ 106.021670][ T8125] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 106.029682][ T8125] RBP: 00007f6c8ebc1f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.037704][ T8125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.045728][ T8125] R13: 00007f6c8ed96038 R14: 00007f6c8ed95fa0 R15: 00007ffd9ccc6a78 [ 106.053798][ T8125] [ 106.056852][ T8125] ---[ end trace 0000000000000000 ]--- [ 106.073442][ T8140] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm syz.2.1877: corrupted inode contents [ 106.105160][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1880'. [ 106.116849][ T8140] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #18: comm syz.2.1877: mark_inode_dirty error [ 106.142655][ T8140] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm syz.2.1877: corrupted inode contents [ 106.154871][ T8142] Falling back ldisc for ttyS3. [ 106.161643][ T8140] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.1877: mark_inode_dirty error [ 106.179675][ T8140] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.1877: mark inode dirty (error -117) [ 106.197575][ T8140] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 106.236292][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.262270][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1887'. [ 106.271486][ T8156] netlink: 'syz.7.1887': attribute type 14 has an invalid length. [ 106.279846][ T8153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8153 comm=syz.5.1883 [ 106.318551][ T8156] netlink: 'syz.7.1887': attribute type 14 has an invalid length. [ 106.387132][ T8163] ALSA: seq fatal error: cannot create timer (-19) [ 106.473430][ T8191] netlink: 'syz.5.1902': attribute type 56 has an invalid length. [ 106.481428][ T8191] netlink: 'syz.5.1902': attribute type 1 has an invalid length. [ 106.583752][ T8204] loop5: detected capacity change from 0 to 1024 [ 106.594023][ T8204] EXT4-fs: Ignoring removed bh option [ 106.613769][ T8204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.648394][ T3894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.847738][ T8232] netlink: 'syz.6.1919': attribute type 56 has an invalid length. [ 106.855883][ T8232] netlink: 'syz.6.1919': attribute type 1 has an invalid length. [ 107.020389][ T8216] Set syz1 is full, maxelem 65536 reached [ 107.053291][ T8238] __nla_validate_parse: 1 callbacks suppressed [ 107.053312][ T8238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1922'. [ 107.283669][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1938'. [ 107.334197][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 107.334216][ T29] audit: type=1326 audit(1758919063.820:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 107.364065][ T29] audit: type=1326 audit(1758919063.820:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 107.419199][ T29] audit: type=1326 audit(1758919063.820:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 107.443005][ T29] audit: type=1326 audit(1758919063.820:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 107.466595][ T29] audit: type=1326 audit(1758919063.820:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e525eec9 code=0x7ffc0000 [ 107.490132][ T29] audit: type=1400 audit(1758919063.850:2023): avc: denied { ioctl } for pid=8277 comm="syz.6.1939" path="socket:[25174]" dev="sockfs" ino=25174 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.605193][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1951'. [ 107.709374][ T29] audit: type=1326 audit(1758919064.190:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.6.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 107.758111][ T29] audit: type=1326 audit(1758919064.190:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.6.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 107.781821][ T29] audit: type=1326 audit(1758919064.190:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.6.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 107.805304][ T29] audit: type=1326 audit(1758919064.190:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.6.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8eb3eec9 code=0x7ffc0000 [ 107.981570][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1957'. [ 107.992218][ T8324] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 108.073499][ T8330] SELinux: failed to load policy [ 108.252225][ T8320] Set syz1 is full, maxelem 65536 reached [ 108.287072][ T8341] loop6: detected capacity change from 0 to 2048 [ 108.311999][ T8341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 108.329859][ T8345] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1968'. [ 108.360579][ T8341] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.379098][ T8341] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 108.391632][ T8341] EXT4-fs (loop6): This should not happen!! Data will be lost [ 108.391632][ T8341] [ 108.401445][ T8341] EXT4-fs (loop6): Total free blocks count 0 [ 108.407665][ T8341] EXT4-fs (loop6): Free/Dirty block details [ 108.413757][ T8341] EXT4-fs (loop6): free_blocks=2415919104 [ 108.419587][ T8341] EXT4-fs (loop6): dirty_blocks=32 [ 108.424870][ T8341] EXT4-fs (loop6): Block reservation details [ 108.430956][ T8341] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 108.433259][ T8358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1972'. [ 108.458871][ T8359] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 108.478159][ T5547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 108.498870][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1977'. [ 108.639983][ T8393] loop7: detected capacity change from 0 to 128 [ 108.649170][ T8393] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 108.657188][ T8393] FAT-fs (loop7): Filesystem has been set read-only [ 108.664782][ T8393] bio_check_eod: 11251 callbacks suppressed [ 108.664800][ T8393] syz.7.1991: attempt to access beyond end of device [ 108.664800][ T8393] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 108.671772][ T8396] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.684834][ T8393] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 108.699882][ T8393] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 108.709799][ T8393] syz.7.1991: attempt to access beyond end of device [ 108.709799][ T8393] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.725132][ T8393] syz.7.1991: attempt to access beyond end of device [ 108.725132][ T8393] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.738674][ T8393] syz.7.1991: attempt to access beyond end of device [ 108.738674][ T8393] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.761658][ T8393] syz.7.1991: attempt to access beyond end of device [ 108.761658][ T8393] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.776742][ T8393] syz.7.1991: attempt to access beyond end of device [ 108.776742][ T8393] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.792970][ T8406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.802439][ T8406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.812084][ T8393] syz.7.1991: attempt to access beyond end of device [ 108.812084][ T8393] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.825572][ T8393] syz.7.1991: attempt to access beyond end of device [ 108.825572][ T8393] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.839367][ T8393] syz.7.1991: attempt to access beyond end of device [ 108.839367][ T8393] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.852964][ T8393] syz.7.1991: attempt to access beyond end of device [ 108.852964][ T8393] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.977785][ T8413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.032425][ T8413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.042538][ T8413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.061301][ T8413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.857530][ T8480] netlink: 'syz.7.2030': attribute type 1 has an invalid length. [ 109.865554][ T8480] netlink: 'syz.7.2030': attribute type 2 has an invalid length. [ 109.905407][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2030'. [ 109.934904][ T8483] 0ªX¹¦D: entered promiscuous mode [ 109.940228][ T8483] vlan2: entered promiscuous mode [ 110.568066][ T8520] SELinux: failed to load policy [ 110.853793][ T8533] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.973910][ T8546] random: crng reseeded on system resumption [ 110.995054][ T8546] Restarting kernel threads ... [ 111.000593][ T8546] Done restarting kernel threads. [ 111.091827][ T8559] SELinux: Context @ is not valid (left unmapped). [ 111.134783][ T8569] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.175366][ T8573] netlink: 'syz.5.2072': attribute type 1 has an invalid length. [ 111.183198][ T8573] netlink: 'syz.5.2072': attribute type 2 has an invalid length. [ 111.192421][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2072'. [ 111.242140][ T8581] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2075'. [ 111.271599][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.281127][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.393221][ T3383] IPVS: starting estimator thread 0... [ 111.521493][ T372] IPVS: stop unused estimator thread 0... [ 111.700731][ T8617] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.991649][ T3365] IPVS: starting estimator thread 0... [ 112.045796][ T8636] loop7: detected capacity change from 0 to 8192 [ 112.099317][ T8640] IPVS: using max 2064 ests per chain, 103200 per kthread [ 112.212685][ T8651] loop6: detected capacity change from 0 to 2048 [ 112.243765][ T8651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.261334][ T372] IPVS: stop unused estimator thread 0... [ 112.290421][ T8651] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.2116: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 112.323785][ T8651] EXT4-fs (loop6): Remounting filesystem read-only [ 112.345629][ T5547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.403924][ T8660] loop2: detected capacity change from 0 to 2048 [ 112.420693][ T8660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.433616][ T8660] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 112.482798][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.747915][ T8693] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 112.872340][ T8704] netlink: 132 bytes leftover after parsing attributes in process `-\@][,-'. [ 112.881574][ T3365] IPVS: starting estimator thread 0... [ 112.954128][ T8709] macsec1: entered promiscuous mode [ 112.959491][ T8709] bridge0: entered promiscuous mode [ 112.965339][ T8709] bridge0: port 3(macsec1) entered blocking state [ 112.971988][ T8709] bridge0: port 3(macsec1) entered disabled state [ 112.979504][ T8705] IPVS: using max 2400 ests per chain, 120000 per kthread [ 112.988118][ T8709] macsec1: entered allmulticast mode [ 112.993477][ T8709] bridge0: entered allmulticast mode [ 112.999869][ T8709] macsec1: left allmulticast mode [ 113.004998][ T8709] bridge0: left allmulticast mode [ 113.010967][ T8709] bridge0: left promiscuous mode [ 113.024208][ T8707] loop5: detected capacity change from 0 to 8192 [ 113.070732][ T4885] IPVS: stop unused estimator thread 0... [ 113.106736][ T8711] openvswitch: netlink: Message has 6 unknown bytes. [ 113.158594][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 113.158653][ T29] audit: type=1326 audit(1758919069.641:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 113.191113][ T29] audit: type=1326 audit(1758919069.641:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 113.214916][ T29] audit: type=1326 audit(1758919069.641:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 113.238403][ T29] audit: type=1326 audit(1758919069.641:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 113.262192][ T29] audit: type=1326 audit(1758919069.641:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 113.285846][ T29] audit: type=1326 audit(1758919069.641:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 113.309392][ T29] audit: type=1326 audit(1758919069.641:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 113.332980][ T29] audit: type=1326 audit(1758919069.641:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 113.356646][ T29] audit: type=1326 audit(1758919069.641:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 113.380355][ T29] audit: type=1326 audit(1758919069.641:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f720eec9 code=0x7ffc0000 [ 113.494538][ T3383] hid_parser_main: 48 callbacks suppressed [ 113.494563][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 113.508119][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 113.515732][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 113.525290][ T8734] netlink: 132 bytes leftover after parsing attributes in process `-\@][,-'. [ 113.550926][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 113.558488][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 113.566174][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 113.573638][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 113.581149][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 113.588580][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 113.596059][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 113.606149][ T3383] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 113.861991][ T8745] loop6: detected capacity change from 0 to 1024 [ 113.870917][ T8745] EXT4-fs: Ignoring removed orlov option [ 113.876685][ T8745] EXT4-fs: Ignoring removed nobh option [ 113.882354][ T8745] EXT4-fs: Ignoring removed bh option [ 113.912813][ T8745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.928440][ T3894] ================================================================== [ 113.936665][ T3894] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 113.944074][ T3894] [ 113.946413][ T3894] read-write to 0xffff8881072c2230 of 8 bytes by interrupt on cpu 0: [ 113.954492][ T3894] __xa_clear_mark+0xf5/0x1e0 [ 113.959203][ T3894] __folio_end_writeback+0x177/0x470 [ 113.964531][ T3894] folio_end_writeback+0x71/0x3d0 [ 113.969582][ T3894] mpage_write_end_io+0x274/0x390 [ 113.974637][ T3894] bio_endio+0x37e/0x420 [ 113.978892][ T3894] blk_update_request+0x336/0x730 [ 113.983945][ T3894] blk_mq_end_request+0x26/0x50 [ 113.988808][ T3894] lo_complete_rq+0x98/0x140 [ 113.993408][ T3894] blk_done_softirq+0x74/0xb0 [ 113.998111][ T3894] handle_softirqs+0xb7/0x290 [ 114.002883][ T3894] run_ksoftirqd+0x1c/0x30 [ 114.007314][ T3894] smpboot_thread_fn+0x32b/0x530 [ 114.012273][ T3894] kthread+0x489/0x510 [ 114.016352][ T3894] ret_from_fork+0x11f/0x1b0 [ 114.020952][ T3894] ret_from_fork_asm+0x1a/0x30 [ 114.025723][ T3894] [ 114.028049][ T3894] read to 0xffff8881072c2230 of 8 bytes by task 3894 on cpu 1: [ 114.035683][ T3894] xas_find_marked+0x218/0x620 [ 114.040470][ T3894] find_get_entry+0x5d/0x380 [ 114.045067][ T3894] filemap_get_folios_tag+0x13b/0x210 [ 114.050461][ T3894] filemap_fdatawait_keep_errors+0x6c/0x180 [ 114.056392][ T3894] sync_inodes_sb+0x39c/0x440 [ 114.061088][ T3894] sync_filesystem+0x102/0x190 [ 114.065863][ T3894] generic_shutdown_super+0x44/0x210 [ 114.071152][ T3894] kill_block_super+0x2a/0x70 [ 114.075841][ T3894] deactivate_locked_super+0x72/0x1c0 [ 114.081410][ T3894] deactivate_super+0x97/0xa0 [ 114.086112][ T3894] cleanup_mnt+0x269/0x2e0 [ 114.090548][ T3894] __cleanup_mnt+0x19/0x20 [ 114.094980][ T3894] task_work_run+0x12e/0x1a0 [ 114.099580][ T3894] exit_to_user_mode_loop+0xe4/0x100 [ 114.105131][ T3894] do_syscall_64+0x1d6/0x200 [ 114.109746][ T3894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.115732][ T3894] [ 114.118064][ T3894] value changed: 0xfffffffffffffc00 -> 0xfffffffff8000000 [ 114.125181][ T3894] [ 114.127605][ T3894] Reported by Kernel Concurrency Sanitizer on: [ 114.133757][ T3894] CPU: 1 UID: 0 PID: 3894 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 114.145252][ T3894] Tainted: [W]=WARN [ 114.149155][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.159232][ T3894] ================================================================== [ 114.169007][ T8756] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2146: Allocating blocks 481-513 which overlap fs metadata [ 114.241308][ T8745] EXT4-fs (loop6): pa ffff88810722e7e0: logic 352, phys. 465, len 3 [ 114.249458][ T8745] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 114.284812][ T5547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.