last executing test programs: 1.86058977s ago: executing program 3 (id=250): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f00000000c0)='./file0\x00', 0x80440, 0x120) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x41, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) 1.791317431s ago: executing program 3 (id=254): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x41, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet_dccp(0x2, 0x6, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) waitid(0x2, r5, 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsm_get_self_attr(0x67, &(0x7f0000000580)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) 1.627758584s ago: executing program 2 (id=259): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYRESOCT], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) syz_open_dev$evdev(0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$kcm(r4, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x8, 0xfffffffe, 0x3bd}) socket$rxrpc(0x21, 0x2, 0x2) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 1.555144875s ago: executing program 1 (id=260): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000bc0)=ANY=[@ANYBLOB='shortname=mixed,utf8=0,iocharset=cp860,iocharset=maccroatian,uni_xlate=1,tz=UTC,nonumtail=0,uni_xlate=1,iocharset=cp437,shortname=winnt,rodir,shortname=mixed,nocase,shortname=lower,shortname=mixed,errors=remount-ro,nonumtail=0,smackfsdef=utf8=0,dirsync,smackfshat=&,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c6f08000010100005a33af281c5c9bf00"], 0x25, 0x34f, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x4c4, &(0x7f0000002700)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES32=r0], 0xfe, 0x68f, &(0x7f0000000c00)="$eJzs3c9v2+Ydx/EPZdmWPSAbtqEIgjR+mqyAg2WKJDcujOxQjaJsdpIokPJgn4qssYsgcrolGbD40vmyH8D2D+zWSw/7IwbsvPP+gR0HFNtOA3bhQFLUb0qOYztd834ZiR6RX/L58kf0DS3xkQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCy7ViqVLTXc1u6eyWbXfK85Y36ytkXdThq35/YrWdEfFQq6mky6+t3B7Leiv27qevLsugrRQ0HH33jrW/e/k8+ly89I6Cz0sit89uL48YNu9+Dp2XoLrbMsdyEmMlHuFEttOy038NxmddsxbuCZrc3N0t2demDqbsMJ9oOO0zS27+Q6nm/W7dumvLW1YZzivrfb2q5VG0468f0fVEqlTfPhcu/w3/2wGNg7bqPhtrbjmGh2FLPcP0OcatOYw0fdg40Z+aXhB+V5WxKtqTIvqFKqVMrlSqW8eW/r3vulUn5iQmmMJiIGJ+1X5+DjMp3DqzZwPnJR/f+7JTVUUEu72pOZ+mOrJl+emhnze9L6/+5dZ2a/w/U/rfJXB7OvKa7/N5JnN7Lqf0YuRiZeYNocK2P62X6e6YWO9VgP1FVXB3p6PutdO78ML/ZnW8pLrgJ5ctVUVdtyZHpTjLa0qU2V9JF2VFcgo7pcNeQo0L4CdeSoGR8TX46q6siTL6N12boto7K2tKUNGTkqal+edtXStmqq6j9hGB7qUbzfN2bkqDSoPDRxNSso3z8HJ9eUVf9/+lmyRGb9z2tK/cfXT//cOUUM8NqFvev/TMtTp65dXEYAAAAAAOC8WfFv3634vfu3JYWquw2n9LrTAgAAAAAA5yh+5/969LAYtd6WlXH9H15+bgAAAAAA4HxY8T12lqTV+EP91uBOqNN8CGDhElIEAAAAAACvKH7//8aSFMY3+q/JeqnrfwAAAAAA8H/gt0Nj7OfTMXbD9G39nKSgvWz9+Z/L8hetk/be96yjajSnetSLmfgEQKd+zcorGag3Hq93SVL8zHauW73xgXuDYFrJwL7Sl4fzxvq3/LEElhbSX19MSeDK8VACm/neM/1e7yQx7/T6fXicUzwn6WW17jacou017pdVrV7JdZy9zi+ePPql5Pe38/BR96D48afdh3EuJ9Gkk6Moj89G0snNy+V5PN5CfM/FtC1eUT3t8net5qoV91tKt39B1aPccEen2/5f62YSc3M1eVw9To+ArF/1GuVifMgGWx+PDmENsii3VzWy5dMOREYWhTiLW0nMrfVbyUOaX3IUCt9fkCrFyWPgD2dRGd7/8/eF9a+JfTEnC7kNZyPK4i/RijKy2Hi5LCaOCAC8LoeDKhQPYj45xv543T3Lq9xhOqx6ZnX/YLSX538MkxsOF6R8772J5CbErLqi6BV9PQlb0r+jh/y1sVf0+NbGXl0pKOMVvTRe11+iukV9/WnwHUi9tHtz8v0s/huG4f1y3O8fhqpq1O/n0QKfZ/YbNCoL0S68+/zoZ/EA+JFPDj45eFKpbGyW3iuV7lW0GG9G74HaAwCYYv537IxGFAb1rF+73+tfVT/8x7tJa6Tufrv/kYKiPtan6uqh7qRfIbA2vd/VoY8h3Jm8ao1iV6Tx2LLuZF7VxbV0KLbSj11Uusjo/xcGsRvju+2DCzgUAABcmptRHW59s/98Xv2fdu1+J73uXr8WX1SOX3eP1vLxbwjOii1f6n4AAOBNUvC/tFY7v7F8321/VN7aKlc7O47xPfvHxndr245xWx3Ht3eqrW3HtH2v49lew7R9Lbs1JzDBbrvt+R1T93zT9gJ3L/7md9P76vfAaVZbHdcO2g2nGjjG9lqdqt0xNTewTXv3Rw032HH8eOGg7dhu3bWrHddrmcBbke0UjQkcZyjQrTmtjlt3o2bLtH23WfX3zU+8xm7TMTUnsH233fGSFaZ9ua265zfj1RYVzviiQwAA3hzPXhw/ftDtHjyd0ThR0kg/jzYjeGnaCl/zJgIAgDFUaQAAAAAAAAAAAAAAAAAAAAAAvvpOc//fzEZ6U2A6ZVFTgqX+lJ9fOdWaLQ2mfPG3V8rwDI3c+JQwDPOSwvmL/zVp5KfFrESNJUnddPcPx5yc61asnSpYSSN//vtwRZp2JlxY44eHo+fhREw0c+qs5f6xyL/6P4dpjSdfZMwKw3DOGbU8ug+XZm3gaCM6XZ8uvcIhuPzXIgCX638BAAD//58PN4Q=") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open_by_handle_at(r2, &(0x7f0000000480)=@fuse_with_parent={0x18, 0x82, {{0x21, 0x4, 0xc}, {0x7fffffff, 0x9, 0x6}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x15, &(0x7f0000000840)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x8b834ee1c675be86, 0xfffffffffffffff0}, @alu={0x2, 0x1, 0x6, 0x6, 0x0, 0x80, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7, 0x0, 0x80000}, 0x18) r8 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x200, 0x2, 0x0, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r9, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r9) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r10, 0xc0085504, &(0x7f00000002c0)=0xffffd) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000012c0)=ANY=[@ANYRES32=r5, @ANYBLOB="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"], 0x95) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000440)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000280)="d3dd67630fb2dc6a82244b697f78e44d0cb456ba9430eec46f28ec1d10e9c9ed98127a0bb323f89eb1b16ca4b394963945494a7a7154cac0281fac57310b1ff2df0c8a791599f540bdd1d5ba4fded4bf760845248d693e7aa079f1f2fc69221b424c112a00758e96d50dace3028e31ff8f60a8bf9e4206026a7cab92a6600a2e9f21328203284018958d136aecc8484ca40c27611e258c5572c4f332c30c0fe9321493e356512fc0cd8cdd57955f388d739312", 0xb3}], 0x1, &(0x7f0000000340)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x20}}, @authinfo={0x18, 0x84, 0x6, {0x3d30}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x810c, 0x7, 0x60, r6}}, @dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}}], 0xe0, 0x40080}, 0x20000041) set_mempolicy(0x3, &(0x7f00000001c0)=0xfffffffffffff6f3, 0x6) 1.306068319s ago: executing program 3 (id=268): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x41, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) waitid(0x2, r4, 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x4, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsm_get_self_attr(0x67, &(0x7f0000000580)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) 1.25701612s ago: executing program 4 (id=271): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x1000, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) (async) r5 = epoll_create1(0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r6}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\x00') (async) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r9, 0x8) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x8, 0x5}, &(0x7f00000000c0)=0x8) (async) setsockopt$inet6_int(r10, 0x29, 0x24, &(0x7f0000000200)=0x7, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r11}, 0x18) (async) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') (async) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x80) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r12, &(0x7f00000000c0)={0xe000001a}) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r12, &(0x7f0000000000)) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.24128677s ago: executing program 0 (id=272): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x99f400, 0x41) r2 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f010022232425262728382a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40fe8212cf9a2def87a3a652fee23f19db77cdd1719373d289a8a57e65053744ae8dbb130b582889d02b055e992dc57abca347bd671006dc44a374018585d53f1eeba179414094e54565fa412c5732a12aca03dd38fa10e2e55d8fee80d862383bb31691b61b7df07c10849c5cbd5e15282b20e7b47e6ae177929c838a7e73b02c0d812636b9fd8d442d84e7dcc1a2c7985757a9b4228ae49ff192618316812028b6ca4a"], 0x48, 0xfffffffffffffffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000300)={@desc={0x1, 0x0, @desc1}, 0x1, r2, '\x00', @auto=[0x16]}) socket$netlink(0x10, 0x3, 0x0) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x40}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 1.181064981s ago: executing program 4 (id=273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) readlink(&(0x7f00000012c0)='./file0/../file0\x00', &(0x7f0000001580)=""/84, 0x54) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000000010046) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4004810) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000101401002cbd7000fedbdf2508000300feffffff08004a0000000000080029"], 0x28}}, 0xc094) msgget(0x0, 0x400) 1.180741411s ago: executing program 4 (id=274): lseek(0xffffffffffffffff, 0x81, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") syz_open_dev$sg(0x0, 0x0, 0x8100) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000012000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1.066923213s ago: executing program 4 (id=275): r0 = syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x5) 1.059003463s ago: executing program 0 (id=276): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$P9_RLERRORu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fchown(r1, 0xee01, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x402, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() timer_settime(0x0, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2, 0x0, 0x2}, 0x18) semtimedop(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) umount2(0x0, 0xd) 1.046445563s ago: executing program 4 (id=277): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_io_uring_setup(0x7295, &(0x7f00000004c0)={0x0, 0x5885, 0x10, 0x1, 0x2c5}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000eb00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 1.023443234s ago: executing program 3 (id=278): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) close(r2) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000c50000000ea20000850000000e00000095"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r11, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0xfa8}], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='mm_page_alloc\x00', r10, 0x0, 0xf29}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 898.685266ms ago: executing program 3 (id=279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="170000000000000007000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000e132d8aa15a40da784bfa6da6d2dc7942702ea28fd8323ab80c3a87694d48e8ae0123c6ec3286feeb6226b66b0a366ff5c4a99197d7ba7d12ed579965fe6c2f98d3681983c78607a7a295e0c2d2c5f36489684461d82dc2fbe9991f70f7878a1680b5b076cd4737ba055d8b038a1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xd74d4000) mbind(&(0x7f00002fb000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000380)=0x9, 0x5, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x345b41) fcntl$dupfd(r2, 0x0, r2) creat(&(0x7f0000000100)='./file0\x00', 0x10d) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x8200, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:0-N:3/7']) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502c9a4319fa14172"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x8, &(0x7f00000000c0), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r8, &(0x7f0000000740)=ANY=[], 0x58) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/6, 0x6}, {&(0x7f0000000300)=""/21, 0x15}], 0x2}, 0x1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310300000000fcdbdf250900000008000300", @ANYRES32=r9, @ANYBLOB="dc51909cfa3a5ff481dd60bf4731b45e5879695730fcc5a1d4d867409ba69958610ac71907d60989d447"], 0x1c}}, 0x0) inotify_init1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 722.778758ms ago: executing program 2 (id=280): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000010000600000008000000000000000000"], 0x24, 0x0) listxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/20, 0x14) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000440)={0x1d, r1}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x2, 0x18}, 0xc) syz_open_dev$vcsu(&(0x7f0000000200), 0x8, 0x70202) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 520.708582ms ago: executing program 1 (id=281): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000002440)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000002c0), 0x806004, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095", @ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000040, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x40c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x1c, 0x3c, 0x107, 0xfffffffc, 0x25dfdbfe, {0x11, 0x7c}, [@nested={0x6, 0x4, 0x0, 0x1, [@generic='6\f']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48804}, 0x2400c054) 511.803092ms ago: executing program 2 (id=282): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x18d102, 0x1c1) ftruncate(r0, 0x2007ffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000000201005) 385.591254ms ago: executing program 2 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 385.176744ms ago: executing program 1 (id=284): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c236bfe078ab28a00a2bc153dc7f71d839a831504b2aed60fdca209acd1395192d885fce57bb712f6b00c3e70e7b7ba8533786d8723cc906d891a3633b1591", 0x1d}, 0x60) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x28, r1, 0x207, 0x70bd29, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x880) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x7fffeffb, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x82083, 0x0) socket(0x1d, 0x2, 0x6) io_submit(0x0, 0x0, 0x0) 343.255175ms ago: executing program 1 (id=285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00') readlink(0x0, &(0x7f0000001580)=""/84, 0x54) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000000010046) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4004810) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000101401002cbd7000fedbdf2508000300feffffff08004a0000000000080029"], 0x28}}, 0xc094) msgget(0x0, 0x400) 342.691785ms ago: executing program 2 (id=286): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x99f400, 0x41) r2 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f010022232425262728382a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40fe8212cf9a2def87a3a652fee23f19db77cdd1719373d289a8a57e65053744ae8dbb130b582889d02b055e992dc57abca347bd671006dc44a374018585d53f1eeba179414094e54565fa412c5732a12aca03dd38fa10e2e55d8fee80d862383bb31691b61b7df07c10849c5cbd5e15282b20e7b47e6ae177929c838a7e73b02c0d812636b9fd8d442d84e7dcc1a2c7985757a9b4228ae49ff192618316812028b6ca4a"], 0x48, 0xfffffffffffffffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000300)={@desc={0x1, 0x0, @desc1}, 0x1, r2, '\x00', @auto=[0x16]}) socket$netlink(0x10, 0x3, 0x0) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3000000}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 303.482335ms ago: executing program 1 (id=287): r0 = syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x5) 302.949715ms ago: executing program 1 (id=288): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x41, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) waitid(0x2, r4, 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsm_get_self_attr(0x67, &(0x7f0000000580)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) 208.819057ms ago: executing program 0 (id=289): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x402, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) 145.363558ms ago: executing program 4 (id=290): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYRESOCT], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) syz_open_dev$evdev(0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$kcm(r4, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x8, 0xfffffffe, 0x3bd}) socket$rxrpc(0x21, 0x2, 0x2) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 133.338748ms ago: executing program 0 (id=291): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24000080, 0x0, 0x0) 86.677979ms ago: executing program 2 (id=292): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x1f1) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000400)={0x8, 0x20000002, 0x9, 0xfffffffa}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x80000000, 0x6}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r8, &(0x7f00000002c0), &(0x7f0000000300)=@tcp=r6}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt(r1, 0x100de2, 0x5, 0x0, &(0x7f0000000040)) r9 = dup(r0) write$P9_RLERRORu(r9, &(0x7f0000000300)=ANY=[@ANYRES32=r8], 0x53) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r11, &(0x7f0000000f80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000001"], 0x30}}], 0x1, 0xc004) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x20000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9ec, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r13}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x1, 0x1}, 0x20) 86.450659ms ago: executing program 0 (id=293): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x18d102, 0x1c1) ftruncate(r0, 0x2007ffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000000201005) 52.811599ms ago: executing program 0 (id=294): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) (async) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x6b4e, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2000000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r2, 0x1}}, 0x18) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x400, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x5) connect$caif(r3, &(0x7f0000000080)=@dgm={0x25, 0x80000000, 0x6f}, 0x18) preadv(r0, &(0x7f00000000c0), 0x0, 0x10, 0x52) r4 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async, rerun: 32) preadv2(r4, 0x0, 0x0, 0xfffffffe, 0x1d, 0xc) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) (async) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000040)=0x19, 0x4) getsockopt$MRT(r4, 0x0, 0xd0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x3c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000040), 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) modify_ldt$write(0x1, &(0x7f0000000300)={0x9, 0x20000000, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x10) connect$can_bcm(r8, &(0x7f00000001c0), 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.909115][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 19.909132][ T29] audit: type=1400 audit(1745237879.282:76): avc: denied { transition } for pid=3182 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.913726][ T29] audit: type=1400 audit(1745237879.282:77): avc: denied { noatsecure } for pid=3182 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.916428][ T29] audit: type=1400 audit(1745237879.282:78): avc: denied { write } for pid=3182 comm="sh" path="pipe:[2345]" dev="pipefs" ino=2345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.919491][ T29] audit: type=1400 audit(1745237879.282:79): avc: denied { rlimitinh } for pid=3182 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.922132][ T29] audit: type=1400 audit(1745237879.282:80): avc: denied { siginh } for pid=3182 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.627632][ T29] audit: type=1400 audit(1745237880.002:81): avc: denied { read } for pid=2985 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 27.837655][ T29] audit: type=1400 audit(1745237887.212:82): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.838696][ T3291] cgroup: Unknown subsys name 'net' [ 27.860446][ T29] audit: type=1400 audit(1745237887.212:83): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.887899][ T29] audit: type=1400 audit(1745237887.242:84): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.043204][ T3291] cgroup: Unknown subsys name 'cpuset' [ 28.049524][ T3291] cgroup: Unknown subsys name 'rlimit' [ 28.181782][ T29] audit: type=1400 audit(1745237887.552:85): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.205128][ T29] audit: type=1400 audit(1745237887.562:86): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.219884][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.225968][ T29] audit: type=1400 audit(1745237887.562:87): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.255127][ T29] audit: type=1400 audit(1745237887.562:88): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.275454][ T29] audit: type=1400 audit(1745237887.562:89): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.276432][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.300275][ T29] audit: type=1400 audit(1745237887.562:90): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.332275][ T29] audit: type=1400 audit(1745237887.612:91): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.605052][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 29.633622][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 29.668840][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 29.705314][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 29.756070][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.763226][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.770822][ T3302] bridge_slave_0: entered allmulticast mode [ 29.777353][ T3302] bridge_slave_0: entered promiscuous mode [ 29.795251][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.802466][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.809604][ T3306] bridge_slave_0: entered allmulticast mode [ 29.816193][ T3306] bridge_slave_0: entered promiscuous mode [ 29.822733][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.829818][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.837062][ T3302] bridge_slave_1: entered allmulticast mode [ 29.843529][ T3302] bridge_slave_1: entered promiscuous mode [ 29.861162][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.868364][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.875644][ T3306] bridge_slave_1: entered allmulticast mode [ 29.882004][ T3306] bridge_slave_1: entered promiscuous mode [ 29.913548][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.932465][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.939555][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.946719][ T3309] bridge_slave_0: entered allmulticast mode [ 29.953276][ T3309] bridge_slave_0: entered promiscuous mode [ 29.960648][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.975464][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.989540][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.996664][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.003974][ T3309] bridge_slave_1: entered allmulticast mode [ 30.010383][ T3309] bridge_slave_1: entered promiscuous mode [ 30.025258][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.034466][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.041568][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.048774][ T3301] bridge_slave_0: entered allmulticast mode [ 30.055331][ T3301] bridge_slave_0: entered promiscuous mode [ 30.067157][ T3306] team0: Port device team_slave_0 added [ 30.073893][ T3306] team0: Port device team_slave_1 added [ 30.079619][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 30.092695][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.099839][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.107040][ T3301] bridge_slave_1: entered allmulticast mode [ 30.113358][ T3301] bridge_slave_1: entered promiscuous mode [ 30.125870][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.152603][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.169981][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.177053][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.202991][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.214341][ T3302] team0: Port device team_slave_0 added [ 30.234572][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.241565][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.267813][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.279473][ T3302] team0: Port device team_slave_1 added [ 30.290803][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.307791][ T3309] team0: Port device team_slave_0 added [ 30.317248][ T3309] team0: Port device team_slave_1 added [ 30.328702][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.348561][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.355553][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.381763][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.393058][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.400124][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.426246][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.452340][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.459571][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.467074][ T3305] bridge_slave_0: entered allmulticast mode [ 30.473558][ T3305] bridge_slave_0: entered promiscuous mode [ 30.487713][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.494718][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.520685][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.545535][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.552642][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.559895][ T3305] bridge_slave_1: entered allmulticast mode [ 30.566693][ T3305] bridge_slave_1: entered promiscuous mode [ 30.578583][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.585586][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.611659][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.623071][ T3301] team0: Port device team_slave_0 added [ 30.632951][ T3306] hsr_slave_0: entered promiscuous mode [ 30.638936][ T3306] hsr_slave_1: entered promiscuous mode [ 30.656323][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.665883][ T3301] team0: Port device team_slave_1 added [ 30.673059][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.708524][ T3305] team0: Port device team_slave_0 added [ 30.715063][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.722075][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.748051][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.775244][ T3305] team0: Port device team_slave_1 added [ 30.785966][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.793112][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.819146][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.831827][ T3302] hsr_slave_0: entered promiscuous mode [ 30.838002][ T3302] hsr_slave_1: entered promiscuous mode [ 30.843875][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.851500][ T3302] Cannot create hsr debugfs directory [ 30.859150][ T3309] hsr_slave_0: entered promiscuous mode [ 30.865242][ T3309] hsr_slave_1: entered promiscuous mode [ 30.871003][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.878662][ T3309] Cannot create hsr debugfs directory [ 30.915344][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.922331][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.948532][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.976947][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.984234][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.010590][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.031383][ T3301] hsr_slave_0: entered promiscuous mode [ 31.037437][ T3301] hsr_slave_1: entered promiscuous mode [ 31.043386][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.050978][ T3301] Cannot create hsr debugfs directory [ 31.112463][ T3305] hsr_slave_0: entered promiscuous mode [ 31.118687][ T3305] hsr_slave_1: entered promiscuous mode [ 31.125513][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.133221][ T3305] Cannot create hsr debugfs directory [ 31.257388][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.266790][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.282465][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.291208][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.316360][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.331466][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.347711][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.356444][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.378950][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.390982][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.400144][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.409046][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.457539][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.469644][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.479500][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.488777][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.497521][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.516776][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.541615][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.548728][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.569900][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.576978][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.588431][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.607453][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.617258][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.628893][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.641574][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.653720][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.673114][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.686518][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.696802][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.703929][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.726747][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.733885][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.742974][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.750110][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.760734][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.768026][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.817889][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.828330][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.844267][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.855894][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.868396][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.887385][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.912197][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.919314][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.937426][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.944577][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.975552][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.995751][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.010304][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.036950][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.060933][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.068055][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.088537][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.095787][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.112290][ T3302] veth0_vlan: entered promiscuous mode [ 32.128789][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.139220][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.180176][ T3302] veth1_vlan: entered promiscuous mode [ 32.208215][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.221007][ T3309] veth0_vlan: entered promiscuous mode [ 32.228618][ T3306] veth0_vlan: entered promiscuous mode [ 32.240944][ T3302] veth0_macvtap: entered promiscuous mode [ 32.249369][ T3302] veth1_macvtap: entered promiscuous mode [ 32.258744][ T3306] veth1_vlan: entered promiscuous mode [ 32.270368][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.290673][ T3306] veth0_macvtap: entered promiscuous mode [ 32.298532][ T3309] veth1_vlan: entered promiscuous mode [ 32.306219][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.314278][ T3306] veth1_macvtap: entered promiscuous mode [ 32.333358][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.353918][ T3302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.362711][ T3302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.371432][ T3302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.380225][ T3302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.398832][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.409767][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.421394][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.445273][ T3309] veth0_macvtap: entered promiscuous mode [ 32.453606][ T3309] veth1_macvtap: entered promiscuous mode [ 32.464978][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.475639][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.493467][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.516825][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.525722][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.534769][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.543636][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.554598][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.561738][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.579846][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.589793][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.600295][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.611118][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.621857][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.632477][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.642352][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.653122][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.664427][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.672598][ T3305] veth0_vlan: entered promiscuous mode [ 32.680608][ T3305] veth1_vlan: entered promiscuous mode [ 32.700750][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.709561][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.718484][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.727233][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.747432][ T3301] veth0_vlan: entered promiscuous mode [ 32.774255][ T3301] veth1_vlan: entered promiscuous mode [ 32.804391][ T3305] veth0_macvtap: entered promiscuous mode [ 32.815565][ T3305] veth1_macvtap: entered promiscuous mode [ 32.839446][ T3451] SELinux: Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped). [ 32.849326][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 32.849343][ T29] audit: type=1400 audit(1745237892.222:135): avc: denied { relabelto } for pid=3450 comm="syz.2.3" name="syz2" dev="cgroup2" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kmsg_device_t:s0" [ 32.867599][ T3301] veth0_macvtap: entered promiscuous mode [ 32.881921][ T29] audit: type=1400 audit(1745237892.222:136): avc: denied { associate } for pid=3450 comm="syz.2.3" name="syz2" dev="cgroup2" ino=53 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:kmsg_device_t:s0" [ 32.925929][ T29] audit: type=1400 audit(1745237892.302:137): avc: denied { create } for pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.946518][ T3301] veth1_macvtap: entered promiscuous mode [ 32.953175][ T29] audit: type=1400 audit(1745237892.302:138): avc: denied { bind } for pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.957913][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.982927][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.992923][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.002864][ T29] audit: type=1400 audit(1745237892.362:139): avc: denied { setopt } for pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.003499][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.032257][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.036406][ T29] audit: type=1400 audit(1745237892.402:140): avc: denied { create } for pid=3456 comm="syz.3.4" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.042907][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.056462][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.111123][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.121692][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.131544][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.142248][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.152111][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.162599][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.172460][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.182934][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.194070][ T29] audit: type=1400 audit(1745237892.472:141): avc: denied { create } for pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.213398][ T29] audit: type=1400 audit(1745237892.472:142): avc: denied { create } for pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.232964][ T29] audit: type=1400 audit(1745237892.472:143): avc: denied { bind } for pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.252090][ T29] audit: type=1400 audit(1745237892.472:144): avc: denied { listen } for pid=3450 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.272796][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.281389][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.291904][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.301891][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.313249][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.323233][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.333769][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.417117][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.449688][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.460268][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.470113][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.480674][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.490444][ T3463] loop2: detected capacity change from 0 to 1024 [ 33.490547][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.500617][ T3463] EXT4-fs: Ignoring removed orlov option [ 33.507306][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.507323][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.513041][ T3463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.522888][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.524008][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.561439][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.570341][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.579111][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.587955][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.608129][ T3463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.635824][ T3458] geneve2: entered promiscuous mode [ 33.635851][ T3465] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 33.635869][ T3465] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.641067][ T3458] geneve2: entered allmulticast mode [ 33.704558][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.740354][ T3470] loop1: detected capacity change from 0 to 2048 [ 33.751842][ T3301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.760737][ T3301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.769556][ T3301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.778526][ T3301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.806573][ T3472] SELinux: syz.2.10 (3472) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 33.831422][ T3470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.979518][ T3480] loop0: detected capacity change from 0 to 2048 [ 34.019785][ T3482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11'. [ 34.020596][ T3478] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.073829][ T3480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.144717][ T3480] Zero length message leads to an empty skb [ 34.183990][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.278234][ T3493] SELinux: syz.0.14 (3493) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 34.317624][ T3496] loop2: detected capacity change from 0 to 512 [ 34.343524][ T3496] EXT4-fs: Ignoring removed nobh option [ 34.350460][ T3496] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.406745][ T3496] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #3: comm syz.2.17: corrupted inode contents [ 34.456179][ T3498] loop4: detected capacity change from 0 to 4096 [ 34.472611][ T3496] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.17: mark_inode_dirty error [ 34.492354][ T3504] loop0: detected capacity change from 0 to 512 [ 34.510893][ T3496] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #3: comm syz.2.17: corrupted inode contents [ 34.545124][ T3504] EXT4-fs: Ignoring removed nobh option [ 34.552635][ T3498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.553122][ T3504] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.19: invalid indirect mapped block 256 (level 2) [ 34.578308][ T3496] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.17: mark_inode_dirty error [ 34.579275][ T3496] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.17: Failed to acquire dquot type 0 [ 34.601792][ T3504] EXT4-fs (loop0): 2 truncates cleaned up [ 34.608897][ T3496] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.17: corrupted inode contents [ 34.622455][ T3496] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #16: comm syz.2.17: mark_inode_dirty error [ 34.671329][ T3496] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.17: corrupted inode contents [ 34.694888][ T3504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.712723][ T3498] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.741692][ T3496] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.17: mark_inode_dirty error [ 34.773729][ T3496] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.17: corrupted inode contents [ 34.786482][ T3504] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.19: bg 0: block 5: invalid block bitmap [ 34.813812][ T3403] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 34.841874][ T3403] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1344 with error 28 [ 34.842613][ T3496] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 34.854502][ T3403] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.854502][ T3403] [ 34.872710][ T3403] EXT4-fs (loop1): Total free blocks count 0 [ 34.878736][ T3403] EXT4-fs (loop1): Free/Dirty block details [ 34.884683][ T3403] EXT4-fs (loop1): free_blocks=2415919504 [ 34.887264][ T3496] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.17: corrupted inode contents [ 34.890401][ T3403] EXT4-fs (loop1): dirty_blocks=1344 [ 34.890417][ T3403] EXT4-fs (loop1): Block reservation details [ 34.913502][ T3403] EXT4-fs (loop1): i_reserved_data_blocks=84 [ 34.921075][ T3496] EXT4-fs error (device loop2): ext4_truncate:4255: inode #16: comm syz.2.17: mark_inode_dirty error [ 34.934182][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.944073][ T3496] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 34.966331][ T3496] EXT4-fs (loop2): 1 truncate cleaned up [ 34.972902][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.992283][ T3509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.008729][ T3496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.043791][ T3496] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.063044][ T3512] loop1: detected capacity change from 0 to 2048 [ 35.083024][ T3496] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.17: corrupted xattr block 19: invalid ea_ino [ 35.102841][ T3512] loop1: p1 < > p4 [ 35.107486][ T3496] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 35.108060][ T3512] loop1: p4 size 8388608 extends beyond EOD, truncated [ 35.117346][ T3496] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.17: corrupted xattr block 19: invalid ea_ino [ 35.140773][ T3496] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 35.149954][ T3496] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.17: corrupted xattr block 19: invalid ea_ino [ 35.167276][ T3496] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 35.205455][ T3496] syz.2.17 (3496) used greatest stack depth: 9712 bytes left [ 35.229648][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.246963][ T3003] loop1: p1 < > p4 [ 35.251443][ T3003] loop1: p4 size 8388608 extends beyond EOD, truncated [ 35.305269][ T3529] loop2: detected capacity change from 0 to 128 [ 35.318220][ T3529] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 35.355256][ T3529] System zones: 1-3, 19-19, 35-36 [ 35.360987][ T3529] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.370257][ T3538] loop0: detected capacity change from 0 to 1024 [ 35.386067][ T3529] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.421278][ T3538] EXT4-fs: Ignoring removed i_version option [ 35.427421][ T3538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.429220][ T3530] geneve2: entered promiscuous mode [ 35.439274][ T3530] geneve2: entered allmulticast mode [ 35.447923][ T3529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'. [ 35.478202][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 35.492562][ T3378] udevd[3378]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 35.529578][ T3538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.586929][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.626814][ T3551] loop3: detected capacity change from 0 to 2048 [ 35.636590][ T3538] netlink: 'syz.0.29': attribute type 10 has an invalid length. [ 35.651801][ T3538] team0: Device hsr_slave_0 failed to register rx_handler [ 35.673766][ T3292] loop3: p1 < > p4 [ 35.682591][ T3292] loop3: p4 size 8388608 extends beyond EOD, truncated [ 35.721871][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.779077][ T3551] loop3: p1 < > p4 [ 35.786619][ T3551] loop3: p4 size 8388608 extends beyond EOD, truncated [ 35.808350][ T3561] loop1: detected capacity change from 0 to 4096 [ 35.873141][ T3561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.954237][ T3561] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.006151][ T3378] udevd[3378]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 36.006716][ T3580] loop3: detected capacity change from 0 to 512 [ 36.016549][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 36.037194][ T3583] loop0: detected capacity change from 0 to 4096 [ 36.044463][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 36.050690][ T3580] EXT4-fs: Ignoring removed nobh option [ 36.056335][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 36.095014][ T3580] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.38: invalid indirect mapped block 256 (level 2) [ 36.111064][ T3583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.117074][ T3587] loop2: detected capacity change from 0 to 256 [ 36.133023][ T3583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.147204][ T3580] EXT4-fs (loop3): 2 truncates cleaned up [ 36.160737][ T3589] SELinux: syz.1.42 (3589) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 36.183685][ T3580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.204054][ T3587] FAT-fs (loop2): Directory bread(block 64) failed [ 36.219521][ T3587] FAT-fs (loop2): Directory bread(block 65) failed [ 36.231798][ T3580] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.38: bg 0: block 5: invalid block bitmap [ 36.235046][ T3587] FAT-fs (loop2): Directory bread(block 66) failed [ 36.268344][ T3587] FAT-fs (loop2): Directory bread(block 67) failed [ 36.275407][ T3587] FAT-fs (loop2): Directory bread(block 68) failed [ 36.282981][ T3587] FAT-fs (loop2): Directory bread(block 69) failed [ 36.289731][ T3587] FAT-fs (loop2): Directory bread(block 70) failed [ 36.304906][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.320921][ T3587] FAT-fs (loop2): Directory bread(block 71) failed [ 36.332541][ T3587] FAT-fs (loop2): Directory bread(block 72) failed [ 36.347649][ T3587] FAT-fs (loop2): Directory bread(block 73) failed [ 36.364777][ T3593] loop1: detected capacity change from 0 to 1024 [ 36.385458][ T3587] syz.2.43: attempt to access beyond end of device [ 36.385458][ T3587] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 36.399290][ T3593] EXT4-fs: Ignoring removed i_version option [ 36.405373][ T3593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.454371][ T3593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.491292][ T3593] netlink: 'syz.1.46': attribute type 10 has an invalid length. [ 36.524344][ T3593] team0: Device hsr_slave_0 failed to register rx_handler [ 36.568185][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.629147][ T3608] loop1: detected capacity change from 0 to 2048 [ 36.660516][ T3614] loop4: detected capacity change from 0 to 512 [ 36.667334][ T3614] EXT4-fs: Ignoring removed nobh option [ 36.673847][ T3608] loop1: p1 < > p4 [ 36.678314][ T3608] loop1: p4 size 8388608 extends beyond EOD, truncated [ 36.682725][ T3614] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.53: invalid indirect mapped block 256 (level 2) [ 36.700250][ T3614] EXT4-fs (loop4): 2 truncates cleaned up [ 36.710180][ T3614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.724454][ T3614] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.53: bg 0: block 5: invalid block bitmap [ 36.749559][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.797992][ T3621] loop0: detected capacity change from 0 to 2048 [ 36.816624][ T3621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.907157][ T3633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.55'. [ 36.964517][ T3635] loop1: detected capacity change from 0 to 512 [ 36.984960][ T3635] EXT4-fs: Ignoring removed nobh option [ 37.026089][ T3635] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #3: comm syz.1.58: corrupted inode contents [ 37.046510][ T3635] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #3: comm syz.1.58: mark_inode_dirty error [ 37.097427][ T3635] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #3: comm syz.1.58: corrupted inode contents [ 37.122486][ T3635] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.58: mark_inode_dirty error [ 37.142858][ T3635] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.58: Failed to acquire dquot type 0 [ 37.197137][ T3643] loop2: detected capacity change from 0 to 256 [ 37.201989][ T3635] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.58: corrupted inode contents [ 37.228155][ T3643] FAT-fs (loop2): Directory bread(block 64) failed [ 37.234866][ T3643] FAT-fs (loop2): Directory bread(block 65) failed [ 37.241511][ T3643] FAT-fs (loop2): Directory bread(block 66) failed [ 37.258659][ T3643] FAT-fs (loop2): Directory bread(block 67) failed [ 37.268906][ T3635] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #16: comm syz.1.58: mark_inode_dirty error [ 37.310704][ T3645] geneve2: entered promiscuous mode [ 37.316017][ T3645] geneve2: entered allmulticast mode [ 37.342431][ T3643] FAT-fs (loop2): Directory bread(block 68) failed [ 37.349377][ T3643] FAT-fs (loop2): Directory bread(block 69) failed [ 37.356387][ T3643] FAT-fs (loop2): Directory bread(block 70) failed [ 37.362966][ T3643] FAT-fs (loop2): Directory bread(block 71) failed [ 37.373962][ T3643] FAT-fs (loop2): Directory bread(block 72) failed [ 37.388339][ T3643] FAT-fs (loop2): Directory bread(block 73) failed [ 37.466623][ T3635] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.58: corrupted inode contents [ 37.493593][ T3643] syz.2.60: attempt to access beyond end of device [ 37.493593][ T3643] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 37.511019][ T3635] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.58: mark_inode_dirty error [ 37.526172][ T3635] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.58: corrupted inode contents [ 37.541731][ T3635] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 37.550758][ T3635] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.58: corrupted inode contents [ 37.563803][ T3635] EXT4-fs error (device loop1): ext4_truncate:4255: inode #16: comm syz.1.58: mark_inode_dirty error [ 37.582212][ T3635] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 37.593414][ T3635] EXT4-fs (loop1): 1 truncate cleaned up [ 37.603642][ T3635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.655489][ T3635] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.701689][ T3635] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.58: corrupted xattr block 19: invalid ea_ino [ 37.756490][ T31] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 37.772712][ T3635] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 37.832456][ T3635] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.58: corrupted xattr block 19: invalid ea_ino [ 37.834568][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1568 with error 28 [ 37.858399][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.858399][ T31] [ 37.858455][ T3635] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 37.868271][ T31] EXT4-fs (loop0): Total free blocks count 0 [ 37.882862][ T3650] geneve2: entered promiscuous mode [ 37.883161][ T31] EXT4-fs (loop0): Free/Dirty block details [ 37.888348][ T3650] geneve2: entered allmulticast mode [ 37.894247][ T31] EXT4-fs (loop0): free_blocks=2415919504 [ 37.905394][ T31] EXT4-fs (loop0): dirty_blocks=1568 [ 37.906434][ T3635] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.58: corrupted xattr block 19: invalid ea_ino [ 37.910711][ T31] EXT4-fs (loop0): Block reservation details [ 37.910726][ T31] EXT4-fs (loop0): i_reserved_data_blocks=98 [ 37.980484][ T3635] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 37.985766][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.041276][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.067270][ T3653] loop0: detected capacity change from 0 to 2048 [ 38.108730][ T3655] loop1: detected capacity change from 0 to 512 [ 38.126495][ T3655] EXT4-fs: Ignoring removed nobh option [ 38.137251][ T3655] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.64: invalid indirect mapped block 256 (level 2) [ 38.153803][ T3655] EXT4-fs (loop1): 2 truncates cleaned up [ 38.160088][ T3655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.175775][ T3653] loop0: p1 < > p4 [ 38.184175][ T3655] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.64: bg 0: block 5: invalid block bitmap [ 38.197835][ T3653] loop0: p4 size 8388608 extends beyond EOD, truncated [ 38.280464][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.336312][ T3660] loop1: detected capacity change from 0 to 512 [ 38.359543][ T3660] EXT4-fs: Ignoring removed nobh option [ 38.413797][ T3660] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #3: comm syz.1.66: corrupted inode contents [ 38.433419][ T3670] loop2: detected capacity change from 0 to 512 [ 38.440095][ T3660] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #3: comm syz.1.66: mark_inode_dirty error [ 38.469587][ T3670] EXT4-fs: Ignoring removed nobh option [ 38.476952][ T3660] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #3: comm syz.1.66: corrupted inode contents [ 38.493232][ T3671] loop0: detected capacity change from 0 to 4096 [ 38.523949][ T3671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.538423][ T3660] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.66: mark_inode_dirty error [ 38.580299][ T3671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.590175][ T3670] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #3: comm syz.2.68: corrupted inode contents [ 38.612456][ T3660] __quota_error: 93 callbacks suppressed [ 38.612546][ T3660] Quota error (device loop1): write_blk: dquota write failed [ 38.612574][ T3660] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 38.612593][ T3660] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.66: Failed to acquire dquot type 0 [ 38.613363][ T3660] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.66: corrupted inode contents [ 38.613624][ T3660] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #16: comm syz.1.66: mark_inode_dirty error [ 38.613774][ T3660] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.66: corrupted inode contents [ 38.613917][ T3660] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.66: mark_inode_dirty error [ 38.614166][ T3660] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.66: corrupted inode contents [ 38.614313][ T3660] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 38.614476][ T3660] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.66: corrupted inode contents [ 38.614843][ T3660] EXT4-fs error (device loop1): ext4_truncate:4255: inode #16: comm syz.1.66: mark_inode_dirty error [ 38.614944][ T3660] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 38.615258][ T3660] EXT4-fs (loop1): 1 truncate cleaned up [ 38.615592][ T3660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.615743][ T3660] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.624881][ T3660] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.66: corrupted xattr block 19: invalid ea_ino [ 38.625005][ T3660] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 38.625039][ T3660] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.66: corrupted xattr block 19: invalid ea_ino [ 38.625223][ T3660] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 38.625292][ T3660] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.66: corrupted xattr block 19: invalid ea_ino [ 38.625415][ T3660] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 38.633217][ T3670] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.68: mark_inode_dirty error [ 38.633634][ T3670] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #3: comm syz.2.68: corrupted inode contents [ 38.633816][ T3670] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.68: mark_inode_dirty error [ 38.634041][ T3670] Quota error (device loop2): write_blk: dquota write failed [ 38.634074][ T3670] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 38.634099][ T3670] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.68: Failed to acquire dquot type 0 [ 38.634514][ T3670] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.68: corrupted inode contents [ 38.634625][ T3670] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #16: comm syz.2.68: mark_inode_dirty error [ 38.634783][ T3670] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.68: corrupted inode contents [ 38.634966][ T3670] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.68: mark_inode_dirty error [ 38.635125][ T3670] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.68: corrupted inode contents [ 38.635235][ T3670] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 38.635327][ T3670] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.68: corrupted inode contents [ 38.635444][ T3670] EXT4-fs error (device loop2): ext4_truncate:4255: inode #16: comm syz.2.68: mark_inode_dirty error [ 38.635545][ T3670] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 38.635974][ T3670] EXT4-fs (loop2): 1 truncate cleaned up [ 38.636434][ T3670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.636518][ T3670] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.647405][ T3670] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.68: corrupted xattr block 19: invalid ea_ino [ 38.647565][ T3670] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 38.647598][ T3670] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.68: corrupted xattr block 19: invalid ea_ino [ 38.647700][ T3670] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 38.647729][ T3670] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.68: corrupted xattr block 19: invalid ea_ino [ 38.650519][ T3670] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 38.651803][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.694109][ T3676] loop1: detected capacity change from 0 to 512 [ 38.697021][ T3676] EXT4-fs: Ignoring removed nobh option [ 38.698730][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.714247][ T3676] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.69: invalid indirect mapped block 256 (level 2) [ 38.717433][ T3676] EXT4-fs (loop1): 2 truncates cleaned up [ 38.717908][ T3676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.726355][ T3676] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.69: bg 0: block 5: invalid block bitmap [ 38.755637][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.997824][ T3691] loop4: detected capacity change from 0 to 128 [ 39.025540][ T3691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 39.025609][ T3691] System zones: 1-3, 19-19, 35-36 [ 39.026209][ T3691] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.026554][ T3691] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.046103][ T3691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 39.063131][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.442430][ T29] audit: type=1326 audit(1745237898.812:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3697 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d373ae169 code=0x7ffc0000 [ 39.526957][ T29] audit: type=1326 audit(1745237898.812:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3697 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d373ae169 code=0x7ffc0000 [ 39.599867][ T3706] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 39.607375][ T3706] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 39.616243][ T29] audit: type=1326 audit(1745237898.972:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a573ce169 code=0x7ffc0000 [ 39.630480][ T3705] loop2: detected capacity change from 0 to 2048 [ 39.639449][ T29] audit: type=1326 audit(1745237898.972:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f6a573ce169 code=0x7ffc0000 [ 39.668974][ T29] audit: type=1326 audit(1745237898.972:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a573ce169 code=0x7ffc0000 [ 39.692297][ T29] audit: type=1326 audit(1745237898.972:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a573ce169 code=0x7ffc0000 [ 39.775852][ T3705] loop2: p1 < > p4 [ 39.780737][ T3705] loop2: p4 size 8388608 extends beyond EOD, truncated [ 39.815436][ T3717] loop4: detected capacity change from 0 to 512 [ 39.824576][ T3717] EXT4-fs: Ignoring removed nobh option [ 39.884139][ T3717] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.87: invalid indirect mapped block 256 (level 2) [ 39.910546][ T3003] loop2: p1 < > p4 [ 39.918083][ T3003] loop2: p4 size 8388608 extends beyond EOD, truncated [ 39.957650][ T3717] EXT4-fs (loop4): 2 truncates cleaned up [ 39.991371][ T3717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.033026][ T3717] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.87: bg 0: block 5: invalid block bitmap [ 40.082106][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 40.083107][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 40.111926][ T3732] loop0: detected capacity change from 0 to 4096 [ 40.141711][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.163690][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 40.175105][ T3732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.175138][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 40.252964][ T3732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.330983][ T3742] loop2: detected capacity change from 0 to 4096 [ 40.392161][ T3742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.427826][ T3742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.532242][ T3758] loop4: detected capacity change from 0 to 2048 [ 40.560905][ T3762] loop1: detected capacity change from 0 to 512 [ 40.569314][ T3762] EXT4-fs: Ignoring removed nobh option [ 40.583657][ T3762] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.101: invalid indirect mapped block 256 (level 2) [ 40.604902][ T3762] EXT4-fs (loop1): 2 truncates cleaned up [ 40.611105][ T3762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.626801][ T3762] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.101: bg 0: block 5: invalid block bitmap [ 40.651247][ T3758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.686809][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.742702][ T3767] loop1: detected capacity change from 0 to 256 [ 40.765992][ T3767] FAT-fs (loop1): Directory bread(block 64) failed [ 40.832097][ T3767] FAT-fs (loop1): Directory bread(block 65) failed [ 40.853553][ T3767] FAT-fs (loop1): Directory bread(block 66) failed [ 40.860184][ T3767] FAT-fs (loop1): Directory bread(block 67) failed [ 40.882530][ T3767] FAT-fs (loop1): Directory bread(block 68) failed [ 40.894916][ T3767] FAT-fs (loop1): Directory bread(block 69) failed [ 40.918304][ T3767] FAT-fs (loop1): Directory bread(block 70) failed [ 40.938899][ T3767] FAT-fs (loop1): Directory bread(block 71) failed [ 40.959129][ T3767] FAT-fs (loop1): Directory bread(block 72) failed [ 40.976161][ T3767] FAT-fs (loop1): Directory bread(block 73) failed [ 40.999074][ T3775] loop0: detected capacity change from 0 to 128 [ 41.027538][ T3775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 41.039141][ T3767] syz.1.102: attempt to access beyond end of device [ 41.039141][ T3767] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 41.082505][ T3775] System zones: 1-3, 19-19, 35-36 [ 41.088103][ T3775] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.118534][ T3775] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.162925][ T3775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 41.206799][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.354574][ T3790] loop0: detected capacity change from 0 to 512 [ 41.375124][ T3790] EXT4-fs: Ignoring removed nobh option [ 41.381118][ T3791] loop2: detected capacity change from 0 to 512 [ 41.399812][ T3791] EXT4-fs: Ignoring removed nobh option [ 41.416728][ T3791] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.112: invalid indirect mapped block 256 (level 2) [ 41.431651][ T31] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 41.446659][ T3790] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.113: corrupted inode contents [ 41.456512][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 768 with error 28 [ 41.470818][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.470818][ T31] [ 41.480587][ T31] EXT4-fs (loop4): Total free blocks count 0 [ 41.486646][ T31] EXT4-fs (loop4): Free/Dirty block details [ 41.492672][ T31] EXT4-fs (loop4): free_blocks=2415919504 [ 41.494347][ T3790] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.113: mark_inode_dirty error [ 41.498394][ T31] EXT4-fs (loop4): dirty_blocks=768 [ 41.511101][ T3791] EXT4-fs (loop2): 2 truncates cleaned up [ 41.514739][ T31] EXT4-fs (loop4): Block reservation details [ 41.514753][ T31] EXT4-fs (loop4): i_reserved_data_blocks=48 [ 41.525730][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.551751][ T3790] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.113: corrupted inode contents [ 41.563648][ T3791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.594133][ T3790] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.113: mark_inode_dirty error [ 41.606334][ T3791] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.112: bg 0: block 5: invalid block bitmap [ 41.634019][ T3790] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.113: Failed to acquire dquot type 0 [ 41.663889][ T3790] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.113: corrupted inode contents [ 41.684303][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.717001][ T3790] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #16: comm syz.0.113: mark_inode_dirty error [ 41.747859][ T3790] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.113: corrupted inode contents [ 41.760349][ T3790] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.113: mark_inode_dirty error [ 41.773309][ T3790] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.113: corrupted inode contents [ 41.785680][ T3790] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 41.796313][ T3790] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.113: corrupted inode contents [ 41.808655][ T3790] EXT4-fs error (device loop0): ext4_truncate:4255: inode #16: comm syz.0.113: mark_inode_dirty error [ 41.825735][ T3790] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 41.838659][ T3790] EXT4-fs (loop0): 1 truncate cleaned up [ 41.845284][ T3790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.859666][ T3790] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.899847][ T3810] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 41.907320][ T3810] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.911772][ T3790] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.113: corrupted xattr block 19: invalid ea_ino [ 41.928850][ T3790] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 41.943659][ T3806] loop4: detected capacity change from 0 to 4096 [ 41.947149][ T3790] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.113: corrupted xattr block 19: invalid ea_ino [ 41.961713][ T3814] loop1: detected capacity change from 0 to 128 [ 41.972830][ T3790] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 41.981980][ T3790] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.113: corrupted xattr block 19: invalid ea_ino [ 42.002166][ T3814] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 42.011236][ T3806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.028867][ T3814] System zones: 1-3, 19-19, 35-36 [ 42.035745][ T3790] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 42.046805][ T3814] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.074713][ T3814] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.075552][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.116425][ T3814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 42.151504][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.244939][ T3830] loop1: detected capacity change from 0 to 512 [ 42.252258][ T3830] EXT4-fs: Ignoring removed nobh option [ 42.267800][ T3830] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.126: invalid indirect mapped block 256 (level 2) [ 42.286015][ T3828] loop3: detected capacity change from 0 to 2048 [ 42.295412][ T3830] EXT4-fs (loop1): 2 truncates cleaned up [ 42.301549][ T3830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.317610][ T3830] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.126: bg 0: block 5: invalid block bitmap [ 42.353070][ T3292] loop3: p1 < > p4 [ 42.364292][ T3292] loop3: p4 size 8388608 extends beyond EOD, truncated [ 42.398496][ T3837] geneve2: entered promiscuous mode [ 42.403846][ T3837] geneve2: entered allmulticast mode [ 42.414944][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.429840][ T3828] loop3: p1 < > p4 [ 42.436336][ T3828] loop3: p4 size 8388608 extends beyond EOD, truncated [ 42.609060][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.632242][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 42.682665][ T3854] loop3: detected capacity change from 0 to 512 [ 42.692294][ T3854] EXT4-fs: Ignoring removed nobh option [ 42.725246][ T3854] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.131: corrupted inode contents [ 42.745636][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.905850][ T3854] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #3: comm syz.3.131: mark_inode_dirty error [ 42.919263][ T3854] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.131: corrupted inode contents [ 42.957937][ T3854] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.131: mark_inode_dirty error [ 42.974195][ T3854] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.131: Failed to acquire dquot type 0 [ 42.992115][ T3854] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.131: corrupted inode contents [ 43.025270][ T3854] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #16: comm syz.3.131: mark_inode_dirty error [ 43.049175][ T3854] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.131: corrupted inode contents [ 43.078796][ T3854] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.131: mark_inode_dirty error [ 43.101631][ T3854] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.131: corrupted inode contents [ 43.159185][ T3854] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 43.183793][ T3854] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.131: corrupted inode contents [ 43.205631][ T3869] loop2: detected capacity change from 0 to 512 [ 43.219709][ T3854] EXT4-fs error (device loop3): ext4_truncate:4255: inode #16: comm syz.3.131: mark_inode_dirty error [ 43.244018][ T3869] EXT4-fs: Ignoring removed nobh option [ 43.256495][ T3854] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 43.266008][ T3854] EXT4-fs (loop3): 1 truncate cleaned up [ 43.272499][ T3870] netlink: zone id is out of range [ 43.277657][ T3870] netlink: zone id is out of range [ 43.282822][ T3870] netlink: zone id is out of range [ 43.287938][ T3870] netlink: zone id is out of range [ 43.293118][ T3870] netlink: zone id is out of range [ 43.298248][ T3870] netlink: zone id is out of range [ 43.303390][ T3870] netlink: zone id is out of range [ 43.308499][ T3870] netlink: zone id is out of range [ 43.312981][ T3854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.313689][ T3870] netlink: zone id is out of range [ 43.331276][ T3870] netlink: zone id is out of range [ 43.338763][ T3854] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.341146][ T3869] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.136: invalid indirect mapped block 256 (level 2) [ 43.369389][ T3869] EXT4-fs (loop2): 2 truncates cleaned up [ 43.383364][ T3854] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.131: corrupted xattr block 19: invalid ea_ino [ 43.397699][ T3869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.416459][ T3854] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 43.426551][ T3854] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.131: corrupted xattr block 19: invalid ea_ino [ 43.443615][ T3854] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 43.460268][ T3869] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.136: bg 0: block 5: invalid block bitmap [ 43.472926][ T3854] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.131: corrupted xattr block 19: invalid ea_ino [ 43.486235][ T3873] loop1: detected capacity change from 0 to 512 [ 43.494404][ T3873] EXT4-fs: Ignoring removed nobh option [ 43.495493][ T3854] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 43.515239][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.528603][ T3873] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.138: invalid indirect mapped block 256 (level 2) [ 43.558677][ T3873] EXT4-fs (loop1): 2 truncates cleaned up [ 43.564915][ T3873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.578261][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.616277][ T3873] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.138: bg 0: block 5: invalid block bitmap [ 43.630037][ T3876] loop2: detected capacity change from 0 to 4096 [ 43.653857][ T3876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.685512][ T3876] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.724836][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.773460][ T3884] loop1: detected capacity change from 0 to 256 [ 43.790524][ T3884] FAT-fs (loop1): Directory bread(block 64) failed [ 43.797330][ T3884] FAT-fs (loop1): Directory bread(block 65) failed [ 43.806811][ T3884] FAT-fs (loop1): Directory bread(block 66) failed [ 43.813544][ T3884] FAT-fs (loop1): Directory bread(block 67) failed [ 43.820272][ T3884] FAT-fs (loop1): Directory bread(block 68) failed [ 43.828327][ T3884] FAT-fs (loop1): Directory bread(block 69) failed [ 43.834991][ T3884] FAT-fs (loop1): Directory bread(block 70) failed [ 43.841587][ T3884] FAT-fs (loop1): Directory bread(block 71) failed [ 43.862139][ T3884] FAT-fs (loop1): Directory bread(block 72) failed [ 43.875285][ T3889] loop3: detected capacity change from 0 to 4096 [ 43.882012][ T3884] FAT-fs (loop1): Directory bread(block 73) failed [ 43.899350][ T3889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.918155][ T3884] syz.1.141: attempt to access beyond end of device [ 43.918155][ T3884] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 44.109992][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 44.110012][ T29] audit: type=1326 audit(1745237903.482:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 44.141728][ T29] audit: type=1326 audit(1745237903.512:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 44.165365][ T29] audit: type=1326 audit(1745237903.512:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 44.188832][ T29] audit: type=1326 audit(1745237903.512:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 44.212165][ T29] audit: type=1326 audit(1745237903.512:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 44.235485][ T29] audit: type=1326 audit(1745237903.512:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 44.258737][ T29] audit: type=1326 audit(1745237903.512:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 44.281974][ T29] audit: type=1326 audit(1745237903.512:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 44.305298][ T29] audit: type=1326 audit(1745237903.512:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 44.328746][ T29] audit: type=1326 audit(1745237903.512:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 44.573106][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 44.581959][ T3906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 44.590914][ T3906] netlink: 'syz.0.149': attribute type 15 has an invalid length. [ 44.598690][ T3906] netlink: 'syz.0.149': attribute type 18 has an invalid length. [ 44.629549][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.664809][ T3908] loop2: detected capacity change from 0 to 512 [ 44.671599][ T3908] EXT4-fs: Ignoring removed nobh option [ 44.680480][ T3910] loop3: detected capacity change from 0 to 512 [ 44.704532][ T3910] EXT4-fs: Ignoring removed nobh option [ 44.711954][ T3908] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #3: comm syz.2.150: corrupted inode contents [ 44.718046][ T3914] netlink: 236 bytes leftover after parsing attributes in process `syz.0.152'. [ 44.725360][ T3908] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.150: mark_inode_dirty error [ 44.747056][ T3910] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.151: invalid indirect mapped block 256 (level 2) [ 44.760999][ T3908] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #3: comm syz.2.150: corrupted inode contents [ 44.774776][ T3910] EXT4-fs (loop3): 2 truncates cleaned up [ 44.781238][ T3908] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.150: mark_inode_dirty error [ 44.788941][ T3910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.806301][ T3910] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.151: bg 0: block 5: invalid block bitmap [ 44.833250][ T3908] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.150: Failed to acquire dquot type 0 [ 44.846243][ T3908] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.150: corrupted inode contents [ 44.861911][ T3908] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #16: comm syz.2.150: mark_inode_dirty error [ 44.874552][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.885973][ T3908] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.150: corrupted inode contents [ 44.899238][ T3908] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.150: mark_inode_dirty error [ 44.916762][ T3908] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.150: corrupted inode contents [ 44.929003][ T3908] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 44.939403][ T3908] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.150: corrupted inode contents [ 44.975521][ T3922] loop3: detected capacity change from 0 to 512 [ 45.003023][ T3922] EXT4-fs: Ignoring removed nobh option [ 45.008748][ T3908] EXT4-fs error (device loop2): ext4_truncate:4255: inode #16: comm syz.2.150: mark_inode_dirty error [ 45.028178][ T3926] loop1: detected capacity change from 0 to 1024 [ 45.036138][ T3908] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 45.045635][ T3926] EXT4-fs: test_dummy_encryption option not supported [ 45.059372][ T3908] EXT4-fs (loop2): 1 truncate cleaned up [ 45.071706][ T3922] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.155: corrupted inode contents [ 45.083321][ T3927] geneve2: entered promiscuous mode [ 45.088765][ T3927] geneve2: entered allmulticast mode [ 45.092843][ T3908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.106705][ T3908] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.117332][ T3922] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #3: comm syz.3.155: mark_inode_dirty error [ 45.142641][ T3908] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.150: corrupted xattr block 19: invalid ea_ino [ 45.158602][ T3926] loop1: detected capacity change from 0 to 256 [ 45.169511][ T3922] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.155: corrupted inode contents [ 45.169682][ T3908] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 45.190709][ T3908] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.150: corrupted xattr block 19: invalid ea_ino [ 45.212507][ T3908] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 45.221881][ T3908] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.150: corrupted xattr block 19: invalid ea_ino [ 45.225228][ T3922] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.155: mark_inode_dirty error [ 45.259413][ T3908] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 45.287227][ T3922] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.155: Failed to acquire dquot type 0 [ 45.305690][ T3922] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.155: corrupted inode contents [ 45.320469][ T3922] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #16: comm syz.3.155: mark_inode_dirty error [ 45.332026][ T3922] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.155: corrupted inode contents [ 45.345218][ T3922] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.155: mark_inode_dirty error [ 45.403918][ T3922] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.155: corrupted inode contents [ 45.415933][ T3922] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 45.454291][ T3922] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.155: corrupted inode contents [ 45.474175][ T3922] EXT4-fs error (device loop3): ext4_truncate:4255: inode #16: comm syz.3.155: mark_inode_dirty error [ 45.486621][ T3922] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 45.513734][ T3922] EXT4-fs (loop3): 1 truncate cleaned up [ 45.520389][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.530052][ T3922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.567967][ T3922] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.593910][ T3922] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.155: corrupted xattr block 19: invalid ea_ino [ 45.608983][ T3922] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 45.618949][ T3922] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.155: corrupted xattr block 19: invalid ea_ino [ 45.652067][ T3922] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 45.670674][ T3922] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.155: corrupted xattr block 19: invalid ea_ino [ 45.687441][ T3922] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 45.713738][ T3941] loop4: detected capacity change from 0 to 4096 [ 45.737090][ T3945] loop2: detected capacity change from 0 to 512 [ 45.746602][ T3945] EXT4-fs: Ignoring removed nobh option [ 45.753409][ T3941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.767372][ T3947] loop1: detected capacity change from 0 to 1024 [ 45.786441][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.804050][ T3945] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.165: invalid indirect mapped block 256 (level 2) [ 45.818198][ T3947] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.835885][ T3945] EXT4-fs (loop2): 2 truncates cleaned up [ 45.843163][ T3947] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 45.853453][ T3945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.869567][ T3945] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.165: bg 0: block 5: invalid block bitmap [ 45.895084][ T3947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.910602][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.957150][ T3947] FAULT_INJECTION: forcing a failure. [ 45.957150][ T3947] name failslab, interval 1, probability 0, space 0, times 1 [ 45.970135][ T3947] CPU: 1 UID: 0 PID: 3947 Comm: syz.1.164 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 45.970167][ T3947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.970187][ T3947] Call Trace: [ 45.970265][ T3947] [ 45.970273][ T3947] dump_stack_lvl+0xf6/0x150 [ 45.970298][ T3947] dump_stack+0x15/0x1a [ 45.970319][ T3947] should_fail_ex+0x261/0x270 [ 45.970348][ T3947] should_failslab+0x8f/0xb0 [ 45.970375][ T3947] __kmalloc_cache_noprof+0x55/0x320 [ 45.970486][ T3947] ? file_f_owner_allocate+0x4d/0xd0 [ 45.970515][ T3947] file_f_owner_allocate+0x4d/0xd0 [ 45.970546][ T3947] fcntl_dirnotify+0x1f7/0x590 [ 45.970611][ T3947] ? vfs_write+0x669/0x950 [ 45.970631][ T3947] do_fcntl+0x642/0xe20 [ 45.970692][ T3947] __se_sys_fcntl+0xbd/0x1b0 [ 45.970774][ T3947] __x64_sys_fcntl+0x43/0x50 [ 45.970803][ T3947] x64_sys_call+0x1ecc/0x2e10 [ 45.970901][ T3947] do_syscall_64+0xc9/0x1a0 [ 45.970931][ T3947] ? clear_bhb_loop+0x25/0x80 [ 45.970957][ T3947] ? clear_bhb_loop+0x25/0x80 [ 45.970982][ T3947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.971007][ T3947] RIP: 0033:0x7f8d373ae169 [ 45.971084][ T3947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.971103][ T3947] RSP: 002b:00007f8d35a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 45.971125][ T3947] RAX: ffffffffffffffda RBX: 00007f8d375d5fa0 RCX: 00007f8d373ae169 [ 45.971184][ T3947] RDX: 000000008000003d RSI: 0000000000000402 RDI: 0000000000000009 [ 45.971199][ T3947] RBP: 00007f8d35a17090 R08: 0000000000000000 R09: 0000000000000000 [ 45.971213][ T3947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.971292][ T3947] R13: 0000000000000000 R14: 00007f8d375d5fa0 R15: 00007ffc16414608 [ 45.971309][ T3947] [ 46.193403][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.367961][ T3967] loop1: detected capacity change from 0 to 1024 [ 46.391052][ T3967] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.402262][ T3967] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.417549][ T3967] JBD2: no valid journal superblock found [ 46.425273][ T3967] EXT4-fs (loop1): Could not load journal inode [ 46.448724][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.567389][ T3973] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 46.575107][ T3973] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.680975][ T3980] loop4: detected capacity change from 0 to 256 [ 46.752021][ T3980] FAT-fs (loop4): Directory bread(block 64) failed [ 46.773998][ T3980] FAT-fs (loop4): Directory bread(block 65) failed [ 46.791764][ T3980] FAT-fs (loop4): Directory bread(block 66) failed [ 46.812774][ T3980] FAT-fs (loop4): Directory bread(block 67) failed [ 46.829526][ T3980] FAT-fs (loop4): Directory bread(block 68) failed [ 46.858201][ T3980] FAT-fs (loop4): Directory bread(block 69) failed [ 46.874562][ T3980] FAT-fs (loop4): Directory bread(block 70) failed [ 46.912983][ T3980] FAT-fs (loop4): Directory bread(block 71) failed [ 46.919591][ T3980] FAT-fs (loop4): Directory bread(block 72) failed [ 46.926631][ T3990] loop2: detected capacity change from 0 to 512 [ 46.935497][ T3990] EXT4-fs: Ignoring removed oldalloc option [ 46.942583][ T3980] FAT-fs (loop4): Directory bread(block 73) failed [ 46.966925][ T3990] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.181: Parent and EA inode have the same ino 15 [ 46.989654][ T3980] syz.4.177: attempt to access beyond end of device [ 46.989654][ T3980] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 47.018908][ T3990] EXT4-fs (loop2): Remounting filesystem read-only [ 47.025540][ T3990] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.038826][ T3990] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 47.051386][ T3992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.092258][ T3990] EXT4-fs (loop2): 1 orphan inode deleted [ 47.104412][ T3990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.127974][ T3990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.137146][ T4001] program syz.3.184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.148735][ T3992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.205943][ T3992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.245252][ T3992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.302465][ T3992] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.314209][ T3992] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.326117][ T3992] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.337976][ T3992] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.452980][ T4021] geneve2: entered promiscuous mode [ 47.458255][ T4021] geneve2: entered allmulticast mode [ 47.639749][ T4031] geneve2: entered promiscuous mode [ 47.645053][ T4031] geneve2: entered allmulticast mode [ 47.837807][ T4042] loop2: detected capacity change from 0 to 1024 [ 47.874361][ T4042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.909018][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 47.917926][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 47.934290][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 48.119715][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 48.128654][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 48.187626][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 48.514120][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 48.649812][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.934872][ T4072] loop3: detected capacity change from 0 to 256 [ 48.989764][ T4072] FAT-fs (loop3): Directory bread(block 64) failed [ 48.998010][ T4072] FAT-fs (loop3): Directory bread(block 65) failed [ 49.012503][ T4075] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 49.015280][ T4072] FAT-fs (loop3): Directory bread(block 66) failed [ 49.020088][ T4075] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.072423][ T4072] FAT-fs (loop3): Directory bread(block 67) failed [ 49.089446][ T4072] FAT-fs (loop3): Directory bread(block 68) failed [ 49.099528][ T4072] FAT-fs (loop3): Directory bread(block 69) failed [ 49.136605][ T4072] FAT-fs (loop3): Directory bread(block 70) failed [ 49.172571][ T4072] FAT-fs (loop3): Directory bread(block 71) failed [ 49.279829][ T4072] FAT-fs (loop3): Directory bread(block 72) failed [ 49.289949][ T4072] FAT-fs (loop3): Directory bread(block 73) failed [ 49.323853][ T4072] syz.3.209: attempt to access beyond end of device [ 49.323853][ T4072] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 49.387197][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 49.387215][ T29] audit: type=1326 audit(1745237908.762:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 49.441800][ T29] audit: type=1326 audit(1745237908.762:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 49.465230][ T29] audit: type=1326 audit(1745237908.762:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 49.488593][ T29] audit: type=1326 audit(1745237908.762:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 49.511986][ T29] audit: type=1326 audit(1745237908.762:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 49.535302][ T29] audit: type=1326 audit(1745237908.762:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 49.559483][ T29] audit: type=1326 audit(1745237908.762:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 49.582747][ T29] audit: type=1326 audit(1745237908.762:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 49.606103][ T29] audit: type=1326 audit(1745237908.762:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 49.630073][ T29] audit: type=1326 audit(1745237908.762:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabba10e169 code=0x7ffc0000 [ 49.669554][ T4095] loop4: detected capacity change from 0 to 2048 [ 49.704564][ T4095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.756983][ T4102] loop4: detected capacity change from 0 to 512 [ 49.768478][ T4102] EXT4-fs: Ignoring removed nobh option [ 49.782129][ T4102] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.220: invalid indirect mapped block 256 (level 2) [ 49.844832][ T4102] EXT4-fs (loop4): 2 truncates cleaned up [ 49.863715][ T4107] geneve2: entered promiscuous mode [ 49.869138][ T4107] geneve2: entered allmulticast mode [ 49.873920][ T4102] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.220: bg 0: block 5: invalid block bitmap [ 50.156583][ T4123] loop3: detected capacity change from 0 to 2048 [ 51.186995][ T4151] loop1: detected capacity change from 0 to 512 [ 51.212800][ T4151] EXT4-fs: Ignoring removed nobh option [ 51.230849][ T4151] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.236: invalid indirect mapped block 256 (level 2) [ 51.275365][ T4160] loop3: detected capacity change from 0 to 4096 [ 51.300188][ T4161] loop4: detected capacity change from 0 to 4096 [ 51.309158][ T4151] EXT4-fs (loop1): 2 truncates cleaned up [ 51.317427][ T4151] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.236: bg 0: block 5: invalid block bitmap [ 51.531575][ T4179] loop3: detected capacity change from 0 to 2048 [ 51.676849][ T4190] loop2: detected capacity change from 0 to 4096 [ 51.887788][ T4215] loop1: detected capacity change from 0 to 256 [ 51.912624][ T4217] program syz.0.261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.912977][ T4215] FAT-fs (loop1): Directory bread(block 64) failed [ 51.932551][ T4218] __nla_validate_parse: 2 callbacks suppressed [ 51.932570][ T4218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 51.940804][ T4215] FAT-fs (loop1): Directory bread(block 65) failed [ 51.957164][ T4215] FAT-fs (loop1): Directory bread(block 66) failed [ 51.976067][ T4215] FAT-fs (loop1): Directory bread(block 67) failed [ 51.983630][ T4215] FAT-fs (loop1): Directory bread(block 68) failed [ 51.990745][ T4215] FAT-fs (loop1): Directory bread(block 69) failed [ 51.998851][ T4215] FAT-fs (loop1): Directory bread(block 70) failed [ 52.008444][ T4215] FAT-fs (loop1): Directory bread(block 71) failed [ 52.017019][ T4215] FAT-fs (loop1): Directory bread(block 72) failed [ 52.023746][ T4215] FAT-fs (loop1): Directory bread(block 73) failed [ 52.065577][ T4215] syz.1.260: attempt to access beyond end of device [ 52.065577][ T4215] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 52.294217][ T4256] loop4: detected capacity change from 0 to 512 [ 52.301814][ T4256] EXT4-fs: Ignoring removed nobh option [ 52.314392][ T4256] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.274: invalid indirect mapped block 256 (level 2) [ 52.329922][ T4256] EXT4-fs (loop4): 2 truncates cleaned up [ 52.367833][ T4260] program syz.4.275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.527001][ T4270] tmpfs: Bad value for 'mpol' [ 52.820437][ T4275] loop2: detected capacity change from 0 to 2048 [ 53.011311][ T4281] loop2: detected capacity change from 0 to 2048 [ 53.137242][ T4294] program syz.1.287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.392615][ T4311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.290'. [ 53.479723][ T4321] ================================================================== [ 53.487872][ T4321] BUG: KCSAN: data-race in call_rcu / mtree_range_walk [ 53.494754][ T4321] [ 53.497088][ T4321] write to 0xffff888103779b08 of 8 bytes by task 4312 on cpu 0: [ 53.504742][ T4321] call_rcu+0x49/0x430 [ 53.508845][ T4321] mas_wmb_replace+0xff5/0x1510 [ 53.513810][ T4321] mas_wr_store_entry+0x158c/0x2460 [ 53.519033][ T4321] mas_store_prealloc+0x6d5/0x960 [ 53.524092][ T4321] vma_iter_store_new+0x1d3/0x210 [ 53.529145][ T4321] vma_complete+0x12b/0x570 [ 53.533654][ T4321] __split_vma+0x56c/0x630 [ 53.538082][ T4321] vma_modify+0x105/0x200 [ 53.542425][ T4321] vma_modify_flags+0x10a/0x140 [ 53.547309][ T4321] mprotect_fixup+0x30f/0x5d0 [ 53.552000][ T4321] do_mprotect_pkey+0x6ce/0x9a0 [ 53.556863][ T4321] __x64_sys_mprotect+0x48/0x60 [ 53.561738][ T4321] x64_sys_call+0x272f/0x2e10 [ 53.566432][ T4321] do_syscall_64+0xc9/0x1a0 [ 53.570955][ T4321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.576871][ T4321] [ 53.579228][ T4321] read to 0xffff888103779b08 of 8 bytes by task 4321 on cpu 1: [ 53.586776][ T4321] mtree_range_walk+0x143/0x460 [ 53.591642][ T4321] mas_walk+0x16e/0x320 [ 53.595817][ T4321] lock_vma_under_rcu+0xa7/0x340 [ 53.600769][ T4321] exc_page_fault+0x150/0x6a0 [ 53.605451][ T4321] asm_exc_page_fault+0x26/0x30 [ 53.610307][ T4321] [ 53.612636][ T4321] value changed: 0x000000110c22ffff -> 0xffff888103779008 [ 53.619742][ T4321] [ 53.622070][ T4321] Reported by Kernel Concurrency Sanitizer on: [ 53.628223][ T4321] CPU: 1 UID: 0 PID: 4321 Comm: syz.0.294 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 53.640551][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.650625][ T4321] ==================================================================