last executing test programs: 2.884343627s ago: executing program 3 (id=2025): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) 2.55695559s ago: executing program 3 (id=2030): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) 2.396769521s ago: executing program 4 (id=2032): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) 2.342885211s ago: executing program 4 (id=2033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000014c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fchmodat(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@noblock_validity}, {@data_writeback}, {@sysvgroups}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") 2.204852273s ago: executing program 3 (id=2034): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b001b13120004000000000400000000ff000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x1c303911) keyctl$read(0xb, r1, &(0x7f0000000340)=""/172, 0xfffffffffffffe69) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0xa632, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000", @ANYRES8=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x80000e, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@test_dummy_encryption_v1}, {@data_err_abort}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000940)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xaf) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r8 = dup(r7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000001280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xf963}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = getpid() syz_pidfd_open(r9, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 1.989088465s ago: executing program 3 (id=2035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000580)=""/207) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.874539455s ago: executing program 0 (id=2039): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = syz_open_procfs(0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = io_uring_setup(0x6f29, &(0x7f0000000280)={0x0, 0xdb00, 0x10000, 0x1, 0x17b}) pidfd_getfd(r5, r1, 0x0) io_uring_enter(r8, 0x8dc, 0xd669, 0x86, &(0x7f0000000040)={[0x1]}, 0x8) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x8000, 0x10}, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'tunl0\x00', r7, 0x10, 0x1, 0x4, 0x8, {{0x14, 0x4, 0x0, 0x1e, 0x50, 0x67, 0x0, 0x95, 0x29, 0x0, @multicast1, @private=0xa010100, {[@rr={0x7, 0xf, 0x58, [@multicast2, @private=0xa010100, @empty]}, @lsrr={0x83, 0x7, 0x7b, [@multicast2]}, @timestamp_addr={0x44, 0x24, 0x6c, 0x1, 0x0, [{@private=0xa010102, 0x508f86b9}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x4}, {@private=0xa010102, 0x8}]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9, {0x8}}, './file0\x00'}) setsockopt$inet_udp_encap(r11, 0x11, 0x64, &(0x7f0000000240)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x22a01, 0x0) ioctl$TIOCSSOFTCAR(r12, 0x5453, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r9, @ANYBLOB="7f00"/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="050000799771d397b140412be52654e0000100000001000000000000"], 0x50) 1.811324326s ago: executing program 0 (id=2041): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) 1.752459487s ago: executing program 0 (id=2042): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) move_pages(r0, 0x4, &(0x7f0000000280)=[&(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil], &(0x7f00000001c0)=[0x0, 0x3], &(0x7f0000000300)=[0x0], 0x1) uname(&(0x7f0000000000)=""/112) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xa2, 0x7}}, './file0\x00'}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x14, 0xea5, '.\x00'}}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = io_uring_setup(0x3b69, &(0x7f0000001d80)={0x0, 0x714, 0x2, 0x1, 0x3d7}) io_uring_enter(r9, 0x5756, 0x9d76, 0x5, &(0x7f0000001e00), 0x8) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r7, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r8}], 0x2c, 0xffffffffffbffff8) dup2(r7, r8) fcntl$setown(r7, 0x8, r6) tkill(r6, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) migrate_pages(0x0, 0x67, &(0x7f0000001600)=0x1, &(0x7f00000016c0)=0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001640)={&(0x7f0000001680)='ata_eh_link_autopsy_qc\x00', r10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1ce04abdf2aecb67, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(r2) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1a, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.590785748s ago: executing program 0 (id=2047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f0000000040)={0xa, 0x2, 0x1000, @empty}, 0x1c) 1.554563458s ago: executing program 0 (id=2048): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8957) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1.553997438s ago: executing program 1 (id=2049): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close(r0) 1.495436539s ago: executing program 1 (id=2052): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close(r0) 1.460895069s ago: executing program 1 (id=2054): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8957) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1.457027809s ago: executing program 4 (id=2055): symlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x43, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat(0xffffffffffffff9c, 0x0, 0x107842, 0x42) sendfile(r3, 0xffffffffffffffff, 0x0, 0x5) fsopen(&(0x7f0000000000)='bpf\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r5, 0x0, 0x100000000, 0x4) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r9}, 0x18) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r6, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) vmsplice(r2, &(0x7f0000000780)=[{&(0x7f0000000180)="151f", 0x2}], 0x1, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000200)="a9050000000074640000", 0xa}, {&(0x7f0000000380)="66128ca20100091034f2540207", 0xd}], 0x2}}], 0x1, 0x404c800) socket$pppoe(0x18, 0x1, 0x0) 1.449915379s ago: executing program 0 (id=2056): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="3e5abc6b15f3", 0x0, 0x0, 0x32, 0x2, 0x0}) 1.411710609s ago: executing program 2 (id=2057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.411075849s ago: executing program 3 (id=2058): symlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket(0x840000000002, 0x3, 0xff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x43, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat(0xffffffffffffff9c, 0x0, 0x107842, 0x42) sendfile(r4, 0xffffffffffffffff, 0x0, 0x5) fsopen(&(0x7f0000000000)='bpf\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r6, 0x0, 0x100000000, 0x4) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r7 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r10}, 0x18) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r7, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) vmsplice(r3, &(0x7f0000000780)=[{&(0x7f0000000180)="151f", 0x2}], 0x1, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000200)="a9050000000074640000", 0xa}, {&(0x7f0000000380)="66128ca20100091034f2540207", 0xd}], 0x2}}], 0x1, 0x404c800) socket$pppoe(0x18, 0x1, 0x0) 1.39197551s ago: executing program 1 (id=2059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f0000000040)={0xa, 0x2, 0x1000, @empty}, 0x1c) 1.35832383s ago: executing program 2 (id=2060): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfd, 0x1}, 0x10351, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8957) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1.219874511s ago: executing program 1 (id=2061): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x210, 0x5002004a, 0xa, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'macvtap0\x00'}, 0x60, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'bridge0\x00', {}, 'batadv0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c7a6bc1f54b88fa2267673e9bdbd68ed89f86114fe5e4c4969e359fcb117"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1066, 0x80, 0x6, 0x2e4, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x1057, &(0x7f0000000000)="$eJzsz8GJwlAUBdD7J5NhwiymhEkTU4pYgzsbkGApboON2YG4iUQ/pgIR4ZzF59/L48ELL9WV5G9Tw/m49Le3yXfb5SO7R//VD11+Dttlw/7UJtNvqbEfk891kv/LHGs9zd/hPl9qWdKsxudeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADv4RoAAP//uvwMeg==") mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0xce21, @empty=0x7f000000}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) stat(0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) 644.877005ms ago: executing program 2 (id=2062): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close(r0) 609.162736ms ago: executing program 2 (id=2063): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000180)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r3 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) 364.111758ms ago: executing program 2 (id=2064): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x210, 0x5002004a, 0xa, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'macvtap0\x00'}, 0x60, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'bridge0\x00', {}, 'batadv0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c7a6bc1f54b88fa2267673e9bdbd68ed89f86114fe5e4c4969e359fcb117"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1066, 0x80, 0x6, 0x2e4, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (fail_nth: 1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x1057, &(0x7f0000000000)="$eJzsz8GJwlAUBdD7J5NhwiymhEkTU4pYgzsbkGApboON2YG4iUQ/pgIR4ZzF59/L48ELL9WV5G9Tw/m49Le3yXfb5SO7R//VD11+Dttlw/7UJtNvqbEfk891kv/LHGs9zd/hPl9qWdKsxudeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADv4RoAAP//uvwMeg==") mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0xce21, @empty=0x7f000000}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) stat(0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) 188.613549ms ago: executing program 4 (id=2065): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="010000e65c2878978ada8b0005000062ce961e0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRESOCT=r3, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r9 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r8, r9, 0x0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r12, 0xc004743e, 0x110e22fff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00'}, 0x10) ioctl$TUNGETVNETLE(r11, 0x40047451, &(0x7f0000000180)) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 167.874229ms ago: executing program 3 (id=2066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000014c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fchmodat(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@noblock_validity}, {@data_writeback}, {@sysvgroups}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") 128.664869ms ago: executing program 1 (id=2067): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8957) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 10.93383ms ago: executing program 2 (id=2068): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000580)=""/207) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.51516ms ago: executing program 4 (id=2069): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) 0s ago: executing program 4 (id=2070): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187014, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000218e0000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) kernel console output (not intermixed with test programs): 00-0000-000000000000. [ 117.218522][ T7284] loop2: detected capacity change from 0 to 256 [ 117.265611][ T7284] FAT-fs (loop2): Directory bread(block 64) failed [ 117.272277][ T7284] FAT-fs (loop2): Directory bread(block 65) failed [ 117.284615][ T7284] FAT-fs (loop2): Directory bread(block 66) failed [ 117.301890][ T7284] FAT-fs (loop2): Directory bread(block 67) failed [ 117.313979][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 117.354361][ T7288] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.364920][ T7284] FAT-fs (loop2): Directory bread(block 68) failed [ 117.371982][ T7284] FAT-fs (loop2): Directory bread(block 69) failed [ 117.381453][ T7284] FAT-fs (loop2): Directory bread(block 70) failed [ 117.388310][ T7284] FAT-fs (loop2): Directory bread(block 71) failed [ 117.395892][ T7284] FAT-fs (loop2): Directory bread(block 72) failed [ 117.403717][ T7284] FAT-fs (loop2): Directory bread(block 73) failed [ 117.436757][ T7288] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.606095][ T7290] bond1: entered promiscuous mode [ 117.611804][ T7290] bond1: entered allmulticast mode [ 117.620349][ T7290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.655317][ T7290] bond1 (unregistering): Released all slaves [ 117.731433][ T7288] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.829519][ T7288] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.906712][ T7310] loop3: detected capacity change from 0 to 512 [ 117.922200][ T7288] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.939672][ T7310] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 117.975809][ T7288] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.989254][ T7310] EXT4-fs (loop3): invalid journal inode [ 117.995345][ T7310] EXT4-fs (loop3): can't get journal size [ 118.015459][ T7316] loop1: detected capacity change from 0 to 1024 [ 118.020779][ T7310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 118.034406][ T7316] EXT4-fs: Ignoring removed orlov option [ 118.040217][ T7316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.153147][ T7288] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.169096][ T7310] System zones: 1-12, 13-13 [ 118.177447][ T7310] EXT4-fs (loop3): 1 truncate cleaned up [ 118.183656][ T7310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.231414][ T7310] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1324: bg 0: block 255: padding at end of block bitmap is not set [ 118.286329][ T7310] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 118.297640][ T7288] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.398965][ T7316] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 118.423595][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.433434][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.468302][ T7323] loop4: detected capacity change from 0 to 256 [ 118.524586][ T7323] FAT-fs (loop4): Directory bread(block 64) failed [ 118.544809][ T7323] FAT-fs (loop4): Directory bread(block 65) failed [ 118.560111][ T7323] FAT-fs (loop4): Directory bread(block 66) failed [ 118.570154][ T7323] FAT-fs (loop4): Directory bread(block 67) failed [ 118.576700][ T7323] FAT-fs (loop4): Directory bread(block 68) failed [ 118.612612][ T7323] FAT-fs (loop4): Directory bread(block 69) failed [ 118.625028][ T7323] FAT-fs (loop4): Directory bread(block 70) failed [ 118.650530][ T7323] FAT-fs (loop4): Directory bread(block 71) failed [ 118.667235][ T7323] FAT-fs (loop4): Directory bread(block 72) failed [ 118.684055][ T7323] FAT-fs (loop4): Directory bread(block 73) failed [ 119.151048][ T7340] bond1: entered promiscuous mode [ 119.156748][ T7340] bond1: entered allmulticast mode [ 119.163860][ T7340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.194972][ T7340] bond1 (unregistering): Released all slaves [ 119.409186][ T7351] loop0: detected capacity change from 0 to 512 [ 119.416153][ T7351] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 119.424556][ T7351] EXT4-fs (loop0): invalid journal inode [ 119.424585][ T7351] EXT4-fs (loop0): can't get journal size [ 119.436517][ T7351] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 119.436630][ T7351] System zones: 1-12, 13-13 [ 119.437295][ T7351] EXT4-fs (loop0): 1 truncate cleaned up [ 119.437720][ T7351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.439358][ T7351] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1336: bg 0: block 255: padding at end of block bitmap is not set [ 119.440698][ T7351] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 119.445947][ T30] kauditd_printk_skb: 210 callbacks suppressed [ 119.445964][ T30] audit: type=1326 audit(1742461582.088:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 119.445998][ T30] audit: type=1326 audit(1742461582.088:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 119.446159][ T30] audit: type=1326 audit(1742461582.088:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 119.446600][ T30] audit: type=1326 audit(1742461582.088:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 119.446771][ T30] audit: type=1326 audit(1742461582.088:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 119.446835][ T30] audit: type=1326 audit(1742461582.088:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 119.446863][ T30] audit: type=1326 audit(1742461582.088:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 119.446934][ T30] audit: type=1326 audit(1742461582.088:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 119.446980][ T30] audit: type=1326 audit(1742461582.088:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 119.447107][ T30] audit: type=1326 audit(1742461582.088:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 119.461411][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.487253][ T7359] siw: device registration error -23 [ 119.498823][ T7360] loop0: detected capacity change from 0 to 1024 [ 119.794278][ T7360] EXT4-fs: Ignoring removed orlov option [ 119.800140][ T7360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.809598][ T7364] : renamed from bond0 [ 119.830985][ T7360] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 119.840648][ T7369] loop2: detected capacity change from 0 to 512 [ 119.857877][ T7369] EXT4-fs (loop2): orphan cleanup on readonly fs [ 119.877654][ T7369] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1340: bg 0: block 248: padding at end of block bitmap is not set [ 119.905706][ T7369] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.1340: Failed to acquire dquot type 1 [ 119.922874][ T7369] EXT4-fs (loop2): 1 truncate cleaned up [ 119.941216][ T7369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.942019][ T7378] loop0: detected capacity change from 0 to 256 [ 119.980641][ T7378] FAT-fs (loop0): Directory bread(block 64) failed [ 119.987326][ T7378] FAT-fs (loop0): Directory bread(block 65) failed [ 119.994948][ T7378] FAT-fs (loop0): Directory bread(block 66) failed [ 120.001825][ T7378] FAT-fs (loop0): Directory bread(block 67) failed [ 120.008382][ T7378] FAT-fs (loop0): Directory bread(block 68) failed [ 120.015840][ T7378] FAT-fs (loop0): Directory bread(block 69) failed [ 120.022759][ T7378] FAT-fs (loop0): Directory bread(block 70) failed [ 120.029535][ T7378] FAT-fs (loop0): Directory bread(block 71) failed [ 120.036130][ T7378] FAT-fs (loop0): Directory bread(block 72) failed [ 120.042858][ T7378] FAT-fs (loop0): Directory bread(block 73) failed [ 120.140896][ T7379] bond1: entered promiscuous mode [ 120.146752][ T7379] bond1: entered allmulticast mode [ 120.180692][ T7379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.206199][ T7379] bond1 (unregistering): Released all slaves [ 120.492188][ T7399] siw: device registration error -23 [ 120.661573][ T7369] syz.2.1340 (7369) used greatest stack depth: 9272 bytes left [ 120.690430][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.733298][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 120.746216][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1355'. [ 120.760275][ T7413] loop1: detected capacity change from 0 to 256 [ 120.776780][ T7413] FAT-fs (loop1): Directory bread(block 64) failed [ 120.783919][ T7413] FAT-fs (loop1): Directory bread(block 65) failed [ 120.791968][ T7413] FAT-fs (loop1): Directory bread(block 66) failed [ 120.802858][ T7413] FAT-fs (loop1): Directory bread(block 67) failed [ 120.809740][ T7413] FAT-fs (loop1): Directory bread(block 68) failed [ 120.844123][ T7413] FAT-fs (loop1): Directory bread(block 69) failed [ 120.853616][ T7413] FAT-fs (loop1): Directory bread(block 70) failed [ 120.860363][ T7413] FAT-fs (loop1): Directory bread(block 71) failed [ 120.867026][ T7413] FAT-fs (loop1): Directory bread(block 72) failed [ 120.874017][ T7413] FAT-fs (loop1): Directory bread(block 73) failed [ 120.934730][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1360'. [ 121.010893][ T7423] bond2: entered promiscuous mode [ 121.016405][ T7423] bond2: entered allmulticast mode [ 121.023434][ T7423] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.091469][ T7423] bond2 (unregistering): Released all slaves [ 121.100016][ T7435] FAULT_INJECTION: forcing a failure. [ 121.100016][ T7435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.113287][ T7435] CPU: 1 UID: 0 PID: 7435 Comm: syz.4.1364 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 121.113319][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.113335][ T7435] Call Trace: [ 121.113341][ T7435] [ 121.113350][ T7435] dump_stack_lvl+0xf2/0x150 [ 121.113385][ T7435] dump_stack+0x15/0x1a [ 121.113413][ T7435] should_fail_ex+0x24a/0x260 [ 121.113455][ T7435] should_fail+0xb/0x10 [ 121.113489][ T7435] should_fail_usercopy+0x1a/0x20 [ 121.113580][ T7435] _copy_from_user+0x1c/0xa0 [ 121.113605][ T7435] copy_msghdr_from_user+0x54/0x2a0 [ 121.113728][ T7435] ? __fget_files+0x17c/0x1c0 [ 121.113773][ T7435] __sys_recvmsg+0x140/0x260 [ 121.113924][ T7435] __x64_sys_recvmsg+0x46/0x50 [ 121.113992][ T7435] x64_sys_call+0xc64/0x2dc0 [ 121.114025][ T7435] do_syscall_64+0xc9/0x1c0 [ 121.114060][ T7435] ? clear_bhb_loop+0x55/0xb0 [ 121.114092][ T7435] ? clear_bhb_loop+0x55/0xb0 [ 121.114136][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.114168][ T7435] RIP: 0033:0x7f1434c0d169 [ 121.114185][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.114247][ T7435] RSP: 002b:00007f1433277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 121.114270][ T7435] RAX: ffffffffffffffda RBX: 00007f1434e25fa0 RCX: 00007f1434c0d169 [ 121.114316][ T7435] RDX: 0000000000000100 RSI: 0000200000000340 RDI: 0000000000000006 [ 121.114330][ T7435] RBP: 00007f1433277090 R08: 0000000000000000 R09: 0000000000000000 [ 121.114342][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.114353][ T7435] R13: 0000000000000000 R14: 00007f1434e25fa0 R15: 00007ffd793dabc8 [ 121.114371][ T7435] [ 122.309560][ T7442] loop0: detected capacity change from 0 to 1024 [ 122.316727][ T7442] EXT4-fs: Ignoring removed orlov option [ 122.322463][ T7442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.362828][ T7442] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 122.392959][ T7449] loop3: detected capacity change from 0 to 1024 [ 122.399950][ T7449] EXT4-fs: Ignoring removed orlov option [ 122.405694][ T7449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.439439][ T7440] lo speed is unknown, defaulting to 1000 [ 122.452889][ T7439] lo speed is unknown, defaulting to 1000 [ 122.475780][ T7449] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 122.508767][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1367'. [ 123.809816][ T7492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.926810][ T7498] bond1: entered promiscuous mode [ 123.936085][ T7498] bond1: entered allmulticast mode [ 123.944347][ T7498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.947247][ T7505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'. [ 123.980923][ T7498] bond1 (unregistering): Released all slaves [ 123.988008][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1379'. [ 124.037904][ T7503] bond1: entered promiscuous mode [ 124.044433][ T7503] bond1: entered allmulticast mode [ 124.061933][ T7503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.092590][ T7503] bond1 (unregistering): Released all slaves [ 124.113547][ T7496] netlink: 'syz.2.1379': attribute type 7 has an invalid length. [ 124.129230][ T7501] lo speed is unknown, defaulting to 1000 [ 124.136644][ T7511] siw: device registration error -23 [ 124.498278][ T7479] dccp_close: ABORT with 132 bytes unread [ 124.592818][ T7548] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 124.602755][ T7547] IPVS: stopping master sync thread 7548 ... [ 124.720456][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 124.750677][ T7551] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.802758][ T7551] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.856337][ T7551] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.944072][ T7551] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.998693][ T7551] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.071882][ T7523] dccp_close: ABORT with 100 bytes unread [ 125.098177][ T7525] dccp_close: ABORT with 132 bytes unread [ 125.188719][ T7561] bond0: entered promiscuous mode [ 125.194662][ T7569] loop4: detected capacity change from 0 to 512 [ 125.195205][ T7569] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 125.202387][ T7561] bond0: entered allmulticast mode [ 125.211866][ T7569] EXT4-fs (loop4): invalid journal inode [ 125.221655][ T7561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.223374][ T7569] EXT4-fs (loop4): can't get journal size [ 125.243374][ T7569] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 125.252359][ T7569] System zones: 1-12, 13-13 [ 125.265443][ T7569] EXT4-fs (loop4): 1 truncate cleaned up [ 125.289813][ T7561] bond0 (unregistering): Released all slaves [ 125.299190][ T7569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.324009][ T7569] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1401: bg 0: block 255: padding at end of block bitmap is not set [ 125.340088][ T7569] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 125.366902][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 125.366920][ T30] audit: type=1326 audit(1742461588.008:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 125.416727][ T30] audit: type=1326 audit(1742461588.048:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 125.440458][ T30] audit: type=1326 audit(1742461588.048:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 125.464383][ T30] audit: type=1326 audit(1742461588.048:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 125.487965][ T30] audit: type=1326 audit(1742461588.048:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 125.511587][ T30] audit: type=1326 audit(1742461588.048:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 125.534953][ T30] audit: type=1326 audit(1742461588.048:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 125.543041][ T7551] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.558392][ T30] audit: type=1326 audit(1742461588.048:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 125.590053][ T30] audit: type=1326 audit(1742461588.048:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 125.613492][ T30] audit: type=1326 audit(1742461588.048:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 125.640130][ T7551] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.642309][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.652293][ T7551] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.080266][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 126.093248][ T7597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.102367][ T7601] netlink: 'syz.3.1415': attribute type 7 has an invalid length. [ 126.209898][ T7603] bond0: entered promiscuous mode [ 126.215566][ T7603] bond0: entered allmulticast mode [ 126.232633][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.253048][ T7603] bond0 (unregistering): Released all slaves [ 126.710501][ T7628] IPVS: stopping master sync thread 7630 ... [ 126.825502][ T7644] siw: device registration error -23 [ 127.048828][ T7666] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 127.059024][ T7665] IPVS: stopping master sync thread 7666 ... [ 127.067143][ T7662] loop4: detected capacity change from 0 to 512 [ 127.080861][ T7662] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 127.114858][ T7662] EXT4-fs (loop4): invalid journal inode [ 127.130659][ T7662] EXT4-fs (loop4): can't get journal size [ 127.168453][ T7662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 127.177661][ T7662] System zones: 1-12, 13-13 [ 127.193762][ T7662] EXT4-fs (loop4): 1 truncate cleaned up [ 127.198479][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1440'. [ 127.200217][ T7662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.225477][ T7662] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1436: bg 0: block 255: padding at end of block bitmap is not set [ 127.250674][ T7662] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 127.310026][ T7671] bond1: entered promiscuous mode [ 127.316520][ T7671] bond1: entered allmulticast mode [ 127.328804][ T7671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.384957][ T7671] bond1 (unregistering): Released all slaves [ 127.435431][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.708833][ T7693] loop3: detected capacity change from 0 to 1024 [ 127.715903][ T7693] EXT4-fs: Ignoring removed orlov option [ 127.721689][ T7693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.923830][ T7693] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 127.953068][ T7704] IPVS: stopping master sync thread 7705 ... [ 127.965885][ T7705] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 128.039611][ T7708] IPVS: stopping master sync thread 7710 ... [ 128.250868][ T7720] loop0: detected capacity change from 0 to 1024 [ 128.267948][ T7720] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 128.277843][ T7720] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 128.373538][ T7720] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 128.392749][ T7720] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: inode #5: comm syz.0.1455: unexpected bad inode w/o EXT4_IGET_BAD [ 128.448946][ T7720] EXT4-fs (loop0): no journal found [ 128.454210][ T7720] EXT4-fs (loop0): can't get journal size [ 128.486465][ T7720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.793776][ T7743] IPVS: stopping master sync thread 7744 ... [ 128.800984][ T7744] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 129.143632][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1467'. [ 129.167869][ T7756] netlink: 'syz.4.1467': attribute type 7 has an invalid length. [ 129.402296][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1470'. [ 129.454648][ T7771] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.576056][ T7771] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.631082][ T7771] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.652797][ T7776] netlink: 'syz.1.1473': attribute type 3 has an invalid length. [ 129.690826][ T7771] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.774776][ T7771] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.800399][ T7771] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.823654][ T7771] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.856310][ T7771] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.005308][ T7791] loop1: detected capacity change from 0 to 1024 [ 130.037101][ T7791] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 130.047150][ T7791] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 130.103020][ T7791] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 130.133579][ T7791] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #5: comm syz.1.1478: unexpected bad inode w/o EXT4_IGET_BAD [ 130.198273][ T7791] EXT4-fs (loop1): no journal found [ 130.203743][ T7791] EXT4-fs (loop1): can't get journal size [ 130.250934][ T7791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.276576][ T7798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.374152][ T7798] lo speed is unknown, defaulting to 1000 [ 130.383591][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.787814][ T7820] FAULT_INJECTION: forcing a failure. [ 130.787814][ T7820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.801147][ T7820] CPU: 1 UID: 0 PID: 7820 Comm: syz.2.1490 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 130.801171][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.801184][ T7820] Call Trace: [ 130.801240][ T7820] [ 130.801249][ T7820] dump_stack_lvl+0xf2/0x150 [ 130.801282][ T7820] dump_stack+0x15/0x1a [ 130.801304][ T7820] should_fail_ex+0x24a/0x260 [ 130.801352][ T7820] should_fail+0xb/0x10 [ 130.801519][ T7820] should_fail_usercopy+0x1a/0x20 [ 130.801557][ T7820] _copy_from_user+0x1c/0xa0 [ 130.801607][ T7820] copy_msghdr_from_user+0x54/0x2a0 [ 130.801647][ T7820] ? __fget_files+0x17c/0x1c0 [ 130.801691][ T7820] __sys_sendmsg+0x13e/0x230 [ 130.801817][ T7820] __x64_sys_sendmsg+0x46/0x50 [ 130.801846][ T7820] x64_sys_call+0x2734/0x2dc0 [ 130.801872][ T7820] do_syscall_64+0xc9/0x1c0 [ 130.801905][ T7820] ? clear_bhb_loop+0x55/0xb0 [ 130.801976][ T7820] ? clear_bhb_loop+0x55/0xb0 [ 130.802021][ T7820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.802048][ T7820] RIP: 0033:0x7ff6eea2d169 [ 130.802063][ T7820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.802148][ T7820] RSP: 002b:00007ff6ed097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.802171][ T7820] RAX: ffffffffffffffda RBX: 00007ff6eec45fa0 RCX: 00007ff6eea2d169 [ 130.802187][ T7820] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 130.802201][ T7820] RBP: 00007ff6ed097090 R08: 0000000000000000 R09: 0000000000000000 [ 130.802216][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.802230][ T7820] R13: 0000000000000000 R14: 00007ff6eec45fa0 R15: 00007ffcf3b44658 [ 130.802252][ T7820] [ 130.994248][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'. [ 131.059641][ T7821] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.144590][ T7821] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.278229][ T7821] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.391166][ T7821] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.709968][ T7843] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1498'. [ 131.852534][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 131.852552][ T30] audit: type=1326 audit(1742461594.498:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 131.882438][ T30] audit: type=1326 audit(1742461594.498:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 131.970044][ T30] audit: type=1326 audit(1742461594.548:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 131.993670][ T30] audit: type=1326 audit(1742461594.548:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 132.017150][ T30] audit: type=1326 audit(1742461594.548:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 132.040646][ T30] audit: type=1326 audit(1742461594.598:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 132.064019][ T30] audit: type=1326 audit(1742461594.598:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 132.087533][ T30] audit: type=1326 audit(1742461594.598:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 132.111010][ T30] audit: type=1326 audit(1742461594.598:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 132.134447][ T30] audit: type=1326 audit(1742461594.598:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 132.285133][ T7854] lo speed is unknown, defaulting to 1000 [ 132.394431][ T7854] loop2: detected capacity change from 0 to 1024 [ 132.401426][ T7854] EXT4-fs: Ignoring removed orlov option [ 132.407109][ T7854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.484621][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.505262][ T7854] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 132.753548][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 132.788415][ T7863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7863 comm=syz.1.1502 [ 132.802023][ T7859] netlink: 'syz.0.1503': attribute type 7 has an invalid length. [ 133.300376][ T7884] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1510'. [ 133.723891][ T7894] lo speed is unknown, defaulting to 1000 [ 133.827538][ T7894] loop1: detected capacity change from 0 to 1024 [ 133.834592][ T7894] EXT4-fs: Ignoring removed orlov option [ 133.840327][ T7894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.888993][ T7894] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 134.219529][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'. [ 134.253317][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 134.269273][ T7899] netlink: 'syz.0.1514': attribute type 7 has an invalid length. [ 134.482538][ T7918] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1521'. [ 134.650976][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1526'. [ 134.680467][ T7930] netlink: 'syz.2.1526': attribute type 7 has an invalid length. [ 134.737137][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1518'. [ 135.071409][ T7944] siw: device registration error -23 [ 135.236230][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1530'. [ 135.487362][ T7821] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.504556][ T7821] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.606755][ T7954] loop2: detected capacity change from 0 to 1024 [ 135.613774][ T7954] EXT4-fs: Ignoring removed orlov option [ 135.619469][ T7954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.744309][ T7954] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 135.847058][ T7952] lo speed is unknown, defaulting to 1000 [ 135.910341][ T7821] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.942345][ T7821] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.101471][ T7964] 9pnet_fd: Insufficient options for proto=fd [ 136.413996][ T7973] lo speed is unknown, defaulting to 1000 [ 136.464704][ T7973] loop4: detected capacity change from 0 to 1024 [ 136.471531][ T7973] EXT4-fs: Ignoring removed orlov option [ 136.477275][ T7973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.248199][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 137.248217][ T30] audit: type=1326 audit(1742461598.938:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 137.277815][ T30] audit: type=1326 audit(1742461599.028:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 137.301522][ T30] audit: type=1326 audit(1742461599.028:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 137.324992][ T30] audit: type=1326 audit(1742461599.038:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 137.348485][ T30] audit: type=1326 audit(1742461599.038:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 137.371946][ T30] audit: type=1326 audit(1742461599.038:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 137.395513][ T30] audit: type=1326 audit(1742461599.038:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 137.419026][ T30] audit: type=1326 audit(1742461599.038:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 137.442592][ T30] audit: type=1326 audit(1742461599.038:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 137.466054][ T30] audit: type=1326 audit(1742461599.038:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 138.043220][ T7977] loop0: detected capacity change from 0 to 1024 [ 138.050145][ T7977] EXT4-fs: Ignoring removed orlov option [ 138.055847][ T7977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.172503][ T7973] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 138.182569][ T7977] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 138.204092][ T7983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1539'. [ 138.246007][ T7983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1539'. [ 138.264681][ T7983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1539'. [ 138.343828][ T7983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1539'. [ 138.595183][ T8010] siw: device registration error -23 [ 138.737074][ T8013] bond1: entered promiscuous mode [ 138.742617][ T8013] bond1: entered allmulticast mode [ 138.750410][ T8013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.807528][ T8013] bond1 (unregistering): Released all slaves [ 138.900798][ T8026] loop2: detected capacity change from 0 to 1024 [ 138.907706][ T8026] EXT4-fs: Ignoring removed orlov option [ 138.913513][ T8026] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.059793][ T8026] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 140.122393][ T8027] lo speed is unknown, defaulting to 1000 [ 140.302167][ T8037] loop2: detected capacity change from 0 to 512 [ 140.321089][ T8037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 140.334000][ T8037] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.419414][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 140.510512][ T8045] __nla_validate_parse: 6 callbacks suppressed [ 140.510568][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'. [ 140.517442][ T8049] lo speed is unknown, defaulting to 1000 [ 140.659650][ T8058] siw: device registration error -23 [ 140.676996][ T8060] loop2: detected capacity change from 0 to 512 [ 140.707033][ T8060] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 140.716742][ T8060] EXT4-fs (loop2): invalid journal inode [ 140.723001][ T8060] EXT4-fs (loop2): can't get journal size [ 140.729977][ T8060] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 140.754625][ T8060] System zones: 1-12, 13-13 [ 140.784940][ T8060] EXT4-fs (loop2): 1 truncate cleaned up [ 140.810707][ T8060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.849412][ T8060] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1562: bg 0: block 255: padding at end of block bitmap is not set [ 140.885658][ T8060] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 141.012016][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.051028][ T8086] loop2: detected capacity change from 0 to 512 [ 141.115024][ T8086] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 141.140845][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 141.169069][ T8086] EXT4-fs (loop2): invalid journal inode [ 141.175161][ T8086] EXT4-fs (loop2): can't get journal size [ 141.186499][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 141.199246][ T8086] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 141.261117][ T8086] System zones: 1-12, 13-13 [ 141.268559][ T8086] EXT4-fs (loop2): 1 truncate cleaned up [ 141.291850][ T8086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.370059][ T8090] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.447786][ T8086] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1568: bg 0: block 255: padding at end of block bitmap is not set [ 141.552944][ T8086] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 141.613204][ T8090] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.624812][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.636788][ T8097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.644081][ T8097] IPv6: NLM_F_CREATE should be set when creating new route [ 141.701409][ T8090] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.740566][ T8090] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.061132][ T8113] bond0: entered promiscuous mode [ 142.066239][ T8113] bond0: entered allmulticast mode [ 142.093015][ T8113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.106946][ T8118] loop2: detected capacity change from 0 to 1024 [ 142.122689][ T8118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.138342][ T8118] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.151195][ T8113] bond0 (unregistering): Released all slaves [ 142.173578][ T8118] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 142.193760][ T8118] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 142.206229][ T8118] EXT4-fs (loop2): This should not happen!! Data will be lost [ 142.206229][ T8118] [ 142.207412][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 142.215929][ T8118] EXT4-fs (loop2): Total free blocks count 0 [ 142.215946][ T8118] EXT4-fs (loop2): Free/Dirty block details [ 142.236983][ T8118] EXT4-fs (loop2): free_blocks=4293918720 [ 142.242784][ T8118] EXT4-fs (loop2): dirty_blocks=16 [ 142.247949][ T8118] EXT4-fs (loop2): Block reservation details [ 142.249308][ T8134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8134 comm=syz.3.1578 [ 142.253982][ T8118] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 142.285320][ T8119] loop3: detected capacity change from 0 to 128 [ 142.294240][ T8119] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.298086][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.317041][ T8119] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.397294][ T30] kauditd_printk_skb: 184 callbacks suppressed [ 142.397311][ T30] audit: type=1326 audit(1742461605.038:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.3.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 142.431006][ T30] audit: type=1326 audit(1742461605.078:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.3.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 142.454552][ T30] audit: type=1326 audit(1742461605.078:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.3.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 142.478493][ T30] audit: type=1326 audit(1742461605.078:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.3.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 142.480096][ T8113] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 142.501980][ T30] audit: type=1326 audit(1742461605.078:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.3.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 142.508453][ T8113] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.531814][ T30] audit: type=1326 audit(1742461605.078:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.3.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 142.539318][ T8113] vhci_hcd vhci_hcd.0: Device attached [ 142.562748][ T30] audit: type=1326 audit(1742461605.078:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.3.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 142.591759][ T30] audit: type=1326 audit(1742461605.078:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.3.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3668e3f0ba code=0x7ffc0000 [ 142.615169][ T30] audit: type=1326 audit(1742461605.078:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.3.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3668e3bad0 code=0x7ffc0000 [ 142.638685][ T30] audit: type=1326 audit(1742461605.078:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.3.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3668e3bc1f code=0x7ffc0000 [ 142.680562][ T8143] vhci_hcd: connection closed [ 142.698925][ T4102] vhci_hcd: stop threads [ 142.707909][ T4102] vhci_hcd: release socket [ 142.712392][ T4102] vhci_hcd: disconnect device [ 142.748919][ T25] vhci_hcd: vhci_device speed not set [ 142.891658][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'. [ 143.001416][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 143.014374][ T8160] netlink: 'syz.1.1589': attribute type 7 has an invalid length. [ 143.135154][ T8090] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.148323][ T8090] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.171259][ T8090] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.192498][ T8090] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.339162][ T8170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.346414][ T8170] IPv6: NLM_F_CREATE should be set when creating new route [ 143.635098][ T8174] lo speed is unknown, defaulting to 1000 [ 143.699349][ T8174] loop3: detected capacity change from 0 to 1024 [ 143.706472][ T8174] EXT4-fs: Ignoring removed orlov option [ 143.712296][ T8174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.979899][ T8174] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 144.130960][ T8181] loop0: detected capacity change from 0 to 1024 [ 144.145922][ T8181] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 144.155860][ T8181] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 144.254147][ T8181] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 144.290486][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1596'. [ 144.301910][ T8183] netlink: 'syz.4.1596': attribute type 7 has an invalid length. [ 144.319890][ T8181] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: inode #5: comm syz.0.1595: unexpected bad inode w/o EXT4_IGET_BAD [ 144.341262][ T8181] EXT4-fs (loop0): no journal found [ 144.346557][ T8181] EXT4-fs (loop0): can't get journal size [ 144.414231][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1602'. [ 144.469316][ T8181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.498138][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 144.527775][ T8204] loop2: detected capacity change from 0 to 1024 [ 144.600094][ T8203] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.619221][ T8204] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 144.629040][ T8204] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 144.664073][ T8204] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 144.681362][ T8203] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.703303][ T8204] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #5: comm syz.2.1604: unexpected bad inode w/o EXT4_IGET_BAD [ 144.717850][ T8204] EXT4-fs (loop2): no journal found [ 144.723206][ T8204] EXT4-fs (loop2): can't get journal size [ 144.800657][ T8204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.900095][ T8203] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.972044][ T8203] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.633622][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.972314][ T8226] siw: device registration error -23 [ 146.128468][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1614'. [ 146.150891][ T8236] netlink: 'syz.3.1614': attribute type 7 has an invalid length. [ 146.235693][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1617'. [ 146.498608][ T8256] loop3: detected capacity change from 0 to 1024 [ 146.505601][ T8256] EXT4-fs: Ignoring removed orlov option [ 146.511345][ T8256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.569896][ T8256] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 146.909087][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.380097][ T8268] lo speed is unknown, defaulting to 1000 [ 147.483740][ T8268] loop2: detected capacity change from 0 to 1024 [ 147.490689][ T8268] EXT4-fs: Ignoring removed orlov option [ 147.496400][ T8268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.516693][ T8268] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 147.778548][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 147.778568][ T30] audit: type=1326 audit(1742461610.308:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 147.808438][ T30] audit: type=1326 audit(1742461610.308:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 147.832141][ T30] audit: type=1326 audit(1742461610.308:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 147.855945][ T30] audit: type=1326 audit(1742461610.308:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 147.879547][ T30] audit: type=1326 audit(1742461610.308:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 147.903114][ T30] audit: type=1326 audit(1742461610.308:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 147.926725][ T30] audit: type=1326 audit(1742461610.308:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 147.950210][ T30] audit: type=1326 audit(1742461610.308:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 147.973753][ T30] audit: type=1326 audit(1742461610.308:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 147.997311][ T30] audit: type=1326 audit(1742461610.308:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 148.056359][ T8274] loop3: detected capacity change from 0 to 1024 [ 148.063045][ T8274] EXT4-fs: Ignoring removed orlov option [ 148.068717][ T8274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.203777][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1626'. [ 148.244563][ T8274] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 148.482577][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'. [ 148.488120][ T8291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1631'. [ 148.502888][ T8283] netlink: 'syz.0.1628': attribute type 7 has an invalid length. [ 148.781903][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1638'. [ 148.954017][ T8316] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.055151][ T8203] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.082824][ T8203] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.104993][ T8316] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.123859][ T8203] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.149708][ T8203] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.186421][ T8316] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.286647][ T8316] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.382279][ T8316] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.394076][ T8316] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.427079][ T8316] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.447425][ T8326] siw: device registration error -23 [ 149.502576][ T8316] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.596597][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1645'. [ 149.671340][ T8332] netlink: 'syz.1.1645': attribute type 7 has an invalid length. [ 149.819546][ T8342] lo speed is unknown, defaulting to 1000 [ 149.932722][ T8342] loop4: detected capacity change from 0 to 1024 [ 149.939798][ T8342] EXT4-fs: Ignoring removed orlov option [ 149.945567][ T8342] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.057188][ T8347] loop1: detected capacity change from 0 to 1024 [ 150.063863][ T8342] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 150.209172][ T8347] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 150.219008][ T8347] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 150.248426][ T8354] siw: device registration error -23 [ 150.281512][ T8347] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 150.306336][ T8347] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #5: comm syz.1.1647: unexpected bad inode w/o EXT4_IGET_BAD [ 150.331600][ T8347] EXT4-fs (loop1): no journal found [ 150.336935][ T8347] EXT4-fs (loop1): can't get journal size [ 150.374799][ T8347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.471604][ T8361] siw: device registration error -23 [ 150.589383][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1656'. [ 150.627521][ T8372] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 150.635974][ T8372] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 150.644317][ T8372] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 150.652639][ T8372] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 150.690367][ T8372] geneve2: entered promiscuous mode [ 150.695761][ T8372] geneve2: entered allmulticast mode [ 150.708536][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1654'. [ 150.731087][ T8377] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.837781][ T8377] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.916818][ T8377] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.987372][ T8381] lo speed is unknown, defaulting to 1000 [ 151.006540][ T8377] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.032959][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.400106][ T8387] lo speed is unknown, defaulting to 1000 [ 152.233039][ T8411] loop1: detected capacity change from 0 to 1024 [ 152.239927][ T8411] EXT4-fs: Ignoring removed orlov option [ 152.245662][ T8411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.259144][ T8411] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 152.765984][ T8414] bond1: entered promiscuous mode [ 152.771736][ T8414] bond1: entered allmulticast mode [ 152.778013][ T8414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.793638][ T8416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1667'. [ 152.813952][ T8414] bond1 (unregistering): Released all slaves [ 152.889026][ T8421] loop0: detected capacity change from 0 to 512 [ 152.895891][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 152.902139][ T30] audit: type=1326 audit(1742461615.538:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8404 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafb0ed169 code=0x7ffc0000 [ 152.908758][ T8421] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 152.949970][ T8421] EXT4-fs (loop0): invalid journal inode [ 152.955931][ T8421] EXT4-fs (loop0): can't get journal size [ 152.983164][ T8421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 153.000649][ T8421] System zones: 1-12, 13-13 [ 153.019564][ T8421] EXT4-fs (loop0): 1 truncate cleaned up [ 153.046384][ T8421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.092328][ T8421] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1669: bg 0: block 255: padding at end of block bitmap is not set [ 153.103628][ T8431] netlink: 'syz.3.1672': attribute type 7 has an invalid length. [ 153.115623][ T8421] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 153.231227][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.273778][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 153.318983][ T30] audit: type=1326 audit(1742461615.848:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 153.342527][ T30] audit: type=1326 audit(1742461615.848:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 153.366048][ T30] audit: type=1326 audit(1742461615.848:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 153.389465][ T30] audit: type=1326 audit(1742461615.848:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 153.412942][ T30] audit: type=1326 audit(1742461615.848:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 153.436408][ T30] audit: type=1326 audit(1742461615.848:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 153.459947][ T30] audit: type=1326 audit(1742461615.848:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 153.483513][ T30] audit: type=1326 audit(1742461615.848:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 153.506939][ T30] audit: type=1326 audit(1742461615.848:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 153.681565][ T8454] lo speed is unknown, defaulting to 1000 [ 153.743410][ T8454] loop3: detected capacity change from 0 to 1024 [ 153.750331][ T8454] EXT4-fs: Ignoring removed orlov option [ 153.756034][ T8454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.780437][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 154.041766][ T8454] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 154.148604][ T8468] bond1: entered promiscuous mode [ 154.153795][ T8468] bond1: entered allmulticast mode [ 154.159859][ T8468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.258844][ T8468] bond1 (unregistering): Released all slaves [ 154.408476][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'. [ 154.696382][ T8502] loop1: detected capacity change from 0 to 1024 [ 154.703517][ T8502] EXT4-fs: Ignoring removed orlov option [ 154.709208][ T8502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.731185][ T8502] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 155.108162][ T8377] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.132788][ T8377] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.166778][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'. [ 155.190361][ T8377] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.259032][ T8377] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.273975][ T8512] @ÿ: renamed from bond_slave_0 [ 155.330710][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1690'. [ 155.389883][ T8512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.449743][ T8512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.475285][ T8516] netlink: 'syz.4.1692': attribute type 7 has an invalid length. [ 155.514542][ T8518] lo speed is unknown, defaulting to 1000 [ 155.587491][ T8524] bond1: entered promiscuous mode [ 155.592628][ T8524] bond1: entered allmulticast mode [ 155.647095][ T8524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.671228][ T8524] bond1 (unregistering): Released all slaves [ 155.796857][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 156.646321][ T8548] lo speed is unknown, defaulting to 1000 [ 156.703752][ T8548] loop4: detected capacity change from 0 to 1024 [ 156.710632][ T8548] EXT4-fs: Ignoring removed orlov option [ 156.716370][ T8548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.758945][ T8548] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 156.891731][ T8559] netlink: 'syz.3.1703': attribute type 7 has an invalid length. [ 156.938592][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1704'. [ 156.951829][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1700'. [ 156.983707][ T8563] bond2: entered promiscuous mode [ 156.988894][ T8563] bond2: entered allmulticast mode [ 156.994482][ T8567] siw: device registration error -23 [ 157.010182][ T8563] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.036083][ T8563] bond2 (unregistering): Released all slaves [ 157.070538][ T8546] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.088202][ T8572] xt_hashlimit: max too large, truncated to 1048576 [ 157.116380][ T8572] Cannot find set identified by id 0 to match [ 157.191408][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1710'. [ 157.202456][ T8546] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.261296][ T8546] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.373959][ T8546] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.403752][ T8594] netlink: 'syz.3.1715': attribute type 7 has an invalid length. [ 157.443129][ T8546] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.467150][ T8593] lo speed is unknown, defaulting to 1000 [ 157.492675][ T8546] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.510431][ T8546] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.535931][ T8546] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.567970][ T8605] siw: device registration error -23 [ 157.648678][ T8614] loop1: detected capacity change from 0 to 256 [ 157.950875][ T4102] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 158.070693][ T8656] __nla_validate_parse: 2 callbacks suppressed [ 158.070713][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1732'. [ 158.086361][ T8661] loop4: detected capacity change from 0 to 164 [ 158.145070][ T8662] netlink: 'syz.0.1732': attribute type 7 has an invalid length. [ 158.153995][ T8661] syz.4.1733: attempt to access beyond end of device [ 158.153995][ T8661] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 158.168913][ T8661] syz.4.1733: attempt to access beyond end of device [ 158.168913][ T8661] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 158.201800][ T8661] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 158.282186][ T30] kauditd_printk_skb: 209 callbacks suppressed [ 158.282204][ T30] audit: type=1326 audit(1742461620.928:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 158.311916][ T30] audit: type=1326 audit(1742461620.928:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 158.335384][ T30] audit: type=1326 audit(1742461620.928:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 158.359095][ T30] audit: type=1326 audit(1742461620.928:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 158.383206][ T30] audit: type=1326 audit(1742461620.928:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 158.412105][ T30] audit: type=1326 audit(1742461621.058:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 158.435724][ T30] audit: type=1326 audit(1742461621.058:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 158.459191][ T30] audit: type=1326 audit(1742461621.058:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 158.482842][ T30] audit: type=1326 audit(1742461621.058:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 158.506671][ T30] audit: type=1326 audit(1742461621.058:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 158.606158][ T8688] loop2: detected capacity change from 0 to 512 [ 158.630505][ T8688] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.664998][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1745'. [ 158.676639][ T8692] netlink: 'syz.0.1745': attribute type 7 has an invalid length. [ 158.696121][ T8688] EXT4-fs (loop2): 1 truncate cleaned up [ 158.702265][ T8688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.855885][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.962024][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 158.974027][ T8724] netlink: 'syz.0.1756': attribute type 7 has an invalid length. [ 159.034640][ T8731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.041920][ T8731] IPv6: NLM_F_CREATE should be set when creating new route [ 159.095701][ T8733] bond1: entered promiscuous mode [ 159.101266][ T8733] bond1: entered allmulticast mode [ 159.107521][ T8733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.129043][ T8742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1757'. [ 159.138900][ T8733] bond1 (unregistering): Released all slaves [ 159.226798][ T8750] loop4: detected capacity change from 0 to 1024 [ 159.233826][ T8750] EXT4-fs: Ignoring removed orlov option [ 159.239563][ T8750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.319506][ T8750] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 159.650275][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 159.741574][ T8761] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.834214][ T8761] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.922665][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 159.932519][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 159.953808][ T8781] netlink: 'syz.1.1768': attribute type 7 has an invalid length. [ 160.010402][ T8776] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.083628][ T8797] loop4: detected capacity change from 0 to 512 [ 160.098513][ T8797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.121521][ T8761] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.139232][ T8799] loop1: detected capacity change from 0 to 512 [ 160.146459][ T8799] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 160.147066][ T8797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.170669][ T8797] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.181600][ T8799] EXT4-fs (loop1): orphan cleanup on readonly fs [ 160.188052][ T8799] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 160.200163][ T8799] EXT4-fs (loop1): 1 truncate cleaned up [ 160.215302][ T8799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.249283][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.261714][ T8776] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.266694][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.320712][ T8761] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.428779][ T8776] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.528183][ T8818] bond1: entered promiscuous mode [ 160.534860][ T8818] bond1: entered allmulticast mode [ 160.549116][ T8818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.593033][ T8818] bond1 (unregistering): Released all slaves [ 160.618103][ T8776] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.694029][ T8838] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1790'. [ 160.720112][ T8776] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.732738][ T8776] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.750809][ T8776] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.763775][ T8776] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.884853][ T8857] loop4: detected capacity change from 0 to 164 [ 160.908682][ T8857] syz.4.1796: attempt to access beyond end of device [ 160.908682][ T8857] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 160.926310][ T8857] syz.4.1796: attempt to access beyond end of device [ 160.926310][ T8857] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 160.944172][ T8857] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 161.006941][ T8866] siw: device registration error -23 [ 161.205284][ T8876] siw: device registration error -23 [ 161.293405][ T8864] bond2: entered promiscuous mode [ 161.301344][ T8864] bond2: entered allmulticast mode [ 161.312395][ T8864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.366787][ T8864] bond2 (unregistering): Released all slaves [ 161.523873][ T8761] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.547116][ T8761] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.562375][ T8761] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.576018][ T8761] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.940636][ T8907] lo speed is unknown, defaulting to 1000 [ 162.258287][ T8911] lo speed is unknown, defaulting to 1000 [ 162.299535][ T8911] loop1: detected capacity change from 0 to 1024 [ 162.306486][ T8911] EXT4-fs: Ignoring removed orlov option [ 162.312304][ T8911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.359664][ T8911] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 162.655456][ T8920] bond0: entered promiscuous mode [ 162.660592][ T8920] bond0: entered allmulticast mode [ 162.666020][ T8920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.678033][ T8925] netlink: 'syz.4.1819': attribute type 1 has an invalid length. [ 162.685890][ T8925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1819'. [ 162.700575][ T8920] bond0 (unregistering): Released all slaves [ 162.739526][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 162.825259][ T8919] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.842263][ T8937] loop3: detected capacity change from 0 to 512 [ 162.851989][ T8937] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.886710][ T8932] netlink: 'syz.4.1822': attribute type 7 has an invalid length. [ 162.920488][ T8937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.965766][ T8937] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.976989][ T8919] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.033361][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.134405][ T8919] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.292574][ T8919] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.350728][ T30] kauditd_printk_skb: 145 callbacks suppressed [ 163.350747][ T30] audit: type=1326 audit(1742461625.988:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8959 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 163.380917][ T30] audit: type=1326 audit(1742461625.988:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8959 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 163.452983][ T30] audit: type=1326 audit(1742461626.088:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8959 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 163.476410][ T30] audit: type=1326 audit(1742461626.088:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8959 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 163.499844][ T30] audit: type=1326 audit(1742461626.088:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8959 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 163.523458][ T30] audit: type=1326 audit(1742461626.088:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8959 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3668e3d169 code=0x7ffc0000 [ 163.552202][ T8965] siw: device registration error -23 [ 163.595927][ T8968] 9pnet_fd: Insufficient options for proto=fd [ 163.644582][ T8969] lo speed is unknown, defaulting to 1000 [ 163.747736][ T8969] loop3: detected capacity change from 0 to 1024 [ 163.754560][ T8969] EXT4-fs: Ignoring removed orlov option [ 163.760319][ T8969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.905177][ T8969] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 164.070772][ T30] audit: type=1326 audit(1742461626.618:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 164.094325][ T30] audit: type=1326 audit(1742461626.618:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 164.117828][ T30] audit: type=1326 audit(1742461626.618:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 164.141306][ T30] audit: type=1326 audit(1742461626.618:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14ed169 code=0x7ffc0000 [ 164.185952][ T8973] bond1: entered promiscuous mode [ 164.191828][ T8973] bond1: entered allmulticast mode [ 164.198506][ T8973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.388107][ T8987] loop0: detected capacity change from 0 to 1024 [ 164.395286][ T8987] EXT4-fs: Ignoring removed orlov option [ 164.400996][ T8987] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.417911][ T8988] __nla_validate_parse: 1 callbacks suppressed [ 164.417926][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1838'. [ 164.601759][ T8973] bond1 (unregistering): Released all slaves [ 164.615665][ T8987] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 164.670435][ T8984] lo speed is unknown, defaulting to 1000 [ 164.695040][ T8989] netlink: 'syz.3.1838': attribute type 7 has an invalid length. [ 164.735065][ T8993] loop1: detected capacity change from 0 to 512 [ 164.742693][ T8993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.773922][ T8993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.786957][ T8993] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.873813][ T9002] bond0: entered promiscuous mode [ 164.879601][ T9002] bond0: entered allmulticast mode [ 164.886732][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.888550][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.955475][ T9002] bond0 (unregistering): Released all slaves [ 165.062326][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1844'. [ 165.116163][ T9017] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.174780][ T9017] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.211456][ T9017] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.299734][ T9017] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.407928][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 165.423155][ T9017] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.435198][ T9017] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.455517][ T9017] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.488137][ T9017] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.501496][ T9032] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 165.567574][ T9032] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 165.598351][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 165.610453][ T9035] netlink: 'syz.1.1851': attribute type 7 has an invalid length. [ 165.633816][ T9032] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 165.694181][ T9032] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 165.780641][ T9032] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 165.794128][ T9032] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 165.806785][ T9032] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 165.821877][ T9032] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 166.082817][ T9049] lo speed is unknown, defaulting to 1000 [ 166.140649][ T9049] loop1: detected capacity change from 0 to 1024 [ 166.147584][ T9049] EXT4-fs: Ignoring removed orlov option [ 166.153761][ T9049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.230073][ T9049] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 166.934376][ T8919] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.946928][ T8919] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.960284][ T8919] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.973625][ T8919] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.007657][ T9105] loop2: detected capacity change from 0 to 256 [ 167.227990][ T9120] FAULT_INJECTION: forcing a failure. [ 167.227990][ T9120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.241145][ T9120] CPU: 1 UID: 0 PID: 9120 Comm: syz.2.1880 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 167.241173][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.241185][ T9120] Call Trace: [ 167.241192][ T9120] [ 167.241199][ T9120] dump_stack_lvl+0xf2/0x150 [ 167.241367][ T9120] dump_stack+0x15/0x1a [ 167.241386][ T9120] should_fail_ex+0x24a/0x260 [ 167.241414][ T9120] should_fail+0xb/0x10 [ 167.241492][ T9120] should_fail_usercopy+0x1a/0x20 [ 167.241521][ T9120] _copy_from_user+0x1c/0xa0 [ 167.241647][ T9120] memdup_sockptr_noprof+0x86/0x110 [ 167.241666][ T9120] ipv6_set_mcast_msfilter+0x8c/0x160 [ 167.241698][ T9120] do_ipv6_setsockopt+0x1138/0x2250 [ 167.241801][ T9120] ? kstrtouint+0x77/0xc0 [ 167.241823][ T9120] ? avc_has_perm_noaudit+0x1cc/0x210 [ 167.241842][ T9120] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 167.241931][ T9120] ipv6_setsockopt+0x57/0x130 [ 167.241959][ T9120] tcp_setsockopt+0x93/0xb0 [ 167.241986][ T9120] sock_common_setsockopt+0x64/0x80 [ 167.242085][ T9120] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 167.242115][ T9120] __sys_setsockopt+0x187/0x200 [ 167.242137][ T9120] __x64_sys_setsockopt+0x66/0x80 [ 167.242236][ T9120] x64_sys_call+0x282e/0x2dc0 [ 167.242261][ T9120] do_syscall_64+0xc9/0x1c0 [ 167.242298][ T9120] ? clear_bhb_loop+0x55/0xb0 [ 167.242331][ T9120] ? clear_bhb_loop+0x55/0xb0 [ 167.242419][ T9120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.242443][ T9120] RIP: 0033:0x7ff6eea2d169 [ 167.242511][ T9120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.242527][ T9120] RSP: 002b:00007ff6ed097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 167.242542][ T9120] RAX: ffffffffffffffda RBX: 00007ff6eec45fa0 RCX: 00007ff6eea2d169 [ 167.242553][ T9120] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000003 [ 167.242563][ T9120] RBP: 00007ff6ed097090 R08: 0000000000000090 R09: 0000000000000000 [ 167.242633][ T9120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.242660][ T9120] R13: 0000000000000000 R14: 00007ff6eec45fa0 R15: 00007ffcf3b44658 [ 167.242676][ T9120] [ 167.579660][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 167.594147][ T9129] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.645574][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 167.659345][ T9129] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.685521][ T9131] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 167.713430][ T9129] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.756073][ T9131] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 167.780836][ T9129] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.817401][ T9131] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 167.906657][ T9131] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 167.915564][ T9111] dccp_close: ABORT with 132 bytes unread [ 168.009870][ T9131] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.032338][ T9131] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.054218][ T9131] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.077585][ T9131] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.392539][ T9142] lo speed is unknown, defaulting to 1000 [ 168.436985][ T9142] loop0: detected capacity change from 0 to 1024 [ 168.443915][ T9142] EXT4-fs: Ignoring removed orlov option [ 168.449771][ T9142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.460911][ T9142] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 168.478038][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 168.600943][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 168.600962][ T30] audit: type=1326 audit(1742461631.248:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 168.630607][ T30] audit: type=1326 audit(1742461631.248:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 168.657881][ T30] audit: type=1326 audit(1742461631.248:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 168.681465][ T30] audit: type=1326 audit(1742461631.248:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 168.704996][ T30] audit: type=1326 audit(1742461631.248:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 168.728586][ T30] audit: type=1326 audit(1742461631.298:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 168.752080][ T30] audit: type=1326 audit(1742461631.298:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 168.775497][ T30] audit: type=1326 audit(1742461631.298:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 168.799004][ T30] audit: type=1326 audit(1742461631.298:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 168.822415][ T30] audit: type=1326 audit(1742461631.298:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1434c0d169 code=0x7ffc0000 [ 168.880790][ T9162] loop1: detected capacity change from 0 to 512 [ 168.888981][ T9162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.960635][ T9166] loop4: detected capacity change from 0 to 1024 [ 168.967389][ T9166] EXT4-fs: Ignoring removed orlov option [ 168.973168][ T9166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.990389][ T9166] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 169.250471][ T9173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.282441][ T9162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.302105][ T9162] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.331716][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.413104][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 169.446453][ T9183] loop1: detected capacity change from 0 to 164 [ 169.453283][ T9180] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 169.484370][ T9183] syz.1.1898: attempt to access beyond end of device [ 169.484370][ T9183] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 169.501157][ T9183] syz.1.1898: attempt to access beyond end of device [ 169.501157][ T9183] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 169.523643][ T9183] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 169.585685][ T9190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1899'. [ 169.604385][ T9186] bond1: entered promiscuous mode [ 169.610139][ T9186] bond1: entered allmulticast mode [ 169.616892][ T9186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.655523][ T9186] bond1 (unregistering): Released all slaves [ 169.682216][ T9180] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 169.698780][ T9191] lo speed is unknown, defaulting to 1000 [ 169.757991][ T9180] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 169.803194][ T9200] loop0: detected capacity change from 0 to 164 [ 169.845084][ T9180] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 169.882084][ T9203] syz.0.1903: attempt to access beyond end of device [ 169.882084][ T9203] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 169.896266][ T9203] syz.0.1903: attempt to access beyond end of device [ 169.896266][ T9203] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 169.946778][ T9180] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.974321][ T9180] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 170.033290][ T9180] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 170.094567][ T9180] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 170.271458][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 170.281261][ T9214] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 170.340359][ T9214] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 170.400297][ T9214] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 170.460537][ T9214] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 170.564660][ T9221] loop1: detected capacity change from 0 to 512 [ 170.571779][ T9221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.591002][ T9221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.603620][ T9221] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.636558][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.696338][ T9232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.703620][ T9232] IPv6: NLM_F_CREATE should be set when creating new route [ 171.153492][ T9214] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 171.165085][ T9214] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 171.176713][ T9214] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 171.189545][ T9214] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 171.214945][ T9129] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.226727][ T9129] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.238380][ T9129] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.250069][ T9129] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.326718][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'. [ 171.343841][ T9241] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 171.401163][ T9242] lo speed is unknown, defaulting to 1000 [ 171.443949][ T9256] loop4: detected capacity change from 0 to 1024 [ 171.450781][ T9256] EXT4-fs: Ignoring removed orlov option [ 171.456552][ T9256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.462537][ T9241] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 171.484847][ T9256] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 171.524588][ T9254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1920'. [ 171.587699][ T9241] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 171.693675][ T9271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9271 comm=syz.2.1924 [ 171.714498][ T9241] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 171.797533][ T9278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.137465][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1928'. [ 172.149662][ T9281] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.200515][ T9281] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.250623][ T9281] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.292400][ T9283] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1929'. [ 172.311131][ T9281] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.376484][ T9289] siw: device registration error -23 [ 172.384728][ T9281] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.396209][ T9294] loop2: detected capacity change from 0 to 512 [ 172.410715][ T9294] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.431033][ T9296] loop1: detected capacity change from 0 to 164 [ 172.431408][ T9298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9298 comm=syz.0.1935 [ 172.443267][ T9281] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.460640][ T9296] syz.1.1934: attempt to access beyond end of device [ 172.460640][ T9296] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 172.464539][ T9281] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.488529][ T9281] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.497579][ T9296] syz.1.1934: attempt to access beyond end of device [ 172.497579][ T9296] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 172.497915][ T9294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.523659][ T9294] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.542016][ T9296] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 172.640569][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.661744][ T9241] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.678493][ T9310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.783990][ T9241] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.798175][ T9315] lo speed is unknown, defaulting to 1000 [ 172.960607][ T9241] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 173.058779][ T9241] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 173.126011][ T9329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9329 comm=syz.3.1946 [ 173.210796][ T9338] loop3: detected capacity change from 0 to 512 [ 173.219111][ T9338] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.242573][ T9338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.263275][ T9338] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.298232][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.352593][ T9354] siw: device registration error -23 [ 173.540644][ T9373] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1960'. [ 173.593173][ T9384] loop3: detected capacity change from 0 to 512 [ 173.611546][ T9384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.631592][ T9384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.646005][ T9386] siw: device registration error -23 [ 173.679527][ T9384] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.776700][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.811478][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 173.811573][ T30] audit: type=1326 audit(1742461636.448:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 173.841357][ T30] audit: type=1326 audit(1742461636.448:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 173.841656][ T30] audit: type=1326 audit(1742461636.458:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 173.841734][ T30] audit: type=1326 audit(1742461636.458:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 173.841769][ T30] audit: type=1326 audit(1742461636.458:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 173.854252][ T30] audit: type=1326 audit(1742461636.488:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 173.922092][ T9400] siw: device registration error -23 [ 173.935584][ T30] audit: type=1326 audit(1742461636.488:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 173.987863][ T30] audit: type=1326 audit(1742461636.488:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 173.989902][ T30] audit: type=1326 audit(1742461636.628:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 173.989944][ T30] audit: type=1326 audit(1742461636.628:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 174.261628][ T9410] lo speed is unknown, defaulting to 1000 [ 174.307707][ T9410] loop2: detected capacity change from 0 to 1024 [ 174.314458][ T9410] EXT4-fs: Ignoring removed orlov option [ 174.320270][ T9410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.401107][ T9410] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 174.560093][ T9420] FAULT_INJECTION: forcing a failure. [ 174.560093][ T9420] name failslab, interval 1, probability 0, space 0, times 0 [ 174.572856][ T9420] CPU: 1 UID: 0 PID: 9420 Comm: syz.4.1971 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 174.572881][ T9420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.572893][ T9420] Call Trace: [ 174.572900][ T9420] [ 174.572907][ T9420] dump_stack_lvl+0xf2/0x150 [ 174.572948][ T9420] dump_stack+0x15/0x1a [ 174.572974][ T9420] should_fail_ex+0x24a/0x260 [ 174.573084][ T9420] should_failslab+0x8f/0xb0 [ 174.573114][ T9420] kmem_cache_alloc_noprof+0x52/0x320 [ 174.573139][ T9420] ? audit_log_start+0x34c/0x6b0 [ 174.573180][ T9420] audit_log_start+0x34c/0x6b0 [ 174.573246][ T9420] audit_seccomp+0x4b/0x130 [ 174.573284][ T9420] __seccomp_filter+0x6fa/0x1180 [ 174.573315][ T9420] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 174.573423][ T9420] ? vfs_write+0x644/0x920 [ 174.573455][ T9420] __secure_computing+0x9f/0x1c0 [ 174.573531][ T9420] syscall_trace_enter+0xd1/0x1f0 [ 174.573554][ T9420] ? fpregs_assert_state_consistent+0x83/0xa0 [ 174.573576][ T9420] do_syscall_64+0xaa/0x1c0 [ 174.573615][ T9420] ? clear_bhb_loop+0x55/0xb0 [ 174.573647][ T9420] ? clear_bhb_loop+0x55/0xb0 [ 174.573748][ T9420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.573788][ T9420] RIP: 0033:0x7f1434c0d169 [ 174.573808][ T9420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.573828][ T9420] RSP: 002b:00007f1433277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 174.573893][ T9420] RAX: ffffffffffffffda RBX: 00007f1434e25fa0 RCX: 00007f1434c0d169 [ 174.573905][ T9420] RDX: 0000060000000000 RSI: 000000000000000d RDI: 000000000000000a [ 174.573920][ T9420] RBP: 00007f1433277090 R08: 0000000000000000 R09: 0000000000000000 [ 174.573932][ T9420] R10: 1000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.573944][ T9420] R13: 0000000000000000 R14: 00007f1434e25fa0 R15: 00007ffd793dabc8 [ 174.573961][ T9420] [ 174.803383][ T9422] siw: device registration error -23 [ 175.058827][ T9430] lo speed is unknown, defaulting to 1000 [ 175.092085][ T9430] loop2: detected capacity change from 0 to 1024 [ 175.098897][ T9430] EXT4-fs: Ignoring removed orlov option [ 175.104585][ T9430] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.083782][ T9436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.801495][ T9433] lo speed is unknown, defaulting to 1000 [ 176.849096][ T9433] loop3: detected capacity change from 0 to 1024 [ 176.855997][ T9433] EXT4-fs: Ignoring removed orlov option [ 176.861830][ T9433] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.887095][ T9430] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 176.903312][ T9433] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 177.188247][ T9457] loop3: detected capacity change from 0 to 164 [ 177.237298][ T9457] syz.3.1985: attempt to access beyond end of device [ 177.237298][ T9457] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 177.257672][ T9462] SELinux: ebitmap: truncated map [ 177.275899][ T9462] SELinux: failed to load policy [ 177.281661][ T9457] syz.3.1985: attempt to access beyond end of device [ 177.281661][ T9457] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 177.296861][ T9459] loop2: detected capacity change from 0 to 512 [ 177.312591][ T9457] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 177.321998][ T9459] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 177.342368][ T9459] EXT4-fs (loop2): 1 truncate cleaned up [ 177.351799][ T9470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1988'. [ 177.356294][ T9459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.387882][ T9459] FAULT_INJECTION: forcing a failure. [ 177.387882][ T9459] name failslab, interval 1, probability 0, space 0, times 0 [ 177.402416][ T9459] CPU: 0 UID: 0 PID: 9459 Comm: syz.2.1984 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 177.402512][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.402527][ T9459] Call Trace: [ 177.402535][ T9459] [ 177.402543][ T9459] dump_stack_lvl+0xf2/0x150 [ 177.402578][ T9459] dump_stack+0x15/0x1a [ 177.402655][ T9459] should_fail_ex+0x24a/0x260 [ 177.402691][ T9459] ? alloc_pipe_info+0xb0/0x360 [ 177.402729][ T9459] should_failslab+0x8f/0xb0 [ 177.402831][ T9459] __kmalloc_cache_noprof+0x4e/0x320 [ 177.402861][ T9459] ? save_fpregs_to_fpstate+0x102/0x160 [ 177.402905][ T9459] alloc_pipe_info+0xb0/0x360 [ 177.402944][ T9459] splice_direct_to_actor+0x60f/0x670 [ 177.402971][ T9459] ? __schedule+0x75b/0x990 [ 177.402992][ T9459] ? __pfx_direct_splice_actor+0x10/0x10 [ 177.403024][ T9459] ? avc_policy_seqno+0x15/0x20 [ 177.403047][ T9459] ? selinux_file_permission+0x22a/0x360 [ 177.403153][ T9459] do_splice_direct+0xd7/0x150 [ 177.403185][ T9459] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 177.403220][ T9459] do_sendfile+0x398/0x660 [ 177.403257][ T9459] __x64_sys_sendfile64+0x110/0x150 [ 177.403302][ T9459] x64_sys_call+0xfbd/0x2dc0 [ 177.403335][ T9459] do_syscall_64+0xc9/0x1c0 [ 177.403472][ T9459] ? clear_bhb_loop+0x55/0xb0 [ 177.403503][ T9459] ? clear_bhb_loop+0x55/0xb0 [ 177.403538][ T9459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.403571][ T9459] RIP: 0033:0x7ff6eea2d169 [ 177.403597][ T9459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.403617][ T9459] RSP: 002b:00007ff6ed097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 177.403635][ T9459] RAX: ffffffffffffffda RBX: 00007ff6eec45fa0 RCX: 00007ff6eea2d169 [ 177.403647][ T9459] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000000000000d [ 177.403661][ T9459] RBP: 00007ff6ed097090 R08: 0000000000000000 R09: 0000000000000000 [ 177.403730][ T9459] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 177.403744][ T9459] R13: 0000000000000000 R14: 00007ff6eec45fa0 R15: 00007ffcf3b44658 [ 177.403766][ T9459] [ 177.644963][ T9478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1989'. [ 177.655588][ T9475] bond1: entered promiscuous mode [ 177.660732][ T9475] bond1: entered allmulticast mode [ 177.666091][ T9475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.693205][ T9475] bond1 (unregistering): Released all slaves [ 177.703137][ T9483] loop1: detected capacity change from 0 to 128 [ 177.715034][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.758476][ T9483] wireguard0: entered promiscuous mode [ 177.764083][ T9483] wireguard0: entered allmulticast mode [ 177.908529][ T9502] syz.1.1991: attempt to access beyond end of device [ 177.908529][ T9502] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 177.983016][ T9504] lo speed is unknown, defaulting to 1000 [ 178.040672][ T9504] loop3: detected capacity change from 0 to 1024 [ 178.047488][ T9504] EXT4-fs: Ignoring removed orlov option [ 178.053369][ T9504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.069282][ T9504] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 178.229140][ T9510] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2000'. [ 178.246004][ T9502] syz.1.1991: attempt to access beyond end of device [ 178.246004][ T9502] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 178.291011][ T9512] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2001'. [ 178.336671][ T9502] syz.1.1991: attempt to access beyond end of device [ 178.336671][ T9502] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 178.356075][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2002'. [ 178.397672][ T9502] syz.1.1991: attempt to access beyond end of device [ 178.397672][ T9502] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 178.511207][ T9502] syz.1.1991: attempt to access beyond end of device [ 178.511207][ T9502] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 178.531157][ T9502] syz.1.1991: attempt to access beyond end of device [ 178.531157][ T9502] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 178.545028][ T9502] syz.1.1991: attempt to access beyond end of device [ 178.545028][ T9502] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 178.558609][ T9502] syz.1.1991: attempt to access beyond end of device [ 178.558609][ T9502] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 178.572552][ T9526] loop4: detected capacity change from 0 to 512 [ 178.591837][ T9526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.623472][ T9526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.648987][ T9526] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.660593][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'. [ 178.678217][ T9528] netlink: 'syz.1.2006': attribute type 7 has an invalid length. [ 178.763450][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.794107][ T9543] loop3: detected capacity change from 0 to 512 [ 178.811683][ T9543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.857759][ T9551] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2013'. [ 178.868273][ T9543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.881460][ T9543] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.912798][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.953967][ T30] kauditd_printk_skb: 163 callbacks suppressed [ 178.954102][ T30] audit: type=1326 audit(1742461641.598:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 178.973839][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2014'. [ 178.983880][ T30] audit: type=1326 audit(1742461641.598:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 178.992980][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2014'. [ 179.031810][ T30] audit: type=1326 audit(1742461641.598:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 179.055388][ T30] audit: type=1326 audit(1742461641.598:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 179.078995][ T30] audit: type=1326 audit(1742461641.598:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 179.102547][ T30] audit: type=1326 audit(1742461641.668:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 179.126123][ T30] audit: type=1326 audit(1742461641.668:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 179.149649][ T30] audit: type=1326 audit(1742461641.668:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 179.173163][ T30] audit: type=1326 audit(1742461641.668:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 179.196644][ T30] audit: type=1326 audit(1742461641.668:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.2.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eea2d169 code=0x7ffc0000 [ 179.205863][ T9555] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 179.227828][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2014'. [ 179.251219][ T9555] loop1: detected capacity change from 0 to 2048 [ 179.259487][ T9565] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 179.266836][ T9565] vhci_hcd: invalid port number 186 [ 179.272119][ T9565] vhci_hcd: default hub control req: 4014 v0008 i00ba l0 [ 179.290492][ T9555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.308269][ T9555] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2014: bg 0: block 234: padding at end of block bitmap is not set [ 179.324628][ T9555] EXT4-fs (loop1): Remounting filesystem read-only [ 179.419566][ T9572] lo speed is unknown, defaulting to 1000 [ 179.532319][ T9572] loop2: detected capacity change from 0 to 1024 [ 179.539357][ T9572] EXT4-fs: Ignoring removed orlov option [ 179.545054][ T9572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.598535][ T9572] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 179.740686][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.781258][ T9580] loop0: detected capacity change from 0 to 512 [ 179.792245][ T9580] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 179.820720][ T9580] EXT4-fs (loop0): 1 truncate cleaned up [ 179.826931][ T9580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.995266][ T9585] lo speed is unknown, defaulting to 1000 [ 180.055846][ T9585] loop4: detected capacity change from 0 to 1024 [ 180.062730][ T9585] EXT4-fs: Ignoring removed orlov option [ 180.068403][ T9585] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.307010][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.526644][ T9590] lo speed is unknown, defaulting to 1000 [ 180.611742][ T9585] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 180.705516][ T9598] loop3: detected capacity change from 0 to 512 [ 180.797514][ T9598] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.837343][ T9600] loop2: detected capacity change from 0 to 164 [ 180.851482][ T9598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.869042][ T9598] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.883055][ T9600] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 180.958091][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.062436][ T9618] loop3: detected capacity change from 0 to 164 [ 181.128446][ T9611] bond1: entered promiscuous mode [ 181.136738][ T9611] bond1: entered allmulticast mode [ 181.141081][ T9618] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 181.147913][ T9611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.346001][ T9627] loop4: detected capacity change from 0 to 1024 [ 181.352819][ T9627] EXT4-fs: Ignoring removed orlov option [ 181.358496][ T9627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.371667][ T9628] loop1: detected capacity change from 0 to 1024 [ 181.378325][ T9628] EXT4-fs: Ignoring removed orlov option [ 181.384032][ T9628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.416330][ T9611] bond1 (unregistering): Released all slaves [ 181.429425][ T9630] loop3: detected capacity change from 0 to 512 [ 181.436970][ T9630] EXT4-fs: test_dummy_encryption option not supported [ 181.453044][ T9628] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 181.460992][ T9627] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 181.564433][ T9625] lo speed is unknown, defaulting to 1000 [ 181.682761][ T9647] loop2: detected capacity change from 0 to 512 [ 181.693769][ T9647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.721600][ T9649] loop0: detected capacity change from 0 to 164 [ 181.731178][ T9649] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 181.739577][ T9647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.756949][ T9647] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.787166][ T9653] sd 0:0:1:0: device reset [ 181.794760][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.920445][ T9666] loop2: detected capacity change from 0 to 512 [ 181.941877][ T9666] EXT4-fs (loop2): failed to initialize system zone (-117) [ 181.964327][ T9666] EXT4-fs (loop2): mount failed [ 182.937833][ T9720] FAULT_INJECTION: forcing a failure. [ 182.937833][ T9720] name failslab, interval 1, probability 0, space 0, times 0 [ 182.950604][ T9720] CPU: 1 UID: 0 PID: 9720 Comm: syz.2.2064 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 182.950681][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.950696][ T9720] Call Trace: [ 182.950704][ T9720] [ 182.950714][ T9720] dump_stack_lvl+0xf2/0x150 [ 182.950754][ T9720] dump_stack+0x15/0x1a [ 182.950778][ T9720] should_fail_ex+0x24a/0x260 [ 182.950815][ T9720] should_failslab+0x8f/0xb0 [ 182.950968][ T9720] kmem_cache_alloc_noprof+0x52/0x320 [ 182.950996][ T9720] ? getname_flags+0x81/0x3b0 [ 182.951034][ T9720] getname_flags+0x81/0x3b0 [ 182.951091][ T9720] getname+0x17/0x20 [ 182.951129][ T9720] __se_sys_quotactl+0x15b/0x660 [ 182.951154][ T9720] __x64_sys_quotactl+0x55/0x70 [ 182.951176][ T9720] x64_sys_call+0x826/0x2dc0 [ 182.951236][ T9720] do_syscall_64+0xc9/0x1c0 [ 182.951274][ T9720] ? clear_bhb_loop+0x55/0xb0 [ 182.951300][ T9720] ? clear_bhb_loop+0x55/0xb0 [ 182.951382][ T9720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.951415][ T9720] RIP: 0033:0x7ff6eea2d169 [ 182.951435][ T9720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.951453][ T9720] RSP: 002b:00007ff6ed097038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 182.951494][ T9720] RAX: ffffffffffffffda RBX: 00007ff6eec45fa0 RCX: 00007ff6eea2d169 [ 182.951510][ T9720] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: ffffffff80000900 [ 182.951538][ T9720] RBP: 00007ff6ed097090 R08: 0000000000000000 R09: 0000000000000000 [ 182.951553][ T9720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.951568][ T9720] R13: 0000000000000000 R14: 00007ff6eec45fa0 R15: 00007ffcf3b44658 [ 182.951589][ T9720] [ 183.205944][ T9713] loop1: detected capacity change from 0 to 8192 [ 183.243567][ T9720] loop2: detected capacity change from 0 to 8192 [ 183.279296][ T9713] loop1: p2 p3 p4 [ 183.283253][ T9713] loop1: p2 size 64053 extends beyond EOD, truncated [ 183.299079][ T9720] loop2: p2 p3 p4 [ 183.302962][ T9713] loop1: p3 start 65280 is beyond EOD, truncated [ 183.309348][ T9713] loop1: p4 size 50331904 extends beyond EOD, truncated [ 183.317352][ T9720] loop2: p2 size 64053 extends beyond EOD, truncated [ 183.325740][ T9720] loop2: p3 start 65280 is beyond EOD, truncated [ 183.332208][ T9720] loop2: p4 size 50331904 extends beyond EOD, truncated [ 183.375467][ T2999] loop1: p2 p3 p4 [ 183.379409][ T2999] loop1: p2 size 64053 extends beyond EOD, truncated [ 183.500778][ T2999] loop1: p3 start 65280 is beyond EOD, truncated [ 183.507184][ T2999] loop1: p4 size 50331904 extends beyond EOD, truncated [ 183.526783][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 183.551000][ T3481] udevd[3481]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 183.551063][ T8555] udevd[8555]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 183.551142][ T3481] ================================================================== [ 183.551182][ T3481] BUG: KCSAN: data-race in data_push_tail / string [ 183.551222][ T3481] [ 183.551232][ T3481] write to 0xffffffff88c0cb30 of 1 bytes by task 8555 on cpu 0: [ 183.551254][ T3481] string+0x17f/0x210 [ 183.551283][ T3481] vsnprintf+0x537/0x890 [ 183.551306][ T3481] vscnprintf+0x42/0x90 [ 183.551334][ T3481] printk_sprint+0x30/0x2d0 [ 183.551357][ T3481] vprintk_store+0x589/0x870 [ 183.551380][ T3481] vprintk_emit+0x168/0x690 [ 183.551404][ T3481] devkmsg_emit+0x82/0xb0 [ 183.551436][ T3481] devkmsg_write+0x242/0x290 [ 183.551468][ T3481] do_iter_readv_writev+0x403/0x4b0 [ 183.551497][ T3481] vfs_writev+0x2d9/0x880 [ 183.551518][ T3481] do_writev+0xf4/0x220 [ 183.551541][ T3481] __x64_sys_writev+0x45/0x50 [ 183.551575][ T3481] x64_sys_call+0x1fab/0x2dc0 [ 183.551602][ T3481] do_syscall_64+0xc9/0x1c0 [ 183.551637][ T3481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.551671][ T3481] [ 183.551680][ T3481] read to 0xffffffff88c0cb30 of 8 bytes by task 3481 on cpu 1: [ 183.551702][ T3481] data_push_tail+0x102/0x430 [ 183.551740][ T3481] data_alloc+0xbe/0x2c0 [ 183.551777][ T3481] prb_reserve+0x85e/0xb60 [ 183.551824][ T3481] vprintk_store+0x558/0x870 [ 183.551848][ T3481] vprintk_emit+0x168/0x690 [ 183.551872][ T3481] devkmsg_emit+0x82/0xb0 [ 183.551905][ T3481] devkmsg_write+0x242/0x290 [ 183.551941][ T3481] do_iter_readv_writev+0x403/0x4b0 [ 183.551970][ T3481] vfs_writev+0x2d9/0x880 [ 183.551992][ T3481] do_writev+0xf4/0x220 [ 183.552015][ T3481] __x64_sys_writev+0x45/0x50 [ 183.552052][ T3481] x64_sys_call+0x1fab/0x2dc0 [ 183.552086][ T3481] do_syscall_64+0xc9/0x1c0 [ 183.552126][ T3481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.552161][ T3481] [ 183.552169][ T3481] value changed: 0x00000000ffffec90 -> 0x00000a79726f7463 [ 183.552186][ T3481] [ 183.552193][ T3481] Reported by Kernel Concurrency Sanitizer on: [ 183.552205][ T3481] CPU: 1 UID: 0 PID: 3481 Comm: udevd Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 183.552236][ T3481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.552253][ T3481] ================================================================== [ 183.555946][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 183.566252][ T4089] udevd[4089]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 183.578066][ T8555] udevd[8555]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 183.650263][ T9735] loop3: detected capacity change from 0 to 1024 [ 183.824043][ T9735] EXT4-fs: Ignoring removed orlov option [ 183.829837][ T9735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.840031][ T9735] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal