last executing test programs: 4m16.717904564s ago: executing program 4 (id=2926): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x124, r1) 4m16.674979594s ago: executing program 4 (id=2928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xffffffff, 0x9752333b9a87418, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) 4m16.566065256s ago: executing program 4 (id=2931): unshare(0x24020800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xba141, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0xe}, 0x400, 0xffffffff, 0x6, 0x5, 0x0, 0x40000001, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) close(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) 4m16.523883006s ago: executing program 4 (id=2933): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@quota}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x4207, r1) getdents64(r0, 0xfffffffffffffffe, 0x29) 4m16.354075649s ago: executing program 4 (id=2934): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x89, 0x10, "0990ec742f779f8fcaa6a306fc78"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r9, r8, 0x0, 0x6) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 4m16.106092313s ago: executing program 4 (id=2938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x124, r1) 4m16.105955223s ago: executing program 32 (id=2938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x124, r1) 2.168467368s ago: executing program 3 (id=10074): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4100c0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000540)=[{0x200000000006, 0x6, 0x0, 0x7ffc2001}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) close(0x3) syz_open_dev$usbmon(&(0x7f00000002c0), 0x0, 0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) io_setup(0x8, &(0x7f0000004200)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sync() sync() syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000140)={[{@delalloc}, {@data_err_abort}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10001}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@orlov}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000840)="$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") clock_getres(0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.162699013s ago: executing program 3 (id=10102): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"4a28673c89d1ca7c756f40e9c2857ed6", 0x0, 0x0, {0xfffffffffffffffd, 0x3}, {0x3}, 0x81, [0x3, 0x8, 0x7, 0x8, 0x6cfc, 0x7, 0x800, 0xf2c, 0xf, 0x9, 0x560, 0xffffffffffff96d9, 0x2, 0x1, 0x87d, 0x7]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000001e00)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001e80)={0x0, 0x40}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) epoll_create(0x0) lstat(0x0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x1d966054de0bd61c, r0, &(0x7f0000002000)={0x7a, 0x100000000, 0x7, 0x9, 0x200, 0x4, 0x3, 0x80000000, 0xcd2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={0x0}}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000002300)='%$V::o%\xc0+&^^-{\\\x19/$\x00') syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x2, &(0x7f00000025c0)={0x0, 0x7, 0x0, @thr={&(0x7f0000002400)="2cd1d3ff9889fb9c9789c0ff90060580f6807f125ea78f75dd0253da0f3dd25c529e62b52c4601ce2a29a59321c15192281c5dd6791545a92aa459f1290a7afaa7b7c3d264880c09ca5b459e", &(0x7f00000024c0)="0f3d25ee543bb6f70bbc7283d621e165772b5fcbfe7a72d09b35527901c1db13f8a9ac4e70da66b28865beec0328cfd7a5389eafbc0fadff0bb9fcd4c31df25f7cffd427a20e747ee0b13c7ab75df64bebf6ffb69c17aeb888f83dc92df5027fc062d6dd1df1749b2b4d81fb35772cdb6f39caec1f45c705b6686df93cc228471759c8a703062c543d0c22114c1ed7be2a1c37c99172d896a00a0620ecc924d3ab1564fe45537a730dfcfca6d49339fb93c14897ac3260c232c6138fdea28b7186e2375dd9622704f44a73c6f1d6d19f5634d36baab1d91d65ed753ac1e790d1933c98567b5fdcbd3d"}}, &(0x7f0000002600)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002640)={[0x7]}, 0x8, 0x1000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002880)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0x1, 0x11, &(0x7f0000002680)=@raw=[@ldst={0x0, 0x3, 0x2, 0x0, 0x7, 0x1, 0x8}, @ldst={0x0, 0x2, 0x3, 0x7, 0x9, 0xfffffffffffffff8, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x1, 0x2, 0x0, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x10, 0x0, 0x7, 0x1ff, 0x61ee}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000002780)='GPL\x00', 0x5, 0x4a, &(0x7f00000027c0)=""/74, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002840)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000002940)=[{0x2, 0x4, 0xc, 0x7}, {0x0, 0x3, 0x2, 0x2}, {0x3, 0x3, 0x1}], 0x10, 0x81, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000002a40)={r1}) 1.108134794s ago: executing program 3 (id=10103): io_uring_setup(0x4896, &(0x7f00000004c0)={0x0, 0xbcd7, 0x2, 0x0, 0x249}) memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYBLOB="000004000000000018003480140035"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@deltaction={0x64, 0x18, 0x20, 0x70bd2d, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x64}}, 0x20004000) connect$llc(0xffffffffffffffff, 0x0, 0x0) r3 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b4}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xf00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) 967.382386ms ago: executing program 5 (id=10106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getpriority(0x0, 0xffffffffffffffff) 890.098307ms ago: executing program 5 (id=10108): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000580)=0x281) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r2 = syz_open_pts(r1, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x9020}], 0x1, 0x0, 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) 876.561298ms ago: executing program 3 (id=10110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 847.482578ms ago: executing program 3 (id=10113): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"4a28673c89d1ca7c756f40e9c2857ed6", 0x0, 0x0, {0xfffffffffffffffd, 0x3}, {0x3}, 0x81, [0x3, 0x8, 0x7, 0x8, 0x6cfc, 0x7, 0x800, 0xf2c, 0xf, 0x9, 0x560, 0xffffffffffff96d9, 0x2, 0x1, 0x87d, 0x7]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000001e00)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001e80)={0x0, 0x40}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) epoll_create(0x0) lstat(0x0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x1d966054de0bd61c, r0, &(0x7f0000002000)={0x7a, 0x100000000, 0x7, 0x9, 0x200, 0x4, 0x3, 0x80000000, 0xcd2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={0x0}}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000002300)='%$V::o%\xc0+&^^-{\\\x19/$\x00') syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x2, &(0x7f00000025c0)={0x0, 0x7, 0x0, @thr={&(0x7f0000002400)="2cd1d3ff9889fb9c9789c0ff90060580f6807f125ea78f75dd0253da0f3dd25c529e62b52c4601ce2a29a59321c15192281c5dd6791545a92aa459f1290a7afaa7b7c3d264880c09ca5b459e", &(0x7f00000024c0)="0f3d25ee543bb6f70bbc7283d621e165772b5fcbfe7a72d09b35527901c1db13f8a9ac4e70da66b28865beec0328cfd7a5389eafbc0fadff0bb9fcd4c31df25f7cffd427a20e747ee0b13c7ab75df64bebf6ffb69c17aeb888f83dc92df5027fc062d6dd1df1749b2b4d81fb35772cdb6f39caec1f45c705b6686df93cc228471759c8a703062c543d0c22114c1ed7be2a1c37c99172d896a00a0620ecc924d3ab1564fe45537a730dfcfca6d49339fb93c14897ac3260c232c6138fdea28b7186e2375dd9622704f44a73c6f1d6d19f5634d36baab1d91d65ed753ac1e790d1933c98567b5fdcbd3d"}}, &(0x7f0000002600)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002640)={[0x7]}, 0x8, 0x1000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002880)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0x1, 0x11, &(0x7f0000002680)=@raw=[@ldst={0x0, 0x3, 0x2, 0x0, 0x7, 0x1, 0x8}, @ldst={0x0, 0x2, 0x3, 0x7, 0x9, 0xfffffffffffffff8, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x1, 0x2, 0x0, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x10, 0x0, 0x7, 0x1ff, 0x61ee}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000002780)='GPL\x00', 0x5, 0x4a, &(0x7f00000027c0)=""/74, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002840)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000002940)=[{0x2, 0x4, 0xc, 0x7}, {0x0, 0x3, 0x2, 0x2}, {0x3, 0x3, 0x1}], 0x10, 0x81, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000002a40)={r1}) 825.002648ms ago: executing program 2 (id=10114): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0x80000001}, 0x18) creat(&(0x7f0000000300)='./file0\x00', 0xe5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x80001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x310) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x1e, 0x805, 0x0) pipe2$watch_queue(&(0x7f0000000340), 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xffff, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x40, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0xc0000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x50}, 0x0) 776.233579ms ago: executing program 3 (id=10115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) getsockopt(r4, 0x6, 0x2, 0x0, &(0x7f0000002840)) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1, 0x0, 0x1800}, 0x0) unshare(0x22020400) r5 = syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0xbad9}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup2(r9, r8) 775.364249ms ago: executing program 2 (id=10116): mkdir(&(0x7f00000017c0)='./file0\x00', 0x24) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) rmdir(&(0x7f0000002c80)='./file0\x00') 760.378779ms ago: executing program 2 (id=10118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) getpriority(0x0, 0xffffffffffffffff) 735.721689ms ago: executing program 2 (id=10119): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000012c0)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0xf100156bf4814fbb, 0x700, 0xaf07, 0x3ff, {{0x6, 0x4, 0x2, 0x37, 0x18, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@generic={0x88, 0x2}]}}}}}) stat(&(0x7f0000001300)='./file0/file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001580)={{{@in6=@private2, @in6=@mcast1, 0x4e22, 0xd, 0x4e24, 0x2, 0x2, 0xa0, 0x0, 0x84, r1, r2}, {0x5, 0x6, 0x100000000, 0x1, 0x0, 0x10, 0x8, 0x3}, {0x0, 0x1, 0x1, 0x8}, 0xcc5, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x2b}, 0xa, @in6=@loopback, 0x3506, 0x1, 0x2, 0x42, 0x4, 0x93f9, 0x5}}, 0xe8) 694.90363ms ago: executing program 2 (id=10123): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000740)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0xfd, 0x11, 0x0, @empty, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 669.850731ms ago: executing program 2 (id=10124): r0 = socket$inet(0x2, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80a, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@usrquota}, {@init_itable_val={'init_itable', 0x3d, 0x401}}], [{@euid_eq}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x3, 0x796, &(0x7f0000000c40)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 268.437387ms ago: executing program 1 (id=10134): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, r0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 266.646637ms ago: executing program 0 (id=10136): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "2bc987c68be0b4e2", "d7f37732b111b49134d3a2bc9ac68d33", "8e234831", "335e80fc807be7d0"}, 0x28) write$binfmt_script(r2, &(0x7f0000000780)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000240)) writev(r2, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r1, r2, 0x0) 256.100307ms ago: executing program 1 (id=10137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x63, 0x32, 0x33, 0x63, 0x38, 0x61, 0x33], 0x2d, [0x32, 0x35, 0x62, 0x33], 0x2d, [0x30, 0x34, 0x37, 0x34], 0x2d, [0x63, 0x64, 0x39, 0x31], 0x2d, [0x5e4e5b01718105c5, 0x65, 0x33, 0x64, 0x66, 0x61, 0x35, 0x32]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@audit}, {@subj_role={'subj_role', 0x3d, ']-\\.-+,'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, 'GPL\x00'}}]}, 0x3, 0x42d, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCy78285b3vzrzd9+ZlAuhZw9mfJGJ/RPweEQO1bGOB4drLreXFqb+XF6eSqFTe+iuplru5vDhVFC3et6/I9EWknyVxpEW985evnJ8sl2cu5fmxhQvvj81fvvLc7IXJczPnZi5OnD598sT4C6cmnu9InFlcN4c+mjt6+LV3rr0xdebauz9/mxTxN8XRIcPrHXyyUulwdd11oC6d9HWxIWxKqdZNo7/a/weiFKsnbyBe/bSrjQO2VaVSqTzQ/vBSBfgfS6LbLQC6o/ihz+a/xbZDQ4+7wo2XahOgLO5b+VY70hdpXqa/aX7bScMRcWbpn6+yLbbnPgQAQIPvs/HPs63Gf2nU3xe6N19DGYyI+yLiYESciohDEXF/RLXsgxHx0Cbrb14kWTv+Sa9vKbANysZ/L+ZrW43jv2L0F4OlPHegGn9/cna2PHM8/0xGon93lh9fp44fXvnti3bH6sd/2ZbVX4wF83Zc79vd+J7pyYXJO4m53o1PIob6WsWfrKwEJBFxOCKGtljH7NPfHG137Pbxr6MD60yVryOeqp3/pWiKv5Csvz45dk+UZ46PFVfFWr/8evXNdvXfUfwdkJ3/vS2v/5X4B5P69dr5zddx9Y/P285ptnr970rebtj34eTCwqXxiF3J67VG1++faCo3sVo+i3/kWOv+fzBWP4kjEZFdxA9HxCMR8Wje9sci4vGIOLZO/D+9/MR7W49/e2XxT2/q/K8mdkXzntaJ0vkfv2uodHCT8e8+WX0ZybMb+f7bSLu2djUDAADAf08aEfsjSUdX0mk6Olr7H/5DsTctz80vPHN27oOL07VnBAajPy3udA3U3Q8dz6f1RX6iKX8iv2/8ZWlPNT86NVee7nbw0OP2ten/mT9L3W4dsO08rwW9S/+H3qX/Q+/S/6F3tej/e7rRDmDntfr9/7gL7QB2XlP/t+wHPcT8H3qX/g+9S/+HnjS/J27/kLyExJpEpHdFMyS2KdHtbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDO+DcAAP//csjl5Q==") 251.089137ms ago: executing program 0 (id=10138): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x800, 0x70bd2a, 0x25dfdbfb, {0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x481c) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r10}, 0x18) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r11, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x10) sendmmsg(r11, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}], 0x2, 0x4000) close(r11) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r14, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)}, {&(0x7f0000000300)='b', 0x1}], 0x4, 0x1) 212.730547ms ago: executing program 1 (id=10139): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000bd7000fddbdf251c000000", @ANYRES32=0x0, @ANYBLOB="1000c80608000100ac1414aa"], 0x24}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x80880) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x440, 0x160) r5 = gettid() fcntl$setown(r1, 0x8, r5) clock_gettime(0x0, 0x0) open_by_handle_at(r4, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "2bc987c68be0b4e2", "d7f37732b111b49134d3a2bc9ac68d33", "8e234831", "335e80fc807be7d0"}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), 0x0}, 0x20) write$binfmt_script(r7, &(0x7f0000000780)={'#! ', './file0'}, 0xb) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) writev(r7, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r6, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x63, 0x32, 0x33, 0x63, 0x38, 0x61, 0x33], 0x2d, [0x32, 0x35, 0x62, 0x33], 0x2d, [0x30, 0x34, 0x37, 0x34], 0x2d, [0x63, 0x64, 0x39, 0x31], 0x2d, [0x5e4e5b01718105c5, 0x65, 0x33, 0x64, 0x66, 0x61, 0x35, 0x32]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@audit}, {@subj_role={'subj_role', 0x3d, ']-\\.-+,'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, 'GPL\x00'}}]}, 0x3, 0x42d, &(0x7f0000000940)="$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") write$selinux_validatetrans(r3, 0x0, 0x79) socket$nl_netfilter(0x10, 0x3, 0xc) 178.267118ms ago: executing program 1 (id=10140): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001b00000000000000000000000000000000000000060000"], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000040)=0x8001, 0x8000, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='net/anycast6\x00') fchdir(r3) sendmmsg$unix(r2, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) flistxattr(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 174.296718ms ago: executing program 0 (id=10141): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001b00000000000000000000000000000000000000060000"], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000040)=0x8001, 0x8000, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='net/anycast6\x00') fchdir(r3) sendmmsg$unix(r2, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) flistxattr(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 153.728218ms ago: executing program 1 (id=10142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x1) 148.280218ms ago: executing program 0 (id=10143): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[], 0x0) 131.026669ms ago: executing program 1 (id=10144): io_uring_setup(0x4896, &(0x7f00000004c0)={0x0, 0xbcd7, 0x2, 0x0, 0x249}) memfd_create(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYBLOB="000004000000000018003480140035"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@deltaction={0x64, 0x18, 0x20, 0x70bd2d, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x64}}, 0x20004000) connect$llc(0xffffffffffffffff, 0x0, 0x0) r4 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b4}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xf00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) 128.472359ms ago: executing program 0 (id=10145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1) renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000800) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xfde6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kfree\x00', r10, 0x0, 0x80000001}, 0x18) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095e1817bdec78e54921fecffe755a8850cbcbd88e3d36c61db835e49987a4c3428a515a7fa089ea6cdc2974dcf66c724debe58b653c45d3386b596c20e3d9d9eebd7f736109fb8a96cc3b14a911d38371fe48fdfb583558b020a0e45ba787af907b837fd64f0477d56383d6ab4b356fe8c28e792765046b46ebe8b58ca1f701c45377c4231f996773263ad935b082cea48ef3bef"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 30.06523ms ago: executing program 5 (id=10146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) getpriority(0x0, 0xffffffffffffffff) 29.717741ms ago: executing program 5 (id=10147): socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = open$dir(0x0, 0xc00, 0xc0) mkdirat(r0, 0x0, 0x68) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[], 0x0) 26.07546ms ago: executing program 5 (id=10148): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, r0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 5.577011ms ago: executing program 0 (id=10149): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = gettid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setpgid(r1, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x1008}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x1008}, 0x18) syz_mount_image$iso9660(&(0x7f0000000ac0), &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x2, 0x6a1, &(0x7f0000001bc0)="$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") (async) syz_mount_image$iso9660(&(0x7f0000000ac0), &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x2, 0x6a1, &(0x7f0000001bc0)="$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") r3 = socket$unix(0x1, 0x1, 0x0) eventfd2(0x9bb1, 0x80001) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000100), 0xfffffd79) (async) read$eventfd(r4, &(0x7f0000000100), 0xfffffd79) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x80000001, 0x6100) ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f00000003c0)=""/223) (async) ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f00000003c0)=""/223) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r8, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000002c0)={'ah\x00'}, &(0x7f0000000300)=0x1e) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 5 (id=10150): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) r3 = eventfd(0x80) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40100, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f9, 0x2) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0xd9bf, 0xf, 0x0, 0x2, 0x0}) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r10, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r13 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$selinux_validatetrans(r13, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) r14 = eventfd2(0x86, 0x80001) io_submit(r2, 0x6, &(0x7f00000009c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3ff, r1, &(0x7f0000000400), 0x0, 0x2, 0x0, 0x1, r3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f00000002c0)="8d331a04f4dd97fb96e160e550de9902e9f5aa2c1fdd8f3c4ea0685d96c7efae53caf5c0864a4172de10b0927e82a6d271549fbf884d6d1dcbfa0dedcee852b02cafb1b075f69c9a9d5929562b89c5aae9eff6259833c93f62dbdc8091116cbe6ec83bd666130979c5fbb99d4c6e00c3", 0x70, 0x10000, 0x0, 0x2, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x800, r5, &(0x7f0000000680)="ee7f45b377874c087a773f01adf9de3279009ab8f65e73ea37b794da59dbe785881f068f8bc4678a1958813316119e4cc97cd7724052c87873b3f804216e579e82e62b0ba57763b033a6ccf75e3c823c692ca950248806ece32870962a85ca31b6e85601c9258c1ba387b13506a2f341d35af554f12a133b45c750880893de6780af338ce17aedc57b369067e14b544d4bda840ff2cf65452aa5c4cb7bece6799cd28fece564f2b5f9b5eafb0d9722947002c4f7ae05bbdd72e66dee3f5d1a6562956bbcbf", 0xc5, 0xbb, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0xfff7, r6, &(0x7f00000007c0)="3968ed726f65b97b8fdc92110a4b62e8da867415e822cf002a845f1318a7cd21ec20173c50a45233f1e0d676410cdb0e415f5e08429b09806488efa399a09a178eaeb1c4007af11c82b1ca2d56", 0x4d, 0x6, 0x0, 0x3, r8}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000000880)="8f", 0x1, 0x6, 0x0, 0x1, r9}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f0000000940)="c58722f703fc7e4322d54a00dc1b6ec2f69d4dbe7b7d", 0x16, 0x10001, 0x0, 0x2, r14}]) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32, @ANYBLOB="b4335c838545aba91660db0735e05e932c5429027736a0e54f8a49c1ce4e5baf05d39895aca3a1db2d11727174d54dc5ed7dc8d916bb7ceed86ca5fab7172ee13f876e53a856566aa9cf4d16f941837d01a0dde9872c5f1ed9db3e62bf65db633c6d9efadadf737693e914e8"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) kernel console output (not intermixed with test programs): 8388608 extends beyond EOD, truncated [ 403.344226][T28391] 9pnet_fd: Insufficient options for proto=fd [ 403.370742][T20913] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 403.399774][T28395] veth0_macvtap: entered promiscuous mode [ 403.406613][T28395] team0: Device macvtap0 failed to register rx_handler [ 403.413880][T28395] veth0_macvtap: left promiscuous mode [ 403.445105][T28401] vhci_hcd: invalid port number 15 [ 403.452092][T28401] netlink: 'syz.1.9276': attribute type 1 has an invalid length. [ 403.472572][T28401] bond1 (unregistering): Released all slaves [ 403.485348][T28407] tipc: Enabled bearer , priority 0 [ 403.496093][T28406] tipc: Disabling bearer [ 403.672083][T28422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9285'. [ 403.681239][T28422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9285'. [ 403.719625][T28426] veth0_macvtap: entered promiscuous mode [ 403.726885][T28426] team0: Device macvtap0 failed to register rx_handler [ 403.734433][T28426] veth0_macvtap: left promiscuous mode [ 403.778487][T28433] tipc: Enabled bearer , priority 0 [ 403.791541][T28432] tipc: Disabling bearer [ 403.799163][T28437] vhci_hcd: invalid port number 15 [ 403.805728][T28437] netlink: 'syz.2.9291': attribute type 1 has an invalid length. [ 403.821974][T28437] bond5 (unregistering): Released all slaves [ 403.839825][T28435] loop3: detected capacity change from 0 to 1024 [ 403.846907][T28435] EXT4-fs: Ignoring removed orlov option [ 403.852667][T28435] EXT4-fs: Ignoring removed bh option [ 403.881856][T28435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.901995][T28435] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 403.922444][T28448] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.979948][T28455] netlink: 'syz.1.9294': attribute type 10 has an invalid length. [ 403.987987][T28455] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9294'. [ 404.013505][T28448] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.025751][T28461] veth0_macvtap: entered promiscuous mode [ 404.033215][T28461] team0: Device macvtap0 failed to register rx_handler [ 404.040520][T28461] veth0_macvtap: left promiscuous mode [ 404.075773][T28465] loop5: detected capacity change from 0 to 128 [ 404.103570][T28448] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.186164][T28448] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.250025][T28448] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.262000][T28448] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.273639][T28448] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.284997][T28448] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.317703][T28475] FAULT_INJECTION: forcing a failure. [ 404.317703][T28475] name failslab, interval 1, probability 0, space 0, times 0 [ 404.330493][T28475] CPU: 1 UID: 0 PID: 28475 Comm: syz.1.9305 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 404.330526][T28475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 404.330541][T28475] Call Trace: [ 404.330564][T28475] [ 404.330574][T28475] dump_stack_lvl+0xf6/0x150 [ 404.330603][T28475] dump_stack+0x15/0x1a [ 404.330621][T28475] should_fail_ex+0x261/0x270 [ 404.330647][T28475] should_failslab+0x8f/0xb0 [ 404.330672][T28475] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 404.330712][T28475] ? shmem_alloc_inode+0x34/0x50 [ 404.330746][T28475] shmem_alloc_inode+0x34/0x50 [ 404.330775][T28475] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 404.330807][T28475] alloc_inode+0x40/0x170 [ 404.330828][T28475] new_inode+0x1e/0xe0 [ 404.330865][T28475] shmem_get_inode+0x24e/0x730 [ 404.330900][T28475] __shmem_file_setup+0x127/0x1f0 [ 404.330928][T28475] shmem_file_setup+0x3b/0x50 [ 404.330955][T28475] __se_sys_memfd_create+0x2e1/0x5a0 [ 404.330998][T28475] __x64_sys_memfd_create+0x31/0x40 [ 404.331112][T28475] x64_sys_call+0x1163/0x2e10 [ 404.331139][T28475] do_syscall_64+0xc9/0x1a0 [ 404.331171][T28475] ? clear_bhb_loop+0x25/0x80 [ 404.331192][T28475] ? clear_bhb_loop+0x25/0x80 [ 404.331264][T28475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.331291][T28475] RIP: 0033:0x7f29477de169 [ 404.331308][T28475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.331325][T28475] RSP: 002b:00007f2945e46e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 404.331362][T28475] RAX: ffffffffffffffda RBX: 0000000000000575 RCX: 00007f29477de169 [ 404.331374][T28475] RDX: 00007f2945e46ef0 RSI: 0000000000000000 RDI: 00007f2947861404 [ 404.331387][T28475] RBP: 0000200000000180 R08: 00007f2945e46bb7 R09: 00007f2945e46e40 [ 404.331402][T28475] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 404.331423][T28475] R13: 00007f2945e46ef0 R14: 00007f2945e46eb0 R15: 0000200000000000 [ 404.331447][T28475] [ 404.660299][T27954] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.689377][T28500] 9pnet_fd: Insufficient options for proto=fd [ 404.703660][T28498] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.727186][T28503] netlink: 196 bytes leftover after parsing attributes in process `syz.1.9318'. [ 404.755482][T28505] netlink: 'syz.0.9316': attribute type 10 has an invalid length. [ 404.763520][T28505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9316'. [ 404.776469][T28510] FAULT_INJECTION: forcing a failure. [ 404.776469][T28510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.776897][T28498] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.789596][T28510] CPU: 0 UID: 0 PID: 28510 Comm: syz.1.9320 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 404.789670][T28510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 404.789687][T28510] Call Trace: [ 404.789696][T28510] [ 404.789708][T28510] dump_stack_lvl+0xf6/0x150 [ 404.789740][T28510] dump_stack+0x15/0x1a [ 404.789762][T28510] should_fail_ex+0x261/0x270 [ 404.789793][T28510] should_fail+0xb/0x10 [ 404.789820][T28510] should_fail_usercopy+0x1a/0x20 [ 404.789881][T28510] _copy_from_user+0x1c/0xa0 [ 404.789918][T28510] copy_msghdr_from_user+0x54/0x2b0 [ 404.789977][T28510] ? __fget_files+0x186/0x1c0 [ 404.790008][T28510] __sys_sendmsg+0x141/0x240 [ 404.790084][T28510] __x64_sys_sendmsg+0x46/0x50 [ 404.790115][T28510] x64_sys_call+0x26f3/0x2e10 [ 404.790143][T28510] do_syscall_64+0xc9/0x1a0 [ 404.790222][T28510] ? clear_bhb_loop+0x25/0x80 [ 404.790250][T28510] ? clear_bhb_loop+0x25/0x80 [ 404.790277][T28510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.790303][T28510] RIP: 0033:0x7f29477de169 [ 404.790392][T28510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.790414][T28510] RSP: 002b:00007f2945e47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.790438][T28510] RAX: ffffffffffffffda RBX: 00007f2947a05fa0 RCX: 00007f29477de169 [ 404.790451][T28510] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 404.790464][T28510] RBP: 00007f2945e47090 R08: 0000000000000000 R09: 0000000000000000 [ 404.790479][T28510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.790494][T28510] R13: 0000000000000000 R14: 00007f2947a05fa0 R15: 00007ffe946106c8 [ 404.790577][T28510] [ 405.055215][T28498] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.103902][T28498] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.129304][T28532] veth0_macvtap: entered promiscuous mode [ 405.136771][T28532] team0: Device macvtap0 failed to register rx_handler [ 405.144233][T28532] veth0_macvtap: left promiscuous mode [ 405.159851][T28535] veth0_macvtap: entered promiscuous mode [ 405.167828][T28535] team0: Device macvtap0 failed to register rx_handler [ 405.174991][T28535] veth0_macvtap: left promiscuous mode [ 405.212296][T28542] 9pnet_fd: Insufficient options for proto=fd [ 405.235285][T28534] loop5: detected capacity change from 0 to 1024 [ 405.252285][T28534] EXT4-fs: Ignoring removed orlov option [ 405.258013][T28534] EXT4-fs: Ignoring removed bh option [ 405.305307][T28534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.327176][T28534] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 405.345377][T28556] FAULT_INJECTION: forcing a failure. [ 405.345377][T28556] name failslab, interval 1, probability 0, space 0, times 0 [ 405.358326][T28556] CPU: 0 UID: 0 PID: 28556 Comm: syz.2.9337 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 405.358418][T28556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 405.358434][T28556] Call Trace: [ 405.358443][T28556] [ 405.358453][T28556] dump_stack_lvl+0xf6/0x150 [ 405.358483][T28556] dump_stack+0x15/0x1a [ 405.358558][T28556] should_fail_ex+0x261/0x270 [ 405.358586][T28556] should_failslab+0x8f/0xb0 [ 405.358614][T28556] kmem_cache_alloc_noprof+0x59/0x340 [ 405.358642][T28556] ? getname_flags+0x81/0x3b0 [ 405.358686][T28556] getname_flags+0x81/0x3b0 [ 405.358711][T28556] user_path_at+0x26/0x140 [ 405.358737][T28556] __x64_sys_umount+0x86/0xe0 [ 405.358773][T28556] x64_sys_call+0x2883/0x2e10 [ 405.358881][T28556] do_syscall_64+0xc9/0x1a0 [ 405.358911][T28556] ? clear_bhb_loop+0x25/0x80 [ 405.358936][T28556] ? clear_bhb_loop+0x25/0x80 [ 405.358976][T28556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.359015][T28556] RIP: 0033:0x7fb71387e169 [ 405.359093][T28556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.359115][T28556] RSP: 002b:00007fb711ee7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 405.359137][T28556] RAX: ffffffffffffffda RBX: 00007fb713aa5fa0 RCX: 00007fb71387e169 [ 405.359151][T28556] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000200000000040 [ 405.359166][T28556] RBP: 00007fb711ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 405.359180][T28556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.359194][T28556] R13: 0000000000000001 R14: 00007fb713aa5fa0 R15: 00007ffc734ac618 [ 405.359276][T28556] [ 405.556667][T28562] loop2: detected capacity change from 0 to 512 [ 405.563802][T28562] ext4: Unknown parameter 'fsuuid' [ 405.599405][T28564] veth0_macvtap: entered promiscuous mode [ 405.606229][T28564] team0: Device macvtap0 failed to register rx_handler [ 405.615659][T28564] veth0_macvtap: left promiscuous mode [ 405.635253][T28569] C: renamed from team_slave_0 (while UP) [ 405.642940][T28569] netlink: 'syz.2.9343': attribute type 1 has an invalid length. [ 405.650848][T28569] net_ratelimit: 23 callbacks suppressed [ 405.650863][T28569] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 405.714515][T28577] loop1: detected capacity change from 0 to 512 [ 405.722522][T28577] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.9347: casefold flag without casefold feature [ 405.736675][T28577] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.9347: couldn't read orphan inode 15 (err -117) [ 405.751069][T28577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.772366][T28577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9347'. [ 405.842611][T28586] loop2: detected capacity change from 0 to 512 [ 405.849495][T28586] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 405.859556][T28586] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 405.877093][T28586] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.9350: corrupted inode contents [ 405.889227][T28586] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #11: comm syz.2.9350: mark_inode_dirty error [ 405.901204][T28586] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.9350: invalid indirect mapped block 1 (level 1) [ 405.901675][T25957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.916878][T28586] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.9350: corrupted inode contents [ 405.935682][T28586] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 405.945471][T28586] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.9350: corrupted inode contents [ 405.965912][T28591] FAULT_INJECTION: forcing a failure. [ 405.965912][T28591] name failslab, interval 1, probability 0, space 0, times 0 [ 405.978710][T28591] CPU: 0 UID: 0 PID: 28591 Comm: syz.1.9351 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 405.978739][T28586] EXT4-fs error (device loop2): ext4_truncate:4255: inode #11: comm syz.2.9350: mark_inode_dirty error [ 405.978800][T28591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 405.978862][T28591] Call Trace: [ 405.978870][T28591] [ 405.978879][T28591] dump_stack_lvl+0xf6/0x150 [ 405.978908][T28591] dump_stack+0x15/0x1a [ 405.978947][T28591] should_fail_ex+0x261/0x270 [ 405.978962][T28586] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 405.978976][T28591] should_failslab+0x8f/0xb0 [ 405.979004][T28591] __kmalloc_cache_node_noprof+0x58/0x340 [ 405.979073][T28591] ? __get_vm_area_node+0xfb/0x1c0 [ 405.979129][T28591] __get_vm_area_node+0xfb/0x1c0 [ 405.979170][T28591] __vmalloc_node_range_noprof+0x285/0xe80 [ 405.979280][T28591] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 405.979316][T28591] ? avc_has_perm_noaudit+0xa2/0x210 [ 405.979373][T28591] ? avc_has_perm_noaudit+0x1cc/0x210 [ 405.979405][T28591] ? selinux_capable+0x1f9/0x260 [ 405.979442][T28591] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 405.979553][T28591] __vmalloc_noprof+0x5e/0x70 [ 405.979595][T28591] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 405.979654][T28591] bpf_prog_alloc_no_stats+0x49/0x390 [ 405.979751][T28591] ? bpf_prog_alloc+0x28/0x150 [ 405.979785][T28591] bpf_prog_alloc+0x3a/0x150 [ 405.979817][T28591] bpf_prog_load+0x532/0x10e0 [ 405.979882][T28591] __sys_bpf+0x533/0x800 [ 405.979933][T28591] __x64_sys_bpf+0x43/0x50 [ 405.979966][T28591] x64_sys_call+0x23da/0x2e10 [ 405.980072][T28591] do_syscall_64+0xc9/0x1a0 [ 405.980104][T28591] ? clear_bhb_loop+0x25/0x80 [ 405.980132][T28591] ? clear_bhb_loop+0x25/0x80 [ 405.980158][T28591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.980230][T28591] RIP: 0033:0x7f29477de169 [ 405.980249][T28591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.980271][T28591] RSP: 002b:00007f2945e47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.980294][T28591] RAX: ffffffffffffffda RBX: 00007f2947a05fa0 RCX: 00007f29477de169 [ 405.980309][T28591] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 405.980392][T28591] RBP: 00007f2945e47090 R08: 0000000000000000 R09: 0000000000000000 [ 405.980408][T28591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.980423][T28591] R13: 0000000000000000 R14: 00007f2947a05fa0 R15: 00007ffe946106c8 [ 405.980446][T28591] [ 405.980456][T28591] syz.1.9351: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 406.001664][T28586] EXT4-fs (loop2): 1 truncate cleaned up [ 406.002608][T28591] ,cpuset=/,mems_allowed=0 [ 406.002638][T28591] CPU: 0 UID: 0 PID: 28591 Comm: syz.1.9351 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 406.002672][T28591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 406.002689][T28591] Call Trace: [ 406.002697][T28591] [ 406.002709][T28591] dump_stack_lvl+0xf6/0x150 [ 406.002740][T28591] dump_stack+0x15/0x1a [ 406.002762][T28591] warn_alloc+0x145/0x1b0 [ 406.002887][T28591] __vmalloc_node_range_noprof+0x2aa/0xe80 [ 406.002933][T28591] ? avc_has_perm_noaudit+0xa2/0x210 [ 406.002958][T28591] ? avc_has_perm_noaudit+0x1cc/0x210 [ 406.003040][T28591] ? selinux_capable+0x1f9/0x260 [ 406.003087][T28591] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 406.003123][T28591] __vmalloc_noprof+0x5e/0x70 [ 406.003145][T28591] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 406.003236][T28591] bpf_prog_alloc_no_stats+0x49/0x390 [ 406.003270][T28591] ? bpf_prog_alloc+0x28/0x150 [ 406.003303][T28591] bpf_prog_alloc+0x3a/0x150 [ 406.003416][T28591] bpf_prog_load+0x532/0x10e0 [ 406.003470][T28591] __sys_bpf+0x533/0x800 [ 406.003512][T28591] __x64_sys_bpf+0x43/0x50 [ 406.003544][T28591] x64_sys_call+0x23da/0x2e10 [ 406.003615][T28591] do_syscall_64+0xc9/0x1a0 [ 406.003647][T28591] ? clear_bhb_loop+0x25/0x80 [ 406.003674][T28591] ? clear_bhb_loop+0x25/0x80 [ 406.003701][T28591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.003746][T28591] RIP: 0033:0x7f29477de169 [ 406.003765][T28591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.003787][T28591] RSP: 002b:00007f2945e47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 406.003850][T28591] RAX: ffffffffffffffda RBX: 00007f2947a05fa0 RCX: 00007f29477de169 [ 406.003866][T28591] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 406.003882][T28591] RBP: 00007f2945e47090 R08: 0000000000000000 R09: 0000000000000000 [ 406.003897][T28591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.003913][T28591] R13: 0000000000000000 R14: 00007f2947a05fa0 R15: 00007ffe946106c8 [ 406.003935][T28591] [ 406.003944][T28591] Mem-Info: [ 406.015912][T28586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.482379][T28591] active_anon:3643 inactive_anon:8 isolated_anon:0 [ 406.482379][T28591] active_file:23500 inactive_file:2867 isolated_file:0 [ 406.482379][T28591] unevictable:0 dirty:37 writeback:0 [ 406.482379][T28591] slab_reclaimable:3131 slab_unreclaimable:27009 [ 406.482379][T28591] mapped:29655 shmem:517 pagetables:958 [ 406.482379][T28591] sec_pagetables:0 bounce:0 [ 406.482379][T28591] kernel_misc_reclaimable:0 [ 406.482379][T28591] free:1853208 free_pcp:16344 free_cma:0 [ 406.527624][T28591] Node 0 active_anon:14572kB inactive_anon:32kB active_file:94000kB inactive_file:11468kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118620kB dirty:148kB writeback:0kB shmem:2068kB writeback_tmp:0kB kernel_stack:4496kB pagetables:3832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 406.556593][T28591] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.583955][T28591] lowmem_reserve[]: 0 2882 7860 7860 [ 406.589312][T28591] Node 0 DMA32 free:2947680kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951308kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 406.617981][T28591] lowmem_reserve[]: 0 0 4978 4978 [ 406.623089][T28591] Node 0 Normal free:4449788kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:14532kB inactive_anon:32kB active_file:94000kB inactive_file:11476kB unevictable:0kB writepending:260kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:61752kB local_pcp:44956kB free_cma:0kB [ 406.653466][T28591] lowmem_reserve[]: 0 0 0 0 [ 406.658016][T28591] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 406.670788][T28591] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947680kB [ 406.686927][T28591] Node 0 Normal: 2*4kB (UE) 22*8kB (UM) 33*16kB (UME) 558*32kB (M) 458*64kB (UME) 166*128kB (UME) 116*256kB (UME) 122*512kB (UME) 52*1024kB (UM) 48*2048kB (UME) 1010*4096kB (UM) = 4449800kB [ 406.705867][T28591] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 406.715246][T28591] 26586 total pagecache pages [ 406.720108][T28591] 8 pages in swap cache [ 406.724277][T28591] Free swap = 124964kB [ 406.728443][T28591] Total swap = 124996kB [ 406.732612][T28591] 2097051 pages RAM [ 406.736426][T28591] 0 pages HighMem/MovableOnly [ 406.741127][T28591] 80823 pages reserved [ 406.746089][T28602] veth0_macvtap: left promiscuous mode [ 406.755687][T20913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.765568][T28602] macvtap0: entered promiscuous mode [ 406.775172][T28602] veth0_macvtap: entered promiscuous mode [ 406.783053][T28602] team0: Device macvtap0 failed to register rx_handler [ 406.790299][T28602] veth0_macvtap: left promiscuous mode [ 406.806831][T26815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.822931][ T29] kauditd_printk_skb: 702 callbacks suppressed [ 406.822951][ T29] audit: type=1326 audit(1745088045.478:39377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28601 comm="syz.3.9355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e23be169 code=0x7ffc0000 [ 406.852835][ T29] audit: type=1326 audit(1745088045.478:39378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28601 comm="syz.3.9355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e23be169 code=0x7ffc0000 [ 406.892672][T28498] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.906177][T28617] loop3: detected capacity change from 0 to 512 [ 406.907745][T28498] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.913114][T28617] ext4: Unknown parameter 'fsuuid' [ 406.940225][T28498] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.966216][ T29] audit: type=1326 audit(1745088045.638:39379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28626 comm="syz.2.9365" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb71387e169 code=0x0 [ 406.968470][T28498] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.058463][T28629] loop1: detected capacity change from 0 to 512 [ 407.065542][T28629] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 407.085294][T28629] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 407.100026][T28629] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #11: comm syz.1.9366: corrupted inode contents [ 407.120198][T28629] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #11: comm syz.1.9366: mark_inode_dirty error [ 407.139889][T28629] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.9366: invalid indirect mapped block 1 (level 1) [ 407.155037][T28629] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #11: comm syz.1.9366: corrupted inode contents [ 407.158347][T28638] loop2: detected capacity change from 0 to 1024 [ 407.167485][T28629] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 407.182289][ T29] audit: type=1326 audit(1745088045.858:39380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28639 comm="syz.3.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e23be169 code=0x7ffc0000 [ 407.206134][ T29] audit: type=1326 audit(1745088045.858:39381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28639 comm="syz.3.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e23be169 code=0x7ffc0000 [ 407.220339][T28638] EXT4-fs: Ignoring removed orlov option [ 407.229915][ T29] audit: type=1326 audit(1745088045.858:39382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28639 comm="syz.3.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f24e23be169 code=0x7ffc0000 [ 407.229951][ T29] audit: type=1326 audit(1745088045.858:39383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28639 comm="syz.3.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e23be169 code=0x7ffc0000 [ 407.235743][T28638] EXT4-fs: Ignoring removed bh option [ 407.263887][T28629] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #11: comm syz.1.9366: corrupted inode contents [ 407.284068][ T29] audit: type=1326 audit(1745088045.858:39384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28639 comm="syz.3.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e23be169 code=0x7ffc0000 [ 407.292174][T28629] EXT4-fs error (device loop1): ext4_truncate:4255: inode #11: comm syz.1.9366: mark_inode_dirty error [ 407.304067][ T29] audit: type=1326 audit(1745088045.978:39385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28641 comm="syz.3.9369" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24e23be169 code=0x0 [ 407.330864][T28629] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 407.338193][T28638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.362495][T28629] EXT4-fs (loop1): 1 truncate cleaned up [ 407.376786][T28638] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, [ 407.382725][T28629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.387077][T28638] inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 407.437420][T25957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.468833][T28645] loop3: detected capacity change from 0 to 1024 [ 407.475680][T28645] EXT4-fs: Ignoring removed orlov option [ 407.481575][T28645] EXT4-fs: Ignoring removed bh option [ 407.492822][T28645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.509767][T28645] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 407.526657][T28650] loop1: detected capacity change from 0 to 1024 [ 407.543510][T28650] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.774545][ T29] audit: type=1326 audit(1745088046.448:39386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28654 comm="syz.5.9371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada16e169 code=0x7ffc0000 [ 407.776013][T28655] loop5: detected capacity change from 0 to 128 [ 407.820810][T20913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.848198][T28661] loop5: detected capacity change from 0 to 512 [ 407.855841][T28661] ext4: Unknown parameter 'fsuuid' [ 407.875428][T28663] vhci_hcd: invalid port number 15 [ 407.890327][T28663] netlink: 'syz.2.9375': attribute type 1 has an invalid length. [ 407.912127][T28663] bond5 (unregistering): Released all slaves [ 407.934328][T28674] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 408.027082][T28683] 9pnet_fd: Insufficient options for proto=fd [ 408.058227][T28686] loop5: detected capacity change from 0 to 512 [ 408.066492][T28686] EXT4-fs error (device loop5): ext4_orphan_get:1390: inode #15: comm syz.5.9385: casefold flag without casefold feature [ 408.080093][T28686] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.9385: couldn't read orphan inode 15 (err -117) [ 408.092986][T28686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.107298][T28686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9385'. [ 408.225221][T26815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.243453][T27954] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.258628][T28707] loop5: detected capacity change from 0 to 512 [ 408.267352][T28707] ext4: Unknown parameter 'fsuuid' [ 408.295975][T28712] loop2: detected capacity change from 0 to 128 [ 408.312992][T25957] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 408.335091][T28714] loop5: detected capacity change from 0 to 512 [ 408.345413][T28714] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 408.357920][T28714] EXT4-fs (loop5): 1 truncate cleaned up [ 408.364225][T28714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.385422][T28720] loop1: detected capacity change from 0 to 512 [ 408.392219][T28720] ext4: Unknown parameter 'fsuuid' [ 408.423197][T28726] netlink: 'syz.2.9402': attribute type 1 has an invalid length. [ 408.470312][T28731] 9pnet_fd: Insufficient options for proto=fd [ 408.525143][T28732] 8021q: adding VLAN 0 to HW filter on device bond6 [ 408.536039][T28732] bond5: (slave bond6): making interface the new active one [ 408.544391][ T9] Process accounting resumed [ 408.550006][T28732] bond5: (slave bond6): Enslaving as an active interface with an up link [ 408.583221][T28742] loop1: detected capacity change from 0 to 512 [ 408.589920][T28742] ext4: Unknown parameter 'fsuuid' [ 408.607512][T28732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9402'. [ 408.676900][T28753] loop3: detected capacity change from 0 to 1024 [ 408.697928][T28753] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.731743][T28762] 9pnet_fd: Insufficient options for proto=fd [ 408.878258][T28769] loop2: detected capacity change from 0 to 512 [ 408.908047][T28769] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 408.939946][T28769] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 408.962088][T28769] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.9417: corrupted inode contents [ 408.976232][T28769] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #11: comm syz.2.9417: mark_inode_dirty error [ 408.977846][T28776] loop0: detected capacity change from 0 to 512 [ 408.997251][T28769] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.9417: invalid indirect mapped block 1 (level 1) [ 409.010855][T28778] loop1: detected capacity change from 0 to 512 [ 409.013482][T28769] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.9417: corrupted inode contents [ 409.019667][T28776] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 409.029860][T28769] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 409.040229][T28778] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.9421: casefold flag without casefold feature [ 409.046877][T28769] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.9417: corrupted inode contents [ 409.060786][T28778] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.9421: couldn't read orphan inode 15 (err -117) [ 409.073542][T28776] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 409.097592][T28776] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9419: corrupted inode contents [ 409.099789][T28778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.112570][T28776] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #11: comm syz.0.9419: mark_inode_dirty error [ 409.123701][T28769] EXT4-fs error (device loop2): ext4_truncate:4255: inode #11: comm syz.2.9417: mark_inode_dirty error [ 409.134982][T28776] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.9419: invalid indirect mapped block 1 (level 1) [ 409.145560][T28769] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 409.166604][T28778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9421'. [ 409.168123][T28776] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9419: corrupted inode contents [ 409.190248][T28776] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 409.199148][T28776] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9419: corrupted inode contents [ 409.199230][T28769] EXT4-fs (loop2): 1 truncate cleaned up [ 409.214010][T28776] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.9419: mark_inode_dirty error [ 409.217868][T28769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.244383][T28776] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 409.267522][T28776] EXT4-fs (loop0): 1 truncate cleaned up [ 409.273845][T28776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.274256][T25957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.296108][T20913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.340672][T28786] loop2: detected capacity change from 0 to 512 [ 409.348434][T28786] ext4: Unknown parameter 'fsuuid' [ 409.394819][T28788] veth0_macvtap: entered promiscuous mode [ 409.404726][T28788] team0: Device macvtap0 failed to register rx_handler [ 409.412059][T28788] veth0_macvtap: left promiscuous mode [ 409.412617][T27588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.481789][T28796] tipc: Enabled bearer , priority 0 [ 409.493690][T28795] tipc: Disabling bearer [ 409.522559][T27954] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 409.580188][T28810] C: renamed from team_slave_0 (while UP) [ 409.587951][T28810] netlink: 'syz.3.9431': attribute type 1 has an invalid length. [ 409.595760][T28810] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 409.625670][T28814] loop0: detected capacity change from 0 to 512 [ 409.642365][T28816] loop2: detected capacity change from 0 to 512 [ 409.649328][T28816] ext4: Unknown parameter 'fsuuid' [ 409.658078][T28814] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 409.689589][T28814] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 409.707660][T28814] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9433: corrupted inode contents [ 409.720675][T28814] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #11: comm syz.0.9433: mark_inode_dirty error [ 409.735702][T28814] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.9433: invalid indirect mapped block 1 (level 1) [ 409.749207][T28814] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9433: corrupted inode contents [ 409.760512][T28826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9440'. [ 409.763980][T28814] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 409.778914][T28814] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9433: corrupted inode contents [ 409.780707][T28826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9440'. [ 409.800851][T28814] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.9433: mark_inode_dirty error [ 409.828746][T28814] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 409.838521][T28814] EXT4-fs (loop0): 1 truncate cleaned up [ 409.844890][T28814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.854684][T28826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9440'. [ 409.868249][T28826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9440'. [ 409.894398][T27588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.913507][T28826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9440'. [ 409.926816][T28826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9440'. [ 409.935893][T28837] loop2: detected capacity change from 0 to 1024 [ 409.965847][T28837] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.053872][T28845] veth0_macvtap: entered promiscuous mode [ 410.068164][T28845] team0: Device macvtap0 failed to register rx_handler [ 410.077800][T28845] veth0_macvtap: left promiscuous mode [ 410.085112][T28852] C: renamed from team_slave_0 (while UP) [ 410.094840][T28852] netlink: 'syz.0.9448': attribute type 1 has an invalid length. [ 410.102741][T28852] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 410.218278][T28862] loop3: detected capacity change from 0 to 128 [ 410.271097][T28866] veth0_macvtap: entered promiscuous mode [ 410.278435][T28866] team0: Device macvtap0 failed to register rx_handler [ 410.288307][T28866] veth0_macvtap: left promiscuous mode [ 410.318468][T28875] loop3: detected capacity change from 0 to 512 [ 410.327230][T28875] ext4: Unknown parameter 'fsuuid' [ 410.430710][T28878] loop0: detected capacity change from 0 to 1024 [ 410.439765][T28878] EXT4-fs: Ignoring removed orlov option [ 410.445514][T28878] EXT4-fs: Ignoring removed bh option [ 410.462842][T28878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.507264][T28878] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 410.512443][T28894] loop3: detected capacity change from 0 to 512 [ 410.531886][T28894] ext4: Unknown parameter 'fsuuid' [ 410.570597][T28902] loop1: detected capacity change from 0 to 128 [ 410.646086][T28912] loop1: detected capacity change from 0 to 2048 [ 410.652988][T28912] ext4: Unknown parameter 'euid' [ 410.696719][T20913] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 410.818739][T28925] 9pnet_fd: Insufficient options for proto=fd [ 410.898644][T28931] loop2: detected capacity change from 0 to 8192 [ 410.907327][T28931] FAULT_INJECTION: forcing a failure. [ 410.907327][T28931] name failslab, interval 1, probability 0, space 0, times 0 [ 410.920065][T28931] CPU: 0 UID: 0 PID: 28931 Comm: syz.2.9482 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 410.920107][T28931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 410.920118][T28931] Call Trace: [ 410.920124][T28931] [ 410.920131][T28931] dump_stack_lvl+0xf6/0x150 [ 410.920153][T28931] dump_stack+0x15/0x1a [ 410.920183][T28931] should_fail_ex+0x261/0x270 [ 410.920204][T28931] should_failslab+0x8f/0xb0 [ 410.920223][T28931] __kmalloc_noprof+0xad/0x410 [ 410.920325][T28931] ? alloc_pipe_info+0x1cb/0x360 [ 410.920404][T28931] alloc_pipe_info+0x1cb/0x360 [ 410.920421][T28931] splice_direct_to_actor+0x621/0x680 [ 410.920449][T28931] ? __pfx_direct_splice_actor+0x10/0x10 [ 410.920475][T28931] ? __rcu_read_unlock+0x4e/0x70 [ 410.920503][T28931] ? avc_policy_seqno+0x15/0x20 [ 410.920523][T28931] ? selinux_file_permission+0x22d/0x360 [ 410.920542][T28931] do_splice_direct+0xd9/0x150 [ 410.920624][T28931] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 410.920661][T28931] do_sendfile+0x40a/0x690 [ 410.920693][T28931] __x64_sys_sendfile64+0x113/0x160 [ 410.920724][T28931] x64_sys_call+0xfc3/0x2e10 [ 410.920772][T28931] do_syscall_64+0xc9/0x1a0 [ 410.920848][T28931] ? clear_bhb_loop+0x25/0x80 [ 410.920874][T28931] ? clear_bhb_loop+0x25/0x80 [ 410.920899][T28931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.920924][T28931] RIP: 0033:0x7fb71387e169 [ 410.920943][T28931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.920964][T28931] RSP: 002b:00007fb711ee7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 410.921047][T28931] RAX: ffffffffffffffda RBX: 00007fb713aa5fa0 RCX: 00007fb71387e169 [ 410.921121][T28931] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 410.921132][T28931] RBP: 00007fb711ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 410.921142][T28931] R10: 0000000000fffe80 R11: 0000000000000246 R12: 0000000000000001 [ 410.921153][T28931] R13: 0000000000000000 R14: 00007fb713aa5fa0 R15: 00007ffc734ac618 [ 410.921168][T28931] [ 411.168394][T27588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.206008][T28937] loop2: detected capacity change from 0 to 512 [ 411.215540][T28937] ext4: Unknown parameter 'fsuuid' [ 411.272620][T28944] loop0: detected capacity change from 0 to 1024 [ 411.284840][T28944] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.330704][T28954] 9pnet_fd: Insufficient options for proto=fd [ 411.379234][T26815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.453135][T28962] veth0_macvtap: entered promiscuous mode [ 411.461283][T28962] team0: Device macvtap0 failed to register rx_handler [ 411.468699][T28962] veth0_macvtap: left promiscuous mode [ 411.520682][T28968] loop2: detected capacity change from 0 to 512 [ 411.527597][T28968] ext4: Unknown parameter 'fsuuid' [ 411.571918][T28973] vhci_hcd: invalid port number 15 [ 411.594222][T28964] loop5: detected capacity change from 0 to 1024 [ 411.600443][T28973] netlink: 'syz.1.9501': attribute type 1 has an invalid length. [ 411.603829][T28964] EXT4-fs: Ignoring removed orlov option [ 411.614460][T28964] EXT4-fs: Ignoring removed bh option [ 411.646947][T28973] bond1 (unregistering): Released all slaves [ 411.655140][T28964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.716020][T28989] loop2: detected capacity change from 0 to 512 [ 411.723199][T28989] ext4: Unknown parameter 'fsuuid' [ 411.850648][T29006] loop1: detected capacity change from 0 to 512 [ 411.857434][T29006] ext4: Unknown parameter 'fsuuid' [ 411.933397][T28994] chnl_net:caif_netlink_parms(): no params data found [ 412.003403][ T59] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.035567][T28994] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.042956][T28994] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.059897][T28994] bridge_slave_0: entered allmulticast mode [ 412.068310][T28994] bridge_slave_0: entered promiscuous mode [ 412.074944][T27588] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 412.093446][ T59] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.110108][T28994] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.117585][T28994] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.135375][T28994] bridge_slave_1: entered allmulticast mode [ 412.144499][T28994] bridge_slave_1: entered promiscuous mode [ 412.169442][ T59] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.182686][T28994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.199360][T28994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.223934][ T59] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.235805][T28994] team0: Port device team_slave_0 added [ 412.242809][T28994] team0: Port device team_slave_1 added [ 412.250035][T29035] loop1: detected capacity change from 0 to 512 [ 412.269503][T26815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.269806][T28994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.282346][T29035] ext4: Unknown parameter 'fsuuid' [ 412.285915][T28994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.316806][T28994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.331335][T28994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.338303][T28994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.364398][T28994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.396051][T28994] hsr_slave_0: entered promiscuous mode [ 412.396606][T29039] loop0: detected capacity change from 0 to 512 [ 412.402265][T28994] hsr_slave_1: entered promiscuous mode [ 412.411214][T29039] ext4: Unknown parameter 'fsuuid' [ 412.414121][T28994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.426550][T28994] Cannot create hsr debugfs directory [ 412.472909][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 412.472928][ T29] audit: type=1326 audit(1745088051.148:39722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.0.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc277e169 code=0x7ffc0000 [ 412.503185][ T29] audit: type=1326 audit(1745088051.148:39723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.0.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc277e169 code=0x7ffc0000 [ 412.527043][ T29] audit: type=1326 audit(1745088051.148:39724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.0.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f2cc277e169 code=0x7ffc0000 [ 412.551422][T29049] loop1: detected capacity change from 0 to 1024 [ 412.560690][ T29] audit: type=1326 audit(1745088051.148:39725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.0.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc277e169 code=0x7ffc0000 [ 412.605672][ T59] bridge_slave_1: left allmulticast mode [ 412.611502][ T59] bridge_slave_1: left promiscuous mode [ 412.617315][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.627482][T29049] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.640818][ T59] bridge_slave_0: left allmulticast mode [ 412.642098][T29057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9529'. [ 412.646484][ T59] bridge_slave_0: left promiscuous mode [ 412.661392][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.929889][ T59] team0: Port device geneve1 removed [ 412.962958][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.973593][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.983912][ T59] bond0 (unregistering): Released all slaves [ 412.993226][ T59] bond1 (unregistering): Released all slaves [ 413.002367][ T59] bond2 (unregistering): Released all slaves [ 413.010912][ T59] bond3 (unregistering): Released all slaves [ 413.019538][ T59] bond4 (unregistering): Released all slaves [ 413.028262][ T59] bond5 (unregistering): (slave bond6): Releasing backup interface [ 413.036766][ T59] bond5 (unregistering): Released all slaves [ 413.045287][ T59] bond6 (unregistering): Released all slaves [ 413.072937][ T29] audit: type=1326 audit(1745088051.748:39726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29066 comm="syz.5.9533" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ada16e169 code=0x0 [ 413.098846][ T59] tipc: Left network mode [ 413.104492][ T59] IPVS: stopping master sync thread 23768 ... [ 413.112934][ T59] hsr_slave_0: left promiscuous mode [ 413.118494][ T59] hsr_slave_1: left promiscuous mode [ 413.124482][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.132227][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.140461][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.149394][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.162244][ T59] veth1_macvtap: left promiscuous mode [ 413.168041][ T59] veth1_vlan: left promiscuous mode [ 413.173638][ T59] veth0_vlan: left promiscuous mode [ 413.186497][T29070] vhci_hcd: invalid port number 15 [ 413.193177][T29070] netlink: 'syz.3.9534': attribute type 1 has an invalid length. [ 413.235937][T25957] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 413.252555][ T59] team0 (unregistering): Port device team_slave_1 removed [ 413.270290][T29074] loop5: detected capacity change from 0 to 1024 [ 413.277826][ T59] team0 (unregistering): Port device C removed [ 413.288841][ T29] audit: type=1326 audit(1745088051.958:39727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.9536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29477de169 code=0x7ffc0000 [ 413.292520][T29074] EXT4-fs: Ignoring removed orlov option [ 413.312569][ T29] audit: type=1326 audit(1745088051.958:39728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.9536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29477de169 code=0x7ffc0000 [ 413.318186][T29074] EXT4-fs: Ignoring removed bh option [ 413.357558][ T29] audit: type=1326 audit(1745088052.018:39729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.9536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29477de169 code=0x7ffc0000 [ 413.381443][ T29] audit: type=1326 audit(1745088052.018:39730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.9536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29477de169 code=0x7ffc0000 [ 413.393285][T29074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.405028][ T29] audit: type=1326 audit(1745088052.018:39731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.1.9536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29477de169 code=0x7ffc0000 [ 413.453053][T29072] bond1 (unregistering): Released all slaves [ 413.462476][T29077] veth0_macvtap: entered promiscuous mode [ 413.469706][T29077] team0: Device macvtap0 failed to register rx_handler [ 413.476873][T29077] veth0_macvtap: left promiscuous mode [ 413.532931][T29084] veth0_macvtap: entered promiscuous mode [ 413.540289][T29084] team0: Device macvtap0 failed to register rx_handler [ 413.548006][T29084] veth0_macvtap: left promiscuous mode [ 413.610321][T29095] loop0: detected capacity change from 0 to 512 [ 413.617567][T29095] ext4: Unknown parameter 'fsuuid' [ 413.643136][T28994] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 413.650067][T29097] loop0: detected capacity change from 0 to 128 [ 413.653015][T28994] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 413.670745][T28994] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 413.685936][T28994] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 413.751821][T28994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.792028][T29111] 9pnet_fd: Insufficient options for proto=fd [ 413.817968][T28994] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.825577][T29106] veth0_macvtap: entered promiscuous mode [ 413.833363][T29106] team0: Device macvtap0 failed to register rx_handler [ 413.840449][T29106] veth0_macvtap: left promiscuous mode [ 413.849467][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.856593][ T7956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.876178][ T7956] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.883358][ T7956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.911993][T29115] veth0_macvtap: entered promiscuous mode [ 413.920342][T29115] team0: Device macvtap0 failed to register rx_handler [ 413.930125][T26815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.939348][T29115] veth0_macvtap: left promiscuous mode [ 414.032834][T28994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.095007][T29140] veth0_macvtap: entered promiscuous mode [ 414.107013][T29140] team0: Device macvtap0 failed to register rx_handler [ 414.120159][T29140] veth0_macvtap: left promiscuous mode [ 414.155851][T28994] veth0_vlan: entered promiscuous mode [ 414.166986][T28994] veth1_vlan: entered promiscuous mode [ 414.187671][T28994] veth0_macvtap: entered promiscuous mode [ 414.199655][T29154] loop3: detected capacity change from 0 to 512 [ 414.206446][T29154] ext4: Unknown parameter 'fsuuid' [ 414.208110][T28994] veth1_macvtap: entered promiscuous mode [ 414.229142][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.239655][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.249659][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.260220][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.270472][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.281649][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.291584][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.302038][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.311991][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.322511][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.332391][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.342959][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.352824][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.363413][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.369740][T29162] loop5: detected capacity change from 0 to 512 [ 414.373258][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.373278][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.392975][T29162] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 414.401617][T28994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.411182][T29163] loop0: detected capacity change from 0 to 1024 [ 414.417109][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.432803][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.442725][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.450603][T29163] EXT4-fs: Ignoring removed orlov option [ 414.453218][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.458882][T29163] EXT4-fs: Ignoring removed bh option [ 414.468891][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.485010][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.494889][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.502012][T29162] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 414.505490][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.529713][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.540221][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.550252][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.560883][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.570874][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.581378][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.591522][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.601981][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.611816][T28994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.622268][T28994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.632241][T29162] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.9565: corrupted inode contents [ 414.637859][T28994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.647120][T29162] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #11: comm syz.5.9565: mark_inode_dirty error [ 414.656360][T28994] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.672240][T28994] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.680999][T28994] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.689794][T28994] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.713945][T29163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.719473][T29162] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.9565: invalid indirect mapped block 1 (level 1) [ 414.752575][T29162] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.9565: corrupted inode contents [ 414.783959][T29162] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 414.798365][T29162] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.9565: corrupted inode contents [ 414.824921][T29181] veth0_macvtap: entered promiscuous mode [ 414.832108][T29181] team0: Device macvtap0 failed to register rx_handler [ 414.839413][T29162] EXT4-fs error (device loop5): ext4_truncate:4255: inode #11: comm syz.5.9565: mark_inode_dirty error [ 414.844471][T29181] veth0_macvtap: left promiscuous mode [ 414.851120][T29162] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 414.865558][T29162] EXT4-fs (loop5): 1 truncate cleaned up [ 414.872104][T29162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.934419][T29189] loop1: detected capacity change from 0 to 512 [ 414.941165][T29189] ext4: Unknown parameter 'fsuuid' [ 414.967895][T26815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.983830][T29185] loop3: detected capacity change from 0 to 1024 [ 414.991603][T29185] EXT4-fs: Ignoring removed orlov option [ 414.997301][T29185] EXT4-fs: Ignoring removed bh option [ 415.026069][T27588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.052138][T29185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.088186][T29195] loop5: detected capacity change from 0 to 8192 [ 415.113368][T29185] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 415.249873][T29218] loop5: detected capacity change from 0 to 512 [ 415.263290][T29218] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 415.276962][T29218] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 415.294797][T29218] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.9587: corrupted inode contents [ 415.308094][T29218] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #11: comm syz.5.9587: mark_inode_dirty error [ 415.325147][T29218] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.9587: invalid indirect mapped block 1 (level 1) [ 415.338892][T29218] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.9587: corrupted inode contents [ 415.353678][T29218] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 415.362528][T29218] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.9587: corrupted inode contents [ 415.369412][T29232] loop2: detected capacity change from 0 to 512 [ 415.377405][T29218] EXT4-fs error (device loop5): ext4_truncate:4255: inode #11: comm syz.5.9587: mark_inode_dirty error [ 415.394827][T29232] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #15: comm syz.2.9593: casefold flag without casefold feature [ 415.408037][T29232] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.9593: couldn't read orphan inode 15 (err -117) [ 415.409127][T29218] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 415.423165][T29232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.429837][T29218] EXT4-fs (loop5): 1 truncate cleaned up [ 415.447125][T29232] __nla_validate_parse: 5 callbacks suppressed [ 415.447142][T29232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9593'. [ 415.450831][T29218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.499521][T26815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.546956][T28994] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.562165][T29241] vhci_hcd: invalid port number 15 [ 415.577310][T29241] netlink: 'syz.5.9597': attribute type 1 has an invalid length. [ 415.604920][T29241] bond1 (unregistering): Released all slaves [ 415.641645][T29248] veth0_macvtap: left promiscuous mode [ 415.647257][T29248] macvtap0: entered promiscuous mode [ 415.654226][T29248] veth0_macvtap: entered promiscuous mode [ 415.661500][T29248] team0: Device macvtap0 failed to register rx_handler [ 415.669321][T29248] veth0_macvtap: left promiscuous mode [ 415.695767][T29252] C: renamed from team_slave_0 (while UP) [ 415.703296][T29252] netlink: 'syz.2.9600': attribute type 1 has an invalid length. [ 415.711537][T29252] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 415.769739][T29256] veth0_macvtap: entered promiscuous mode [ 415.776974][T29256] team0: Device macvtap0 failed to register rx_handler [ 415.785961][T29256] veth0_macvtap: left promiscuous mode [ 415.794569][T27954] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.878140][T29264] loop3: detected capacity change from 0 to 2048 [ 415.888742][T29264] ext4: Unknown parameter 'euid' [ 415.888875][T29266] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.941241][T29266] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.942902][T29273] netlink: 'syz.5.9607': attribute type 10 has an invalid length. [ 415.959709][T29273] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9607'. [ 416.012624][T29273] team0: Port device geneve1 added [ 416.025307][T29266] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.087462][T29286] veth0_macvtap: entered promiscuous mode [ 416.094689][T29286] team0: Device macvtap0 failed to register rx_handler [ 416.102691][T29286] veth0_macvtap: left promiscuous mode [ 416.110231][T29289] loop0: detected capacity change from 0 to 512 [ 416.116991][T29289] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 416.127591][T29266] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.136636][T29289] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 416.152624][T29289] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9614: corrupted inode contents [ 416.164948][T29289] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #11: comm syz.0.9614: mark_inode_dirty error [ 416.178463][T29289] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.9614: invalid indirect mapped block 1 (level 1) [ 416.195126][T29289] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9614: corrupted inode contents [ 416.210235][T29289] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 416.223661][T29289] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9614: corrupted inode contents [ 416.233218][T29266] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.246746][T29289] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.9614: mark_inode_dirty error [ 416.263220][T29289] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 416.282861][T29289] EXT4-fs (loop0): 1 truncate cleaned up [ 416.288883][T29266] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.288979][T29289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.318635][T29266] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.343054][T29266] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.393535][T27588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.495385][T29306] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9622'. [ 416.599785][T29319] veth0_macvtap: entered promiscuous mode [ 416.606943][T29319] team0: Device macvtap0 failed to register rx_handler [ 416.614388][T29319] veth0_macvtap: left promiscuous mode [ 416.667756][T29324] 9pnet_fd: Insufficient options for proto=fd [ 416.694782][T29326] loop5: detected capacity change from 0 to 512 [ 416.701648][T29326] ext4: Unknown parameter 'fsuuid' [ 416.756747][T29330] IPv6: sit1: Disabled Multicast RS [ 416.763257][T29330] sit1: entered allmulticast mode [ 417.010372][T29332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.030305][T29332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.056904][T29347] loop1: detected capacity change from 0 to 8192 [ 417.148561][T29353] 9pnet_fd: Insufficient options for proto=fd [ 417.183383][T29355] loop1: detected capacity change from 0 to 512 [ 417.190713][T29355] ext4: Unknown parameter 'fsuuid' [ 417.318536][T29365] loop0: detected capacity change from 0 to 128 [ 417.375368][T29369] loop2: detected capacity change from 0 to 512 [ 417.382749][T29369] ext4: Unknown parameter 'fsuuid' [ 417.473347][T29377] loop0: detected capacity change from 0 to 1024 [ 417.507473][T29377] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.526621][ T29] kauditd_printk_skb: 702 callbacks suppressed [ 417.526635][ T29] audit: type=1400 audit(1745088056.199:40434): avc: denied { mount } for pid=29366 comm="syz.0.9649" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 417.574120][T29382] loop2: detected capacity change from 0 to 512 [ 417.583013][T29382] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 417.593706][ T29] audit: type=1400 audit(1745088056.229:40435): avc: denied { allowed } for pid=29366 comm="syz.0.9649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 417.613475][ T29] audit: type=1400 audit(1745088056.229:40436): avc: denied { create } for pid=29366 comm="syz.0.9649" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 417.634902][ T29] audit: type=1400 audit(1745088056.229:40437): avc: denied { map } for pid=29366 comm="syz.0.9649" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=109371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 417.659410][ T29] audit: type=1400 audit(1745088056.229:40438): avc: denied { read write } for pid=29366 comm="syz.0.9649" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=109371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 417.714958][ T29] audit: type=1326 audit(1745088056.389:40439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29385 comm="syz.3.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e23be169 code=0x7ffc0000 [ 417.738791][T29382] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64: [ 417.738820][ T29] audit: type=1326 audit(1745088056.389:40440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29385 comm="syz.3.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24e23be169 code=0x7ffc0000 [ 417.748079][ T29] audit: type=1326 audit(1745088056.389:40441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29385 comm="syz.3.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e23be169 code=0x7ffc0000 [ 417.772052][T29382] freeing already freed block (bit 63); block bitmap corrupt. [ 417.772246][T29382] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.9654: corrupted inode contents [ 417.795764][ T29] audit: type=1326 audit(1745088056.389:40442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29385 comm="syz.3.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e23be169 code=0x7ffc0000 [ 417.795798][ T29] audit: type=1326 audit(1745088056.389:40443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29385 comm="syz.3.9655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24e23be169 code=0x7ffc0000 [ 417.862855][T29382] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #11: comm syz.2.9654: mark_inode_dirty error [ 417.879748][T29386] veth0_macvtap: entered promiscuous mode [ 417.879851][T29382] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.9654: invalid indirect mapped block 1 (level 1) [ 417.887064][T29386] team0: Device macvtap0 failed to register rx_handler [ 417.908683][T29386] veth0_macvtap: left promiscuous mode [ 417.931219][T29382] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.9654: corrupted inode contents [ 417.947429][T29382] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 417.957243][T29382] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.9654: corrupted inode contents [ 417.971849][T29382] EXT4-fs error (device loop2): ext4_truncate:4255: inode #11: comm syz.2.9654: mark_inode_dirty error [ 417.986982][T29382] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 417.997771][T29382] EXT4-fs (loop2): 1 truncate cleaned up [ 418.005864][T29389] loop3: detected capacity change from 0 to 512 [ 418.031146][T29389] ext4: Unknown parameter 'fsuuid' [ 418.037670][T29382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.059679][T29391] 9pnet_fd: Insufficient options for proto=fd [ 418.146263][T29395] loop3: detected capacity change from 0 to 128 [ 418.180273][T28994] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.204476][T29397] loop3: detected capacity change from 0 to 512 [ 418.237011][T27588] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 418.269371][T29400] loop2: detected capacity change from 0 to 2048 [ 418.276650][T29397] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #15: comm syz.3.9660: casefold flag without casefold feature [ 418.304505][T29397] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.9660: couldn't read orphan inode 15 (err -117) [ 418.339551][T29409] loop0: detected capacity change from 0 to 2048 [ 418.346619][T29409] ext4: Unknown parameter 'euid' [ 418.352187][T29400] ext4: Unknown parameter 'euid' [ 418.364423][T29397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.406522][T29411] veth0_macvtap: entered promiscuous mode [ 418.427074][T29411] team0: Device macvtap0 failed to register rx_handler [ 418.450478][T29411] veth0_macvtap: left promiscuous mode [ 418.474780][T29397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9660'. [ 418.514025][T29422] loop1: detected capacity change from 0 to 128 [ 418.548191][T29423] netlink: 'syz.2.9670': attribute type 10 has an invalid length. [ 418.556190][T29423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9670'. [ 418.563237][T29418] loop0: detected capacity change from 0 to 512 [ 418.589209][T29426] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.603781][T29418] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 418.606894][T29423] team0: Port device geneve1 added [ 418.637067][T27954] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.647234][T29426] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.660829][T29428] netlink: 'syz.1.9672': attribute type 10 has an invalid length. [ 418.663983][T29418] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, [ 418.668671][T29428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9672'. [ 418.685522][T29418] inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 418.695728][T29418] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9669: corrupted inode contents [ 418.712417][T29418] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #11: comm syz.0.9669: mark_inode_dirty error [ 418.734715][T29426] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.748044][T29418] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.9669: invalid indirect mapped block 1 (level 1) [ 418.761801][T29418] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9669: corrupted inode contents [ 418.782791][T29418] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 418.805144][T29418] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9669: corrupted inode contents [ 418.817955][T29426] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.832694][T29418] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.9669: mark_inode_dirty error [ 418.867913][T29418] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 418.896030][T29418] EXT4-fs (loop0): 1 truncate cleaned up [ 418.927651][T29418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.945044][T29426] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.968119][T29426] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.999032][T29426] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.035060][T27588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.051750][T29426] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.085616][T29449] loop2: detected capacity change from 0 to 512 [ 419.115762][T29452] veth0_macvtap: entered promiscuous mode [ 419.130193][T29449] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #15: comm syz.2.9683: casefold flag without casefold feature [ 419.131198][T29452] team0: Device macvtap0 failed to register rx_handler [ 419.154273][T29449] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.9683: couldn't read orphan inode 15 (err -117) [ 419.166547][T29452] veth0_macvtap: left promiscuous mode [ 419.186609][T29449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9683'. [ 419.205026][T29456] netlink: 'syz.1.9684': attribute type 10 has an invalid length. [ 419.212969][T29456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9684'. [ 419.453013][T29485] loop2: detected capacity change from 0 to 512 [ 419.461149][T29485] ext4: Unknown parameter 'fsuuid' [ 419.497971][T29491] C: renamed from team_slave_0 (while UP) [ 419.505925][T29491] netlink: 'syz.5.9699': attribute type 1 has an invalid length. [ 419.513812][T29491] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 419.557808][T29497] 9pnet_fd: Insufficient options for proto=fd [ 419.658555][T29515] loop2: detected capacity change from 0 to 512 [ 419.665357][T29515] ext4: Unknown parameter 'fsuuid' [ 419.707674][T29521] netlink: 'syz.0.9714': attribute type 1 has an invalid length. [ 419.715656][T29521] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 419.741356][T29523] 9pnet_fd: Insufficient options for proto=fd [ 419.815644][T29535] tipc: Enabling of bearer rejected, failed to enable media [ 419.859872][T29543] vhci_hcd: invalid port number 15 [ 419.862457][T29541] veth0_macvtap: entered promiscuous mode [ 419.875742][T29541] team0: Device macvtap0 failed to register rx_handler [ 419.877054][T29543] netlink: 'syz.2.9724': attribute type 1 has an invalid length. [ 419.890848][T29541] veth0_macvtap: left promiscuous mode [ 419.919670][T29543] bond1 (unregistering): Released all slaves [ 419.927215][T29550] loop3: detected capacity change from 0 to 512 [ 419.934022][T29550] ext4: Unknown parameter 'fsuuid' [ 420.018271][T29559] 9pnet_fd: Insufficient options for proto=fd [ 420.032557][T29551] loop0: detected capacity change from 0 to 1024 [ 420.039411][T29551] EXT4-fs: Ignoring removed orlov option [ 420.045176][T29551] EXT4-fs: Ignoring removed bh option [ 420.063616][T29563] netlink: 'syz.3.9732': attribute type 1 has an invalid length. [ 420.071522][T29563] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 420.093892][T29551] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 420.113026][T29561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9731'. [ 420.160434][T29574] FAULT_INJECTION: forcing a failure. [ 420.160434][T29574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.173719][T29574] CPU: 1 UID: 0 PID: 29574 Comm: syz.3.9736 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 420.173746][T29574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 420.173759][T29574] Call Trace: [ 420.173766][T29574] [ 420.173821][T29574] dump_stack_lvl+0xf6/0x150 [ 420.173852][T29574] dump_stack+0x15/0x1a [ 420.173871][T29574] should_fail_ex+0x261/0x270 [ 420.173915][T29574] should_fail+0xb/0x10 [ 420.173934][T29574] should_fail_usercopy+0x1a/0x20 [ 420.173958][T29574] _copy_from_iter+0xd8/0xd10 [ 420.174005][T29574] ? kmalloc_reserve+0x16e/0x190 [ 420.174025][T29574] ? __build_skb_around+0x199/0x1f0 [ 420.174044][T29574] ? __alloc_skb+0x227/0x320 [ 420.174062][T29574] ? __virt_addr_valid+0x1ed/0x250 [ 420.174098][T29574] ? __check_object_size+0x367/0x510 [ 420.174208][T29574] netlink_sendmsg+0x492/0x720 [ 420.174295][T29574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.174321][T29574] __sock_sendmsg+0x140/0x180 [ 420.174359][T29574] ____sys_sendmsg+0x350/0x4e0 [ 420.174393][T29574] __sys_sendmsg+0x1a0/0x240 [ 420.174428][T29574] __x64_sys_sendmsg+0x46/0x50 [ 420.174480][T29574] x64_sys_call+0x26f3/0x2e10 [ 420.174507][T29574] do_syscall_64+0xc9/0x1a0 [ 420.174536][T29574] ? clear_bhb_loop+0x25/0x80 [ 420.174560][T29574] ? clear_bhb_loop+0x25/0x80 [ 420.174625][T29574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.174647][T29574] RIP: 0033:0x7f24e23be169 [ 420.174665][T29574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.174708][T29574] RSP: 002b:00007f24e0a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.174731][T29574] RAX: ffffffffffffffda RBX: 00007f24e25e5fa0 RCX: 00007f24e23be169 [ 420.174744][T29574] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 420.174756][T29574] RBP: 00007f24e0a27090 R08: 0000000000000000 R09: 0000000000000000 [ 420.174768][T29574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.174783][T29574] R13: 0000000000000000 R14: 00007f24e25e5fa0 R15: 00007ffc13f79e58 [ 420.174811][T29574] [ 420.418326][T29582] loop1: detected capacity change from 0 to 128 [ 420.457557][T29586] loop1: detected capacity change from 0 to 512 [ 420.469296][T29586] ext4: Unknown parameter 'fsuuid' [ 420.506123][T29592] loop3: detected capacity change from 0 to 2048 [ 420.513559][T29592] ext4: Unknown parameter 'euid' [ 420.527672][T29598] loop1: detected capacity change from 0 to 512 [ 420.535564][T29598] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.9748: casefold flag without casefold feature [ 420.548541][T29598] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.9748: couldn't read orphan inode 15 (err -117) [ 420.562077][T29598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9748'. [ 420.578152][T29601] loop2: detected capacity change from 0 to 1024 [ 420.738557][T29614] loop5: detected capacity change from 0 to 128 [ 420.746316][T29616] loop1: detected capacity change from 0 to 512 [ 420.777954][T29616] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.812106][T29624] loop5: detected capacity change from 0 to 512 [ 420.821324][T29624] ext4: Unknown parameter 'fsuuid' [ 420.854039][T29630] vhci_hcd: invalid port number 15 [ 420.861331][T29630] validate_nla: 1 callbacks suppressed [ 420.861348][T29630] netlink: 'syz.0.9760': attribute type 1 has an invalid length. [ 420.863695][T29632] loop5: detected capacity change from 0 to 512 [ 420.882340][T29630] bond1 (unregistering): Released all slaves [ 420.893244][T29632] EXT4-fs error (device loop5): ext4_orphan_get:1390: inode #15: comm syz.5.9761: casefold flag without casefold feature [ 420.906206][T29632] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.9761: couldn't read orphan inode 15 (err -117) [ 420.919572][T29632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9761'. [ 421.084350][T29648] loop0: detected capacity change from 0 to 128 [ 421.147315][T29658] loop5: detected capacity change from 0 to 2048 [ 421.152421][T29660] loop0: detected capacity change from 0 to 128 [ 421.154639][T29658] ext4: Unknown parameter 'euid' [ 421.188411][T29662] tipc: Enabled bearer , priority 0 [ 421.197965][T29661] tipc: Disabling bearer [ 421.257381][T29665] loop0: detected capacity change from 0 to 512 [ 421.265529][T29665] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.9774: casefold flag without casefold feature [ 421.278618][T29665] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.9774: couldn't read orphan inode 15 (err -117) [ 421.292192][T29665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9774'. [ 421.336554][T29669] 9pnet_fd: Insufficient options for proto=fd [ 421.383475][T29676] netlink: 'syz.2.9777': attribute type 1 has an invalid length. [ 421.391311][T29676] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 421.443400][T29680] loop0: detected capacity change from 0 to 128 [ 421.528458][T29690] loop0: detected capacity change from 0 to 2048 [ 421.535487][T29690] ext4: Unknown parameter 'euid' [ 421.548385][T29695] 9pnet_fd: Insufficient options for proto=fd [ 421.580166][T29696] bridge0: entered promiscuous mode [ 421.585578][T29696] macvlan2: entered promiscuous mode [ 421.593366][T29696] bridge0: port 3(macvlan2) entered blocking state [ 421.600052][T29696] bridge0: port 3(macvlan2) entered disabled state [ 421.611883][T29696] macvlan2: entered allmulticast mode [ 421.617371][T29696] bridge0: entered allmulticast mode [ 421.636894][T29696] macvlan2: left allmulticast mode [ 421.642146][T29696] bridge0: left allmulticast mode [ 421.648484][T29696] bridge0: left promiscuous mode [ 421.861099][T29710] netlink: 'syz.2.9793': attribute type 1 has an invalid length. [ 421.868910][T29710] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 421.995418][T29717] loop2: detected capacity change from 0 to 128 [ 421.997388][T29718] 9pnet_fd: Insufficient options for proto=fd [ 422.096661][T29724] veth0_macvtap: entered promiscuous mode [ 422.107712][T29724] team0: Device macvtap0 failed to register rx_handler [ 422.118321][T29724] veth0_macvtap: left promiscuous mode [ 422.256150][T29735] loop1: detected capacity change from 0 to 512 [ 422.262885][T29735] ext4: Unknown parameter 'fsuuid' [ 422.308353][T29742] loop1: detected capacity change from 0 to 2048 [ 422.321123][T29740] netlink: 'syz.5.9806': attribute type 10 has an invalid length. [ 422.329075][T29740] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9806'. [ 422.369576][T29742] ext4: Unknown parameter 'euid' [ 422.394514][T29747] tipc: Enabled bearer , priority 0 [ 422.409032][T29746] tipc: Disabling bearer [ 422.414849][T29751] 9pnet_fd: Insufficient options for proto=fd [ 422.508745][T29765] loop1: detected capacity change from 0 to 128 [ 422.537993][T29768] netlink: 'syz.0.9820': attribute type 10 has an invalid length. [ 422.546010][T29768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9820'. [ 422.552978][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 422.552998][ T29] audit: type=1400 audit(1745088061.229:40779): avc: denied { create } for pid=29770 comm="syz.3.9821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 422.585517][ T29] audit: type=1400 audit(1745088061.259:40780): avc: denied { bind } for pid=29770 comm="syz.3.9821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 422.613819][T29777] 9pnet_fd: Insufficient options for proto=fd [ 422.620334][ T29] audit: type=1400 audit(1745088061.289:40781): avc: denied { listen } for pid=29770 comm="syz.3.9821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 422.635149][T29776] loop0: detected capacity change from 0 to 2048 [ 422.664943][T29776] ext4: Unknown parameter 'euid' [ 422.696301][T29783] tipc: Enabled bearer , priority 0 [ 422.706181][T29782] tipc: Disabling bearer [ 422.727334][T29785] loop1: detected capacity change from 0 to 1024 [ 422.782895][ T29] audit: type=1326 audit(1745088061.459:40782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29790 comm="syz.0.9828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc277e169 code=0x7ffc0000 [ 422.806934][ T29] audit: type=1326 audit(1745088061.459:40783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29790 comm="syz.0.9828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc277e169 code=0x7ffc0000 [ 422.831028][ T29] audit: type=1326 audit(1745088061.459:40784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29790 comm="syz.0.9828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2cc277e169 code=0x7ffc0000 [ 422.839245][T29793] loop0: detected capacity change from 0 to 512 [ 422.854849][ T29] audit: type=1326 audit(1745088061.459:40785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29790 comm="syz.0.9828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc277e169 code=0x7ffc0000 [ 422.877166][T29793] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.9829: casefold flag without casefold feature [ 422.897841][T29793] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.9829: couldn't read orphan inode 15 (err -117) [ 422.912604][T29793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9829'. [ 423.083593][T29804] netlink: 'syz.0.9833': attribute type 10 has an invalid length. [ 423.091591][T29804] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9833'. [ 423.125698][ T29] audit: type=1400 audit(1745088061.799:40786): avc: denied { read } for pid=29807 comm="syz.2.9835" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 423.150465][ T29] audit: type=1400 audit(1745088061.799:40787): avc: denied { open } for pid=29807 comm="syz.2.9835" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 423.175972][T29808] FAULT_INJECTION: forcing a failure. [ 423.175972][T29808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.189331][T29808] CPU: 1 UID: 0 PID: 29808 Comm: syz.2.9835 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 423.189364][T29808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 423.189377][T29808] Call Trace: [ 423.189384][T29808] [ 423.189398][T29808] dump_stack_lvl+0xf6/0x150 [ 423.189465][T29808] dump_stack+0x15/0x1a [ 423.189486][T29808] should_fail_ex+0x261/0x270 [ 423.189512][T29808] should_fail+0xb/0x10 [ 423.189530][T29808] should_fail_usercopy+0x1a/0x20 [ 423.189556][T29808] _copy_from_iter+0xd8/0xd10 [ 423.189624][T29808] ? alloc_pages_mpol+0x215/0x260 [ 423.189666][T29808] copy_page_from_iter+0x14f/0x280 [ 423.189694][T29808] tun_get_user+0x69d/0x2640 [ 423.189840][T29808] ? avc_has_perm+0xd6/0x150 [ 423.189864][T29808] ? ref_tracker_alloc+0x1ff/0x310 [ 423.189895][T29808] tun_chr_write_iter+0x188/0x240 [ 423.190050][T29808] vfs_write+0x79b/0x950 [ 423.190072][T29808] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 423.190168][T29808] ksys_write+0xeb/0x1b0 [ 423.190193][T29808] __x64_sys_write+0x42/0x50 [ 423.190216][T29808] x64_sys_call+0x2a45/0x2e10 [ 423.190237][T29808] do_syscall_64+0xc9/0x1a0 [ 423.190261][T29808] ? clear_bhb_loop+0x25/0x80 [ 423.190280][T29808] ? clear_bhb_loop+0x25/0x80 [ 423.190359][T29808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.190385][T29808] RIP: 0033:0x7f5dda53cc1f [ 423.190402][T29808] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 423.190501][T29808] RSP: 002b:00007f5dd8ba7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 423.190521][T29808] RAX: ffffffffffffffda RBX: 00007f5dda765fa0 RCX: 00007f5dda53cc1f [ 423.190609][T29808] RDX: 0000000000000015 RSI: 0000200000000300 RDI: 00000000000000c8 [ 423.190624][T29808] RBP: 00007f5dd8ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 423.190638][T29808] R10: 0000000000000015 R11: 0000000000000293 R12: 0000000000000001 [ 423.190652][T29808] R13: 0000000000000000 R14: 00007f5dda765fa0 R15: 00007fffa4eff6b8 [ 423.190675][T29808] [ 423.425010][T29814] loop5: detected capacity change from 0 to 2048 [ 423.432022][T29814] ext4: Unknown parameter 'euid' [ 423.446021][T29818] tipc: Started in network mode [ 423.451024][T29818] tipc: Node identity 5e415d1b5fcd, cluster identity 4711 [ 423.458384][T29818] tipc: Enabled bearer , priority 0 [ 423.468382][ T29] audit: type=1326 audit(1745088062.139:40788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29819 comm="syz.5.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada16e169 code=0x7ffc0000 [ 423.492693][T29817] tipc: Disabling bearer [ 423.589908][T29830] netlink: 'syz.1.9844': attribute type 10 has an invalid length. [ 423.597792][T29830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9844'. [ 423.638476][T29837] veth0_macvtap: entered promiscuous mode [ 423.647385][T29837] team0: Device macvtap0 failed to register rx_handler [ 423.655139][T29837] veth0_macvtap: left promiscuous mode [ 423.676285][T29843] loop5: detected capacity change from 0 to 2048 [ 423.683191][T29843] ext4: Unknown parameter 'euid' [ 423.783369][T29852] loop2: detected capacity change from 0 to 1024 [ 423.813879][T29856] C: renamed from team_slave_0 (while UP) [ 423.821176][T29856] netlink: 'syz.1.9853': attribute type 1 has an invalid length. [ 423.828972][T29856] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 423.976088][T29865] tipc: Enabled bearer , priority 0 [ 423.986551][T29864] tipc: Disabling bearer [ 424.129587][T29877] loop0: detected capacity change from 0 to 128 [ 424.174158][T29881] loop0: detected capacity change from 0 to 512 [ 424.182488][T29881] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.9865: casefold flag without casefold feature [ 424.195338][T29881] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.9865: couldn't read orphan inode 15 (err -117) [ 424.208832][T29881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9865'. [ 424.461677][T29893] tipc: Started in network mode [ 424.466633][T29893] tipc: Node identity 86b3b0f724cc, cluster identity 4711 [ 424.473960][T29893] tipc: Enabled bearer , priority 0 [ 424.484008][T29892] tipc: Disabling bearer [ 424.517223][T29895] 9pnet_fd: Insufficient options for proto=fd [ 424.591276][T29903] 9pnet_fd: Insufficient options for proto=fd [ 424.628886][T29914] 9pnet_fd: Insufficient options for proto=fd [ 424.630916][T29910] veth0_macvtap: entered promiscuous mode [ 424.644981][T29910] team0: Device macvtap0 failed to register rx_handler [ 424.653295][T29910] veth0_macvtap: left promiscuous mode [ 424.692211][T29920] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9880'. [ 424.775377][T29928] loop5: detected capacity change from 0 to 512 [ 424.788924][T29928] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 424.809267][T29928] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 424.824125][T29928] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.9882: corrupted inode contents [ 424.836499][T29928] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #11: comm syz.5.9882: mark_inode_dirty error [ 424.837137][T29937] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.851312][T29928] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.9882: invalid indirect mapped block 1 (level 1) [ 424.865520][T29938] loop2: detected capacity change from 0 to 1024 [ 424.872710][T29928] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.9882: corrupted inode contents [ 424.890530][T29928] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 424.901118][T29939] netlink: 'syz.1.9887': attribute type 10 has an invalid length. [ 424.901083][T29928] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.9882: corrupted inode contents [ 424.921322][T29928] EXT4-fs error (device loop5): ext4_truncate:4255: inode #11: comm syz.5.9882: mark_inode_dirty error [ 424.932987][T29928] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 424.934170][T29937] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.944473][T29928] EXT4-fs (loop5): 1 truncate cleaned up [ 425.000931][T29937] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.118353][T29937] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.180374][T29937] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.197328][T29937] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.211797][T29937] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.231101][T29937] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.240812][T29955] veth0_macvtap: entered promiscuous mode [ 425.241322][T29958] vhci_hcd: invalid port number 15 [ 425.254275][T29958] netlink: 'syz.5.9894': attribute type 1 has an invalid length. [ 425.263440][T29955] team0: Device macvtap0 failed to register rx_handler [ 425.270889][T29955] veth0_macvtap: left promiscuous mode [ 425.295936][T29958] bond1 (unregistering): Released all slaves [ 425.343805][T29965] veth0_macvtap: entered promiscuous mode [ 425.351511][T29965] team0: Device macvtap0 failed to register rx_handler [ 425.358498][T29971] loop1: detected capacity change from 0 to 512 [ 425.365077][T29965] veth0_macvtap: left promiscuous mode [ 425.365233][T29971] ext4: Unknown parameter 'fsuuid' [ 425.397621][T29973] loop1: detected capacity change from 0 to 128 [ 425.466831][T29983] loop5: detected capacity change from 0 to 512 [ 425.482019][T29983] EXT4-fs error (device loop5): ext4_orphan_get:1390: inode #15: comm syz.5.9905: casefold flag without casefold feature [ 425.501669][T29989] loop1: detected capacity change from 0 to 512 [ 425.503417][T29983] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.9905: couldn't read orphan inode 15 (err -117) [ 425.516490][T29991] veth0_macvtap: entered promiscuous mode [ 425.526143][T29989] ext4: Unknown parameter 'fsuuid' [ 425.529826][T29991] team0: Device macvtap0 failed to register rx_handler [ 425.538786][T29991] veth0_macvtap: left promiscuous mode [ 425.597128][T30002] __nla_validate_parse: 2 callbacks suppressed [ 425.597147][T30002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9912'. [ 425.597535][T30001] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 425.603469][T30002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9912'. [ 425.680189][T30007] loop3: detected capacity change from 0 to 128 [ 425.693743][T30005] vhci_hcd: invalid port number 15 [ 425.714214][T30005] bond1 (unregistering): Released all slaves [ 425.742595][T30014] loop3: detected capacity change from 0 to 512 [ 425.755190][T30014] ext4: Unknown parameter 'fsuuid' [ 425.790432][T30023] loop2: detected capacity change from 0 to 512 [ 425.807695][T30024] veth0_macvtap: entered promiscuous mode [ 425.815603][T30024] team0: Device macvtap0 failed to register rx_handler [ 425.822427][T30023] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 425.831227][T30024] veth0_macvtap: left promiscuous mode [ 425.850328][T30023] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 425.869114][T30023] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.9915: corrupted inode contents [ 425.884055][T30023] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #11: comm syz.2.9915: mark_inode_dirty error [ 425.895778][T30023] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.9915: invalid indirect mapped block 1 (level 1) [ 425.912053][T30023] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.9915: corrupted inode contents [ 425.924475][T30023] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 425.933631][T30023] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.9915: corrupted inode contents [ 425.946834][T30023] EXT4-fs error (device loop2): ext4_truncate:4255: inode #11: comm syz.2.9915: mark_inode_dirty error [ 425.965950][T30023] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 425.966507][T30038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9927'. [ 425.975455][T30033] loop5: detected capacity change from 0 to 512 [ 425.984080][T30038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9927'. [ 426.005760][T30039] loop3: detected capacity change from 0 to 1024 [ 426.013156][T30023] EXT4-fs (loop2): 1 truncate cleaned up [ 426.015863][T30033] EXT4-fs error (device loop5): ext4_orphan_get:1390: inode #15: comm syz.5.9925: casefold flag without casefold feature [ 426.034895][T30033] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.9925: couldn't read orphan inode 15 (err -117) [ 426.053954][T30033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9925'. [ 426.083920][T30047] loop0: detected capacity change from 0 to 512 [ 426.095582][T30047] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.9929: casefold flag without casefold feature [ 426.109121][T30047] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.9929: couldn't read orphan inode 15 (err -117) [ 426.138618][T30047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9929'. [ 426.179995][T30045] loop1: detected capacity change from 0 to 512 [ 426.187059][T30045] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 426.198313][T30045] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 426.215094][T30045] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #11: comm syz.1.9928: corrupted inode contents [ 426.227337][T30045] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #11: comm syz.1.9928: mark_inode_dirty error [ 426.230259][T30053] loop2: detected capacity change from 0 to 128 [ 426.247334][T30045] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.9928: invalid indirect mapped block 1 (level 1) [ 426.267299][T30045] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #11: comm syz.1.9928: corrupted inode contents [ 426.281749][T30045] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 426.290841][T30045] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #11: comm syz.1.9928: corrupted inode contents [ 426.303976][T30045] EXT4-fs error (device loop1): ext4_truncate:4255: inode #11: comm syz.1.9928: mark_inode_dirty error [ 426.308611][T30063] loop5: detected capacity change from 0 to 512 [ 426.324994][T30063] ext4: Unknown parameter 'fsuuid' [ 426.332707][T30045] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 426.336743][T30064] tipc: Enabled bearer , priority 0 [ 426.351743][T30045] EXT4-fs (loop1): 1 truncate cleaned up [ 426.358747][T30058] tipc: Disabling bearer [ 426.462965][T30077] loop1: detected capacity change from 0 to 512 [ 426.473392][T30077] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.9941: casefold flag without casefold feature [ 426.487035][T30077] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.9941: couldn't read orphan inode 15 (err -117) [ 426.504151][T30077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9941'. [ 426.515345][T30075] loop0: detected capacity change from 0 to 512 [ 426.522483][T30075] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 426.544700][T30085] loop5: detected capacity change from 0 to 2048 [ 426.551771][T30085] ext4: Unknown parameter 'euid' [ 426.562334][T30075] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 426.577354][T30075] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9940: corrupted inode contents [ 426.590403][T30075] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #11: comm syz.0.9940: mark_inode_dirty error [ 426.602398][T30075] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.9940: invalid indirect mapped block 1 (level 1) [ 426.616793][T30075] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9940: corrupted inode contents [ 426.629296][T30075] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 426.638027][T30075] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9940: corrupted inode contents [ 426.652075][T30075] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.9940: mark_inode_dirty error [ 426.673332][T30075] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 426.683024][T30075] EXT4-fs (loop0): 1 truncate cleaned up [ 426.726335][T30094] loop0: detected capacity change from 0 to 128 [ 426.766281][T30100] loop3: detected capacity change from 0 to 512 [ 426.773833][T30100] ext4: Unknown parameter 'fsuuid' [ 426.805765][T30103] tipc: Enabled bearer , priority 0 [ 426.819948][T30102] tipc: Disabling bearer [ 426.892969][T30114] loop0: detected capacity change from 0 to 512 [ 426.901319][T30114] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.9954: casefold flag without casefold feature [ 426.914180][T30114] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.9954: couldn't read orphan inode 15 (err -117) [ 426.927768][T30114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9954'. [ 427.037346][T30120] loop3: detected capacity change from 0 to 1024 [ 427.044361][T30120] EXT4-fs: Ignoring removed orlov option [ 427.050126][T30120] EXT4-fs: Ignoring removed bh option [ 427.072464][T30116] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 427.139951][T30130] validate_nla: 2 callbacks suppressed [ 427.139972][T30130] netlink: 'syz.0.9958': attribute type 10 has an invalid length. [ 427.153353][T30130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9958'. [ 427.212647][T30136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.267326][T30137] netlink: 'syz.2.9961': attribute type 10 has an invalid length. [ 427.275329][T30137] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9961'. [ 427.287549][T30136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.342072][T30136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.398402][T30142] veth0_macvtap: entered promiscuous mode [ 427.406014][T30142] team0: Device macvtap0 failed to register rx_handler [ 427.414392][T30142] veth0_macvtap: left promiscuous mode [ 427.430115][T30136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.455689][T30147] tipc: Enabled bearer , priority 0 [ 427.466164][T30146] tipc: Disabling bearer [ 427.487860][T30136] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.500631][T30136] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.513240][T30136] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.537660][T30136] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.547889][T30155] vhci_hcd: invalid port number 15 [ 427.554677][T30155] netlink: 'syz.0.9968': attribute type 1 has an invalid length. [ 427.569708][T30155] bond1 (unregistering): Released all slaves [ 427.633528][T30165] loop2: detected capacity change from 0 to 2048 [ 427.640506][T30165] ext4: Unknown parameter 'euid' [ 427.726519][T30174] 9pnet_fd: Insufficient options for proto=fd [ 427.732727][ T29] kauditd_printk_skb: 590 callbacks suppressed [ 427.732743][ T29] audit: type=1326 audit(1745088066.400:41379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30175 comm="syz.0.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc277e169 code=0x7ffc0000 [ 427.762619][ T29] audit: type=1326 audit(1745088066.400:41380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30175 comm="syz.0.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc277e169 code=0x7ffc0000 [ 427.786596][ T29] audit: type=1326 audit(1745088066.400:41381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30175 comm="syz.0.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2cc277e169 code=0x7ffc0000 [ 427.810391][ T29] audit: type=1326 audit(1745088066.400:41382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30175 comm="syz.0.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc277e169 code=0x7ffc0000 [ 427.834044][ T29] audit: type=1326 audit(1745088066.400:41383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30175 comm="syz.0.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc277e169 code=0x7ffc0000 [ 427.958991][ T29] audit: type=1326 audit(1745088066.630:41384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30194 comm="syz.1.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29477de169 code=0x7ffc0000 [ 427.982676][ T29] audit: type=1326 audit(1745088066.630:41385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30194 comm="syz.1.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29477de169 code=0x7ffc0000 [ 428.006553][ T29] audit: type=1326 audit(1745088066.630:41386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30194 comm="syz.1.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29477de169 code=0x7ffc0000 [ 428.030425][ T29] audit: type=1326 audit(1745088066.630:41387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30194 comm="syz.1.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29477de169 code=0x7ffc0000 [ 428.054499][ T29] audit: type=1326 audit(1745088066.630:41388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30194 comm="syz.1.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29477de169 code=0x7ffc0000 [ 428.078978][T30204] loop0: detected capacity change from 0 to 512 [ 428.085854][T30204] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 428.096011][T30204] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 428.116512][T30203] netlink: 'syz.1.9990': attribute type 1 has an invalid length. [ 428.118392][T30204] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9984: corrupted inode contents [ 428.124361][T30203] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 428.155621][T30204] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #11: comm syz.0.9984: mark_inode_dirty error [ 428.167374][T30204] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.9984: invalid indirect mapped block 1 (level 1) [ 428.183233][T30204] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9984: corrupted inode contents [ 428.198377][T30204] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 428.211992][T30204] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.9984: corrupted inode contents [ 428.225788][T30204] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.9984: mark_inode_dirty error [ 428.237616][T30204] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 428.246918][T30204] EXT4-fs (loop0): 1 truncate cleaned up [ 428.256059][T30211] loop1: detected capacity change from 0 to 512 [ 428.266068][T30211] ext4: Unknown parameter 'fsuuid' [ 428.416195][T30234] loop1: detected capacity change from 0 to 512 [ 428.423788][T30234] ext4: Unknown parameter 'fsuuid' [ 428.441477][T30238] 9pnet_fd: Insufficient options for proto=fd [ 428.618344][T30256] bridge0: entered promiscuous mode [ 428.623929][T30256] macvlan2: entered promiscuous mode [ 428.631216][T30268] vhci_hcd: invalid port number 15 [ 428.633296][T30256] bridge0: port 3(macvlan2) entered blocking state [ 428.637750][T30270] 9pnet_fd: Insufficient options for proto=fd [ 428.643118][T30256] bridge0: port 3(macvlan2) entered disabled state [ 428.643602][T30256] macvlan2: entered allmulticast mode [ 428.651047][T30268] netlink: 'syz.2.10020': attribute type 1 has an invalid length. [ 428.655975][T30256] bridge0: entered allmulticast mode [ 428.681244][T30266] loop1: detected capacity change from 0 to 512 [ 428.687936][T30266] ext4: Unknown parameter 'fsuuid' [ 428.693552][T30256] macvlan2: left allmulticast mode [ 428.698726][T30256] bridge0: left allmulticast mode [ 428.704746][T30256] bridge0: left promiscuous mode [ 428.737613][T30271] bond1 (unregistering): Released all slaves [ 428.827429][T30290] loop0: detected capacity change from 0 to 1024 [ 428.860471][T30297] 9pnet_fd: Insufficient options for proto=fd [ 428.971476][T30314] tipc: Enabled bearer , priority 0 [ 429.006624][T30313] tipc: Disabling bearer [ 429.018069][T30316] bridge0: entered promiscuous mode [ 429.023523][T30316] macvlan2: entered promiscuous mode [ 429.030637][T30316] bridge0: port 3(macvlan2) entered blocking state [ 429.037209][T30316] bridge0: port 3(macvlan2) entered disabled state [ 429.044760][T30316] macvlan2: entered allmulticast mode [ 429.050485][T30316] bridge0: entered allmulticast mode [ 429.056998][T30316] macvlan2: left allmulticast mode [ 429.062279][T30316] bridge0: left allmulticast mode [ 429.068460][T30316] bridge0: left promiscuous mode [ 429.086551][T30329] vhci_hcd: invalid port number 15 [ 429.102336][T30329] netlink: 'syz.5.10047': attribute type 1 has an invalid length. [ 429.131849][T30329] bond1 (unregistering): Released all slaves [ 429.165829][T30331] loop1: detected capacity change from 0 to 512 [ 429.196462][T30331] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 429.207364][T30331] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 429.225576][T30331] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #11: comm syz.1.10048: corrupted inode contents [ 429.242128][T30331] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #11: comm syz.1.10048: mark_inode_dirty error [ 429.254409][T30331] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.10048: invalid indirect mapped block 1 (level 1) [ 429.272146][T30331] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #11: comm syz.1.10048: corrupted inode contents [ 429.284512][T30331] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 429.293381][T30331] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #11: comm syz.1.10048: corrupted inode contents [ 429.323974][T30331] EXT4-fs error (device loop1): ext4_truncate:4255: inode #11: comm syz.1.10048: mark_inode_dirty error [ 429.344088][T30357] tipc: Enabled bearer , priority 0 [ 429.353541][T30331] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 429.365151][T30331] EXT4-fs (loop1): 1 truncate cleaned up [ 429.383734][T30354] tipc: Disabling bearer [ 429.430995][T30368] loop3: detected capacity change from 0 to 512 [ 429.437680][T30368] ext4: Unknown parameter 'fsuuid' [ 429.447008][T30364] bridge0: entered promiscuous mode [ 429.452557][T30364] macvlan2: entered promiscuous mode [ 429.459427][T30364] bridge0: port 3(macvlan2) entered blocking state [ 429.466056][T30364] bridge0: port 3(macvlan2) entered disabled state [ 429.474033][T30364] macvlan2: entered allmulticast mode [ 429.479500][T30364] bridge0: entered allmulticast mode [ 429.486453][T30364] macvlan2: left allmulticast mode [ 429.491663][T30364] bridge0: left allmulticast mode [ 429.497640][T30364] bridge0: left promiscuous mode [ 429.517748][T30374] veth0_macvtap: entered promiscuous mode [ 429.525242][T30374] team0: Device macvtap0 failed to register rx_handler [ 429.532561][T30374] veth0_macvtap: left promiscuous mode [ 429.563882][T30382] netlink: 'syz.3.10067': attribute type 1 has an invalid length. [ 429.571996][T30382] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 429.678415][T30394] loop2: detected capacity change from 0 to 2048 [ 429.685596][T30394] ext4: Unknown parameter 'euid' [ 429.708635][T30403] tipc: Enabled bearer , priority 0 [ 429.718418][T30401] tipc: Disabling bearer [ 429.762373][T30410] loop5: detected capacity change from 0 to 512 [ 429.770302][T30410] EXT4-fs error (device loop5): ext4_orphan_get:1390: inode #15: comm syz.5.10079: casefold flag without casefold feature [ 429.786218][T30410] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.10079: couldn't read orphan inode 15 (err -117) [ 429.857297][T30406] loop3: detected capacity change from 0 to 1024 [ 429.870270][T30406] EXT4-fs: Ignoring removed orlov option [ 429.876034][T30406] EXT4-fs: Ignoring removed bh option [ 429.903680][T30406] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 430.041361][T30433] bridge0: entered promiscuous mode [ 430.046648][T30433] macvlan2: entered promiscuous mode [ 430.055621][T30433] bridge0: port 3(macvlan2) entered blocking state [ 430.062385][T30433] bridge0: port 3(macvlan2) entered disabled state [ 430.072301][T30433] macvlan2: entered allmulticast mode [ 430.077755][T30433] bridge0: entered allmulticast mode [ 430.083674][T30433] macvlan2: left allmulticast mode [ 430.088882][T30433] bridge0: left allmulticast mode [ 430.096953][T30433] bridge0: left promiscuous mode [ 430.182672][T30437] vhci_hcd: invalid port number 15 [ 430.189463][T30437] netlink: 'syz.0.10087': attribute type 1 has an invalid length. [ 430.204569][T30437] bond1 (unregistering): Released all slaves [ 430.497819][T30463] loop1: detected capacity change from 0 to 512 [ 430.511351][T30463] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 430.556218][T30463] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 430.586464][T30463] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #11: comm syz.1.10095: corrupted inode contents [ 430.600303][T30463] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #11: comm syz.1.10095: mark_inode_dirty error [ 430.600437][T30477] vhci_hcd: invalid port number 15 [ 430.630480][T30463] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.10095: invalid indirect mapped block 1 (level 1) [ 430.657445][T30463] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #11: comm syz.1.10095: corrupted inode contents [ 430.680555][T30463] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 430.693769][T30477] netlink: 'syz.2.10101': attribute type 1 has an invalid length. [ 430.708173][T30463] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #11: comm syz.1.10095: corrupted inode contents [ 430.724690][T30463] EXT4-fs error (device loop1): ext4_truncate:4255: inode #11: comm syz.1.10095: mark_inode_dirty error [ 430.736167][T30463] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 430.740182][T30483] loop3: detected capacity change from 0 to 512 [ 430.747525][T30477] bond1 (unregistering): Released all slaves [ 430.753146][T30463] EXT4-fs (loop1): 1 truncate cleaned up [ 430.766362][T30483] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #15: comm syz.3.10103: casefold flag without casefold feature [ 430.782121][T30483] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.10103: couldn't read orphan inode 15 (err -117) [ 430.796352][T30483] __nla_validate_parse: 8 callbacks suppressed [ 430.796372][T30483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10103'. [ 430.843670][T30490] loop1: detected capacity change from 0 to 512 [ 430.850529][T30490] ext4: Unknown parameter 'fsuuid' [ 430.856383][T30469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.865702][T30469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.958897][T30500] loop2: detected capacity change from 0 to 128 [ 430.982677][T30506] veth0_macvtap: entered promiscuous mode [ 430.991079][T30506] team0: Device macvtap0 failed to register rx_handler [ 431.001399][T30506] veth0_macvtap: left promiscuous mode [ 431.175807][T30536] loop2: detected capacity change from 0 to 2048 [ 431.184062][T30536] ext4: Unknown parameter 'euid' [ 431.240852][T30540] bridge0: entered promiscuous mode [ 431.246274][T30540] macvlan2: entered promiscuous mode [ 431.253001][T30540] bridge0: port 3(macvlan2) entered blocking state [ 431.259599][T30540] bridge0: port 3(macvlan2) entered disabled state [ 431.268989][T30540] macvlan2: entered allmulticast mode [ 431.274411][T30540] bridge0: entered allmulticast mode [ 431.282039][T30540] macvlan2: left allmulticast mode [ 431.287290][T30540] bridge0: left allmulticast mode [ 431.293658][T30540] bridge0: left promiscuous mode [ 431.375892][T30544] veth0_macvtap: entered promiscuous mode [ 431.383176][T30544] team0: Device macvtap0 failed to register rx_handler [ 431.390402][T30544] veth0_macvtap: left promiscuous mode [ 431.501146][T25529] kernel write not supported for file /validatetrans (pid: 25529 comm: kworker/1:7) [ 431.570302][T30566] loop1: detected capacity change from 0 to 512 [ 431.577115][T30566] ext4: Unknown parameter 'fsuuid' [ 431.588200][T30568] veth0_macvtap: entered promiscuous mode [ 431.596928][T30568] team0: Device macvtap0 failed to register rx_handler [ 431.604173][T30568] veth0_macvtap: left promiscuous mode [ 431.615501][T30571] loop1: detected capacity change from 0 to 512 [ 431.622523][T30571] ext4: Unknown parameter 'fsuuid' [ 431.703891][T30587] loop1: detected capacity change from 0 to 512 [ 431.707584][T30590] tipc: Enabled bearer , priority 0 [ 431.720826][T30588] tipc: Disabling bearer [ 431.727527][T30587] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.10144: casefold flag without casefold feature [ 431.748806][T30587] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.10144: couldn't read orphan inode 15 (err -117) [ 431.766054][T30587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10144'. [ 431.817674][T30601] ================================================================== [ 431.825817][T30601] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 431.833645][T30601] [ 431.835970][T30601] write to 0xffff888106db6710 of 8 bytes by task 30600 on cpu 1: [ 431.843703][T30601] mas_wr_store_entry+0x1266/0x2460 [ 431.848914][T30601] mas_store_prealloc+0x6d5/0x960 [ 431.853946][T30601] commit_merge+0x685/0x710 [ 431.858457][T30601] vma_expand+0x1d9/0x380 [ 431.862880][T30601] vma_merge_new_range+0x2c2/0x340 [ 431.868000][T30601] mmap_region+0x805/0x1490 [ 431.872516][T30601] do_mmap+0x9ef/0xc80 [ 431.876588][T30601] vm_mmap_pgoff+0x16d/0x2d0 [ 431.881208][T30601] ksys_mmap_pgoff+0xd0/0x340 [ 431.885974][T30601] x64_sys_call+0x1945/0x2e10 [ 431.890659][T30601] do_syscall_64+0xc9/0x1a0 [ 431.895186][T30601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.901083][T30601] [ 431.903760][T30601] read to 0xffff888106db6710 of 8 bytes by task 30601 on cpu 0: [ 431.911399][T30601] mtree_range_walk+0x1b3/0x460 [ 431.916259][T30601] mas_walk+0x16e/0x320 [ 431.920434][T30601] lock_vma_under_rcu+0xa7/0x340 [ 431.925467][T30601] exc_page_fault+0x150/0x6a0 [ 431.930149][T30601] asm_exc_page_fault+0x26/0x30 [ 431.935091][T30601] [ 431.937415][T30601] value changed: 0x00007f2cc0da5fff -> 0x00007f2cc0d84fff [ 431.944531][T30601] [ 431.946865][T30601] Reported by Kernel Concurrency Sanitizer on: [ 431.953015][T30601] CPU: 0 UID: 0 PID: 30601 Comm: syz.0.10149 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 431.965626][T30601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 431.976123][T30601] ================================================================== [ 431.996690][T30606] vhci_hcd: invalid port number 15 [ 432.009880][T30602] loop0: detected capacity change from 0 to 164 [ 432.026114][T30601] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 432.026866][T30606] netlink: 'syz.5.10150': attribute type 1 has an invalid length. [ 432.062368][T30606] bond1 (unregistering): Released all slaves