last executing test programs: 9.14668007s ago: executing program 2 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 9.118454363s ago: executing program 2 (id=523): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000001801000020646c2500000000002020207b1af8ff00000000bfa100ffffffffff06010000f8ffffffb7020000080000000006000000850000007d0000009500"/85], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) uname(&(0x7f00000014c0)=""/4096) ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) close(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000000000000000000300000000030000000200"], 0x0, 0x4f}, 0x28) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000004c249c6cec31440849d96d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000010000000000000000000000b7080000000000007baaf8ff00000000b5080000098000007b8af0ff00000000bfa10000004ffe39e18d28640db0d900000007010000f8ffffffbfa400000000000007040000f0ffffffb7026698d98e75e189bacdfdc98113aa36bb2129b71ac10433ba14ff7000d5675b1425e23bbdcc35cd0762f23bc2e55ce34a328913ea4e9a09695e400000005786a3ab3cc3e4d720af80b4", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b3000000850000000f0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) 8.12816032s ago: executing program 2 (id=536): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"6b3bfb24a49cb307ac6500", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x82, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) recvmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0, 0x0, 0x0, 0x40000}, 0x5}], 0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) 7.224831589s ago: executing program 2 (id=545): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00'], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e671ab4912f9f6a31854ec98e950cf8caa52dd8d39af14c31ed56a13d900"}, 0x48, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x37, 0x65, 0x34, 0x39, 0x31, 0x33, 0x38, 0x66, 0x36, 0x5c, 0x33, 0x30, 0x61, 0x65, 0x61]}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r4, r4, 0x0) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018f2f56514fbfd8f39438f02110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x10007ffffffff}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = gettid() r8 = socket(0x40000000015, 0x5, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) recvmmsg(r8, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000300)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x2c020400) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000080)={0xe4, 0x80000002, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r10, 0x408c5333, &(0x7f0000000580)={0x0, 0x9e, 0x0, 'queue0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 6.29368344s ago: executing program 2 (id=558): r0 = socket$isdn(0x22, 0x3, 0x2) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x4) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xef7, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x7, @empty, 0xbff}, @ib={0x1b, 0xf, 0xffa, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r3) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file1\x00', &(0x7f0000002440)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYRES64=r2, @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=r1, @ANYRES64=r2, @ANYRES32=0xee00, @ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYBLOB="be044eeb77c9fd0a6f8e1993d914ccb250e9c24675609adf70adf5288808ab37ca48240398e984a96d466eaacd411952c61186cdcddefff3cfe654d4e7a06729459be72f4c74249ea05fde3a09564688093fa6e85a198727290c25758dcc0209a30ea2e965a166061f78be8b9d26b2392fe4cdea3cdaf59d3307331c23e1ea048f84bff4791003f6c08328d9661984ef0beacc919a4b6cd80b580c0f3d41144d30313ebee3799329697935934ccee085ad9930ac5a54fb1b9045ce700e013e88d310d2905332cf390130c1425b1791f76dbe", @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f0000000080), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)=@known='trusted.overlay.origin\x00', &(0x7f0000000140)=""/244, 0xf4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) open(&(0x7f0000000580)='./file1\x00', 0x9c000, 0x40) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 5.965975803s ago: executing program 2 (id=560): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 5.070230111s ago: executing program 4 (id=577): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(0x0, 0xf4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() r4 = dup2(r0, r0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) io_setup(0x8, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x204000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) io_getevents(r5, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x2, {0xe0, 0x1, 0x3}}, 0x14) r8 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000009010100000000000000000a000004240002001400018008000100ac1414aa08000200ac14142f0c00028005000100060000000900010073797a310000000070c853fe8af89a5a4cbf66a0f375a3bad92e7c78b1b2fce2299bbbfd30ac4530b128b6560aefd1174c479f057f01e874a4133aba85280fa9c9d8dda471964930345cfc87b7e20737626cd9785187b79814d6af6ac1b489f5041382ae04953db27ed88a0456a8563a45bad23364f333b958aac4fddffba8113bc9b23cbb430f915f4d201e50884c0d0b8c48eb857af666cd826ad8a559fae8a66f86d887c713bbd0ed9126c7"], 0x44}}, 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a20000000000000000000000dbf50d34dce11700000000000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r10, 0xffffffffffffff9b, &(0x7f0000000200)}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x300, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}]}, @NFT_MSG_DELSETELEM={0x5c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x80, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5cda6f36}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e4016b6}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}]}, @NFTA_CHAIN_USERDATA={0x4f, 0xc, "2c7154f7832a0919a548fb0c75d1d7f7b9829767597cc5404c625371c83f44b4a5e9a997f23fc38bdbd2f91e4a33789b64012c616d963398e8de19dd26f38ae503dcc2d3bb727f7eb093b9"}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x104, 0x2, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xa2, 0x6, "df3b9c38903c0804d0b8b7271680de6e414cfd0afc0513bbb5445e66fc3c9e479eaa957317e1eb425cf178fb2e00dece49ed9ccb3863dd4989e5b5f74ded422efabd84f573a2cd1b8137edc0b62d049890411e2580f1efa7569e0e4a14f89fe1fda557686c649b3a4b6894521b5fd07b99d0eab716bef3f3872794d49bc7c63b219fab75581854e6911a866c40f5eed87857110776f4b4834d8d3a419778"}, @NFTA_TABLE_USERDATA={0x29, 0x6, "429ef2c032217bc7c275221c05c4f46c28069023d040b714cc32d66247bc7e01a1508c62f6"}]}], {0x14}}, 0x3a0}, 0x1, 0x0, 0x0, 0x20004001}, 0x880) mmap(&(0x7f0000063000/0x4000)=nil, 0x4000, 0xb635773f06ebbeea, 0x13, r8, 0x28f43000) 3.886533457s ago: executing program 4 (id=588): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) 2.971930868s ago: executing program 4 (id=597): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e671ab4912f9f6a31854ec98e950cf8caa52dd8d39af14c31ed56a13d900"}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x37, 0x65, 0x34, 0x39, 0x31, 0x33, 0x38, 0x66, 0x36, 0x5c, 0x33, 0x30, 0x61, 0x65, 0x61]}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018f2f56514fbfd8f39438f02110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x10007ffffffff}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = gettid() r7 = socket(0x40000000015, 0x5, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) recvmmsg(r7, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000300)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x2c020400) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000080)={0xe4, 0x80000002, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r9, 0x408c5333, &(0x7f0000000580)={0x0, 0x9e, 0x0, 'queue0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 2.966391708s ago: executing program 0 (id=598): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000100085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r5, 0x0, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x8}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001300)=[{{&(0x7f0000000440)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/78, 0x4e}, {&(0x7f0000000580)=""/167, 0xa7}, {&(0x7f00000006c0)=""/102, 0x66}], 0x3, &(0x7f0000000740)=""/199, 0xc7}, 0x8}, {{&(0x7f0000000840)=@nl, 0x80, &(0x7f00000002c0)=[{&(0x7f00000008c0)=""/103, 0x67}], 0x1, &(0x7f0000000940)=""/175, 0xaf}, 0xfff}, {{&(0x7f0000000a00)=@ax25={{0x3, @rose}, [@default, @default, @default, @netrom, @remote, @remote, @default, @bcast]}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000a80)=""/106, 0x6a}, {&(0x7f0000000b00)=""/148, 0x94}, {&(0x7f0000000c00)=""/237, 0xed}, {&(0x7f0000000d00)=""/217, 0xd9}], 0x4, &(0x7f0000000e00)=""/32, 0x20}, 0x23}, {{&(0x7f0000000e40)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000fc0)=[{0x0}, {&(0x7f0000000f80)=""/14, 0xe}], 0x2, &(0x7f0000002180)=""/4096, 0x1000}, 0x8000}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001000)=""/253, 0xfd}, {&(0x7f0000001100)=""/9, 0x9}, {&(0x7f0000001140)=""/119, 0x77}, {&(0x7f00000011c0)=""/17, 0x11}], 0x4, &(0x7f0000001280)=""/103, 0x67}}], 0x5, 0x40002060, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r10, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x12000, 0x0) ioctl$TUNSETIFINDEX(r12, 0x400454da, &(0x7f0000001480)=r7) 2.898701494s ago: executing program 0 (id=599): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(0x0, 0xf4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() r4 = dup2(r0, r0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) io_setup(0x8, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x204000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) io_getevents(r5, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x2, {0xe0, 0x1, 0x3}}, 0x14) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000009010100000000000000000a000004240002001400018008000100ac1414aa08000200ac14142f0c00028005000100060000000900010073797a310000000070c853fe8af89a5a4cbf66a0f375a3bad92e7c78b1b2fce2299bbbfd30ac4530b128b6560aefd1174c479f057f01e874a4133aba85280fa9c9d8dda471964930345cfc87b7e20737626cd9785187b79814d6af6ac1b489f5041382ae04953db27ed88a0456a8563a45bad23364f333b958aac4fddffba8113bc9b23cbb430f915f4d201e50884c0d0b8c48eb857af666cd826ad8a559fae8a66f86d887c713bbd0ed9126c7"], 0x44}}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9b, &(0x7f0000000200)}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x300, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}]}, @NFT_MSG_DELSETELEM={0x5c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x80, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5cda6f36}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e4016b6}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}]}, @NFTA_CHAIN_USERDATA={0x4f, 0xc, "2c7154f7832a0919a548fb0c75d1d7f7b9829767597cc5404c625371c83f44b4a5e9a997f23fc38bdbd2f91e4a33789b64012c616d963398e8de19dd26f38ae503dcc2d3bb727f7eb093b9"}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x104, 0x2, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xa2, 0x6, "df3b9c38903c0804d0b8b7271680de6e414cfd0afc0513bbb5445e66fc3c9e479eaa957317e1eb425cf178fb2e00dece49ed9ccb3863dd4989e5b5f74ded422efabd84f573a2cd1b8137edc0b62d049890411e2580f1efa7569e0e4a14f89fe1fda557686c649b3a4b6894521b5fd07b99d0eab716bef3f3872794d49bc7c63b219fab75581854e6911a866c40f5eed87857110776f4b4834d8d3a419778"}, @NFTA_TABLE_USERDATA={0x29, 0x6, "429ef2c032217bc7c275221c05c4f46c28069023d040b714cc32d66247bc7e01a1508c62f6"}]}], {0x14}}, 0x3a0}, 0x1, 0x0, 0x0, 0x20004001}, 0x880) 2.111332862s ago: executing program 1 (id=605): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r0 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x758e, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') exit(0x5) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) 2.092161934s ago: executing program 4 (id=606): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000000000096000000007800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc020000000000000000010000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000c400050000000000000000000000000000000000000000003200000000000000ac14141d000000000000000000000000000000000000ff00070000000000000001000000ac14143e000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000001000000003c000000020000002001000000000000000000000000000100000000010300"/308], 0x17c}}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000500000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="0020000000000000b7080000001800007b8af8ffffffff00bfa1fffffffffff807020000f8ffffffb703400008000001000400000000000085000000030000009500000020000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = dup(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) r8 = dup(r7) read$watch_queue(r8, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000a40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000008000000000000000800000091116d00000000009500000000000000714dfe48b12ccc1374"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x45000001) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in=@multicast2, @in6=@empty, 0x4e23, 0x0, 0x4e21, 0xf, 0x2, 0x20, 0xc0, 0x11, 0x0, 0xee01}, {0x101a, 0x0, 0x4, 0xfff, 0x0, 0x4, 0x0, 0x3}, {0x6, 0x6, 0x0, 0xfffffffffffffff7}, 0x10001, 0x6e6bb2, 0x1, 0x0, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x3507, 0x0, 0x2, 0x5, 0x8001, 0x2, 0x80}}, 0xe8) gettid() 1.870853446s ago: executing program 0 (id=607): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) 1.570836225s ago: executing program 3 (id=608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x38f7}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5400000002060500000000000000000000000000050004000000000005000100070000000900020073797a320000000005000500000000000c000780080012401e0008cd0d000300686173683a6d6163"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) r3 = dup3(r1, 0xffffffffffffffff, 0x80000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) setsockopt(r4, 0xff80, 0x1, &(0x7f00000079c0)="5d201779", 0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kyber_latency\x00'}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r7, &(0x7f00000007c0)={'#! ', './file0', [{0x20, '/dev/urandom\x00'}, {0x20, 'GPL\x00'}, {0x20, 'kfree\x00'}, {}, {0x20, '$'}, {0x20, 'GPL\x00'}], 0xa, "edbfd1476eb8b708194a8a3f3e2fd363a044da19b095a9701043a3cb0619ff791cce51fee1c58429d82b09025042a2e04c66cec5d7f4a5199bfb469db103d2d4fb40e75e4e9f6b94789fce8e98c6424c4c9490d2e88a6ec561233ca88a60a78f9926b4664b727b9f8882ccc7f16a09118703326591e6ab0bedc45a6be25636be1b635c7ad8c1dd6cf47d2a1bb6cdab6e7611441076d697ba5ce5466f828d479d7826ac388b45c7a645381203189658b12cec09237d"}, 0xe2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kmem_cache_free\x00', r8}, 0x18) r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r10, &(0x7f0000000480)=ANY=[], 0x125) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r0, &(0x7f00000002c0)="4bac0245d82697227fab0c37bf728630eb60b7f02e328587540e58751d9cfaac695e2d1da428d0b036ef79e527eed4ca0f12da0d1156a4412ee5", &(0x7f00000005c0)=""/164, 0x4}, 0x20) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000040)) 1.298358672s ago: executing program 3 (id=609): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f00000003c0)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000600), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='console\x00', 0xffffffffffffffff, 0x0, 0x91}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'pim6reg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0x2a}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0xffffffffffffff38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.21518526s ago: executing program 4 (id=610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000000000096000000007800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc020000000000000000010000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000c400050000000000000000000000000000000000000000003200000000000000ac14141d000000000000000000000000000000000000ff00070000000000000001000000ac14143e000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000001000000003c000000020000002001000000000000000000000000000100000000010300"/308], 0x17c}}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000500000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32=r4, @ANYBLOB="0020000000000000b7080000001800007b8af8ffffffff00bfa1fffffffffff807020000f8ffffffb703400008000001000400000000000085000000030000009500000020000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) r9 = dup(r8) read$watch_queue(r9, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000000a40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000008000000000000000800000091116d00000000009500000000000000714dfe48b12ccc1374"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x45000001) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in=@multicast2, @in6=@empty, 0x4e23, 0x0, 0x4e21, 0xf, 0x2, 0x20, 0xc0, 0x11, 0x0, 0xee01}, {0x101a, 0x0, 0x4, 0xfff, 0x0, 0x4, 0x0, 0x3}, {0x6, 0x6, 0x0, 0xfffffffffffffff7}, 0x10001, 0x6e6bb2, 0x1, 0x0, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x3507, 0x0, 0x2, 0x5, 0x8001, 0x2, 0x80}}, 0xe8) gettid() 1.21348662s ago: executing program 1 (id=611): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000240), 0x0, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, r2, r2, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018f2f56514fbfd8f39438f02110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x10007ffffffff}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = gettid() r6 = socket(0x40000000015, 0x5, 0x0) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000001ff000065dd530700a2752cbf86f474fad8cb594ed9fabe9ec277bb8d00000000000000ff07000000000000c9fb90d3abc52620e66db24b7c4f64fd9120d01eaf7503e1c7cfe204909190cf53b6c107bdd3bbcb1b23721d91ea46be5b513aafd253d4342e", 0x6c, 0x0) recvmmsg(r6, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000300)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) eventfd2(0x3ff, 0x800) unshare(0x2c020400) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000080)={0xe4, 0x80000002, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r8, 0x408c5333, &(0x7f0000000580)={0x0, 0x9e, 0x0, 'queue0\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) read(r9, &(0x7f0000000140)=""/60, 0x3c) 1.039606838s ago: executing program 3 (id=612): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x800002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1.015977619s ago: executing program 3 (id=613): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000100085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r5, 0x0, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x8}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001300)=[{{&(0x7f0000000440)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/78, 0x4e}, {&(0x7f0000000580)=""/167, 0xa7}, {&(0x7f00000006c0)=""/102, 0x66}], 0x3, &(0x7f0000000740)=""/199, 0xc7}, 0x8}, {{&(0x7f0000000840)=@nl, 0x80, &(0x7f00000002c0)=[{&(0x7f00000008c0)=""/103, 0x67}], 0x1, &(0x7f0000000940)=""/175, 0xaf}, 0xfff}, {{&(0x7f0000000a00)=@ax25={{0x3, @rose}, [@default, @default, @default, @netrom, @remote, @remote, @default, @bcast]}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000a80)=""/106, 0x6a}, {&(0x7f0000000b00)=""/148, 0x94}, {&(0x7f0000000c00)=""/237, 0xed}, {&(0x7f0000000d00)=""/217, 0xd9}], 0x4, &(0x7f0000000e00)=""/32, 0x20}, 0x23}, {{&(0x7f0000000e40)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000fc0)=[{0x0}, {&(0x7f0000000f80)=""/14, 0xe}], 0x2, &(0x7f0000002180)=""/4096, 0x1000}, 0x8000}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001000)=""/253, 0xfd}, {&(0x7f0000001100)=""/9, 0x9}, {&(0x7f0000001140)=""/119, 0x77}, {&(0x7f00000011c0)=""/17, 0x11}], 0x4, &(0x7f0000001280)=""/103, 0x67}}], 0x5, 0x40002060, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r10, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x12000, 0x0) ioctl$TUNSETIFINDEX(r12, 0x400454da, &(0x7f0000001480)=r7) 999.509481ms ago: executing program 0 (id=614): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$inet_udp(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x80007) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000240)="aa1d484ea0000000f7fc08fcd111fbdf230933db0e8f21d5bc27bd498f827a99bfc49479df1e6e16529480735ee0424706", 0x31}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000003bd268755d8e419a271376f566f9303e7400850000001b000000a7034ab472fc0e390bef0419a9f6269cc37bc82694fe5ac8b52f298aa789e690b79a64d39e93102867afb7900bf80bd26ccf7b7a82c66418a130c39b91d7e9dc"], &(0x7f0000000780)='GPL\x00', 0x2000000, 0xffffffffffffffbe, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) close(r3) 950.298126ms ago: executing program 3 (id=615): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f00000002c0)=""/61, 0x3d, 0x0, &(0x7f00000002c0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095", @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x57, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0x7, 0x40000000000000) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x4, 0x7d1, &(0x7f0000000c00)="$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") sched_setscheduler(0x0, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x4000010) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x800200a0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000300100000102000028"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000380)=[{0xffff, 0x6, 0xff, 0x7ffc1ffb}, {0x6a3, 0x5, 0x5, 0x5}]}) socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) ioperm(0x2000000000000000, 0x1ff, 0x6) accept(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 896.200672ms ago: executing program 0 (id=616): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e671ab4912f9f6a31854ec98e950cf8caa52dd8d39af14c31ed56a13d900"}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x37, 0x65, 0x34, 0x39, 0x31, 0x33, 0x38, 0x66, 0x36, 0x5c, 0x33, 0x30, 0x61, 0x65, 0x61]}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018f2f56514fbfd8f39438f02110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x10007ffffffff}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = gettid() r7 = socket(0x40000000015, 0x5, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) recvmmsg(r7, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000300)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x2c020400) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000080)={0xe4, 0x80000002, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r9, 0x408c5333, &(0x7f0000000580)={0x0, 0x9e, 0x0, 'queue0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 337.350346ms ago: executing program 1 (id=617): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a01020000000000000000010000000900020073797a32000000001800038014000080100001800400028006000180000000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x10) close(0x3) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x6) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 330.293277ms ago: executing program 4 (id=618): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x200000000024) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) openat$vcs(0xffffffffffffff9c, &(0x7f0000001080), 0x418100, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r5}, 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40082, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYRESOCT=r6, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100000084000000b7000000000000009500"/89, @ANYBLOB="cb780f21330f3ea908968fef842ac3f470ae3d9d0b9d7459256c7434e68e07db594bbbd541525c63e4fe2599abafb0d635878c08aead1dd5c8bd2d8be6d8", @ANYRESHEX=r5, @ANYBLOB="723e9af07d155bbfc92a7467a6a3ca3e95fbf6cc9757311d8ddf933a74caea749925a4c1a42ab11eac52a269bdd4e73a5585b09b535fc8be33fb2098f32db291a8f2bd6745ea57cb3d446e3e16e5d571950153f16edca24a319fa84b1609008175f21a7ab39dba4066f7757dd022bd30faddd45e45e2aa2e8fbdaad32df431af2c0a2664cb644c520e3d20955697185c06219a26d55f67539eae71f9feb2", @ANYRES16=r6, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000380)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4a0}}, {@prjquota}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000002480)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) r9 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x14, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES16, @ANYRES8=r7], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="25f148c46651b70700"/38], &(0x7f0000003ff6)='GPL\x00', 0x5e, 0xd1, &(0x7f0000000540)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x1d}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="000000001800000129bd7000fbdbdf2502208007ff04000b0004000000000880a06ed114e89f1b0951c285048d53d8809ce6f5dc8eaa598564f90f2ee0742c43b971f72084b97a7bdc6582b126f3f0c84b10063532c233ba40ea391d00e76379dda3372f95a42a5fb866147b5dbb40f0089aadbbb1e3478d5f6a242b3c75642819a95a8dd649daed7db5f0ea20999c0c01b7c93667a4ef33f8469db93ba01edb790c89b9bbdf8b8a2c8cb0afed3d8c021a02019b9e5dc0504748408f48733fbe861c00b9457eba90036d2235063da3685d1363844200000000001e000d00000000000880e165171f1646f13c42105846c4c55eade5dcc40ade939c46c88c854b9fe27e500b1d731126a011ea29fc25fd62cb549fcf81a707bfaaa92dd772b764566c3d172ca3a47d945468caef7d9d9fac77dfb1530d3f70e73c2377ccedc8feb241b5a6b91fc12b08c34dc4db6bf9da11a215ae634db5efa750f64a4c97b16c75c225e185659c7815d173728698ffcc3c6bf56290c5c252e519a0234f79a736f3f178f9f65186a4454095c03ec95696f64ba5bf76f2250386b5725f12b316bf9e710a9c5e1a6c031b03ceb319757d0000001c004e20000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x4008040) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000b80)=@req3={0xfffffffb, 0xf1c2, 0x9, 0x5, 0x4, 0x9, 0xff}, 0x1c) close(r11) 251.092975ms ago: executing program 1 (id=619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 179.087032ms ago: executing program 1 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='rcu_utilization\x00', r2}, 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000004040)=""/4096, 0x1000}], 0x1}, 0x3ff}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000100), 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="a1ab23bd7000fdffffff32000000080017015900000008000300", @ANYRES32=0x0, @ANYBLOB="b8dc643b055ca1eeed2082eda15f997fc31f0b1fde9c"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x17, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r9, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0x10007ffffffff}, 0x18) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 82.491872ms ago: executing program 3 (id=621): syz_emit_ethernet(0x16, &(0x7f0000000240)={@local, @link_local, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'C', "988b2b"}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="08000200a9cc15a8bda072851df300000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdff000000000000000000f2ff00000000000000fcd2baf39d2216aa3692a4a2951910e734dddb9b20eb11bb7ed938b655d393fa28d2bfe79be007d3e085f71c5f66dad1416e7157978c538af0c8b3fe495d8b4d226cb4d0af378cc304a3b86565415963f498c09d234d08ece56156f4689614bc3539e4f904273f0c9b852e186f8eefc1c1eeb10707d92e47a388777bfc64ed998ad505ce91047fe762aa"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100"], 0x48) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000004000000280000000d43701af67a5797436c49e920aaf619800baea1220a5fa24c08c7755a58111fba662cb0f2d9992e267aead09c7b2375469b61084dcdf02290823f1b898808c3ae7ae19179f7ca808bc453f39cf5b2e02ffdbac8a22091521dd1c92a88cf56991c1d87fdc6f281e29a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_wait(r6, &(0x7f00000000c0)=[{}], 0x1, 0x44001006) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) r8 = open_tree(0xffffffffffffff9c, 0x0, 0x9001) renameat2(r8, 0x0, r8, 0x0, 0x4) 47.060215ms ago: executing program 1 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(r0) 0s ago: executing program 0 (id=623): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="2300030000000000"], 0x8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0xffffffffffff8001}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r6, 0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r6) r7 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfff, 0x0, 0x3, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x64f1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100000000000000000000000050000030500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1000414, &(0x7f0000000440)={[{@dioread_nolock}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@init_itable}, {@lazytime}]}, 0xfe, 0x25f, &(0x7f0000000640)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000400)='./file1\x00', 0x8a, &(0x7f00000001c0)={[{@journal_async_commit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0xf8}}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x452, &(0x7f0000000bc0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xfd13ad03441c08, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000a8ffffff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) creat(&(0x7f0000000080)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): an up link [ 34.709572][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.716686][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.723857][ T3314] bridge_slave_0: entered allmulticast mode [ 34.730302][ T3314] bridge_slave_0: entered promiscuous mode [ 34.737571][ T3320] team0: Port device team_slave_0 added [ 34.743416][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.750525][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.757693][ T3314] bridge_slave_1: entered allmulticast mode [ 34.764052][ T3314] bridge_slave_1: entered promiscuous mode [ 34.780484][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.787586][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.794761][ T3319] bridge_slave_0: entered allmulticast mode [ 34.801224][ T3319] bridge_slave_0: entered promiscuous mode [ 34.808379][ T3320] team0: Port device team_slave_1 added [ 34.814086][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.821248][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.828492][ T3319] bridge_slave_1: entered allmulticast mode [ 34.834969][ T3319] bridge_slave_1: entered promiscuous mode [ 34.870604][ T3322] team0: Port device team_slave_0 added [ 34.887923][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.900348][ T3322] team0: Port device team_slave_1 added [ 34.910843][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.917915][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.943917][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.956030][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.965316][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.972356][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.998275][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.010061][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.030461][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.039885][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.046857][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.072860][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.100467][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.107471][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.133397][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.152886][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.160027][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.167397][ T3313] bridge_slave_0: entered allmulticast mode [ 35.173750][ T3313] bridge_slave_0: entered promiscuous mode [ 35.180554][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.187776][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.195087][ T3313] bridge_slave_1: entered allmulticast mode [ 35.201657][ T3313] bridge_slave_1: entered promiscuous mode [ 35.213985][ T3319] team0: Port device team_slave_0 added [ 35.221139][ T3319] team0: Port device team_slave_1 added [ 35.227657][ T3314] team0: Port device team_slave_0 added [ 35.253838][ T3314] team0: Port device team_slave_1 added [ 35.266239][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.296719][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.307777][ T3320] hsr_slave_0: entered promiscuous mode [ 35.313706][ T3320] hsr_slave_1: entered promiscuous mode [ 35.320049][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.327022][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.353059][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.364536][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.371541][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.397489][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.415626][ T3322] hsr_slave_0: entered promiscuous mode [ 35.421817][ T3322] hsr_slave_1: entered promiscuous mode [ 35.427824][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 35.433588][ T3322] Cannot create hsr debugfs directory [ 35.453953][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.460953][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.486897][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.498099][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.505072][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.531031][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.547795][ T3313] team0: Port device team_slave_0 added [ 35.573763][ T3313] team0: Port device team_slave_1 added [ 35.608824][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.615791][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.641789][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.654502][ T3319] hsr_slave_0: entered promiscuous mode [ 35.660791][ T3319] hsr_slave_1: entered promiscuous mode [ 35.666665][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 35.672388][ T3319] Cannot create hsr debugfs directory [ 35.688178][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.695171][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.721155][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.752453][ T3314] hsr_slave_0: entered promiscuous mode [ 35.758634][ T3314] hsr_slave_1: entered promiscuous mode [ 35.764552][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 35.770311][ T3314] Cannot create hsr debugfs directory [ 35.825986][ T3313] hsr_slave_0: entered promiscuous mode [ 35.832144][ T3313] hsr_slave_1: entered promiscuous mode [ 35.838127][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 35.843851][ T3313] Cannot create hsr debugfs directory [ 35.952446][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.966169][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.984327][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.007586][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.031379][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.040566][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.053534][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.066844][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.098359][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.111139][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.119917][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.129923][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.149011][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.158450][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.170161][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.179229][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.221301][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.231206][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.241175][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.254695][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.273011][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.287715][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.312148][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.319320][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.337468][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.344601][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.366132][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.380186][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.397931][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.411312][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.421784][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.439672][ T2141] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.446780][ T2141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.456577][ T2141] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.463633][ T2141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.476767][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.493303][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.513425][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.531198][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.538324][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.547255][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.554352][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.568106][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.575184][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.588426][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.595539][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.627694][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.641028][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.690637][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.707247][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.717706][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.731552][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.738674][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.760516][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.777414][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.784516][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.816633][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.852671][ T3322] veth0_vlan: entered promiscuous mode [ 36.880874][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.894145][ T3322] veth1_vlan: entered promiscuous mode [ 36.967746][ T3322] veth0_macvtap: entered promiscuous mode [ 36.984726][ T3314] veth0_vlan: entered promiscuous mode [ 36.996779][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.005083][ T3322] veth1_macvtap: entered promiscuous mode [ 37.017643][ T3314] veth1_vlan: entered promiscuous mode [ 37.028506][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.049528][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.079182][ T3314] veth0_macvtap: entered promiscuous mode [ 37.093100][ T3320] veth0_vlan: entered promiscuous mode [ 37.101322][ T3314] veth1_macvtap: entered promiscuous mode [ 37.113371][ T2141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.126926][ T3319] veth0_vlan: entered promiscuous mode [ 37.138137][ T3320] veth1_vlan: entered promiscuous mode [ 37.147742][ T2141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.157715][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.176233][ T2141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.188834][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.197180][ T161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.206780][ T3319] veth1_vlan: entered promiscuous mode [ 37.218432][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.222874][ T3320] veth0_macvtap: entered promiscuous mode [ 37.247701][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.268282][ T3320] veth1_macvtap: entered promiscuous mode [ 37.275864][ T2141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.291695][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.304582][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.316463][ T3313] veth0_vlan: entered promiscuous mode [ 37.324636][ T3313] veth1_vlan: entered promiscuous mode [ 37.330563][ T3481] loop3: detected capacity change from 0 to 512 [ 37.335682][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.351909][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.362598][ T3481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.364589][ T3319] veth0_macvtap: entered promiscuous mode [ 37.393008][ T3313] veth0_macvtap: entered promiscuous mode [ 37.401877][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.415609][ T3481] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.424631][ T3319] veth1_macvtap: entered promiscuous mode [ 37.432974][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.443072][ T3313] veth1_macvtap: entered promiscuous mode [ 37.458145][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.465404][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.477451][ T3487] loop1: detected capacity change from 0 to 128 [ 37.487036][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.501512][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.508716][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.519979][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.533667][ T3487] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.554295][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.562131][ T3487] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.562144][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.562189][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.592285][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 37.592303][ T29] audit: type=1400 audit(1761212096.819:95): avc: denied { add_name } for pid=3486 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.613593][ T3491] loop3: detected capacity change from 0 to 512 [ 37.618832][ T29] audit: type=1400 audit(1761212096.819:96): avc: denied { create } for pid=3486 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.648999][ T3491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.658418][ T29] audit: type=1400 audit(1761212096.829:97): avc: denied { read write open } for pid=3486 comm="syz.1.2" path="/0/file0/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.684743][ T29] audit: type=1400 audit(1761212096.829:98): avc: denied { ioctl } for pid=3486 comm="syz.1.2" path="/0/file0/file1" dev="loop1" ino=12 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.708713][ T29] audit: type=1400 audit(1761212096.929:99): avc: denied { prog_load } for pid=3493 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.714954][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.727394][ T29] audit: type=1400 audit(1761212096.929:100): avc: denied { bpf } for pid=3493 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.743442][ T3491] EXT4-fs (loop3): resizing filesystem from 256 to 1 blocks [ 37.756575][ T29] audit: type=1400 audit(1761212096.939:101): avc: denied { map_create } for pid=3493 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.763880][ T3491] EXT4-fs warning (device loop3): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 37.792599][ T29] audit: type=1400 audit(1761212096.939:102): avc: denied { map_read map_write } for pid=3493 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.812113][ T29] audit: type=1400 audit(1761212096.939:103): avc: denied { perfmon } for pid=3493 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.832682][ T29] audit: type=1400 audit(1761212096.939:104): avc: denied { prog_run } for pid=3493 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.850174][ T3494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 37.862620][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.874131][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.888352][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.915627][ T3496] loop1: detected capacity change from 0 to 732 [ 37.928430][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.937163][ T3499] loop3: detected capacity change from 0 to 512 [ 37.937405][ T3499] ======================================================= [ 37.937405][ T3499] WARNING: The mand mount option has been deprecated and [ 37.937405][ T3499] and is ignored by this kernel. Remove the mand [ 37.937405][ T3499] option from the mount to silence this warning. [ 37.937405][ T3499] ======================================================= [ 37.958893][ T3496] isofs_fill_super: get root inode failed [ 37.979432][ T161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.013353][ T3494] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 38.052332][ T161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.060298][ T3505] loop4: detected capacity change from 0 to 512 [ 38.068846][ T3499] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 38.079240][ T161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.113246][ T3508] loop0: detected capacity change from 0 to 128 [ 38.120039][ T3505] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 38.140743][ T3499] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 38.162453][ T3508] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.162724][ T3505] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.177673][ T3508] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.192215][ T3499] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.198665][ T3499] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.8: bad orphan inode 267 [ 38.219622][ T3499] EXT4-fs (loop3): Remounting filesystem read-only [ 38.227986][ T3505] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.5: Block bitmap for bg 0 marked uninitialized [ 38.231553][ T3499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 38.253179][ T3515] loop2: detected capacity change from 0 to 512 [ 38.254890][ T3505] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 38.260941][ T3514] loop1: detected capacity change from 0 to 128 [ 38.269173][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.283041][ T3515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.302632][ T3499] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.8: dx entry: limit 0 != root limit 125 [ 38.307899][ T3505] EXT4-fs (loop4): 1 orphan inode deleted [ 38.314313][ T3499] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.8: Corrupt directory, running e2fsck is recommended [ 38.321560][ T3514] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.351834][ T3505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.368905][ T3515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.374449][ T3520] loop0: detected capacity change from 0 to 1024 [ 38.388828][ T3514] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.390550][ T3520] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.428480][ T3515] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.460570][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 38.479275][ T3520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.502315][ T3514] EXT4-fs error (device loop1): ext4_check_dx_root:2203: inode #2: comm syz.1.12: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 38.517395][ T3505] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 38.522516][ T3524] loop3: detected capacity change from 0 to 512 [ 38.533635][ T3505] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 38.553295][ T3505] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.5: Block bitmap for bg 0 marked uninitialized [ 38.554421][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.587335][ T3524] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.600495][ T3524] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.611606][ T3520] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.614152][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.652384][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.657289][ T3524] EXT4-fs (loop3): 1 truncate cleaned up [ 38.679888][ T3529] loop2: detected capacity change from 0 to 512 [ 38.694366][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.694409][ T3531] loop4: detected capacity change from 0 to 128 [ 38.722797][ T3524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.723571][ T3531] syz.4.16: attempt to access beyond end of device [ 38.723571][ T3531] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 38.747470][ T3529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.753885][ T3531] syz.4.16: attempt to access beyond end of device [ 38.753885][ T3531] loop4: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 38.771552][ T3531] syz.4.16: attempt to access beyond end of device [ 38.771552][ T3531] loop4: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 38.784976][ T3531] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 38.795514][ T3524] EXT4-fs error (device loop3): ext4_nfs_get_inode:1540: inode #11: comm syz.3.13: iget: bad extra_isize 46 (inode size 256) [ 38.798945][ T3534] loop1: detected capacity change from 0 to 512 [ 38.815039][ T3529] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.834798][ T3534] EXT4-fs: Ignoring removed orlov option [ 38.837079][ T3535] syz.4.16: attempt to access beyond end of device [ 38.837079][ T3535] loop4: rw=2049, sector=186, nr_sectors = 64 limit=128 [ 38.854534][ T3534] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 38.856649][ T3529] EXT4-fs (loop2): 1 truncate cleaned up [ 38.865713][ T3534] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.18: corrupted in-inode xattr: e_value size too large [ 38.869684][ T3531] syz.4.16: attempt to access beyond end of device [ 38.869684][ T3531] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 38.883206][ T3534] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.18: couldn't read orphan inode 15 (err -117) [ 38.908250][ T3534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.908250][ T3529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.928173][ T3535] syz.4.16: attempt to access beyond end of device [ 38.928173][ T3535] loop4: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 38.945707][ T3529] EXT4-fs (loop2): shut down requested (1) [ 38.967177][ T3531] syz.4.16: attempt to access beyond end of device [ 38.967177][ T3531] loop4: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 38.976615][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.980564][ T3531] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 38.999335][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.004658][ T3539] loop0: detected capacity change from 0 to 256 [ 39.009591][ T3531] syz.4.16: attempt to access beyond end of device [ 39.009591][ T3531] loop4: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 39.015800][ T3534] EXT4-fs error (device loop1): ext4_check_dx_root:2203: inode #2: comm syz.1.18: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 39.052253][ T3531] syz.4.16: attempt to access beyond end of device [ 39.052253][ T3531] loop4: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 39.065657][ T3531] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 39.098421][ T3544] loop3: detected capacity change from 0 to 256 [ 39.106256][ T3543] loop2: detected capacity change from 0 to 512 [ 39.118265][ T3539] FAT-fs (loop0): codepage cp950 not found [ 39.127421][ T3543] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.162539][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.201791][ T3547] loop3: detected capacity change from 0 to 512 [ 39.224682][ T3543] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 39.243576][ T3547] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.251307][ T3554] loop1: detected capacity change from 0 to 512 [ 39.253865][ T3543] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.20: bg 0: block 248: padding at end of block bitmap is not set [ 39.279968][ T3543] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.20: Failed to acquire dquot type 1 [ 39.291341][ T3547] EXT4-fs (loop3): 1 orphan inode deleted [ 39.291787][ T3554] /dev/loop1: Can't open blockdev [ 39.297215][ T3547] EXT4-fs (loop3): 1 truncate cleaned up [ 39.303270][ T3543] EXT4-fs (loop2): 1 truncate cleaned up [ 39.314232][ T3543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 39.324697][ T3547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.374167][ T3543] syz.2.20 (3543) used greatest stack depth: 9120 bytes left [ 39.401779][ T3547] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.23: iget: bad extra_isize 46 (inode size 256) [ 39.418770][ T3559] Unsupported ieee802154 address type: 0 [ 39.424535][ T3547] EXT4-fs (loop3): Remounting filesystem read-only [ 39.437030][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 39.453225][ T3547] EXT4-fs (loop3): shut down requested (0) [ 39.466221][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 39.502101][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.688352][ T3569] lo speed is unknown, defaulting to 1000 [ 39.696830][ T3569] lo speed is unknown, defaulting to 1000 [ 39.702856][ T3569] lo speed is unknown, defaulting to 1000 [ 39.709267][ T3556] netlink: 'syz.0.24': attribute type 1 has an invalid length. [ 39.716882][ T3556] netlink: 'syz.0.24': attribute type 2 has an invalid length. [ 39.725462][ T3569] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.850936][ T3569] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 39.887971][ T3569] lo speed is unknown, defaulting to 1000 [ 39.900656][ T3572] ucma_write: process 9 (syz.4.30) changed security contexts after opening file descriptor, this is not allowed. [ 39.921977][ T3569] lo speed is unknown, defaulting to 1000 [ 39.951326][ T3569] lo speed is unknown, defaulting to 1000 [ 39.977827][ T3569] lo speed is unknown, defaulting to 1000 [ 40.019114][ T3569] lo speed is unknown, defaulting to 1000 [ 40.470627][ T3593] loop3: detected capacity change from 0 to 764 [ 40.477805][ T3593] /dev/loop3: Can't open blockdev [ 40.583786][ T3588] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 40.591451][ T3588] netlink: 'syz.1.29': attribute type 2 has an invalid length. [ 40.649639][ T3600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.39'. [ 40.712429][ T3600] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 41.027610][ T3607] loop1: detected capacity change from 0 to 256 [ 41.036451][ T3607] msdos: Bad value for 'tz' [ 41.095597][ T3613] loop1: detected capacity change from 0 to 764 [ 41.205821][ T3617] siw: device registration error -23 [ 41.223434][ T3619] rock: directory entry would overflow storage [ 41.229682][ T3619] rock: sig=0x4f50, size=4, remaining=3 [ 41.235269][ T3619] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 41.650189][ T3633] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 41.657952][ T3633] netlink: 'syz.4.50': attribute type 2 has an invalid length. [ 41.665626][ T3630] netlink: 'syz.3.48': attribute type 1 has an invalid length. [ 41.673300][ T3630] netlink: 'syz.3.48': attribute type 2 has an invalid length. [ 41.681897][ T3637] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 41.689521][ T3637] netlink: 'syz.0.47': attribute type 2 has an invalid length. [ 42.285009][ T3648] siw: device registration error -23 [ 42.604844][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 42.604861][ T29] audit: type=1326 audit(1761212101.839:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdb0575e67 code=0x7ffc0000 [ 42.641158][ T29] audit: type=1326 audit(1761212101.869:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcdb051b099 code=0x7ffc0000 [ 42.664323][ T29] audit: type=1326 audit(1761212101.879:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdb0575e67 code=0x7ffc0000 [ 42.687426][ T29] audit: type=1326 audit(1761212101.879:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcdb051b099 code=0x7ffc0000 [ 42.710695][ T29] audit: type=1326 audit(1761212101.879:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fcdb057efc9 code=0x7ffc0000 [ 42.734608][ T29] audit: type=1400 audit(1761212101.879:571): avc: denied { setopt } for pid=3654 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.739465][ T3662] loop0: detected capacity change from 0 to 128 [ 42.753895][ T29] audit: type=1326 audit(1761212101.969:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdb0575e67 code=0x7ffc0000 [ 42.783769][ T29] audit: type=1326 audit(1761212101.969:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcdb051b099 code=0x7ffc0000 [ 42.807539][ T29] audit: type=1326 audit(1761212101.969:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fcdb057efc9 code=0x7ffc0000 [ 42.849039][ T29] audit: type=1326 audit(1761212102.039:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdb0575e67 code=0x7ffc0000 [ 43.268391][ T3679] loop1: detected capacity change from 0 to 256 [ 43.275117][ T3679] msdos: Bad value for 'tz' [ 43.312860][ T1030] IPVS: starting estimator thread 0... [ 43.321955][ T3684] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.353275][ T3690] serio: Serial port ptm0 [ 43.401034][ T3695] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 43.436045][ T3686] IPVS: using max 2400 ests per chain, 120000 per kthread [ 43.439254][ T3695] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 44.206393][ T3706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.74'. [ 44.460256][ T3713] loop4: detected capacity change from 0 to 512 [ 44.476841][ T3713] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.506293][ T3713] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 44.575670][ T3713] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.77: attempt to clear invalid blocks 2 len 1 [ 44.596671][ T3713] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 44.626026][ T3713] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.77: invalid indirect mapped block 1819239214 (level 0) [ 44.666192][ T3713] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.77: invalid indirect mapped block 1819239214 (level 1) [ 44.706998][ T3713] EXT4-fs (loop4): 1 truncate cleaned up [ 44.723307][ T3713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.758475][ T3713] random: crng reseeded on system resumption [ 44.790457][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.812925][ T3723] loop3: detected capacity change from 0 to 256 [ 44.821534][ T3723] msdos: Bad value for 'tz' [ 44.878452][ T3726] siw: device registration error -23 [ 45.065700][ T3728] validate_nla: 6 callbacks suppressed [ 45.065735][ T3728] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 45.078889][ T3728] netlink: 'syz.3.81': attribute type 2 has an invalid length. [ 45.156676][ T3738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.86'. [ 45.167714][ T3738] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 45.937911][ T3754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.92'. [ 45.965641][ T3757] loop3: detected capacity change from 0 to 256 [ 45.972568][ T3757] msdos: Bad value for 'tz' [ 45.999693][ T3760] siw: device registration error -23 [ 46.172097][ T3771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.100'. [ 46.214924][ T3771] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 46.259741][ T3779] loop2: detected capacity change from 0 to 512 [ 46.268269][ T3779] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.287196][ T3779] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 46.303631][ T3779] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.103: attempt to clear invalid blocks 2 len 1 [ 46.312102][ T3782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 46.327697][ T3779] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 46.342494][ T3779] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.103: invalid indirect mapped block 1819239214 (level 0) [ 46.357019][ T3779] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.103: invalid indirect mapped block 1819239214 (level 1) [ 46.372472][ T3779] EXT4-fs (loop2): 1 truncate cleaned up [ 46.385576][ T3779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.399475][ T3779] random: crng reseeded on system resumption [ 46.421333][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.473908][ T3788] loop4: detected capacity change from 0 to 256 [ 46.489480][ T3788] msdos: Bad value for 'tz' [ 46.932356][ T3803] ipvlan1: entered promiscuous mode [ 46.937756][ T3803] ipvlan1: entered allmulticast mode [ 46.943117][ T3803] veth0_vlan: entered allmulticast mode [ 47.198217][ T9] IPVS: starting estimator thread 0... [ 47.286491][ T3809] IPVS: using max 2496 ests per chain, 124800 per kthread [ 47.452512][ T3825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'. [ 47.528401][ T3827] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 47.536115][ T3827] netlink: 'syz.0.116': attribute type 2 has an invalid length. [ 47.554484][ T3834] loop1: detected capacity change from 0 to 512 [ 47.716392][ T3834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.786242][ T3834] EXT4-fs (loop1): resizing filesystem from 256 to 1 blocks [ 47.793605][ T3834] EXT4-fs warning (device loop1): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 47.844174][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 47.844191][ T29] audit: type=1400 audit(1761212107.079:771): avc: denied { write } for pid=3831 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 47.888609][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.479880][ T3857] siw: device registration error -23 [ 48.527448][ T3859] loop0: detected capacity change from 0 to 764 [ 48.659951][ T3863] rock: directory entry would overflow storage [ 48.666228][ T3863] rock: sig=0x4f50, size=4, remaining=3 [ 48.671914][ T3863] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 48.961240][ T29] audit: type=1326 audit(1761212108.199:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 49.065444][ T29] audit: type=1326 audit(1761212108.229:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 49.088816][ T29] audit: type=1326 audit(1761212108.229:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 49.112960][ T29] audit: type=1326 audit(1761212108.229:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 49.136913][ T29] audit: type=1326 audit(1761212108.229:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 49.160209][ T29] audit: type=1326 audit(1761212108.229:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 49.183429][ T29] audit: type=1326 audit(1761212108.229:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 49.206736][ T29] audit: type=1326 audit(1761212108.229:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 49.212346][ T3873] netlink: 'syz.4.138': attribute type 1 has an invalid length. [ 49.229972][ T29] audit: type=1326 audit(1761212108.229:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 49.260981][ T3873] netlink: 'syz.4.138': attribute type 2 has an invalid length. [ 49.366955][ T3884] serio: Serial port ptm0 [ 49.372709][ T3883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.144'. [ 49.383394][ T3883] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 49.422487][ T3887] siw: device registration error -23 [ 49.450972][ T3889] random: crng reseeded on system resumption [ 49.918836][ T3906] netlink: 'syz.2.153': attribute type 1 has an invalid length. [ 49.926682][ T3906] netlink: 'syz.2.153': attribute type 2 has an invalid length. [ 50.103794][ T3913] loop4: detected capacity change from 0 to 1024 [ 50.110760][ T3913] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.127520][ T3913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.154168][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.279245][ T3927] loop4: detected capacity change from 0 to 128 [ 50.289806][ T3927] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.303073][ T3927] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.408382][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.779296][ T3938] loop2: detected capacity change from 0 to 512 [ 50.792787][ T3938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.803043][ T3944] loop0: detected capacity change from 0 to 1024 [ 50.834987][ T3944] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.856874][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.879992][ T3944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.932022][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.983356][ T3952] netlink: 'syz.4.167': attribute type 1 has an invalid length. [ 50.991209][ T3952] netlink: 'syz.4.167': attribute type 2 has an invalid length. [ 51.077216][ T3960] siw: device registration error -23 [ 51.107664][ T3963] loop1: detected capacity change from 0 to 512 [ 51.122924][ T3963] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 51.136842][ T3963] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.143774][ T3963] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.171: Block bitmap for bg 0 marked uninitialized [ 51.157254][ T3963] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 51.166730][ T3963] EXT4-fs (loop1): 1 orphan inode deleted [ 51.173547][ T3963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 51.189642][ T3963] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 51.199317][ T3963] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 51.208564][ T3963] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.171: Block bitmap for bg 0 marked uninitialized [ 51.231585][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.270789][ T3971] loop1: detected capacity change from 0 to 512 [ 51.281839][ T3971] EXT4-fs: Ignoring removed orlov option [ 51.288561][ T3971] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 51.299321][ T3971] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.174: corrupted in-inode xattr: e_value size too large [ 51.313597][ T3971] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.174: couldn't read orphan inode 15 (err -117) [ 51.326293][ T3971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.350663][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.391180][ T3976] loop1: detected capacity change from 0 to 512 [ 51.410509][ T3976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.424827][ T3976] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 51.443472][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.499498][ T3984] loop1: detected capacity change from 0 to 1024 [ 51.506677][ T3984] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.520689][ T3984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.545835][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.052390][ T3996] loop4: detected capacity change from 0 to 764 [ 52.155407][ T3997] rock: directory entry would overflow storage [ 52.163158][ T3997] rock: sig=0x4f50, size=4, remaining=3 [ 52.168768][ T3997] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 52.296040][ T4001] loop0: detected capacity change from 0 to 512 [ 52.320563][ T4001] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 52.331345][ T4001] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.338235][ T4001] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.184: Block bitmap for bg 0 marked uninitialized [ 52.351755][ T4001] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 52.360918][ T4001] EXT4-fs (loop0): 1 orphan inode deleted [ 52.367236][ T4001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 52.381386][ T4001] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 52.391049][ T4001] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 52.406255][ T4001] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.184: Block bitmap for bg 0 marked uninitialized [ 52.432723][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.468447][ T3993] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 52.476252][ T3993] netlink: 'syz.2.181': attribute type 2 has an invalid length. [ 52.502928][ T4009] loop1: detected capacity change from 0 to 256 [ 52.520930][ T4009] FAT-fs (loop1): codepage cp950 not found [ 52.551907][ T4013] loop1: detected capacity change from 0 to 512 [ 52.571422][ T4013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.585702][ T4013] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 52.604695][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.862696][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 52.862740][ T29] audit: type=1326 audit(1761212112.099:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 52.892910][ T29] audit: type=1326 audit(1761212112.109:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 52.916227][ T29] audit: type=1326 audit(1761212112.109:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 52.939537][ T29] audit: type=1326 audit(1761212112.109:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 52.962925][ T29] audit: type=1326 audit(1761212112.109:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 52.967610][ T4021] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 52.986158][ T29] audit: type=1326 audit(1761212112.109:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 52.993842][ T4021] netlink: 'syz.1.190': attribute type 2 has an invalid length. [ 53.024839][ T29] audit: type=1326 audit(1761212112.109:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 53.048231][ T29] audit: type=1326 audit(1761212112.109:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 53.071553][ T29] audit: type=1326 audit(1761212112.109:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 53.094746][ T29] audit: type=1326 audit(1761212112.109:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 53.103353][ T4028] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 53.125702][ T4028] netlink: 'syz.4.192': attribute type 2 has an invalid length. [ 53.347473][ T4030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.193'. [ 53.395719][ T4034] blktrace: Concurrent blktraces are not allowed on loop1 [ 53.403166][ T4036] loop3: detected capacity change from 0 to 1024 [ 53.410208][ T4036] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.423504][ T4036] /dev/loop3: Can't open blockdev [ 53.552472][ T1030] IPVS: starting estimator thread 0... [ 53.606301][ T4049] Unsupported ieee802154 address type: 0 [ 53.616671][ T4049] loop3: detected capacity change from 0 to 512 [ 53.623939][ T4042] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 53.631655][ T4042] netlink: 'syz.0.195': attribute type 2 has an invalid length. [ 53.640891][ T4049] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.651026][ T4047] IPVS: using max 2400 ests per chain, 120000 per kthread [ 53.663895][ T4049] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.201: invalid indirect mapped block 4294967295 (level 0) [ 53.678612][ T4049] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.201: invalid indirect mapped block 4294967295 (level 1) [ 53.698634][ T4049] EXT4-fs (loop3): 1 orphan inode deleted [ 53.704413][ T4049] EXT4-fs (loop3): 1 truncate cleaned up [ 53.710655][ T4049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.744671][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.774816][ T4061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.206'. [ 53.810398][ T4064] loop3: detected capacity change from 0 to 1024 [ 53.819408][ T4064] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.837877][ T4064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.850455][ T4067] loop4: detected capacity change from 0 to 764 [ 53.869461][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.890518][ T4071] loop3: detected capacity change from 0 to 256 [ 53.913603][ T4071] FAT-fs (loop3): codepage cp950 not found [ 53.920303][ T4073] rock: directory entry would overflow storage [ 53.926566][ T4073] rock: sig=0x4f50, size=4, remaining=3 [ 53.932173][ T4073] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 53.948681][ T4075] loop3: detected capacity change from 0 to 128 [ 53.958221][ T4075] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.970859][ T4075] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.992434][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.068036][ T4080] loop3: detected capacity change from 0 to 512 [ 54.077272][ T4080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.097732][ T4080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.110383][ T4080] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.131354][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.613755][ T4092] siw: device registration error -23 [ 54.694078][ T4094] loop1: detected capacity change from 0 to 4096 [ 54.708534][ T4094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.720277][ T4094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.845462][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.879022][ T4102] random: crng reseeded on system resumption [ 55.026704][ T4104] loop3: detected capacity change from 0 to 512 [ 55.038601][ T4104] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 55.052944][ T4104] EXT4-fs (loop3): orphan cleanup on readonly fs [ 55.060273][ T4104] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.220: Failed to acquire dquot type 1 [ 55.072051][ T4104] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.220: bg 0: block 40: padding at end of block bitmap is not set [ 55.086468][ T4104] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 55.095583][ T4104] EXT4-fs (loop3): 1 truncate cleaned up [ 55.105908][ T4104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.128008][ T4104] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 55.145372][ T4109] loop1: detected capacity change from 0 to 128 [ 55.158820][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.159260][ T4109] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.180503][ T4109] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.204675][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.223882][ T4112] loop0: detected capacity change from 0 to 512 [ 55.234225][ T4112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.277116][ T4112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.290007][ T4112] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.304459][ T4122] loop1: detected capacity change from 0 to 128 [ 55.317457][ T4122] syz.1.226: attempt to access beyond end of device [ 55.317457][ T4122] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 55.331665][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.333122][ T4122] syz.1.226: attempt to access beyond end of device [ 55.333122][ T4122] loop1: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 55.354894][ T4122] syz.1.226: attempt to access beyond end of device [ 55.354894][ T4122] loop1: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 55.368394][ T4122] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 55.371184][ T4124] syz.1.226: attempt to access beyond end of device [ 55.371184][ T4124] loop1: rw=2049, sector=170, nr_sectors = 80 limit=128 [ 55.394746][ T4126] loop0: detected capacity change from 0 to 512 [ 55.401156][ T4124] syz.1.226: attempt to access beyond end of device [ 55.401156][ T4124] loop1: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 55.408902][ T4126] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.433198][ T4126] EXT4-fs (loop0): 1 truncate cleaned up [ 55.439538][ T4126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.464416][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.487269][ T4131] loop0: detected capacity change from 0 to 1024 [ 55.494458][ T4131] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.517407][ T4131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.541754][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.565947][ T4135] loop0: detected capacity change from 0 to 764 [ 55.628644][ T4136] rock: directory entry would overflow storage [ 55.634846][ T4136] rock: sig=0x4f50, size=4, remaining=3 [ 55.640536][ T4136] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 56.234591][ T4147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.233'. [ 56.624705][ T4155] loop4: detected capacity change from 0 to 128 [ 56.640191][ T4155] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.652725][ T4155] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.668021][ T4160] loop1: detected capacity change from 0 to 512 [ 56.674894][ T4160] /dev/loop1: Can't open blockdev [ 56.691420][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.709611][ T4151] validate_nla: 4 callbacks suppressed [ 56.709629][ T4151] netlink: 'syz.0.234': attribute type 1 has an invalid length. [ 56.722896][ T4151] netlink: 'syz.0.234': attribute type 2 has an invalid length. [ 56.740894][ T4164] loop4: detected capacity change from 0 to 512 [ 56.749038][ T4164] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.763729][ T4164] EXT4-fs (loop4): 1 truncate cleaned up [ 56.775671][ T4164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.799229][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.906866][ T4171] loop2: detected capacity change from 0 to 512 [ 56.928300][ T4171] EXT4-fs: Ignoring removed orlov option [ 56.941675][ T4171] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 57.066066][ T4171] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.243: corrupted in-inode xattr: e_value size too large [ 57.099343][ T4171] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.243: couldn't read orphan inode 15 (err -117) [ 57.216135][ T4179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.246'. [ 57.230905][ T4171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.245397][ T4179] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 57.373205][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.606149][ T4184] loop1: detected capacity change from 0 to 128 [ 57.617390][ T4184] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.670268][ T4184] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.859920][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.870817][ T29] kauditd_printk_skb: 835 callbacks suppressed [ 57.870840][ T29] audit: type=1326 audit(1761212117.109:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdb0575e67 code=0x7ffc0000 [ 57.900412][ T29] audit: type=1326 audit(1761212117.109:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcdb051b099 code=0x7ffc0000 [ 57.923689][ T29] audit: type=1326 audit(1761212117.109:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fcdb057efc9 code=0x7ffc0000 [ 57.947593][ T4199] netlink: 'syz.0.252': attribute type 1 has an invalid length. [ 57.955255][ T4199] netlink: 'syz.0.252': attribute type 2 has an invalid length. [ 57.963915][ T29] audit: type=1326 audit(1761212117.169:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdb0575e67 code=0x7ffc0000 [ 57.987331][ T29] audit: type=1326 audit(1761212117.169:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcdb051b099 code=0x7ffc0000 [ 58.010697][ T29] audit: type=1326 audit(1761212117.169:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fcdb057efc9 code=0x7ffc0000 [ 58.034080][ T29] audit: type=1326 audit(1761212117.169:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdb0575e67 code=0x7ffc0000 [ 58.057572][ T29] audit: type=1326 audit(1761212117.169:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcdb051b099 code=0x7ffc0000 [ 58.080852][ T29] audit: type=1326 audit(1761212117.169:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fcdb057efc9 code=0x7ffc0000 [ 58.104308][ T29] audit: type=1326 audit(1761212117.169:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdb0575e67 code=0x7ffc0000 [ 58.181489][ T4205] loop1: detected capacity change from 0 to 764 [ 58.265823][ T4207] rock: directory entry would overflow storage [ 58.272140][ T4207] rock: sig=0x4f50, size=4, remaining=3 [ 58.277842][ T4207] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 58.525022][ T4211] loop2: detected capacity change from 0 to 4096 [ 58.535421][ T4211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.154922][ T36] IPVS: starting estimator thread 0... [ 59.163058][ T4237] loop1: detected capacity change from 0 to 512 [ 59.205529][ T4237] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.247930][ T4239] IPVS: using max 2400 ests per chain, 120000 per kthread [ 59.264943][ T4237] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 59.291828][ T4245] loop0: detected capacity change from 0 to 512 [ 59.315330][ T4237] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.265: bg 0: block 248: padding at end of block bitmap is not set [ 59.330597][ T4237] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.265: Failed to acquire dquot type 1 [ 59.342076][ T4245] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.353369][ T4237] EXT4-fs (loop1): 1 truncate cleaned up [ 59.439242][ T161] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 1 [ 59.510909][ T4245] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.720744][ T4257] loop1: detected capacity change from 0 to 4096 [ 59.736387][ T4257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.797391][ T4265] random: crng reseeded on system resumption [ 59.823027][ T4273] loop4: detected capacity change from 0 to 512 [ 59.892486][ T4273] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.954236][ T4276] loop1: detected capacity change from 0 to 4096 [ 59.972069][ T4273] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 59.980925][ T4276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.000349][ T4273] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.277: bg 0: block 248: padding at end of block bitmap is not set [ 60.085350][ T4282] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 60.093161][ T4282] netlink: 'syz.2.276': attribute type 2 has an invalid length. [ 60.111525][ T4273] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.277: Failed to acquire dquot type 1 [ 60.144938][ T4273] EXT4-fs (loop4): 1 truncate cleaned up [ 60.165036][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 60.195634][ T4283] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 60.203375][ T4283] netlink: 'syz.3.275': attribute type 2 has an invalid length. [ 60.732138][ T4300] loop3: detected capacity change from 0 to 256 [ 60.739001][ T4300] msdos: Bad value for 'tz' [ 61.004273][ T4311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.289'. [ 61.069395][ T4315] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 61.124833][ T2967] IPVS: starting estimator thread 0... [ 61.216037][ T4320] IPVS: using max 2448 ests per chain, 122400 per kthread [ 61.277518][ T4323] loop2: detected capacity change from 0 to 512 [ 61.355558][ T4323] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.480852][ T4331] random: crng reseeded on system resumption [ 61.551827][ T4316] netlink: 'syz.0.290': attribute type 1 has an invalid length. [ 61.559570][ T4316] netlink: 'syz.0.290': attribute type 2 has an invalid length. [ 61.571100][ T4335] serio: Serial port ptm0 [ 61.627892][ T4338] loop1: detected capacity change from 0 to 128 [ 61.651492][ T4336] loop2: detected capacity change from 0 to 764 [ 61.660496][ T4338] /dev/loop1: Can't open blockdev [ 61.747313][ T4340] Unsupported ieee802154 address type: 0 [ 61.773035][ T4342] rock: directory entry would overflow storage [ 61.779412][ T4342] rock: sig=0x4f50, size=4, remaining=3 [ 61.784972][ T4342] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 62.020238][ T4346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.299'. [ 62.041882][ T4346] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 62.522249][ T4360] loop2: detected capacity change from 0 to 1024 [ 62.547154][ T4360] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.579354][ T4357] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 62.587130][ T4357] netlink: 'syz.0.301': attribute type 2 has an invalid length. [ 62.612647][ T4366] loop1: detected capacity change from 0 to 512 [ 62.664681][ T4368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.306'. [ 62.689140][ T4366] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 62.763356][ T4375] loop2: detected capacity change from 0 to 512 [ 62.816540][ T4375] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 62.828750][ T4373] netlink: 'syz.4.302': attribute type 1 has an invalid length. [ 62.836525][ T4373] netlink: 'syz.4.302': attribute type 2 has an invalid length. [ 62.933928][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 62.933946][ T29] audit: type=1326 audit(1761212122.169:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 62.966767][ T29] audit: type=1326 audit(1761212122.199:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 63.088266][ T29] audit: type=1326 audit(1761212122.319:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 63.111807][ T29] audit: type=1326 audit(1761212122.319:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 63.135172][ T29] audit: type=1326 audit(1761212122.319:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 63.188435][ T4394] loop0: detected capacity change from 0 to 128 [ 63.204258][ T4394] syz.0.315: attempt to access beyond end of device [ 63.204258][ T4394] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 63.218227][ T29] audit: type=1326 audit(1761212122.399:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 63.241612][ T29] audit: type=1326 audit(1761212122.399:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 63.264959][ T29] audit: type=1326 audit(1761212122.399:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 63.266419][ T4394] syz.0.315: attempt to access beyond end of device [ 63.266419][ T4394] loop0: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 63.288403][ T29] audit: type=1326 audit(1761212122.399:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 63.303126][ T4394] syz.0.315: attempt to access beyond end of device [ 63.303126][ T4394] loop0: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 63.338755][ T4394] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 63.347646][ T4392] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 63.355299][ T4392] netlink: 'syz.1.309': attribute type 2 has an invalid length. [ 63.375735][ T4394] syz.0.315: attempt to access beyond end of device [ 63.375735][ T4394] loop0: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 63.389666][ T4394] syz.0.315: attempt to access beyond end of device [ 63.389666][ T4394] loop0: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 63.403046][ T4394] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 63.412003][ T4394] syz.0.315: attempt to access beyond end of device [ 63.412003][ T4394] loop0: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 63.446815][ T4394] syz.0.315: attempt to access beyond end of device [ 63.446815][ T4394] loop0: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 63.460298][ T4394] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 63.490120][ T4394] syz.0.315: attempt to access beyond end of device [ 63.490120][ T4394] loop0: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 63.517342][ T4394] syz.0.315: attempt to access beyond end of device [ 63.517342][ T4394] loop0: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 63.530796][ T4394] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 63.540141][ T4394] syz.0.315: attempt to access beyond end of device [ 63.540141][ T4394] loop0: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 63.554776][ T4394] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 63.565194][ T4394] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 63.575137][ T4394] Buffer I/O error on dev loop0, logical block 124, lost async page write [ 63.584782][ T4394] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 63.595429][ T4394] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 63.596864][ T4398] siw: device registration error -23 [ 63.604853][ T4394] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 63.759360][ T4403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.318'. [ 63.802341][ T4407] loop1: detected capacity change from 0 to 512 [ 63.810827][ T4403] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 63.826715][ T4407] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 63.872297][ T4407] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.901277][ T29] audit: type=1326 audit(1761212123.139:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196c85efc9 code=0x7ffc0000 [ 63.929915][ T4409] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 63.946194][ T4407] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.319: Block bitmap for bg 0 marked uninitialized [ 63.975066][ T4407] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 64.021968][ T4407] EXT4-fs (loop1): 1 orphan inode deleted [ 64.074638][ T4407] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 64.099765][ T4425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.327'. [ 64.117408][ T4407] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 64.221514][ T4426] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 64.229252][ T4426] netlink: 'syz.0.323': attribute type 2 has an invalid length. [ 64.246373][ T4431] serio: Serial port ptm0 [ 64.540662][ T4445] loop1: detected capacity change from 0 to 512 [ 64.548224][ T4445] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 64.560309][ T4445] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.566974][ T4445] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.334: Block bitmap for bg 0 marked uninitialized [ 64.580455][ T4445] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 64.589452][ T4445] EXT4-fs (loop1): 1 orphan inode deleted [ 64.596886][ T4445] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 64.606481][ T4445] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 64.670738][ T4447] netlink: 'syz.3.331': attribute type 1 has an invalid length. [ 64.678540][ T4447] netlink: 'syz.3.331': attribute type 2 has an invalid length. [ 64.881529][ T4455] loop0: detected capacity change from 0 to 256 [ 64.892343][ T4455] msdos: Bad value for 'tz' [ 64.947290][ T4459] loop0: detected capacity change from 0 to 256 [ 64.961492][ T4459] msdos: Bad value for 'tz' [ 65.075789][ T4472] siw: device registration error -23 [ 65.147387][ T4482] loop4: detected capacity change from 0 to 512 [ 65.156576][ T4480] random: crng reseeded on system resumption [ 65.169369][ T4482] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.194456][ T4482] EXT4-fs (loop4): 1 orphan inode deleted [ 65.200331][ T4482] EXT4-fs (loop4): 1 truncate cleaned up [ 65.216256][ T4482] EXT4-fs (loop4): shut down requested (0) [ 65.289084][ T4492] loop4: detected capacity change from 0 to 256 [ 65.295698][ T4492] msdos: Bad value for 'tz' [ 65.439430][ T4501] Unsupported ieee802154 address type: 0 [ 65.501282][ T4508] loop3: detected capacity change from 0 to 128 [ 65.583033][ T4513] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 65.599577][ T4515] loop1: detected capacity change from 0 to 512 [ 65.626954][ T4515] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.656102][ T4515] EXT4-fs (loop1): 1 truncate cleaned up [ 65.789306][ T4527] loop3: detected capacity change from 0 to 256 [ 65.813552][ T4527] msdos: Bad value for 'tz' [ 65.886974][ T4530] loop3: detected capacity change from 0 to 256 [ 65.922124][ T4525] loop1: detected capacity change from 0 to 4096 [ 65.934863][ T4530] FAT-fs (loop3): codepage cp950 not found [ 65.950011][ T4525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.135462][ T4537] Unsupported ieee802154 address type: 0 [ 66.992817][ T4550] loop3: detected capacity change from 0 to 512 [ 67.046395][ T4550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.066517][ T4550] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.088804][ T4552] loop1: detected capacity change from 0 to 512 [ 67.111390][ T4550] EXT4-fs (loop3): 1 truncate cleaned up [ 67.119277][ T4552] /dev/loop1: Can't open blockdev [ 67.143559][ T4557] loop2: detected capacity change from 0 to 512 [ 67.212683][ T4561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.380'. [ 67.236645][ T4564] loop2: detected capacity change from 0 to 128 [ 67.247214][ T4564] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.315431][ T4571] loop2: detected capacity change from 0 to 512 [ 67.333106][ T4571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.346547][ T4571] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.366996][ T4571] EXT4-fs (loop2): 1 truncate cleaned up [ 67.478986][ T4576] loop2: detected capacity change from 0 to 4096 [ 67.495642][ T4576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.758266][ T4568] validate_nla: 2 callbacks suppressed [ 67.758286][ T4568] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 67.771489][ T4568] netlink: 'syz.3.379': attribute type 2 has an invalid length. [ 67.898484][ T4579] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 67.906220][ T4579] netlink: 'syz.1.382': attribute type 2 has an invalid length. [ 68.070141][ T4591] loop2: detected capacity change from 0 to 512 [ 68.078815][ T4591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.086136][ T4591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.097336][ T4591] EXT4-fs (loop2): 1 truncate cleaned up [ 68.138794][ T4594] loop2: detected capacity change from 0 to 512 [ 68.145685][ T4594] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 68.196671][ T4594] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.203226][ T4594] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.390: Block bitmap for bg 0 marked uninitialized [ 68.226063][ T4594] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 68.248325][ T4597] loop3: detected capacity change from 0 to 1024 [ 68.256523][ T4597] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.263634][ T4594] EXT4-fs (loop2): 1 orphan inode deleted [ 68.279251][ T4594] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 68.314601][ T4594] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 68.365963][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 68.365983][ T29] audit: type=1326 audit(1761212127.589:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 68.395526][ T29] audit: type=1326 audit(1761212127.589:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 68.418892][ T29] audit: type=1326 audit(1761212127.589:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 68.442278][ T29] audit: type=1326 audit(1761212127.589:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 68.465578][ T29] audit: type=1326 audit(1761212127.589:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 68.488996][ T29] audit: type=1326 audit(1761212127.589:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 68.512354][ T29] audit: type=1326 audit(1761212127.589:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 68.535806][ T29] audit: type=1326 audit(1761212127.589:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 68.559125][ T29] audit: type=1326 audit(1761212127.589:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 68.582526][ T29] audit: type=1326 audit(1761212127.589:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7faff175efc9 code=0x7ffc0000 [ 68.628261][ T4605] siw: device registration error -23 [ 68.655826][ T4607] loop3: detected capacity change from 0 to 512 [ 68.692751][ T4609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.395'. [ 68.702953][ T4607] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 68.716298][ T4607] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.725173][ T4609] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 68.726395][ T4607] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.393: Block bitmap for bg 0 marked uninitialized [ 68.748585][ T4607] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 68.761026][ T4607] EXT4-fs (loop3): 1 orphan inode deleted [ 68.767020][ T4601] netlink: 'syz.1.392': attribute type 1 has an invalid length. [ 68.774683][ T4601] netlink: 'syz.1.392': attribute type 2 has an invalid length. [ 68.776428][ T4607] EXT4-fs mount: 46 callbacks suppressed [ 68.776446][ T4607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.885615][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.944969][ T4623] loop4: detected capacity change from 0 to 512 [ 68.962186][ T4623] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.015167][ T4623] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 69.030025][ T4623] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.400: bg 0: block 248: padding at end of block bitmap is not set [ 69.045517][ T4623] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.400: Failed to acquire dquot type 1 [ 69.057396][ T4623] EXT4-fs (loop4): 1 truncate cleaned up [ 69.063838][ T4623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 69.083788][ T4623] syz.4.400 (4623) used greatest stack depth: 9104 bytes left [ 69.104762][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 69.114031][ T52] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 69.127839][ T4617] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 69.135584][ T4617] netlink: 'syz.0.397': attribute type 2 has an invalid length. [ 69.151248][ T4631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.401'. [ 69.162906][ T4631] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 69.351028][ T4636] loop1: detected capacity change from 0 to 512 [ 69.358929][ T4636] /dev/loop1: Can't open blockdev [ 69.994220][ T4643] loop0: detected capacity change from 0 to 256 [ 70.080063][ T4643] msdos: Bad value for 'tz' [ 70.699296][ T4665] Unsupported ieee802154 address type: 0 [ 70.743251][ T4651] netlink: 'syz.0.408': attribute type 1 has an invalid length. [ 70.751068][ T4651] netlink: 'syz.0.408': attribute type 2 has an invalid length. [ 70.799786][ T4668] loop3: detected capacity change from 0 to 128 [ 70.816558][ T4668] /dev/loop3: Can't open blockdev [ 71.180070][ T4679] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 71.193335][ T4683] loop1: detected capacity change from 0 to 256 [ 71.215166][ T4683] msdos: Bad value for 'tz' [ 71.239355][ T4685] loop0: detected capacity change from 0 to 512 [ 71.323303][ T4685] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.352842][ T4691] serio: Serial port ptm0 [ 71.408344][ T4693] loop1: detected capacity change from 0 to 512 [ 71.433336][ T4693] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.484910][ T4685] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 71.499678][ T4685] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.420: bg 0: block 248: padding at end of block bitmap is not set [ 71.514454][ T4685] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.420: Failed to acquire dquot type 1 [ 71.526432][ T4685] EXT4-fs (loop0): 1 truncate cleaned up [ 71.533039][ T4685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 71.564998][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 71.574684][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 71.587246][ T4693] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 71.602233][ T4693] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.423: bg 0: block 248: padding at end of block bitmap is not set [ 71.617159][ T4693] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.423: Failed to acquire dquot type 1 [ 71.628925][ T4693] EXT4-fs (loop1): 1 truncate cleaned up [ 71.635022][ T4693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 71.665311][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 71.681973][ T2141] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 1 [ 71.775558][ T4703] loop1: detected capacity change from 0 to 764 [ 71.844737][ T4703] rock: directory entry would overflow storage [ 71.851072][ T4703] rock: sig=0x4f50, size=4, remaining=3 [ 71.856795][ T4703] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 71.910226][ T4707] loop1: detected capacity change from 0 to 512 [ 71.932323][ T4707] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 71.947499][ T4707] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.955021][ T4707] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.426: Block bitmap for bg 0 marked uninitialized [ 71.971741][ T4707] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 71.996337][ T4707] EXT4-fs (loop1): 1 orphan inode deleted [ 72.002618][ T4707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.029036][ T4707] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 72.041040][ T4707] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 72.066891][ T4709] loop0: detected capacity change from 0 to 4096 [ 72.080973][ T4712] siw: device registration error -23 [ 72.094338][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.104550][ T4709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.160506][ T4714] loop1: detected capacity change from 0 to 512 [ 72.170455][ T4709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.187457][ T4718] loop2: detected capacity change from 0 to 128 [ 72.203342][ T4714] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 72.221572][ T4718] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.272554][ T4718] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.276474][ T4714] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.311088][ T4722] loop4: detected capacity change from 0 to 512 [ 72.311579][ T4714] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.429: Block bitmap for bg 0 marked uninitialized [ 72.332513][ T4714] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 72.341746][ T4722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.367490][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.378937][ T4714] EXT4-fs (loop1): 1 orphan inode deleted [ 72.395657][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.405894][ T4714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.419556][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.486268][ T4730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.435'. [ 72.495442][ T4714] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 72.505045][ T4731] loop0: detected capacity change from 0 to 256 [ 72.521913][ T4714] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 72.533255][ T4733] loop4: detected capacity change from 0 to 512 [ 72.546531][ T4730] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 72.556525][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.578129][ T4733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.590708][ T4731] FAT-fs (loop0): codepage cp950 not found [ 72.668722][ T4733] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 72.720745][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.756259][ T4747] siw: device registration error -23 [ 72.875126][ T4759] serio: Serial port ptm0 [ 72.881416][ T4754] loop2: detected capacity change from 0 to 4096 [ 72.890594][ T4754] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.930927][ T4754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.073231][ T4761] validate_nla: 2 callbacks suppressed [ 73.073251][ T4761] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 73.086494][ T4761] netlink: 'syz.1.440': attribute type 2 has an invalid length. [ 73.098416][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.418838][ T29] kauditd_printk_skb: 621 callbacks suppressed [ 73.418854][ T29] audit: type=1326 audit(1761212132.659:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 73.470512][ T29] audit: type=1326 audit(1761212132.659:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 73.493985][ T29] audit: type=1326 audit(1761212132.659:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 73.517323][ T29] audit: type=1326 audit(1761212132.659:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 73.540675][ T29] audit: type=1326 audit(1761212132.659:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 73.564011][ T29] audit: type=1326 audit(1761212132.659:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 73.587377][ T29] audit: type=1326 audit(1761212132.659:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 73.610634][ T29] audit: type=1326 audit(1761212132.759:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 73.634062][ T29] audit: type=1326 audit(1761212132.759:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 73.657603][ T29] audit: type=1326 audit(1761212132.779:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 73.683901][ T4773] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 73.691676][ T4773] netlink: 'syz.4.447': attribute type 2 has an invalid length. [ 73.824166][ T4779] random: crng reseeded on system resumption [ 73.864957][ T4781] loop1: detected capacity change from 0 to 764 [ 73.879667][ T4781] rock: directory entry would overflow storage [ 73.885971][ T4781] rock: sig=0x4f50, size=4, remaining=3 [ 73.891617][ T4781] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 73.939415][ T4784] loop1: detected capacity change from 0 to 256 [ 73.966699][ T4784] msdos: Bad value for 'tz' [ 74.017265][ T4787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.452'. [ 74.130957][ T4796] loop2: detected capacity change from 0 to 1024 [ 74.160407][ T4798] loop1: detected capacity change from 0 to 512 [ 74.161269][ T4796] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.195763][ T4798] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.237824][ T4798] EXT4-fs (loop1): 1 orphan inode deleted [ 74.243700][ T4798] EXT4-fs (loop1): 1 truncate cleaned up [ 74.252614][ T4796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.256625][ T4798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.298924][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.366499][ T4798] EXT4-fs (loop1): shut down requested (0) [ 74.439491][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.491720][ T4812] loop1: detected capacity change from 0 to 512 [ 74.527564][ T4812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.560434][ T4812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.570482][ T4814] loop0: detected capacity change from 0 to 512 [ 74.605974][ T4814] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.625126][ T4812] EXT4-fs (loop1): 1 truncate cleaned up [ 74.642495][ T4812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.684285][ T4814] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 74.750148][ T4814] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.462: bg 0: block 248: padding at end of block bitmap is not set [ 74.765284][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.777319][ T4820] netlink: 'syz.4.460': attribute type 1 has an invalid length. [ 74.785155][ T4820] netlink: 'syz.4.460': attribute type 2 has an invalid length. [ 74.794518][ T4814] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.462: Failed to acquire dquot type 1 [ 74.817517][ T4822] loop1: detected capacity change from 0 to 512 [ 74.828854][ T4814] EXT4-fs (loop0): 1 truncate cleaned up [ 74.853261][ T4814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 74.867400][ T4822] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.887738][ T4822] EXT4-fs (loop1): 1 orphan inode deleted [ 74.893540][ T4822] EXT4-fs (loop1): 1 truncate cleaned up [ 74.912728][ T4825] loop3: detected capacity change from 0 to 512 [ 74.920546][ T4822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.922061][ T4825] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 74.934896][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 74.954108][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 74.966124][ T4825] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.973513][ T4822] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.463: iget: bad extra_isize 46 (inode size 256) [ 74.988946][ T4822] EXT4-fs (loop1): Remounting filesystem read-only [ 74.991074][ T4825] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.464: Block bitmap for bg 0 marked uninitialized [ 75.022792][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.023289][ T4825] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 75.044257][ T4825] EXT4-fs (loop3): 1 orphan inode deleted [ 75.050705][ T4825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.095815][ T4825] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 75.110219][ T4825] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 75.165837][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.207367][ T4845] loop1: detected capacity change from 0 to 512 [ 75.222461][ T4845] /dev/loop1: Can't open blockdev [ 75.327044][ T4852] loop3: detected capacity change from 0 to 4096 [ 75.335702][ T4852] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.347528][ T4852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.440141][ T4849] netlink: 'syz.0.471': attribute type 1 has an invalid length. [ 75.447406][ T4859] loop4: detected capacity change from 0 to 512 [ 75.448160][ T4849] netlink: 'syz.0.471': attribute type 2 has an invalid length. [ 75.455402][ T4859] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.477580][ T4859] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 75.492402][ T4859] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.477: bg 0: block 248: padding at end of block bitmap is not set [ 75.507286][ T4859] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.477: Failed to acquire dquot type 1 [ 75.519398][ T4859] EXT4-fs (loop4): 1 truncate cleaned up [ 75.521305][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.525760][ T4859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 75.579605][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 75.589483][ T161] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 1 [ 75.633197][ T4867] Unsupported ieee802154 address type: 0 [ 75.690059][ T4872] Unsupported ieee802154 address type: 0 [ 75.742826][ T4877] random: crng reseeded on system resumption [ 75.783746][ T4880] loop3: detected capacity change from 0 to 764 [ 75.800428][ T4880] rock: directory entry would overflow storage [ 75.806895][ T4880] rock: sig=0x4f50, size=4, remaining=3 [ 75.812691][ T4880] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 75.855706][ T4882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.486'. [ 75.897781][ T4884] loop3: detected capacity change from 0 to 764 [ 75.916652][ T4884] rock: directory entry would overflow storage [ 75.922882][ T4884] rock: sig=0x4f50, size=4, remaining=3 [ 75.928524][ T4884] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 76.024505][ T4887] loop3: detected capacity change from 0 to 4096 [ 76.041167][ T4887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.093525][ T4887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.196863][ T4896] Unsupported ieee802154 address type: 0 [ 76.203606][ T4897] loop0: detected capacity change from 0 to 256 [ 76.224498][ T4897] msdos: Bad value for 'tz' [ 76.275677][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.355327][ T4912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.498'. [ 76.387435][ T4912] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 76.396614][ T4918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.500'. [ 76.996205][ T4926] netlink: 'syz.4.502': attribute type 1 has an invalid length. [ 77.003998][ T4926] netlink: 'syz.4.502': attribute type 2 has an invalid length. [ 77.215670][ T4935] Unsupported ieee802154 address type: 0 [ 77.391665][ T4938] loop2: detected capacity change from 0 to 4096 [ 77.402056][ T4938] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.413903][ T4949] random: crng reseeded on system resumption [ 77.428442][ T4938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.537621][ T4953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.512'. [ 77.616321][ T4956] loop4: detected capacity change from 0 to 4096 [ 77.623484][ T4956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.640491][ T4956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.669798][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.799471][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.873431][ T4975] loop2: detected capacity change from 0 to 128 [ 77.911673][ T4975] bio_check_eod: 44 callbacks suppressed [ 77.911689][ T4975] syz.2.518: attempt to access beyond end of device [ 77.911689][ T4975] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 77.951449][ T4975] syz.2.518: attempt to access beyond end of device [ 77.951449][ T4975] loop2: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 78.026693][ T4984] loop1: detected capacity change from 0 to 256 [ 78.033216][ T4975] syz.2.518: attempt to access beyond end of device [ 78.033216][ T4975] loop2: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 78.047018][ T4975] buffer_io_error: 16 callbacks suppressed [ 78.047032][ T4975] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 78.075292][ T4984] msdos: Bad value for 'tz' [ 78.096234][ T4975] syz.2.518: attempt to access beyond end of device [ 78.096234][ T4975] loop2: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 78.129657][ T4975] syz.2.518: attempt to access beyond end of device [ 78.129657][ T4975] loop2: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 78.143130][ T4975] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 78.159740][ T4975] syz.2.518: attempt to access beyond end of device [ 78.159740][ T4975] loop2: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 78.173721][ T4975] syz.2.518: attempt to access beyond end of device [ 78.173721][ T4975] loop2: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 78.187160][ T4975] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 78.196544][ T4975] syz.2.518: attempt to access beyond end of device [ 78.196544][ T4975] loop2: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 78.210525][ T4975] syz.2.518: attempt to access beyond end of device [ 78.210525][ T4975] loop2: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 78.224088][ T4975] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 78.232951][ T4975] syz.2.518: attempt to access beyond end of device [ 78.232951][ T4975] loop2: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 78.247639][ T4975] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 78.256900][ T4975] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 78.266024][ T4975] Buffer I/O error on dev loop2, logical block 124, lost async page write [ 78.274905][ T4975] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 78.286465][ T4975] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 78.295521][ T4975] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 78.306243][ T4981] validate_nla: 2 callbacks suppressed [ 78.306260][ T4981] netlink: 'syz.0.519': attribute type 1 has an invalid length. [ 78.319615][ T4981] netlink: 'syz.0.519': attribute type 2 has an invalid length. [ 78.442770][ T4990] random: crng reseeded on system resumption [ 78.495647][ T4994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.524'. [ 78.527321][ T4997] random: crng reseeded on system resumption [ 78.618721][ T29] kauditd_printk_skb: 652 callbacks suppressed [ 78.618802][ T29] audit: type=1400 audit(1761212137.859:3894): avc: denied { getopt } for pid=4998 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.650729][ T29] audit: type=1400 audit(1761212137.889:3895): avc: denied { write } for pid=4998 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.815779][ T5003] Unsupported ieee802154 address type: 0 [ 78.842404][ T29] audit: type=1326 audit(1761212138.079:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 78.893400][ T29] audit: type=1326 audit(1761212138.109:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 78.917098][ T29] audit: type=1326 audit(1761212138.109:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 78.940736][ T29] audit: type=1326 audit(1761212138.109:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 78.941207][ T5012] loop0: detected capacity change from 0 to 128 [ 78.964113][ T29] audit: type=1326 audit(1761212138.109:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 78.993875][ T29] audit: type=1326 audit(1761212138.109:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 79.017328][ T29] audit: type=1326 audit(1761212138.109:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 79.040916][ T29] audit: type=1326 audit(1761212138.109:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 79.116637][ T5013] loop4: detected capacity change from 0 to 512 [ 79.171094][ T5013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.184203][ T5013] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.307692][ T5026] serio: Serial port ptm0 [ 79.498497][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.936728][ T5043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.539'. [ 79.947735][ T5043] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 80.559566][ T5060] loop4: detected capacity change from 0 to 8192 [ 80.654951][ T5062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.547'. [ 80.667005][ T5062] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 80.866078][ T5071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.551'. [ 80.888001][ T5071] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 81.130761][ T5082] random: crng reseeded on system resumption [ 81.269324][ T5083] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 81.277200][ T5083] netlink: 'syz.0.553': attribute type 2 has an invalid length. [ 81.292199][ T5091] FAULT_INJECTION: forcing a failure. [ 81.292199][ T5091] name failslab, interval 1, probability 0, space 0, times 1 [ 81.304964][ T5091] CPU: 0 UID: 0 PID: 5091 Comm: syz.4.557 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.305077][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.305119][ T5091] Call Trace: [ 81.305125][ T5091] [ 81.305133][ T5091] __dump_stack+0x1d/0x30 [ 81.305155][ T5091] dump_stack_lvl+0xe8/0x140 [ 81.305246][ T5091] dump_stack+0x15/0x1b [ 81.305269][ T5091] should_fail_ex+0x265/0x280 [ 81.305310][ T5091] ? __pfx_asymmetric_lookup_restriction+0x1/0x10 [ 81.305413][ T5091] should_failslab+0x8c/0xb0 [ 81.305442][ T5091] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 81.305478][ T5091] ? asymmetric_lookup_restriction+0x7b/0x370 [ 81.305576][ T5091] ? should_fail_ex+0xdb/0x280 [ 81.305618][ T5091] ? __pfx_asymmetric_lookup_restriction+0x1/0x10 [ 81.305646][ T5091] kstrndup+0x80/0x130 [ 81.305676][ T5091] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 81.305823][ T5091] asymmetric_lookup_restriction+0x7b/0x370 [ 81.305855][ T5091] ? strcmp+0x22/0x50 [ 81.305873][ T5091] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 81.305919][ T5091] keyring_restrict+0xf7/0x280 [ 81.305953][ T5091] keyctl_restrict_keyring+0x107/0x1b0 [ 81.305981][ T5091] __se_sys_keyctl+0x1ed/0xb80 [ 81.306049][ T5091] ? __rcu_read_unlock+0x4f/0x70 [ 81.306081][ T5091] ? __fget_files+0x184/0x1c0 [ 81.306116][ T5091] ? fput+0x8f/0xc0 [ 81.306212][ T5091] __x64_sys_keyctl+0x67/0x80 [ 81.306243][ T5091] x64_sys_call+0x2f7c/0x3000 [ 81.306272][ T5091] do_syscall_64+0xd2/0x200 [ 81.306294][ T5091] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.306327][ T5091] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 81.306392][ T5091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.306442][ T5091] RIP: 0033:0x7efd60c3efc9 [ 81.306462][ T5091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.306483][ T5091] RSP: 002b:00007efd5f6a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 81.306502][ T5091] RAX: ffffffffffffffda RBX: 00007efd60e95fa0 RCX: 00007efd60c3efc9 [ 81.306552][ T5091] RDX: 0000200000000200 RSI: 0000000007d63c7f RDI: 000000000000001d [ 81.306567][ T5091] RBP: 00007efd5f6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.306675][ T5091] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 81.306690][ T5091] R13: 00007efd60e96038 R14: 00007efd60e95fa0 R15: 00007fffbdc5dda8 [ 81.306712][ T5091] [ 81.472593][ T5094] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 81.555298][ T5094] netlink: 'syz.1.555': attribute type 2 has an invalid length. [ 81.661332][ T5102] loop4: detected capacity change from 0 to 128 [ 81.792440][ T5104] sg_write: data in/out 124/1 bytes for SCSI command 0xdf-- guessing data in; [ 81.792440][ T5104] program syz.3.563 not setting count and/or reply_len properly [ 81.815262][ T5104] tipc: Started in network mode [ 81.820234][ T5104] tipc: Node identity 6284d031c185, cluster identity 4711 [ 81.827507][ T5104] tipc: Enabled bearer , priority 0 [ 81.841119][ T5104] tipc: Disabling bearer [ 81.957043][ T5108] random: crng reseeded on system resumption [ 82.261801][ T5128] serio: Serial port ptm0 [ 82.772270][ T5149] netlink: 'syz.4.577': attribute type 1 has an invalid length. [ 82.780080][ T5149] netlink: 'syz.4.577': attribute type 2 has an invalid length. [ 83.212854][ T5158] SELinux: Context Ü is not valid (left unmapped). [ 83.219801][ T5158] SELinux: Context attr/fscr is not valid (left unmapped). [ 83.514754][ T5163] siw: device registration error -23 [ 83.971650][ T5176] random: crng reseeded on system resumption [ 84.352384][ T5184] sg_write: data in/out 329182/251 bytes for SCSI command 0x9-- guessing data in; [ 84.352384][ T5184] program syz.0.593 not setting count and/or reply_len properly [ 84.374353][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 84.374443][ T29] audit: type=1400 audit(1761212143.609:4422): avc: denied { bind } for pid=5183 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.626651][ T29] audit: type=1326 audit(1761212143.869:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 84.659899][ T5199] siw: device registration error -23 [ 84.681852][ T29] audit: type=1326 audit(1761212143.899:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 84.705344][ T29] audit: type=1326 audit(1761212143.899:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 84.728952][ T29] audit: type=1326 audit(1761212143.899:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 84.752322][ T29] audit: type=1326 audit(1761212143.899:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 84.775648][ T29] audit: type=1326 audit(1761212143.899:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 84.799199][ T29] audit: type=1326 audit(1761212143.899:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 84.822567][ T29] audit: type=1326 audit(1761212143.899:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 84.845983][ T29] audit: type=1326 audit(1761212143.899:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd60c3efc9 code=0x7ffc0000 [ 85.015371][ T5206] netlink: 'syz.0.599': attribute type 1 has an invalid length. [ 85.023968][ T5206] netlink: 'syz.0.599': attribute type 2 has an invalid length. [ 85.178117][ T5210] loop3: detected capacity change from 0 to 764 [ 85.247907][ T5215] rock: directory entry would overflow storage [ 85.254131][ T5215] rock: sig=0x4f50, size=4, remaining=3 [ 85.259751][ T5215] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 85.283226][ T5217] loop1: detected capacity change from 0 to 4096 [ 85.292744][ T5217] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.313492][ T5217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.471041][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.544739][ T5225] serio: Serial port ptm0 [ 86.163660][ T5230] sg_write: data in/out 329182/251 bytes for SCSI command 0x9-- guessing data in; [ 86.163660][ T5230] program syz.3.608 not setting count and/or reply_len properly [ 86.441205][ T5240] serio: Serial port ptm0 [ 86.596143][ T5248] sg_write: data in/out 124/1 bytes for SCSI command 0xdf-- guessing data in; [ 86.596143][ T5248] program syz.0.614 not setting count and/or reply_len properly [ 86.643565][ T5250] loop3: detected capacity change from 0 to 764 [ 86.717410][ T5253] rock: directory entry would overflow storage [ 86.723640][ T5253] rock: sig=0x4f50, size=4, remaining=3 [ 86.729256][ T5253] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 87.272432][ T5258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 87.300239][ T5258] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 87.354841][ T5260] random: crng reseeded on system resumption [ 87.490325][ T5262] unsupported nla_type 52263 [ 87.502093][ T5256] loop4: detected capacity change from 0 to 512 [ 87.518600][ T5266] ip6gre1: entered promiscuous mode [ 87.546326][ T5256] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 87.591866][ T3502] ================================================================== [ 87.600009][ T3502] BUG: KCSAN: data-race in generic_fillattr / touch_atime [ 87.600947][ T5256] netlink: 180 bytes leftover after parsing attributes in process `syz.4.618'. [ 87.607175][ T3502] [ 87.607192][ T3502] write to 0xffff88811a9840f0 of 4 bytes by task 3688 on cpu 0: [ 87.607218][ T3502] touch_atime+0x1e8/0x340 [ 87.630560][ T3502] iterate_dir+0x28b/0x330 [ 87.635004][ T3502] __se_sys_getdents64+0x88/0x1b0 [ 87.640052][ T3502] __x64_sys_getdents64+0x43/0x50 [ 87.640401][ T5256] netlink: 180 bytes leftover after parsing attributes in process `syz.4.618'. [ 87.645103][ T3502] x64_sys_call+0x2dae/0x3000 [ 87.645135][ T3502] do_syscall_64+0xd2/0x200 [ 87.645154][ T3502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.645174][ T3502] [ 87.645182][ T3502] read to 0xffff88811a9840f0 of 4 bytes by task 3502 on cpu 1: [ 87.645200][ T3502] generic_fillattr+0x172/0x340 [ 87.645233][ T3502] shmem_getattr+0x181/0x200 [ 87.645256][ T3502] vfs_getattr_nosec+0x146/0x1e0 [ 87.645289][ T3502] __se_sys_newfstat+0x96/0x2e0 [ 87.645308][ T3502] __x64_sys_newfstat+0x31/0x40 [ 87.703290][ T3502] x64_sys_call+0x2768/0x3000 [ 87.707983][ T3502] do_syscall_64+0xd2/0x200 [ 87.712517][ T3502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.718418][ T3502] [ 87.720751][ T3502] value changed: 0x2fa9fa57 -> 0x31af4c54 [ 87.726466][ T3502] [ 87.728788][ T3502] Reported by Kernel Concurrency Sanitizer on: [ 87.734935][ T3502] CPU: 1 UID: 0 PID: 3502 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.744233][ T3502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.754314][ T3502] ================================================================== [ 87.803070][ T5270] loop0: detected capacity change from 0 to 4096 [ 87.819909][ T5270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.841068][ T5270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.105807][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.