last executing test programs: 4.366106027s ago: executing program 1 (id=712): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14127f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf7f, 0x401}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) syz_clone3(&(0x7f00000007c0)={0x20040100, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0, {0x1a}, &(0x7f0000000700)=""/179, 0xb3, &(0x7f0000002480)=""/4096, &(0x7f0000000680)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x8, {r2}}, 0x58) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x80, 0x9, 0x6, 0x7, 0x0, 0xffffffffffff44f6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000003c0), 0x8}, 0x8142, 0x3, 0x8, 0x9, 0x4010, 0x10001, 0x8, 0x0, 0xc58, 0x0, 0x1000}, r4, 0xd, r0, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'wg1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000840)="c8326d2914168a99f412e4750093d943be890f77ec16054d9f1a55ba46d0b505210338803f8ce79a20a997894d693b0c83832c5e4d7cd07fc4eeb58237494d50d9fdfa9cefcd", 0x46, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feff03ff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000200)="ff7f0e3f2617d1f42ab5a1db8511", 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x1010, r6, 0x6b2f8000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000002c0)="e203d9655829dfacef50e723cd6dfb218a3b7d7fafa037c26cbe3aa5aa341fa6af98ee6765c76505552466e81f56fbb1b034128d801e6b52cd60376024ce64cc8fad33f4173123706c481bb1a108170cbced557ecb8f385ab219ed7527707473a4638e4e2b81c5231bb85fbd1fecb4cf3e27958d76680ea13e925dc0a0bf77f3eebb1d991c6ca8c27e4c3e8fb67aa6ef6554603bb00b62aebc85c193413e82929d1bfe1357030991212e7127e2ae8b3ca50268e9f2c5f74930b461493acc93609f2c65c258362e0609146ffcadb9e35e874ec64ca44ac2"}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18022000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r7, 0xffffffffffffffff, 0x0) 3.43514804s ago: executing program 1 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="25032abd7000fcdbdf251300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x20, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 3.085624855s ago: executing program 2 (id=724): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x80000000000}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010004b04000000000000ff007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100627269646765000028000280060006000004000005000700070000000500260001"], 0x58}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000180), 0x12) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = socket(0x10, 0x80003, 0x0) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r9, 0xffffffffffffffff, 0x0) 2.697688981s ago: executing program 2 (id=728): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3008c86, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000734000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r6, 0x2004, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x2004, &(0x7f0000000680)) io_setup(0xf447, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 2.666360621s ago: executing program 0 (id=730): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x7a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) r3 = epoll_create1(0x80000) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x200) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) connect$rxrpc(r4, &(0x7f00000004c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r11}, 0x10) pwrite64(r4, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) fallocate(r0, 0x20, 0x1000000, 0x7000000) 2.431709645s ago: executing program 1 (id=732): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x3, 0x40000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80e8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffff}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)='\x00', 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, &(0x7f0000000080)) r7 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r5, r7, r6, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x4b64, 0x1000000000000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)) r9 = gettid() r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r12}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7dc, &(0x7f0000000d80)="$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") rt_sigqueueinfo(r9, 0x21, &(0x7f0000000100)={0x3, 0x48b, 0xffffffff}) 2.320948356s ago: executing program 1 (id=734): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2010) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4400000002060500f10de2cd44057eeb000000000c000300686173683a69700005000400000000000900020073797a31000000000500050002000000050001000600"], 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000040000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140e0004001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket(0x10, 0x3, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) 2.285144287s ago: executing program 3 (id=736): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="7a8af8ff00000000bfa200000000000012020400f8ffffffb703000018000000b704007e0000000013c452e59942e1cb6e6b89bec775512402000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprt_transmit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="3800000002000000090000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000009358000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) mmap(&(0x7f0000a8c000/0x2000)=nil, 0x2000, 0xb7ec1d3cdeee60b3, 0x1010, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000200)=@get={0x1, &(0x7f0000002700)=""/4096, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_clone(0x104000, &(0x7f0000000c80)="23e36f048683896e8485d7eeecdf50bf5c01d26085943b5fac8b70a69c95bdbe7edc0b2e7a48ddc1183bbba1d0465f23d7c0c012890e391a86846c49f8eccd65ff4579eb50b85fb6478b35d9dad9345b9640668103e958722b84b03cce55350ba53360097660446c942c93f904483d90aa085314f7f0ddabcbcfc1d4e525f228d342dbf66d397611c2511586d54fdb51dad5fa36890d0ffbd4ac1fce80968720a0d127b26a24c4553a8661aba1276aa10b319b07ae156475d675dc6e3645ca114cfbb691a6247ec69189846f32ba6bd511b6b29cdbd9222662443c3f3770b4dbc861ba5f4309f2b40d", 0xe9, &(0x7f0000000900), &(0x7f0000000880), &(0x7f0000000b00)="eb5f67ddf535cd05697487b0b92de8a03e51e070beeab7d6f1f938d41f50a78f9f5b3186ad169d519b1e9bcf2f1143df0ebba82853b5881a97dc9cb6d9f373ea0b23ed7690c1477bfdc80d9e207685486548a733d9ab88a8f00e9b81b7c0b6737df96a205bd989e54e5cca53cc6c9db5f967bdf93365d7e282327064f728e5b027f4028b2debb8c307897d1e3d26939e9092e6676286e2e8301d246c7db4fe6a541580f0dfcd5ef5298a45eae0a9a041613533b512cd0248f2a0434e55f6") perf_event_open(&(0x7f0000000780)={0x4, 0x80, 0x25, 0xfe, 0x7, 0x2, 0x0, 0x7, 0x80, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x3}, 0x14a88, 0xfa2, 0x8000, 0x0, 0x9, 0x5, 0x401, 0x0, 0xfffffa0a, 0x0, 0x40000000006292}, r5, 0x0, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x1ff8}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.120767679s ago: executing program 4 (id=738): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0xa, 0xf, 0xd, 0x300, 0xb021, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='xen_mmu_set_pud\x00', r4, 0x0, 0x401}, 0xfffffffffffffd48) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x400000000}, 0x18) r6 = syz_pidfd_open(0x0, 0x0) process_madvise(r6, 0x0, 0x0, 0x19, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x88, 0xc000067}, 0x2c) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x7, 0x1, 0x500, 0xa, 0x4400047, r1}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r7) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000240012800bef0000627269000015000280060027000e000000060009008b000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@remote, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x1, 0x400, 0x0, 0x26, r1}) 2.06480003s ago: executing program 4 (id=739): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @loopback, 0x101}, 0x1c) close(r2) socket(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a001000010000100000000000000000064010102000000000000000000000000ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000e8b9d0fa3286c0d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2ab}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="28d50000000000000000000000000000000900f1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r9, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6, 0x0, 0x8000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r10, 0x0, 0x0, 0x8000c62) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.989141401s ago: executing program 3 (id=740): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x44001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair(0x1d, 0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c6966"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x48) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) 1.982758121s ago: executing program 2 (id=741): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0x1, 0xb5}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x68, 0x0, 0x10, 0x80, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048092}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r7, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) r11 = syz_open_procfs(0x0, &(0x7f00000003c0)='gid_map\x00') writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000040)='1)', 0x2}], 0x1) write$P9_RUNLINKAT(r10, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1.850529903s ago: executing program 0 (id=742): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x74, 0x30, 0xb, 0xfffffffd, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x10000000, 0x0, 0x70}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0x7, 0x4, 0x400, 0x208, 0x100, 0x208, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000340), {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "ff85bb82d17643dd4e95809980253d495cac18089b19106c31ea7cb0cc3f"}}, {{@arp={@multicast1, @multicast1, 0xffffffff, 0xff, 0x8, 0x2, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xffff, 0xc1cb, 0xfffd, 0x40, 0x8, 0x8, 'syz_tun\x00', 'wg0\x00', {0xff}, {}, 0x0, 0x200}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x4}}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x14}, @broadcast, 0x0, 0xff, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x1000, 0x4, 0x100, 0x0, 0x3, 0xff41, 'vxcan1\x00', 'erspan0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @remote, @loopback, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9", 0x3}], 0x2) sendto$inet6(r1, 0x0, 0xc4, 0xc4ffffff, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000ff6a05350040000102030109022d000101fd00040904000601030100090921a274090122100f0905810340000904fa090502030002aab809397fc2ec6c019bda53bc1d0ab3368c68d8f1007788d1726568b44d04f3eafe4f26266478d3951be83cabaa5d236a18fe"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xc0, 0x3, 0xa, 0xff}, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="050f4c6f00"], 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c1c}}, {0xcc, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xecf3}}, {0xea, &(0x7f0000000440)=@string={0xea, 0x3, "5628608d0d423a18ed0c4ab492a540cde107cc9512563c68231f8e05c196e1675a913e1fac16da5a1d52d1453e00480b06eb52f85f20a9348676e6e90c6ed865cda8dfcf7806e463cbc7bb10f786d02d2e849895cce1358c08d1d70cb8b4b55e702a555c73f1388d7b8be5593781d5ec92dc2ba877bb69d214796f358966f1ace4b2cb052d369199f0e2afb8c81baddb007b75d716e6042c241dc018fb5d40a47e356f7639b02ffab19ded9ac52226a63892b7320d6172bcfda4a00b3443e926233032d212884f4df8264f4f34a0720c12809d7f669faedd6608d0ca81aa4ccfa556c03b155af576"}}]}) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = io_uring_setup(0x3eae, &(0x7f0000000380)={0x0, 0x6d33, 0x1, 0x20, 0x2ef}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000600), 0x13f}}, 0x20) 1.771157615s ago: executing program 4 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x5}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r6}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno']) creat(&(0x7f0000000600)='./file0\x00', 0xe5) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x4008804) 1.653361326s ago: executing program 3 (id=744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000009b5a17fc0cdd65e69b28fd5f597a4a"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfb, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0xf, &(0x7f0000000980), 0x0, 0x10, &(0x7f0000000a40), 0x0, 0x0, 0xe1, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYRES8=r3, @ANYRES64=r5, @ANYBLOB="18a14cecfad7dbe1f39e1f0ccb4485d7e65e1f7c0d3dfdf0fb08edfef1c6a32d9eae23"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000003b03000018110000", @ANYRES32=0x1, @ANYBLOB="2000000000000000c602000014000000b7032000000000008500000083000000bf09000000000000550901000000000008000000000000006222040000000000bf91000000000000b700000002000000000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x34, 0x3f, &(0x7f00000002c0)=""/63, 0x41000, 0x45, '\x00', 0x0, @fallback=0x36, r2, 0x8, &(0x7f0000000300)={0x6, 0x80000001}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xe, 0x3, 0xf}, 0x10, r5, r1, 0x0, &(0x7f0000000400)=[r6, 0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) 1.439083819s ago: executing program 1 (id=745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x10, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) getegid() ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004"], 0x188}}, 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f00000004c0)="0600", 0x2) sendfile(r4, r4, &(0x7f0000001000), 0xffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x800040, 0x2, @perf_config_ext={0xb10, 0x2}, 0x6a4, 0x2, 0x4, 0x0, 0x2, 0x7, 0x7fff, 0x0, 0x0, 0x0, 0x9e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 1.36106362s ago: executing program 2 (id=746): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x8002, 0xfe, "90730aef00fffffffffffffbff95647fffffeb"}) r4 = dup(r3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@datasec={0x7, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x5, 0x2}], "82"}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "9a0459"}]}, {0x0, [0x30, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x61]}}, &(0x7f0000000280)=""/6, 0x49, 0x6, 0x1, 0x3, 0x0, @void, @value}, 0x28) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x10c) fcntl$notify(r6, 0x402, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) fcntl$notify(r7, 0x402, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.281783302s ago: executing program 4 (id=747): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x104) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) dup(0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = socket$inet6(0xa, 0x806, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x118}}, 0x0) bind$inet6(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) listen(r4, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x0, 0x800, 0x1, 0x3}, 0x20) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000001080)={0x0, @initdev, @initdev}, &(0x7f00000010c0)=0xc) 1.192659463s ago: executing program 4 (id=748): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req={0xfffffffd, 0x5, 0x0, 0xffff}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000100000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b8010000180090001006c617374000000001000018009"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x12, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa2288a82e008100000008e4f63d7271bbf9b7080180c2000001e000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x10, @empty, 0x2}}, 0x8, 0x1}, 0x0) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x7fe, 0x1, 0x103, 0xd, 0x8001, 0x4}, 0x20) 1.124219704s ago: executing program 0 (id=749): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x44001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair(0x1d, 0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x48) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) 999.740196ms ago: executing program 2 (id=750): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RLERRORu(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1000005301cfd6020003002c5c3a0200"], 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0xfd, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) 993.034616ms ago: executing program 3 (id=751): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0xa, 0xf, 0xd, 0x300, 0xb021, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='xen_mmu_set_pud\x00', r4, 0x0, 0x401}, 0xfffffffffffffd48) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x400000000}, 0x18) r6 = syz_pidfd_open(0x0, 0x0) process_madvise(r6, 0x0, 0x0, 0x19, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x88, 0xc000067}, 0x2c) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x7, 0x1, 0x500, 0xa, 0x4400047, r1}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r7) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000240012800bef0000627269000015000280060027000e000000060009008b000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@remote, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x1, 0x400, 0x0, 0x26, r1}) 823.423258ms ago: executing program 3 (id=752): r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f0000000600)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="86de25800717", 0x6}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="34000000000000000000000007000000440893800000000900440491a00713baac1414aa00000000ac1e00010a01010207020000000000001400000000000000000000000200000003000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff000000000000000014000000000000000000f3"], 0xa0}, 0x742108b30e2cd9ac) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r11, 0x0, 0xc6e9}, 0x18) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$inet_opts(r10, 0x0, 0x9, &(0x7f0000000000)="90a54074da54396ff6bf9342fd3fa1e074a7bd82b76b63c28b4bedd177", 0x1d) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x10f0}, 0x1, 0x7}, 0x4000080) 79.768619ms ago: executing program 3 (id=753): r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x1, @rand_addr, 0x2}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000cc0)=ANY=[@ANYBLOB='overriderockperm,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nocompress,block=0x0000000000000200,gid=', @ANYRESHEX=0x0, @ANYBLOB=',map=acorn,map=normal,iocharset=default,map=acorn,map=off,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x2, 0xa28, &(0x7f0000000180)="$eJzs3c9vHGf5APBn1nbiuFWStvn2W6K2nqQkdVvjrG2aYPUAjnftbLG9yHakRBya0jgoiqHQgtRGSE0lxAFRgQTiwq3ixKlSL/SCeoMbnDggof4LFadwWjSza3tt73pj1/G6yedj7e78eOZ9n/mx82Ynu/MGXy61YxvGarX8scvxy3/ah4w5wC6WPvvwow+yx/t34lD0xMvJnyP6IyKN6I2IpyL6pkoL1bkOBd2KuBYRn0YkEXE46q/35Fokv45H18c/jeQPWb1tHbrXkumkxkOt28cfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcRMlUqVgcTQ5FZf7ylbQuIt1iqrRQTaJW2zpndZm6T/Jev5NPfvlIh3ojkuwR/f2rXX0/dWJ99pMRkZ6Op+tjT+cdkkd/3H7kyeOvPNFbWF2+XTZfyOE2xfbElg3z9ru3b72+srL81g6r6N9tbgfMTHm+slitzE3OlNPKYjWdOH++eO7S9GI6XZktL15dXCrPpVML5cml6kI6NPVCOjoxMZ6WR65WL8/PlEZmy6sTL3xtrFg8n7468p3y5MJidf7cqyOLU5cqs7OV+Zk8JpudxVzIDsRvV5bSpfLkXJreuLmyPL4ppy27KQsa7bQmWdBYp6Cx4tjY6OjY2Oj7jd6z1yacf3ni5QvFYm9xk9gScZ8OWg6WI+138/04jcOuFOrtf8RsVGI+LseVSFv+TUUpFqIac23mN6y2/2fOlbett7n9b7TyvU2zT2ZPp+PZxmh/m/a/TS779/d2vBu341a8HiuxEsvxVtcz2vqX7ZE284580bJnohzzUYnFqEYl5mIyn5I2pqQxEefjfBTjtbgUg7EYaUxHJWajHItxNRZjKcr5ETUVC1GOyViKaixEGkMxFS9EGqMxERMxHmmUYySuRjUux3zMRCkm81JuxM18u49vk+Na0Oi9BI1tE7SlMd9x+1/e+m9IHiq1Wu29vT+Nw67UGu3/oc6hQ1P7kRAAAACw577ytzh64vG//jsiiWfy6/LTldlysdtpAQAAAHsoiSTi6eypLxt9JhKf/wEAAOBBk+S/sUsiYiAG60Orv4RyEQAAAAAeEPntep6NZHB9gs//AAAA8IBZu8d+/UrA2j12r/SsTu14F/5kePX2v+n1+uv1RkSjiIHpymx5ZKo6+8ponM3vMpD/0mBLaT0RSV/+84MX41Q96tRA3MleB9ZLzOrsz6JGR14ZjRfjdGNFhp7LXp4bahE5Vo98vh75fHNkT2yIHM8iAeBBd3qb9rh+j/3O7f+LMVyPGD6ZN/m9J1u0wUUtKwAcFGt97Py30aVZi/a/EfFsu/b/69t8/s8iHo8bg/WvFIzEG/FmrMT1GI7GNw4GW5W62htB/WsIw01XA3KbrgYMNL6y8I8LhRjecj2gf21dm2OXYyyGG1cEjjTmN64dJGuxyWoO4/WAnvuwAwCgC05v2w7fW/s/3OHz/4CvFALAgbLWg/19HOj2OgIAG2mlAQAAAAAAAAAAAAAAAAAAAAAAAAAAYO81366/1u4G/n8/G7GyshyxD50FrA30t8hwlwOF2Kec373du2/bp+VAT0R0q/Zvxo6XyvZxdzbUfg0cORhp7GKgyycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9kUS0dNqeuFw/lKMiHP7ndP9dKfbCeyVdHeLJXfjbrwTR/c6HQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh13j/v+FqL8+Up8UvYWIMxFxLSK+2+0c99LdbifQNT/In5vu/1+I6ItaEr313R5J31RpoTqX7f7kcDb/sw8/+iB7dC57a68KefcRhU2dSzRqaJrSt3Gpx/KlBkrLb9/6yZs/SksX8wPz4tL0bGluZuFb64FPJh/Xu0Bo7gZhNd+fnfnLb5omH2pU/nG2pq1trnc6r7e0td7/b7V0m3rvwc2V5bGspqXylaWf/vDmO02zHo9TEc8NRQxtrOn72aNNTac2b8+Nks+TXyRH4/dxLd//2dZIakm2i47l63/kxs2V5ZE33ly5vpbTextyOh6DEXE9ov/ecxrMzyct5UddoS+rtZgHZU8nOpS3raYSR9ts18fyQ2ZgR+uQtl+HXIft3shovGVGv/3xE3F2x3v6bIcaW0o+T/6VXIp/xs+b+v8oZPv/TLR8d7YoIo9sOlKa5214exXqkfmajzXPeG1zmW3fldwHv4rvxTfW9n+h6fzf2Ff7cz5qqrH1+yJi5++LPx7b0qKsy1ukE5tapMbZp+UC/Wt5nqhHtcnz/+KliN6TOzqjvNThjLL37/9GfXeG4j9xR/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwZdE9LSaXog4ExHHI+JYNp5G1DbH3NlFfYWBZDdp7pnd5PzlkzSt6MY1Tu7G3XgnjnYjKwAAAAAAAAD23sXSZx9+9EH2yP8/vie+WmjMSSN6I+J48ru+qdJCda5DQX0R11b/S79/Zzlcy54eXR//NBt7qsNC3f36AAB8qf0vAAD//11ccUg=") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0, 0x0, 0x100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000c00)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}, {0x6, 0x8, 0x9, 0x6}, {0x4, 0x0, 0xb, 0x40}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064000000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011"], 0x60}}, 0x40000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700), 0x4) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x80801, 0x0) r4 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x1ff8}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 79.530269ms ago: executing program 4 (id=754): add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c1c0a", 0x73, 0xffffffffffffffff) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', 0x0) fchdir(r0) pivot_root(&(0x7f0000001f80)='./file0/../file0/../file0/../file0\x00', 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe7a) shutdown(r2, 0x0) fsopen(&(0x7f0000000100)='ext2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2a020480) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r7, 0x8916, 0x0) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) socket$nl_route(0x10, 0x3, 0x0) write$vga_arbiter(r1, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 78.185469ms ago: executing program 0 (id=763): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 70.767329ms ago: executing program 2 (id=755): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2010) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4400000002060500f10de2cd44057eeb000000000c000300686173683a69700005000400000000000900020073797a31000000000500050002000000050001000600"], 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000040000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140e0004001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket(0x10, 0x3, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) 969.76µs ago: executing program 0 (id=756): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={r0, r1+60000000}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000003c0)={r6, 0x3ff, 0x6, "2df1037882ce"}, 0xe) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={r6, 0x6, 0x8, [0x4, 0x8, 0x8, 0x2, 0x89, 0xb, 0xc, 0xc]}, 0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000300)={r6, 0x6, 0x5, [0x3, 0x5, 0x8, 0x8, 0x0]}, 0x12) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000007000000000095000000000000007186982b2434430eb43ebf720dc504"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000000)=0xc92b) io_setup(0x541e, &(0x7f0000001240)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 0s ago: executing program 1 (id=757): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1, 0x5dd8, 0x0, 0x3, 0x400000, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x369ac89f52bf2160}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="191d25bd7000ffdbdf256300000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r8, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x7, 0x0, 0x7ffc0002}]}) r10 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r10, 0x0) kernel console output (not intermixed with test programs): 816: inode #3: block 1: comm syz.1.267: lblock 1 mapped to illegal pblock 1 (length 1) [ 65.782467][ T4548] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.267: Failed to acquire dquot type 0 [ 65.795143][ T4548] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.267: Freeing blocks not in datazone - block = 0, count = 4096 [ 65.808813][ T4548] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.267: Invalid inode bitmap blk 0 in block_group 0 [ 65.821488][ T786] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 65.836354][ T4548] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 65.837288][ T786] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 65.857385][ T4548] EXT4-fs (loop1): 1 orphan inode deleted [ 65.875921][ T4548] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.267: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 65.896496][ T4548] netlink: 32 bytes leftover after parsing attributes in process `syz.1.267'. [ 65.906907][ T1035] IPVS: starting estimator thread 0... [ 65.934098][ T4555] loop4: detected capacity change from 0 to 512 [ 65.941884][ T4555] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.958014][ T4555] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.975639][ T4555] EXT4-fs (loop4): 1 truncate cleaned up [ 66.002550][ T4553] IPVS: using max 2352 ests per chain, 117600 per kthread [ 66.497961][ T4560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 66.549191][ T4561] sd 0:0:1:0: device reset [ 66.649105][ T4566] loop2: detected capacity change from 0 to 256 [ 66.680477][ T4567] loop1: detected capacity change from 0 to 512 [ 66.680808][ T4563] loop3: detected capacity change from 0 to 512 [ 66.704081][ T4567] EXT4-fs: Ignoring removed nobh option [ 66.728532][ T4567] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.732778][ T4563] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 66.740117][ T4567] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 66.749833][ T4563] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 66.759926][ T4567] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.272: Corrupt directory, running e2fsck is recommended [ 66.792934][ T4563] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.271: Invalid inode table block 0 in block_group 0 [ 66.813347][ T4567] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 66.827814][ T4567] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.272: corrupted in-inode xattr: invalid ea_ino [ 66.862985][ T4563] EXT4-fs (loop3): get root inode failed [ 66.868866][ T4563] EXT4-fs (loop3): mount failed [ 66.874023][ T4567] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.272: couldn't read orphan inode 15 (err -117) [ 66.901967][ T4567] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.913574][ T4567] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 66.923715][ T4567] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.272: Corrupt directory, running e2fsck is recommended [ 66.937665][ T4563] loop3: detected capacity change from 0 to 512 [ 66.949380][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 66.963369][ T4563] ext4: Unknown parameter 'appraise' [ 66.969664][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 66.985257][ T4586] batman_adv: batadv0: Interface deactivated: dummy0 [ 66.992045][ T4586] batman_adv: batadv0: Removing interface: dummy0 [ 66.994845][ T4567] usb usb1: usbfs: process 4567 (syz.1.272) did not claim interface 0 before use [ 67.008283][ T4586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.047870][ T4586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.064795][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 67.136267][ T4595] Driver unsupported XDP return value 0 on prog (id 254) dev N/A, expect packet loss! [ 67.198793][ T4595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 67.279367][ T4595] loop3: detected capacity change from 0 to 512 [ 67.379946][ T4608] SELinux: ebitmap: truncated map [ 67.389892][ T4599] lo speed is unknown, defaulting to 1000 [ 67.396542][ T4595] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.405250][ T4608] SELinux: failed to load policy [ 67.460187][ T4595] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.285: corrupted inode contents [ 67.528755][ T4595] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.285: mark_inode_dirty error [ 67.568451][ T4613] loop1: detected capacity change from 0 to 2048 [ 67.592670][ T4595] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.285: corrupted inode contents [ 67.634353][ T4613] EXT4-fs mount: 23 callbacks suppressed [ 67.634388][ T4613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.653168][ T4602] siw: device registration error -23 [ 67.653999][ T4595] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.285: mark_inode_dirty error [ 67.695336][ T4595] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.285: mark inode dirty (error -117) [ 67.729480][ T4595] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 67.739953][ T4613] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.933919][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.986343][ T4619] lo speed is unknown, defaulting to 1000 [ 68.035456][ T4622] siw: device registration error -23 [ 68.216969][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 68.216984][ T29] audit: type=1326 audit(1749266833.514:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 68.283327][ T29] audit: type=1326 audit(1749266833.514:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 68.306817][ T29] audit: type=1326 audit(1749266833.564:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 68.330142][ T29] audit: type=1326 audit(1749266833.574:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 68.353655][ T29] audit: type=1326 audit(1749266833.574:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 68.377210][ T29] audit: type=1326 audit(1749266833.574:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 68.400693][ T29] audit: type=1326 audit(1749266833.574:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 68.424112][ T29] audit: type=1326 audit(1749266833.574:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 68.447608][ T29] audit: type=1326 audit(1749266833.574:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 68.470938][ T29] audit: type=1326 audit(1749266833.574:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 68.551871][ T4624] loop3: detected capacity change from 0 to 512 [ 68.551874][ T4629] loop2: detected capacity change from 0 to 512 [ 68.555687][ T4629] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.566115][ T4624] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.688342][ T4624] EXT4-fs (loop3): 1 truncate cleaned up [ 68.738279][ T4624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.863809][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.016122][ T4634] lo speed is unknown, defaulting to 1000 [ 69.194575][ T4627] loop4: detected capacity change from 0 to 1024 [ 69.208697][ T4627] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.229443][ T4627] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 69.249489][ T4627] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.266538][ T4627] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #3: comm syz.4.293: iget: bad i_size value: 1407392063428608 [ 69.292471][ T4627] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.293: Bad quota inode: 3, type: 0 [ 69.351181][ T4627] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 69.365917][ T4627] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 69.373093][ T4627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.389723][ T4634] hub 4-0:1.0: USB hub found [ 69.394530][ T4634] hub 4-0:1.0: 8 ports detected [ 69.433357][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.487217][ T4643] __nla_validate_parse: 1 callbacks suppressed [ 69.487232][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 69.502263][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 69.532979][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 69.650926][ T4648] SELinux: syz.3.297 (4648) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 69.699637][ T4647] block device autoloading is deprecated and will be removed. [ 69.714602][ T4647] syz.2.298: attempt to access beyond end of device [ 69.714602][ T4647] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 69.756122][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.797381][ T4647] netlink: 'syz.2.298': attribute type 18 has an invalid length. [ 69.813512][ T4655] netlink: 'syz.4.301': attribute type 2 has an invalid length. [ 69.821227][ T4655] netlink: 'syz.4.301': attribute type 9 has an invalid length. [ 69.828948][ T4655] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.301'. [ 70.068533][ T4657] lo speed is unknown, defaulting to 1000 [ 70.261356][ T4661] lo speed is unknown, defaulting to 1000 [ 70.420096][ T47] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 70.442840][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 70.451682][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 70.472518][ T4679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.506781][ T4679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.516814][ T4679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.308'. [ 70.767107][ T4683] lo speed is unknown, defaulting to 1000 [ 70.971753][ T4683] loop2: detected capacity change from 0 to 512 [ 70.978827][ T4683] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.985412][ T4683] EXT4-fs: Ignoring removed bh option [ 71.025968][ T4686] capability: warning: `syz.3.320' uses 32-bit capabilities (legacy support in use) [ 71.123288][ T4688] netlink: 'syz.4.310': attribute type 27 has an invalid length. [ 71.138813][ T4686] loop3: detected capacity change from 0 to 8192 [ 71.209091][ T4688] syz_tun: entered allmulticast mode [ 71.244371][ T4688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.260391][ T4688] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.296055][ T4688] net_ratelimit: 10 callbacks suppressed [ 71.296065][ T4688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.376508][ T4691] loop4: detected capacity change from 0 to 256 [ 71.702326][ T4698] loop2: detected capacity change from 0 to 2048 [ 72.647024][ T4715] lo speed is unknown, defaulting to 1000 [ 73.542480][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 73.542576][ T29] audit: type=1326 audit(1749266838.804:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e57e929 code=0x7ffc0000 [ 73.571739][ T29] audit: type=1326 audit(1749266838.804:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e57e929 code=0x7ffc0000 [ 73.691294][ T29] audit: type=1326 audit(1749266838.984:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 73.728403][ T29] audit: type=1326 audit(1749266839.014:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 73.738431][ T4741] netlink: 'syz.1.323': attribute type 27 has an invalid length. [ 73.752017][ T29] audit: type=1326 audit(1749266839.014:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 73.783183][ T29] audit: type=1326 audit(1749266839.014:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 73.806544][ T29] audit: type=1326 audit(1749266839.014:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 73.829979][ T29] audit: type=1326 audit(1749266839.014:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 73.853522][ T29] audit: type=1326 audit(1749266839.014:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 73.876929][ T29] audit: type=1326 audit(1749266839.014:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 73.912290][ T4741] tipc: Resetting bearer [ 73.918854][ T4741] batman_adv: batadv0: Interface deactivated: dummy0 [ 73.970891][ T4743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.042233][ T4743] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.071143][ T4743] tipc: Resetting bearer [ 74.082073][ T4743] batman_adv: batadv0: Interface activated: dummy0 [ 74.088790][ T4743] batadv0: mtu less than device minimum [ 74.095949][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.107298][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.118469][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.129664][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.140926][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.152003][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.163131][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.174494][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.294830][ T4757] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 74.473593][ T4765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.482274][ T4765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.536188][ T4764] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 74.897572][ T4772] lo speed is unknown, defaulting to 1000 [ 75.046612][ T4776] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 75.053333][ T4776] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 75.060972][ T4776] vhci_hcd vhci_hcd.0: Device attached [ 75.069128][ T4776] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 75.075824][ T4776] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 75.083609][ T4776] vhci_hcd vhci_hcd.0: Device attached [ 75.091005][ T4776] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 75.097849][ T4776] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.105398][ T4776] vhci_hcd vhci_hcd.0: Device attached [ 75.113377][ T4776] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20) [ 75.120026][ T4776] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 75.127787][ T4776] vhci_hcd vhci_hcd.0: Device attached [ 75.136032][ T4776] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 75.142674][ T4776] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 75.150312][ T4776] vhci_hcd vhci_hcd.0: Device attached [ 75.158755][ T4776] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(24) [ 75.165392][ T4776] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 75.173084][ T4776] vhci_hcd vhci_hcd.0: Device attached [ 75.196469][ T4783] vhci_hcd: connection closed [ 75.196655][ T4779] vhci_hcd: connection closed [ 75.201508][ T4789] vhci_hcd: connection closed [ 75.201701][ T4781] vhci_hcd: connection closed [ 75.206336][ T4785] vhci_hcd: connection closed [ 75.216135][ T3332] vhci_hcd: stop threads [ 75.223600][ T4777] vhci_hcd: connection closed [ 75.225280][ T3332] vhci_hcd: release socket [ 75.234484][ T3332] vhci_hcd: disconnect device [ 75.262071][ T3332] vhci_hcd: stop threads [ 75.266453][ T3332] vhci_hcd: release socket [ 75.271102][ T3332] vhci_hcd: disconnect device [ 75.276642][ T4792] loop1: detected capacity change from 0 to 2048 [ 75.287918][ T3332] vhci_hcd: stop threads [ 75.292255][ T3332] vhci_hcd: release socket [ 75.296874][ T3332] vhci_hcd: disconnect device [ 75.313260][ T1035] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 75.317213][ T3332] vhci_hcd: stop threads [ 75.325030][ T3332] vhci_hcd: release socket [ 75.329486][ T3332] vhci_hcd: disconnect device [ 75.345755][ T4778] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 75.352254][ T3332] vhci_hcd: stop threads [ 75.352947][ T4792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.356597][ T3332] vhci_hcd: release socket [ 75.373109][ T3332] vhci_hcd: disconnect device [ 75.378444][ T4792] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.379271][ T3332] vhci_hcd: stop threads [ 75.393354][ T3332] vhci_hcd: release socket [ 75.397789][ T3332] vhci_hcd: disconnect device [ 75.400178][ T4794] loop3: detected capacity change from 0 to 128 [ 75.404638][ T4800] xt_connbytes: Forcing CT accounting to be enabled [ 75.412133][ T4794] vfat: Unknown parameter '0xffffffffffffffff' [ 75.420711][ T4800] set match dimension is over the limit! [ 75.806706][ T4808] loop2: detected capacity change from 0 to 164 [ 75.825381][ T4808] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 75.837926][ T4808] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 75.918055][ T4806] lo speed is unknown, defaulting to 1000 [ 75.963820][ T4809] siw: device registration error -23 [ 76.104519][ T4812] netlink: 180 bytes leftover after parsing attributes in process `syz.2.340'. [ 76.143526][ T4812] netlink: 72 bytes leftover after parsing attributes in process `syz.2.340'. [ 76.217202][ T4812] netlink: 268 bytes leftover after parsing attributes in process `syz.2.340'. [ 76.226513][ T4812] unsupported nla_type 65024 [ 76.249078][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.276438][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 76.285322][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 76.296073][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 76.329192][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 76.338216][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 76.358815][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 76.382510][ T4824] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 76.389246][ T4824] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.396797][ T4824] vhci_hcd vhci_hcd.0: Device attached [ 76.414222][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 76.440213][ T4824] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 76.446883][ T4824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.454437][ T4824] vhci_hcd vhci_hcd.0: Device attached [ 76.461289][ T4824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 76.469871][ T4816] block device autoloading is deprecated and will be removed. [ 76.487863][ T4824] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 76.494504][ T4824] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 76.502323][ T4824] vhci_hcd vhci_hcd.0: Device attached [ 76.518872][ T4831] loop4: detected capacity change from 0 to 8192 [ 76.525563][ T4816] syz.2.344: attempt to access beyond end of device [ 76.525563][ T4816] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 76.566591][ T4824] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20) [ 76.573404][ T4824] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 76.581252][ T4824] vhci_hcd vhci_hcd.0: Device attached [ 76.604129][ T4824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 76.633383][ T4824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 76.694129][ T4837] vhci_hcd: connection closed [ 76.694135][ T4835] vhci_hcd: connection closed [ 76.694393][ T4833] vhci_hcd: connection closed [ 76.703847][ T12] vhci_hcd: stop threads [ 76.712851][ T12] vhci_hcd: release socket [ 76.717548][ T12] vhci_hcd: disconnect device [ 76.722740][ T4827] vhci_hcd: connection closed [ 76.748718][ T12] vhci_hcd: stop threads [ 76.758031][ T12] vhci_hcd: release socket [ 76.762631][ T12] vhci_hcd: disconnect device [ 76.767985][ T12] vhci_hcd: stop threads [ 76.772345][ T12] vhci_hcd: release socket [ 76.776810][ T12] vhci_hcd: disconnect device [ 76.782112][ T12] vhci_hcd: stop threads [ 76.786434][ T12] vhci_hcd: release socket [ 76.790872][ T12] vhci_hcd: disconnect device [ 76.813778][ T4839] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 76.821414][ T4839] FAT-fs (loop4): Filesystem has been set read-only [ 76.836450][ T4831] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 76.930880][ T4846] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 76.944994][ T4848] netlink: 'syz.3.348': attribute type 4 has an invalid length. [ 76.955690][ T36] lo speed is unknown, defaulting to 1000 [ 76.961541][ T36] syz2: Port: 1 Link DOWN [ 77.043118][ T4852] lo speed is unknown, defaulting to 1000 [ 77.190675][ T4858] loop3: detected capacity change from 0 to 2048 [ 77.215777][ T4858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.232562][ T4858] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.376811][ T4860] lo speed is unknown, defaulting to 1000 [ 77.414536][ T4875] loop1: detected capacity change from 0 to 128 [ 77.421232][ T4875] vfat: Unknown parameter '0xffffffffffffffff' [ 77.514665][ T4863] siw: device registration error -23 [ 78.075920][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.310629][ T4887] loop4: detected capacity change from 0 to 2048 [ 78.321939][ T4893] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 78.337277][ T4887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.490830][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.540201][ T4896] lo speed is unknown, defaulting to 1000 [ 78.572029][ T4907] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 78.572060][ T4907] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 78.572096][ T4907] vhci_hcd vhci_hcd.0: Device attached [ 78.576022][ T4907] vhci_hcd vhci_hcd.0: port 0 already used [ 78.585254][ T4908] vhci_hcd: connection closed [ 78.585530][ T12] vhci_hcd: stop threads [ 78.613930][ T12] vhci_hcd: release socket [ 78.618382][ T12] vhci_hcd: disconnect device [ 78.623132][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 78.623147][ T29] audit: type=1326 audit(1749266843.894:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 78.652820][ T29] audit: type=1326 audit(1749266843.894:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 78.676190][ T29] audit: type=1326 audit(1749266843.894:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 78.677074][ T4912] loop4: detected capacity change from 0 to 2048 [ 78.699517][ T29] audit: type=1326 audit(1749266843.894:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 78.729270][ T29] audit: type=1326 audit(1749266843.894:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 78.752664][ T29] audit: type=1326 audit(1749266843.894:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 78.776092][ T29] audit: type=1326 audit(1749266843.894:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 78.799444][ T29] audit: type=1326 audit(1749266843.894:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 78.822834][ T29] audit: type=1326 audit(1749266843.894:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8854c758e7 code=0x7ffc0000 [ 78.846130][ T29] audit: type=1326 audit(1749266843.894:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8854c1ab19 code=0x7ffc0000 [ 78.902977][ T4914] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 78.909651][ T4914] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.917276][ T4914] vhci_hcd vhci_hcd.0: Device attached [ 78.925684][ T4914] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 78.932329][ T4914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.939942][ T4914] vhci_hcd vhci_hcd.0: Device attached [ 78.952746][ T4914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 78.963343][ T4914] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 78.970063][ T4914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.977886][ T4914] vhci_hcd vhci_hcd.0: Device attached [ 79.009233][ T4914] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 79.015915][ T4914] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 79.023686][ T4914] vhci_hcd vhci_hcd.0: Device attached [ 79.035632][ T4914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 79.045005][ T4914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 79.062767][ T4925] vhci_hcd: connection closed [ 79.062970][ T37] vhci_hcd: stop threads [ 79.063045][ T4919] vhci_hcd: connection closed [ 79.067691][ T37] vhci_hcd: release socket [ 79.067704][ T37] vhci_hcd: disconnect device [ 79.086371][ T4917] vhci_hcd: connection closed [ 79.088943][ T4915] vhci_hcd: connection closed [ 79.094516][ T37] vhci_hcd: stop threads [ 79.103822][ T37] vhci_hcd: release socket [ 79.108251][ T37] vhci_hcd: disconnect device [ 79.113677][ T37] vhci_hcd: stop threads [ 79.118003][ T37] vhci_hcd: release socket [ 79.122490][ T37] vhci_hcd: disconnect device [ 79.127501][ T37] vhci_hcd: stop threads [ 79.131750][ T37] vhci_hcd: release socket [ 79.136284][ T37] vhci_hcd: disconnect device [ 79.209926][ T4936] lo speed is unknown, defaulting to 1000 [ 79.362092][ T4938] siw: device registration error -23 [ 80.093726][ T4945] lo speed is unknown, defaulting to 1000 [ 80.207574][ T4944] uprobe: syz.4.370:4944 failed to unregister, leaking uprobe [ 80.218156][ T4945] loop3: detected capacity change from 0 to 512 [ 80.224948][ T4945] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.231432][ T4945] EXT4-fs: Ignoring removed bh option [ 80.243764][ T4945] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.273910][ T4945] EXT4-fs (loop3): 1 truncate cleaned up [ 80.280652][ T4945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.374620][ T1035] usb 5-1: enqueue for inactive port 0 [ 80.384039][ T1035] usb 5-1: enqueue for inactive port 0 [ 80.450421][ T4952] hub 1-0:1.0: USB hub found [ 80.539943][ T1035] vhci_hcd: vhci_device speed not set [ 80.546645][ T4952] hub 1-0:1.0: 8 ports detected [ 80.606733][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.618117][ T4950] loop2: detected capacity change from 0 to 128 [ 80.630209][ T4955] lo: entered promiscuous mode [ 80.643036][ T4955] tunl0: entered promiscuous mode [ 80.648411][ T4955] gre0: entered promiscuous mode [ 80.672504][ T4955] gretap0: entered promiscuous mode [ 80.686878][ T4955] erspan0: entered promiscuous mode [ 80.704216][ T4955] ip_vti0: entered promiscuous mode [ 80.709853][ T4955] ip6_vti0: entered promiscuous mode [ 80.740630][ T4950] SELinux: failed to load policy [ 80.742746][ T4955] sit0: entered promiscuous mode [ 80.768196][ T4955] ip6tnl0: entered promiscuous mode [ 80.797430][ T4955] ip6gre0: entered promiscuous mode [ 80.823484][ T4955] syz_tun: entered promiscuous mode [ 80.866730][ T4955] ip6gretap0: entered promiscuous mode [ 80.890613][ T4955] vcan0: entered promiscuous mode [ 80.916578][ T4955] bond0: entered promiscuous mode [ 80.921799][ T4955] bond_slave_0: entered promiscuous mode [ 80.927675][ T4955] bond_slave_1: entered promiscuous mode [ 80.945610][ T4968] loop0: detected capacity change from 0 to 2048 [ 80.952854][ T4955] team0: entered promiscuous mode [ 80.960109][ T4955] team_slave_1: entered promiscuous mode [ 80.967094][ T4955] dummy0: entered promiscuous mode [ 80.974105][ T4955] nlmon0: entered promiscuous mode [ 80.980249][ T4968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.001165][ T4955] caif0: entered promiscuous mode [ 81.006320][ T4955] net_ratelimit: 12 callbacks suppressed [ 81.006335][ T4955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.044663][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.079283][ T4974] xt_hashlimit: max too large, truncated to 1048576 [ 81.107873][ T4974] Cannot find del_set index 65532 as target [ 81.204161][ T4974] loop4: detected capacity change from 0 to 8192 [ 81.277421][ T4984] __nla_validate_parse: 8 callbacks suppressed [ 81.277437][ T4984] netlink: 3 bytes leftover after parsing attributes in process `syz.1.381'. [ 81.312725][ T4984] 0ªX¹¦À: renamed from caif0 [ 81.322676][ T4984] 0ªX¹¦À: entered allmulticast mode [ 81.327964][ T4984] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 81.415795][ T4991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 81.439755][ T4995] loop1: detected capacity change from 0 to 1024 [ 81.461040][ T4995] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.473195][ T4995] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 81.481392][ T4995] EXT4-fs (loop1): orphan cleanup on readonly fs [ 81.488697][ T4995] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 81.503487][ T4995] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 81.510606][ T4995] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.384: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.524741][ T4995] EXT4-fs (loop1): Remounting filesystem read-only [ 81.531415][ T4995] EXT4-fs (loop1): 1 orphan inode deleted [ 81.538274][ T4995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.575888][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.635881][ T4981] loop3: detected capacity change from 0 to 1024 [ 81.647439][ T4981] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.688465][ T4981] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 81.704615][ T4981] EXT4-fs (loop3): orphan cleanup on readonly fs [ 81.711200][ T4981] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #3: comm syz.3.380: iget: bad i_size value: 1407392063428608 [ 81.724412][ T4981] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.380: Bad quota inode: 3, type: 0 [ 81.735808][ T4981] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 81.750578][ T4981] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 81.757756][ T4981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.910652][ T5008] lo speed is unknown, defaulting to 1000 [ 82.124803][ T5008] loop1: detected capacity change from 0 to 512 [ 82.131979][ T5008] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.138471][ T5008] EXT4-fs: Ignoring removed bh option [ 82.211832][ T5008] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.224527][ T5008] EXT4-fs (loop1): 1 truncate cleaned up [ 82.230687][ T5008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.296783][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.322343][ T5016] SELinux: syz.3.390 (5016) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.346710][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 82.355649][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 82.365081][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 82.382816][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 82.391805][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 82.401105][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 82.418303][ T5020] syz.0.387: attempt to access beyond end of device [ 82.418303][ T5020] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 82.432820][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 82.441657][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 82.516342][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.578735][ T5030] batman_adv: batadv0: Interface deactivated: dummy0 [ 82.585607][ T5030] batman_adv: batadv0: Removing interface: dummy0 [ 82.600737][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.625449][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.643966][ T5026] lo speed is unknown, defaulting to 1000 [ 82.870836][ T5047] Q±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 82.882090][ T5047] program syz.0.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.062954][ T5055] lo speed is unknown, defaulting to 1000 [ 83.096538][ T5059] siw: device registration error -23 [ 83.436545][ T5067] loop2: detected capacity change from 0 to 1024 [ 83.443973][ T5067] EXT4-fs: Ignoring removed nobh option [ 83.444004][ T5067] EXT4-fs: Ignoring removed bh option [ 83.732831][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 83.732849][ T29] audit: type=1326 audit(1749266849.024:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 83.762552][ T29] audit: type=1326 audit(1749266849.034:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 83.768518][ T5074] loop3: detected capacity change from 0 to 2048 [ 83.786182][ T29] audit: type=1326 audit(1749266849.034:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 83.815641][ T29] audit: type=1326 audit(1749266849.034:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 83.839160][ T29] audit: type=1326 audit(1749266849.034:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 83.862915][ T29] audit: type=1326 audit(1749266849.034:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 83.886303][ T29] audit: type=1326 audit(1749266849.034:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 83.909907][ T29] audit: type=1326 audit(1749266849.034:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 83.933355][ T29] audit: type=1326 audit(1749266849.034:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f49cadde929 code=0x7ffc0000 [ 83.956747][ T29] audit: type=1326 audit(1749266849.034:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f49cadde963 code=0x7ffc0000 [ 83.980272][ T5073] loop1: detected capacity change from 0 to 1024 [ 83.987205][ T5073] EXT4-fs: Ignoring removed oldalloc option [ 83.993717][ T5073] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 84.013339][ T5074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.029136][ T5073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.117130][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.138891][ T5080] lo speed is unknown, defaulting to 1000 [ 84.175039][ T5087] loop4: detected capacity change from 0 to 1024 [ 84.238288][ T5087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.320802][ T5091] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.592378][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.735615][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.769396][ T5097] loop0: detected capacity change from 0 to 2048 [ 84.781431][ T5099] loop1: detected capacity change from 0 to 1024 [ 84.788795][ T5101] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 84.789266][ T5099] EXT4-fs: Ignoring removed nobh option [ 84.795418][ T5101] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 84.795560][ T5101] vhci_hcd vhci_hcd.0: Device attached [ 84.801164][ T5099] EXT4-fs: Ignoring removed bh option [ 84.824752][ T5097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.837175][ T5101] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 84.843867][ T5101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.844136][ T5097] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.851494][ T5101] vhci_hcd vhci_hcd.0: Device attached [ 84.869938][ T5108] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 84.887603][ T5099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.901999][ T5101] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 84.908641][ T5101] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 84.916301][ T5101] vhci_hcd vhci_hcd.0: Device attached [ 84.945582][ T5101] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20) [ 84.952245][ T5101] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 84.960103][ T5101] vhci_hcd vhci_hcd.0: Device attached [ 84.977779][ T5101] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 84.992510][ T10] vhci_hcd: vhci_device speed not set [ 85.027675][ T5108] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 85.053515][ T10] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 85.085743][ T5111] vhci_hcd: connection closed [ 85.086013][ T3337] vhci_hcd: stop threads [ 85.095069][ T3337] vhci_hcd: release socket [ 85.099723][ T3337] vhci_hcd: disconnect device [ 85.102166][ T5106] vhci_hcd: connection closed [ 85.112636][ T5102] vhci_hcd: connection closed [ 85.117546][ T5114] vhci_hcd: connection closed [ 85.123017][ T5103] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 85.188489][ T3337] vhci_hcd: stop threads [ 85.192863][ T3337] vhci_hcd: release socket [ 85.197372][ T3337] vhci_hcd: disconnect device [ 85.267990][ T3337] vhci_hcd: stop threads [ 85.272354][ T3337] vhci_hcd: release socket [ 85.276850][ T3337] vhci_hcd: disconnect device [ 85.302136][ T3337] vhci_hcd: stop threads [ 85.306500][ T3337] vhci_hcd: release socket [ 85.310985][ T3337] vhci_hcd: disconnect device [ 85.453874][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.770998][ T9] Process accounting resumed [ 85.804522][ T5143] loop4: detected capacity change from 0 to 764 [ 85.811708][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.866022][ T5143] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 86.139625][ T5158] loop3: detected capacity change from 0 to 512 [ 86.169603][ T5158] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.184852][ T5158] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.194898][ T5158] EXT4-fs (loop3): invalid inodes per group: 0 [ 86.194898][ T5158] [ 86.486156][ T5162] __nla_validate_parse: 11 callbacks suppressed [ 86.486216][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 86.502949][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 86.512310][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 86.521570][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 86.542734][ T5154] netlink: 16 bytes leftover after parsing attributes in process `syz.3.424'. [ 86.575100][ T5154] vcan0: entered promiscuous mode [ 86.580200][ T5154] vcan0: entered allmulticast mode [ 86.667942][ T5180] netlink: 'syz.3.428': attribute type 10 has an invalid length. [ 86.675790][ T5180] netlink: 40 bytes leftover after parsing attributes in process `syz.3.428'. [ 86.728270][ T5180] dummy0: entered promiscuous mode [ 86.744635][ T5177] netlink: 256 bytes leftover after parsing attributes in process `syz.3.428'. [ 86.756491][ T5180] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 87.007234][ T5184] lo speed is unknown, defaulting to 1000 [ 87.063729][ T1035] Process accounting resumed [ 87.085197][ T5193] siw: device registration error -23 [ 87.201757][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 87.364645][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 87.450087][ T5189] loop3: detected capacity change from 0 to 1024 [ 87.475391][ T5189] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.503326][ T5189] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 87.521885][ T5189] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.532083][ T5189] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #3: comm syz.3.432: iget: bad i_size value: 1407392063428608 [ 87.619017][ T5211] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 87.625593][ T5211] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 87.626789][ T5189] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.432: Bad quota inode: 3, type: 0 [ 87.633798][ T5211] vhci_hcd vhci_hcd.0: Device attached [ 87.640180][ T5211] vhci_hcd vhci_hcd.0: port 0 already used [ 87.713770][ T5212] vhci_hcd: connection closed [ 87.758166][ T786] vhci_hcd: stop threads [ 87.767187][ T786] vhci_hcd: release socket [ 87.771668][ T786] vhci_hcd: disconnect device [ 87.778235][ T5189] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 87.793132][ T5189] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 87.820039][ T5189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.979570][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.211561][ T5227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 88.271270][ T5231] loop0: detected capacity change from 0 to 2048 [ 88.314207][ T5231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.386789][ T5239] vcan0: left promiscuous mode [ 88.391723][ T5239] vcan0: left allmulticast mode [ 88.414763][ T5231] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.429117][ T5239] dummy0: left promiscuous mode [ 88.435368][ T5241] loop3: detected capacity change from 0 to 256 [ 88.446380][ T5239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.462164][ T9] lo speed is unknown, defaulting to 1000 [ 88.468078][ T9] syz2: Port: 1 Link ACTIVE [ 88.608811][ T5248] loop2: detected capacity change from 0 to 512 [ 88.706619][ T5248] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 88.731502][ T5248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.752103][ T5248] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 89.124118][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.184996][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.195284][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 89.195361][ T29] audit: type=1400 audit(1749266854.494:4775): avc: denied { mount } for pid=5258 comm="syz.0.447" name="/" dev="configfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 89.263276][ T29] audit: type=1400 audit(1749266854.564:4776): avc: denied { search } for pid=5258 comm="syz.0.447" name="/" dev="configfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.286521][ T5259] loop0: detected capacity change from 0 to 2048 [ 89.291032][ T29] audit: type=1400 audit(1749266854.564:4777): avc: denied { search } for pid=5258 comm="syz.0.447" name="/" dev="configfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.315204][ T29] audit: type=1400 audit(1749266854.564:4778): avc: denied { search } for pid=5258 comm="syz.0.447" name="/" dev="configfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.337448][ T29] audit: type=1400 audit(1749266854.564:4779): avc: denied { search } for pid=5258 comm="syz.0.447" name="/" dev="configfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.359698][ T29] audit: type=1400 audit(1749266854.564:4780): avc: denied { add_name } for pid=5258 comm="syz.0.447" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.380618][ T29] audit: type=1400 audit(1749266854.564:4781): avc: denied { create } for pid=5258 comm="syz.0.447" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 89.400975][ T29] audit: type=1400 audit(1749266854.564:4782): avc: denied { search } for pid=5258 comm="syz.0.447" name="/" dev="configfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.423157][ T29] audit: type=1400 audit(1749266854.564:4783): avc: denied { search } for pid=5258 comm="syz.0.447" name="/" dev="configfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.445341][ T29] audit: type=1400 audit(1749266854.564:4784): avc: denied { search } for pid=5258 comm="syz.0.447" name="/" dev="configfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.470517][ T5261] netlink: 'syz.2.449': attribute type 13 has an invalid length. [ 89.544283][ T5264] loop1: detected capacity change from 0 to 512 [ 89.564640][ T5264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.577451][ T5264] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.594052][ T5264] netlink: '+}[@': attribute type 12 has an invalid length. [ 89.680194][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.709710][ T5286] Cannot find add_set index 0 as target [ 89.782767][ T5297] syz_tun: entered allmulticast mode [ 89.830625][ T5297] tipc: Resetting bearer [ 89.843708][ T3402] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 89.870993][ T5297] tipc: Resetting bearer [ 89.871973][ T3402] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.887992][ T5304] loop0: detected capacity change from 0 to 256 [ 89.908618][ T5297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.023955][ T5310] loop0: detected capacity change from 0 to 764 [ 90.034077][ T5310] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 90.054224][ T5312] loop1: detected capacity change from 0 to 512 [ 90.092611][ T10] usb 9-1: enqueue for inactive port 0 [ 90.102234][ T10] usb 9-1: enqueue for inactive port 0 [ 90.103559][ T5312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 90.125858][ T5312] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.195256][ T10] vhci_hcd: vhci_device speed not set [ 90.227277][ T5301] EXT4-fs (loop1): shut down requested (0) [ 90.421990][ T5317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.430761][ T5317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.477597][ T5317] lo speed is unknown, defaulting to 1000 [ 90.631945][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 90.693321][ T5323] pim6reg1: entered promiscuous mode [ 90.914965][ T5333] loop4: detected capacity change from 0 to 2048 [ 91.008404][ T5337] netlink: 'syz.4.466': attribute type 13 has an invalid length. [ 91.188749][ T5345] lo: left promiscuous mode [ 91.202192][ T5345] tunl0: left promiscuous mode [ 91.213190][ T5345] gre0: left promiscuous mode [ 91.225353][ T5347] loop2: detected capacity change from 0 to 164 [ 91.231873][ T5345] gretap0: left promiscuous mode [ 91.238335][ T5345] erspan0: left promiscuous mode [ 91.244600][ T5345] ip_vti0: left promiscuous mode [ 91.250311][ T5345] ip6_vti0: left promiscuous mode [ 91.274483][ T5345] sit0: left promiscuous mode [ 91.291188][ T5345] ip6tnl0: left promiscuous mode [ 91.299093][ T5347] blktrace: Concurrent blktraces are not allowed on sg0 [ 91.333604][ T5345] ip6gre0: left promiscuous mode [ 91.339459][ T5345] syz_tun: left promiscuous mode [ 91.353397][ T5345] ip6gretap0: left promiscuous mode [ 91.365130][ T5345] vcan0: left promiscuous mode [ 91.380892][ T5345] bond0: left promiscuous mode [ 91.385835][ T5345] bond_slave_0: left promiscuous mode [ 91.391345][ T5345] bond_slave_1: left promiscuous mode [ 91.405269][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.423463][ T5345] team0: left promiscuous mode [ 91.428585][ T5345] team_slave_1: left promiscuous mode [ 91.437783][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.451573][ T5345] dummy0: left promiscuous mode [ 91.459501][ T5345] nlmon0: left promiscuous mode [ 91.470963][ T5345] caif0: left promiscuous mode [ 91.475870][ T5345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.501836][ T5348] __nla_validate_parse: 10 callbacks suppressed [ 91.501932][ T5348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.468'. [ 91.517196][ T5348] netlink: 108 bytes leftover after parsing attributes in process `syz.4.468'. [ 91.546200][ T5348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.468'. [ 91.555201][ T5348] netlink: 108 bytes leftover after parsing attributes in process `syz.4.468'. [ 91.564317][ T5348] netlink: 84 bytes leftover after parsing attributes in process `syz.4.468'. [ 91.595514][ T5352] batadv_slave_0: entered promiscuous mode [ 91.606414][ T5352] netlink: 76 bytes leftover after parsing attributes in process `syz.3.470'. [ 91.627941][ T5352] batadv_slave_0 (unregistering): left promiscuous mode [ 91.669238][ T5355] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5355 comm=syz.1.483 [ 91.753315][ T5359] loop2: detected capacity change from 0 to 1024 [ 91.790849][ T5358] loop3: detected capacity change from 0 to 1024 [ 91.805525][ T5358] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.823131][ T5358] EXT4-fs: Ignoring removed nobh option [ 91.828969][ T5358] EXT4-fs: Ignoring removed bh option [ 91.845391][ T5358] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 91.855100][ T5366] Q±6ã×\b‹¡Y­4: renamed from lo [ 91.878949][ T5358] cgroup: fork rejected by pids controller in /syz3 [ 91.883768][ T5366] program syz.2.477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.957591][ T3306] syz_tun (unregistering): left allmulticast mode [ 91.967711][ T5373] loop2: detected capacity change from 0 to 256 [ 92.018551][ T5369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'. [ 92.028512][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 92.173892][ T5377] lo speed is unknown, defaulting to 1000 [ 92.267282][ T5377] chnl_net:caif_netlink_parms(): no params data found [ 92.320060][ T786] bond0 (unregistering): Released all slaves [ 92.362384][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.369574][ T5377] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.377012][ T5377] bridge_slave_0: entered allmulticast mode [ 92.383699][ T5377] bridge_slave_0: entered promiscuous mode [ 92.397715][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.404955][ T5377] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.412300][ T5377] bridge_slave_1: entered allmulticast mode [ 92.421049][ T5377] bridge_slave_1: entered promiscuous mode [ 92.443865][ T5377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.462445][ T5377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.486826][ T786] hsr_slave_0: left promiscuous mode [ 92.511042][ T786] hsr_slave_1: left promiscuous mode [ 92.636414][ T12] smc: removing ib device syz! [ 92.644759][ T31] smc: removing ib device syz0 [ 92.653249][ T5410] loop0: detected capacity change from 0 to 512 [ 92.658480][ T5377] team0: Port device team_slave_0 added [ 92.667246][ T5377] team0: Port device team_slave_1 added [ 92.685942][ T9] lo speed is unknown, defaulting to 1000 [ 92.691715][ T9] infiniband syz2: ib_query_port failed (-19) [ 92.758046][ T5412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.766756][ T5412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.813126][ T3493] usb usb10-port1: attempt power cycle [ 92.832583][ T5410] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 92.888562][ T5410] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.493: iget: bad i_size value: 12154757448730 [ 93.049210][ T5410] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.493: couldn't read orphan inode 13 (err -117) [ 93.104172][ T5377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.111174][ T5377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.137368][ T5377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.166101][ T5410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.180898][ T5377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.187948][ T5377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.214031][ T5377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.214937][ T5416] netlink: 'syz.1.484': attribute type 13 has an invalid length. [ 93.253106][ T5408] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 93.281975][ T5416] tipc: Resetting bearer [ 93.317791][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.357915][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 93.383534][ T5428] loop0: detected capacity change from 0 to 164 [ 93.398167][ T5428] blktrace: Concurrent blktraces are not allowed on sg0 [ 93.410031][ T5377] hsr_slave_0: entered promiscuous mode [ 93.452233][ T5433] SELinux: ebitmap: truncated map [ 93.459926][ T5433] SELinux: failed to load policy [ 93.473037][ T5377] hsr_slave_1: entered promiscuous mode [ 93.483109][ T5377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.496990][ T5377] Cannot create hsr debugfs directory [ 93.540185][ T5437] sd 0:0:1:0: device reset [ 93.650335][ T5443] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5443 comm=syz.2.488 [ 93.704550][ T786] IPVS: stop unused estimator thread 0... [ 93.790438][ T5461] loop2: detected capacity change from 0 to 2048 [ 94.262285][ T5451] loop1: detected capacity change from 0 to 512 [ 94.310640][ T5451] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.361695][ T5451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.377425][ T5451] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.404656][ T29] kauditd_printk_skb: 551 callbacks suppressed [ 94.404672][ T29] audit: type=1400 audit(1749266859.694:5336): avc: denied { read write } for pid=5445 comm="syz.1.499" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.433710][ T29] audit: type=1400 audit(1749266859.694:5337): avc: denied { open } for pid=5445 comm="syz.1.499" path="/94/bus/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.460412][ T29] audit: type=1400 audit(1749266859.754:5338): avc: denied { setattr } for pid=5445 comm="syz.1.499" path="/94/bus/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.742731][ T3493] usb usb10-port1: unable to enumerate USB device [ 94.877650][ T5377] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.895284][ T5377] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.911073][ T5377] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.913839][ T5377] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.959141][ T5498] loop0: detected capacity change from 0 to 1024 [ 94.981386][ T29] audit: type=1400 audit(1749266860.274:5339): avc: denied { kexec_image_load } for pid=5476 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 95.018821][ T5498] EXT4-fs: Ignoring removed nobh option [ 95.026829][ T5377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.033774][ T5498] EXT4-fs: Ignoring removed bh option [ 95.050840][ T5377] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.051226][ T5498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.075565][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.082707][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.092038][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.099285][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.146971][ T29] audit: type=1326 audit(1749266860.444:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 95.170801][ T29] audit: type=1326 audit(1749266860.444:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 95.194192][ T29] audit: type=1326 audit(1749266860.444:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 95.217612][ T29] audit: type=1326 audit(1749266860.444:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 95.241018][ T29] audit: type=1326 audit(1749266860.444:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 95.264488][ T29] audit: type=1326 audit(1749266860.444:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 95.264963][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 95.324619][ T5518] loop2: detected capacity change from 0 to 512 [ 95.356407][ T5377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.371255][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.496495][ T5536] tipc: Resetting bearer [ 95.528331][ T5377] veth0_vlan: entered promiscuous mode [ 95.619556][ T5377] veth1_vlan: entered promiscuous mode [ 95.641053][ T5377] veth0_macvtap: entered promiscuous mode [ 95.648597][ T5377] veth1_macvtap: entered promiscuous mode [ 95.659734][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.670945][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.678397][ T5561] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 95.686562][ T5377] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.695507][ T5377] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.704433][ T5377] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.713371][ T5377] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.745800][ T5569] netlink: 'syz.4.500': attribute type 10 has an invalid length. [ 96.061251][ T5610] lo speed is unknown, defaulting to 1000 [ 96.072144][ T5594] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 96.114593][ T5610] lo speed is unknown, defaulting to 1000 [ 96.153145][ T5587] infiniband syz!: set active [ 96.157895][ T5587] infiniband syz!: added team_slave_0 [ 96.185795][ T5610] lo speed is unknown, defaulting to 1000 [ 96.254377][ T5587] RDS/IB: syz!: added [ 96.262967][ T5587] smc: adding ib device syz! with port count 1 [ 96.275984][ T5587] smc: ib device syz! port 1 has pnetid [ 96.674967][ T5656] loop0: detected capacity change from 0 to 1024 [ 96.682745][ T5656] EXT4-fs (loop0): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 96.697812][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.743157][ T5656] tmpfs: Bad value for 'size' [ 96.771284][ T5610] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 96.829578][ T5610] lo speed is unknown, defaulting to 1000 [ 96.844099][ T5661] __nla_validate_parse: 3 callbacks suppressed [ 96.844113][ T5661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.512'. [ 96.846407][ T5610] lo speed is unknown, defaulting to 1000 [ 96.871899][ T5610] lo speed is unknown, defaulting to 1000 [ 96.878457][ T5610] lo speed is unknown, defaulting to 1000 [ 96.886143][ T5610] lo speed is unknown, defaulting to 1000 [ 96.892661][ T5610] lo speed is unknown, defaulting to 1000 [ 96.908807][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 96.943030][ T5666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.514'. [ 96.990960][ T5670] smc: net device bond0 applied user defined pnetid SYZ2 [ 97.390975][ T5679] loop0: detected capacity change from 0 to 8192 [ 97.735876][ T5688] loop2: detected capacity change from 0 to 128 [ 97.939609][ T5694] loop1: detected capacity change from 0 to 1024 [ 97.976434][ T5694] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 97.987406][ T5694] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 98.013380][ T5694] JBD2: no valid journal superblock found [ 98.019179][ T5694] EXT4-fs (loop1): Could not load journal inode [ 98.050602][ T5706] loop3: detected capacity change from 0 to 512 [ 98.059692][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 98.073676][ T5706] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.524: corrupted in-inode xattr: invalid ea_ino [ 98.104937][ T5706] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.524: couldn't read orphan inode 15 (err -117) [ 98.117508][ T5706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.201383][ T5377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.271906][ T5713] lo speed is unknown, defaulting to 1000 [ 98.272070][ T5720] loop3: detected capacity change from 0 to 1764 [ 98.672520][ T5731] lo speed is unknown, defaulting to 1000 [ 99.018367][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.039803][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.078407][ T5736] loop4: detected capacity change from 0 to 512 [ 99.320711][ T5736] EXT4-fs: Ignoring removed orlov option [ 99.375380][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 99.412961][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 99.412974][ T29] audit: type=1326 audit(1749266864.714:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f4e57e929 code=0x7ffc0000 [ 99.462960][ T5736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.539307][ T5736] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.556749][ T5736] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.533: bg 0: block 248: padding at end of block bitmap is not set [ 99.596050][ T29] audit: type=1326 audit(1749266864.744:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e57e929 code=0x7ffc0000 [ 99.619567][ T29] audit: type=1326 audit(1749266864.744:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e57e929 code=0x7ffc0000 [ 99.642905][ T29] audit: type=1326 audit(1749266864.744:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4e57e929 code=0x7ffc0000 [ 99.666371][ T29] audit: type=1326 audit(1749266864.744:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e57e929 code=0x7ffc0000 [ 99.689882][ T29] audit: type=1326 audit(1749266864.744:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f4e57e929 code=0x7ffc0000 [ 99.713200][ T29] audit: type=1326 audit(1749266864.744:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e57e929 code=0x7ffc0000 [ 99.736515][ T29] audit: type=1326 audit(1749266864.744:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f4e57e929 code=0x7ffc0000 [ 99.760033][ T29] audit: type=1326 audit(1749266864.744:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4e57e929 code=0x7ffc0000 [ 99.783436][ T29] audit: type=1326 audit(1749266864.744:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f4e57e929 code=0x7ffc0000 [ 99.864167][ T5751] loop2: detected capacity change from 0 to 512 [ 99.901745][ T5736] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.533: Failed to acquire dquot type 1 [ 99.980665][ T5750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.537'. [ 100.061931][ T5736] EXT4-fs (loop4): 1 truncate cleaned up [ 100.069394][ T5736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.102885][ T5736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.128410][ T5755] bridge_slave_0: left allmulticast mode [ 100.134174][ T5755] bridge_slave_0: left promiscuous mode [ 100.139887][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.161821][ T5755] bridge_slave_1: left allmulticast mode [ 100.167580][ T5755] bridge_slave_1: left promiscuous mode [ 100.173702][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.190350][ T5755] bond0: (slave bond_slave_0): Releasing backup interface [ 100.204631][ T5755] bond0: (slave bond_slave_1): Releasing backup interface [ 100.234478][ T5759] loop0: detected capacity change from 0 to 1024 [ 100.242006][ T5759] EXT4-fs: Mount option(s) incompatible with ext2 [ 100.252996][ T5755] team0: Port device team_slave_0 removed [ 100.262891][ T5755] team0: Port device team_slave_1 removed [ 100.270185][ T5755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.277675][ T5755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.287364][ T5755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.295159][ T5755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.333922][ T3493] syz!: Port: 1 Link DOWN [ 100.521300][ T5775] pim6reg: entered allmulticast mode [ 100.529774][ T5775] pim6reg: left allmulticast mode [ 101.804161][ T5789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 101.820258][ T5791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 101.851951][ T5789] netlink: 'syz.3.551': attribute type 13 has an invalid length. [ 101.948272][ T5795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.956985][ T5795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.307015][ T5789] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.316140][ T5789] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.325087][ T5789] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.334082][ T5789] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.464054][ T5812] loop3: detected capacity change from 0 to 164 [ 102.476251][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.483809][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.491263][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.510977][ T5812] blktrace: Concurrent blktraces are not allowed on sg0 [ 102.511802][ T5815] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.527864][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.535325][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.542965][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.550370][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.557815][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.565314][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.572925][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.580375][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.587835][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.587911][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.587940][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.617496][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.624968][ T3471] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 102.634993][ T3471] hid-generic 0006:0000:0000.0005: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 102.667864][ T5825] fido_id[5825]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.897467][ T5815] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.009576][ T5815] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.084222][ T5815] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.140115][ T5815] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.151606][ T5815] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.164036][ T5815] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.175697][ T5815] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.360312][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.368686][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.376656][ T5843] tipc: Resetting bearer [ 103.383573][ T5843] 0ªX¹¦À: left allmulticast mode [ 103.388611][ T5843] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 103.437080][ T5843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.562'. [ 103.446088][ T5843] netlink: 108 bytes leftover after parsing attributes in process `syz.1.562'. [ 103.455848][ T5843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.562'. [ 103.465921][ T5843] netlink: 108 bytes leftover after parsing attributes in process `syz.1.562'. [ 103.475006][ T5843] netlink: 84 bytes leftover after parsing attributes in process `syz.1.562'. [ 103.543464][ T5849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.563'. [ 103.611836][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 103.699842][ T5855] pim6reg1: entered promiscuous mode [ 104.057419][ T5870] lo speed is unknown, defaulting to 1000 [ 104.459164][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 104.459182][ T29] audit: type=1326 audit(1749266869.754:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 104.513557][ T29] audit: type=1326 audit(1749266869.784:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 104.612274][ T29] audit: type=1326 audit(1749266869.904:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 104.635796][ T29] audit: type=1326 audit(1749266869.904:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 104.659519][ T29] audit: type=1326 audit(1749266869.904:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 104.667566][ T5868] netlink: 'syz.4.570': attribute type 13 has an invalid length. [ 104.683236][ T29] audit: type=1326 audit(1749266869.964:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 104.690636][ T5868] netlink: 152 bytes leftover after parsing attributes in process `syz.4.570'. [ 104.713924][ T29] audit: type=1326 audit(1749266869.964:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 104.746471][ T29] audit: type=1326 audit(1749266869.964:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 104.769912][ T29] audit: type=1326 audit(1749266869.964:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 104.793253][ T29] audit: type=1326 audit(1749266869.964:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 104.816705][ T5868] erspan0: refused to change device tx_queue_len [ 104.824162][ T5868] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 105.140874][ T5884] loop1: detected capacity change from 0 to 8192 [ 105.193637][ T5884] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 105.198904][ T5884] loop1: partition table partially beyond EOD, truncated [ 105.217505][ T5884] loop1: p1 start 67108864 is beyond EOD, truncated [ 105.224243][ T5884] loop1: p2 size 61546 extends beyond EOD, truncated [ 105.232303][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'. [ 105.242752][ T5893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.576'. [ 105.275327][ T5898] loop2: detected capacity change from 0 to 256 [ 105.287455][ T5884] loop1: p3 start 100859904 is beyond EOD, truncated [ 105.314339][ T10] IPVS: starting estimator thread 0... [ 105.321189][ T5884] loop1: p5 start 67108864 is beyond EOD, truncated [ 105.327945][ T5884] loop1: p6 size 61546 extends beyond EOD, truncated [ 105.341392][ T2997] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 105.346868][ T2997] loop1: partition table partially beyond EOD, truncated [ 105.354681][ T2997] loop1: p1 start 67108864 is beyond EOD, truncated [ 105.361404][ T2997] loop1: p2 size 61546 extends beyond EOD, truncated [ 105.361726][ T5901] loop4: detected capacity change from 0 to 8192 [ 105.380182][ T2997] loop1: p3 start 100859904 is beyond EOD, truncated [ 105.387635][ T2997] loop1: p5 start 67108864 is beyond EOD, truncated [ 105.394350][ T2997] loop1: p6 size 61546 extends beyond EOD, truncated [ 105.403566][ T5903] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.411386][ T5902] IPVS: using max 1920 ests per chain, 96000 per kthread [ 105.591363][ T3585] udevd[3585]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 105.592039][ T4093] udevd[4093]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 105.603917][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 105.630610][ T4095] udevd[4095]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 105.641774][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 105.653409][ T4093] udevd[4093]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 105.675813][ T5908] loop1: detected capacity change from 0 to 4096 [ 105.704181][ T5908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.945216][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.064241][ T5923] loop1: detected capacity change from 0 to 128 [ 106.085589][ T5923] syz.1.582: attempt to access beyond end of device [ 106.085589][ T5923] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 106.099383][ T5923] syz.1.582: attempt to access beyond end of device [ 106.099383][ T5923] loop1: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 106.130391][ T5923] syz.1.582: attempt to access beyond end of device [ 106.130391][ T5923] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 106.152648][ T5923] syz.1.582: attempt to access beyond end of device [ 106.152648][ T5923] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 106.181952][ T5923] syz.1.582: attempt to access beyond end of device [ 106.181952][ T5923] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 106.201609][ T5927] syz.1.582: attempt to access beyond end of device [ 106.201609][ T5927] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 106.216003][ T5923] syz.1.582: attempt to access beyond end of device [ 106.216003][ T5923] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 106.229703][ T5927] syz.1.582: attempt to access beyond end of device [ 106.229703][ T5927] loop1: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 106.232675][ T5925] loop2: detected capacity change from 0 to 512 [ 106.243853][ T5923] syz.1.582: attempt to access beyond end of device [ 106.243853][ T5923] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 106.277673][ T5927] syz.1.582: attempt to access beyond end of device [ 106.277673][ T5927] loop1: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 106.281457][ T5925] bridge0: entered promiscuous mode [ 106.296527][ T5925] bridge0: entered allmulticast mode [ 106.321214][ T5925] team0: Port device bridge0 added [ 106.349777][ T5923] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 106.356397][ T5923] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 106.364100][ T5923] vhci_hcd vhci_hcd.0: Device attached [ 106.424687][ T5931] vhci_hcd: connection closed [ 106.424900][ T31] vhci_hcd: stop threads [ 106.433914][ T31] vhci_hcd: release socket [ 106.438443][ T31] vhci_hcd: disconnect device [ 106.518528][ T5943] loop2: detected capacity change from 0 to 512 [ 106.594735][ T5950] loop3: detected capacity change from 0 to 1024 [ 106.606352][ T5950] EXT4-fs: Ignoring removed nobh option [ 106.612150][ T5950] EXT4-fs: Ignoring removed bh option [ 106.624027][ T5950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.935806][ T3337] Buffer I/O error on dev loop1, logical block 305, lost async page write [ 106.955221][ T5956] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 106.979632][ T5956] netlink: 'syz.1.591': attribute type 10 has an invalid length. [ 106.987661][ T5956] tipc: Resetting bearer [ 107.018625][ T5960] loop1: detected capacity change from 0 to 1024 [ 107.030434][ T5960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.066684][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.086061][ T5964] loop1: detected capacity change from 0 to 256 [ 107.339083][ T5967] netlink: 'syz.4.595': attribute type 6 has an invalid length. [ 107.355204][ T5967] loop4: detected capacity change from 0 to 1024 [ 107.428475][ T5974] batadv_slave_0: entered promiscuous mode [ 107.435966][ T5974] batadv_slave_0 (unregistering): left promiscuous mode [ 107.456453][ T5377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.485943][ T5978] loop3: detected capacity change from 0 to 128 [ 107.729254][ T5983] process 'syz.4.599' launched './file0' with NULL argv: empty string added [ 108.272197][ T6002] loop0: detected capacity change from 0 to 1024 [ 108.316224][ T6000] pim6reg1: entered promiscuous mode [ 108.335681][ T6002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.528708][ T6002] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.612: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 108.602542][ T6002] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.612: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 108.605510][ T6008] lo speed is unknown, defaulting to 1000 [ 108.684248][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.825369][ T6024] __nla_validate_parse: 6 callbacks suppressed [ 108.825387][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 108.912379][ T6022] loop2: detected capacity change from 0 to 1024 [ 109.040019][ T6032] loop0: detected capacity change from 0 to 2048 [ 109.055550][ T6033] 9pnet_fd: Insufficient options for proto=fd [ 109.062288][ T6032] msdos: Bad value for 'time_offset' [ 109.194963][ T6037] loop2: detected capacity change from 0 to 8192 [ 109.213309][ T6038] loop1: detected capacity change from 0 to 1024 [ 109.247379][ T6038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.341767][ T6038] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.613: Allocating blocks 449-513 which overlap fs metadata [ 109.377617][ T6040] infiniband syz1: set active [ 109.382382][ T6040] infiniband syz1: added syz_tun [ 109.400161][ T6040] RDS/IB: syz1: added [ 109.407724][ T6040] smc: adding ib device syz1 with port count 1 [ 109.422474][ T6040] smc: ib device syz1 port 1 has pnetid [ 109.691652][ T6051] siw: device registration error -23 [ 109.734663][ T6056] loop3: detected capacity change from 0 to 512 [ 109.755060][ T6056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.772872][ T6056] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.803353][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 109.816641][ T29] kauditd_printk_skb: 764 callbacks suppressed [ 109.816660][ T29] audit: type=1326 audit(1749266875.114:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 109.845009][ T6056] bridge1: entered promiscuous mode [ 109.846302][ T29] audit: type=1326 audit(1749266875.114:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 109.851509][ T6056] bridge1: entered allmulticast mode [ 109.874906][ T29] audit: type=1326 audit(1749266875.114:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 109.881409][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 109.903580][ T29] audit: type=1326 audit(1749266875.114:6613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 109.934819][ T6056] team0: Port device bridge1 added [ 109.935682][ T29] audit: type=1326 audit(1749266875.114:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 109.964366][ T29] audit: type=1326 audit(1749266875.114:6615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 109.987811][ T6034] EXT4-fs (loop1): pa ffff888106b4b770: logic 48, phys. 177, len 21 [ 109.987842][ T6034] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 110.005927][ T29] audit: type=1326 audit(1749266875.114:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 110.029296][ T29] audit: type=1326 audit(1749266875.114:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 110.052630][ T29] audit: type=1326 audit(1749266875.114:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 110.075989][ T29] audit: type=1326 audit(1749266875.114:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 110.228765][ T6075] lo speed is unknown, defaulting to 1000 [ 110.252894][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.262441][ T5377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.300109][ T6082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.624'. [ 110.449878][ T6085] lo speed is unknown, defaulting to 1000 [ 110.563882][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 110.883552][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 110.933102][ T6099] netlink: 'syz.2.627': attribute type 13 has an invalid length. [ 110.964337][ T6104] loop2: detected capacity change from 0 to 128 [ 110.971789][ T6104] msdos: Unknown parameter '01777777777777777777777' [ 111.140660][ T6105] lo speed is unknown, defaulting to 1000 [ 111.419643][ T6110] loop2: detected capacity change from 0 to 2048 [ 111.511634][ T3384] IPVS: starting estimator thread 0... [ 111.569374][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.631'. [ 111.591042][ T6115] loop3: detected capacity change from 0 to 8192 [ 111.612635][ T6116] IPVS: using max 2304 ests per chain, 115200 per kthread [ 111.715709][ T6123] lo: entered promiscuous mode [ 111.729256][ T6123] tunl0: entered promiscuous mode [ 111.745181][ T6123] gre0: entered promiscuous mode [ 111.761964][ T6123] gretap0: entered promiscuous mode [ 111.767753][ T6123] erspan0: entered promiscuous mode [ 111.776977][ T6123] ip_vti0: entered promiscuous mode [ 111.784067][ T6123] ip6_vti0: entered promiscuous mode [ 111.789966][ T6123] sit0: entered promiscuous mode [ 111.796181][ T6123] ip6tnl0: entered promiscuous mode [ 111.809805][ T6123] ip6gre0: entered promiscuous mode [ 111.872986][ T6123] ip6gretap0: entered promiscuous mode [ 111.885864][ T6123] vcan0: entered promiscuous mode [ 111.896997][ T6123] bond0: entered promiscuous mode [ 111.902099][ T6123] bond_slave_0: entered promiscuous mode [ 111.908179][ T6123] bond_slave_1: entered promiscuous mode [ 111.921423][ T6123] team0: entered promiscuous mode [ 111.944676][ T6123] team_slave_0: entered promiscuous mode [ 111.950644][ T6123] team_slave_1: entered promiscuous mode [ 111.965025][ T6137] loop2: detected capacity change from 0 to 2048 [ 112.003389][ T6123] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.039435][ T6123] tipc: Resetting bearer [ 112.073061][ T6123] tipc: Resetting bearer [ 112.092618][ T6123] dummy0: entered promiscuous mode [ 112.107180][ T6123] nlmon0: entered promiscuous mode [ 112.142071][ T6123] 0ªX¹¦À: entered promiscuous mode [ 112.147374][ T6123] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 112.216030][ T6140] loop4: detected capacity change from 0 to 1024 [ 112.230368][ T6140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.291546][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.395432][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 112.496655][ T6148] siw: device registration error -23 [ 112.536886][ T6158] loop1: detected capacity change from 0 to 1024 [ 112.551877][ T6158] EXT4-fs: Ignoring removed nobh option [ 112.553493][ T6155] netlink: 'syz.3.642': attribute type 13 has an invalid length. [ 112.557647][ T6158] EXT4-fs: Ignoring removed bh option [ 112.589947][ T6158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.732116][ T6174] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 112.738762][ T6174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.746378][ T6174] vhci_hcd vhci_hcd.0: Device attached [ 112.761553][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 112.770642][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.648'. [ 112.772195][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.790505][ T6174] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 112.832077][ T6179] loop1: detected capacity change from 0 to 2048 [ 112.839786][ T6176] vhci_hcd: connection closed [ 112.951177][ T6180] lo speed is unknown, defaulting to 1000 [ 113.084014][ T3332] vhci_hcd: stop threads [ 113.088333][ T3332] vhci_hcd: release socket [ 113.092812][ T3332] vhci_hcd: disconnect device [ 113.127516][ T6179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.154621][ T6179] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.290304][ T6187] team0: Port device bridge0 removed [ 113.299358][ T6185] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 113.395149][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.407570][ T6192] 9pnet: Could not find request transport: 0xffffffffffffffff [ 113.418527][ T6192] sd 0:0:1:0: device reset [ 113.543281][ T6199] loop2: detected capacity change from 0 to 512 [ 113.568238][ T6203] serio: Serial port ptm0 [ 113.633575][ T6203] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 113.658435][ T6195] netlink: 'syz.1.654': attribute type 13 has an invalid length. [ 113.666991][ T6195] erspan0: refused to change device tx_queue_len [ 113.673976][ T6195] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 114.104424][ T6217] lo speed is unknown, defaulting to 1000 [ 114.583554][ T6223] loop2: detected capacity change from 0 to 256 [ 114.625492][ T6222] loop4: detected capacity change from 0 to 2048 [ 114.677993][ T6224] loop1: detected capacity change from 0 to 512 [ 114.685034][ T6224] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.729103][ T6224] EXT4-fs (loop1): 1 truncate cleaned up [ 114.735256][ T6224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.757875][ T6222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.770189][ T6222] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.872471][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.976654][ T6237] lo speed is unknown, defaulting to 1000 [ 115.706736][ T6242] loop1: detected capacity change from 0 to 2048 [ 115.787044][ T6242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.829722][ T6242] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.873686][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.903167][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 115.903182][ T29] audit: type=1326 audit(1749266881.204:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a938e929 code=0x7ffc0000 [ 115.986876][ T6246] netlink: 'syz.2.676': attribute type 1 has an invalid length. [ 115.999933][ T29] audit: type=1326 audit(1749266881.234:6933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a938e929 code=0x7ffc0000 [ 116.023414][ T29] audit: type=1326 audit(1749266881.254:6934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96a938e929 code=0x7ffc0000 [ 116.046837][ T29] audit: type=1326 audit(1749266881.254:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a938e929 code=0x7ffc0000 [ 116.055823][ T6246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.070163][ T29] audit: type=1326 audit(1749266881.254:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a938e929 code=0x7ffc0000 [ 116.070194][ T29] audit: type=1326 audit(1749266881.284:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f96a938e929 code=0x7ffc0000 [ 116.123671][ T29] audit: type=1326 audit(1749266881.284:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a938e929 code=0x7ffc0000 [ 116.147025][ T29] audit: type=1326 audit(1749266881.284:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96a938e929 code=0x7ffc0000 [ 116.170466][ T29] audit: type=1326 audit(1749266881.284:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a938e929 code=0x7ffc0000 [ 116.193890][ T29] audit: type=1326 audit(1749266881.284:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a938e929 code=0x7ffc0000 [ 116.235336][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.388553][ T6259] loop4: detected capacity change from 0 to 512 [ 116.404120][ T6259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.417109][ T6259] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.873387][ T6259] bridge0: entered promiscuous mode [ 116.878731][ T6259] bridge0: entered allmulticast mode [ 116.885670][ T6259] team0: Port device bridge0 added [ 116.924440][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.950199][ T6266] __nla_validate_parse: 7 callbacks suppressed [ 116.950214][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 116.968323][ T6266] netlink: 'syz.1.678': attribute type 10 has an invalid length. [ 116.976329][ T6266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.678'. [ 116.985793][ T6266] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 117.090266][ T6264] lo speed is unknown, defaulting to 1000 [ 117.257728][ T6279] loop4: detected capacity change from 0 to 512 [ 117.283825][ T6282] futex_wake_op: syz.2.672 tries to shift op by -1; fix this program [ 117.337175][ T6282] loop2: detected capacity change from 0 to 2048 [ 117.523508][ T6285] lo speed is unknown, defaulting to 1000 [ 117.954052][ T6290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.362878][ T6288] loop2: detected capacity change from 0 to 512 [ 118.388709][ T6292] loop4: detected capacity change from 0 to 4096 [ 118.410822][ T6292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.434478][ T6297] loop3: detected capacity change from 0 to 2048 [ 118.444440][ T6294] loop1: detected capacity change from 0 to 512 [ 118.473446][ T6288] EXT4-fs: Ignoring removed orlov option [ 118.484427][ T6294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.520558][ T6297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.548772][ T6294] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.561698][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.571834][ T6297] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.658361][ T6288] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.716882][ T6288] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 118.791058][ T6309] loop4: detected capacity change from 0 to 1764 [ 118.809311][ T6288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.903505][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.028045][ T6311] loop4: detected capacity change from 0 to 2048 [ 119.074088][ T6311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.106639][ T6311] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.138863][ T6311] netlink: 40 bytes leftover after parsing attributes in process `syz.4.681'. [ 119.179480][ T6317] loop1: detected capacity change from 0 to 2048 [ 119.189574][ T6315] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 119.211255][ T5377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.221365][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.242776][ T6317] loop1: p3 < > p4 < > [ 119.246994][ T6317] loop1: partition table partially beyond EOD, truncated [ 119.262496][ T6317] loop1: p3 start 4284289 is beyond EOD, truncated [ 119.279264][ T6319] lo: entered promiscuous mode [ 119.296680][ T6319] tunl0: entered promiscuous mode [ 119.309588][ T6319] gre0: entered promiscuous mode [ 119.328162][ T6319] gretap0: entered promiscuous mode [ 119.335289][ T6324] netlink: 'syz.0.685': attribute type 27 has an invalid length. [ 119.343920][ T6319] erspan0: entered promiscuous mode [ 119.365392][ T6319] ip_vti0: entered promiscuous mode [ 119.371410][ T6319] ip6_vti0: entered promiscuous mode [ 119.386849][ T6319] sit0: entered promiscuous mode [ 119.395210][ T6319] ip6tnl0: entered promiscuous mode [ 119.401436][ T6319] ip6gre0: entered promiscuous mode [ 119.410775][ T6319] syz_tun: entered promiscuous mode [ 119.419913][ T6319] ip6gretap0: entered promiscuous mode [ 119.427309][ T6319] bridge0: entered promiscuous mode [ 119.433533][ T6319] vcan0: entered promiscuous mode [ 119.439106][ T6319] bond0: entered promiscuous mode [ 119.444597][ T6319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.453922][ T6319] team0: entered promiscuous mode [ 119.459702][ T6319] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.466906][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 119.475836][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 119.485212][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 119.496290][ T6319] dummy0: entered promiscuous mode [ 119.502939][ T6319] nlmon0: entered promiscuous mode [ 119.508243][ T6332] loop2: detected capacity change from 0 to 128 [ 119.519821][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.530639][ T6319] caif0: entered promiscuous mode [ 119.535916][ T6319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.582158][ T6324] tipc: Resetting bearer [ 119.597181][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 119.606156][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 119.630753][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 119.639882][ T6337] loop4: detected capacity change from 0 to 1024 [ 119.655736][ T6337] EXT4-fs: Ignoring removed orlov option [ 119.669734][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 119.684606][ T6337] tmpfs: Bad value for 'nr_inodes' [ 119.690442][ T6337] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 119.717548][ T6324] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.726242][ T6324] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.734988][ T6324] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.743546][ T6324] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.779860][ T6328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.790134][ T6328] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.798440][ T6328] tipc: Resetting bearer [ 119.806729][ T6328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.962223][ T6360] loop3: detected capacity change from 0 to 2048 [ 119.974085][ T6360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.000028][ T6360] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.014054][ T6369] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 120.070544][ T6374] can: request_module (can-proto-0) failed. [ 120.087930][ T6378] loop1: detected capacity change from 0 to 512 [ 120.095234][ T6378] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 120.104706][ T6378] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.700: bad orphan inode 15 [ 120.115279][ T6378] ext4_test_bit(bit=14, block=18) = 1 [ 120.121567][ T6378] is_bad_inode(inode)=0 [ 120.125809][ T6378] NEXT_ORPHAN(inode)=1023 [ 120.130242][ T6378] max_ino=32 [ 120.133576][ T6378] i_nlink=0 [ 120.137678][ T6378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 120.152612][ T6378] ext2 filesystem being mounted at /136/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 120.204196][ T5377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.750920][ T6390] loop2: detected capacity change from 0 to 128 [ 120.930593][ T6395] netlink: 'syz.4.703': attribute type 27 has an invalid length. [ 120.953031][ T6395] bridge0: left promiscuous mode [ 120.958063][ T6395] bridge0: left allmulticast mode [ 120.964479][ T3471] lo speed is unknown, defaulting to 1000 [ 120.970236][ T3471] syz2: Port: 1 Link DOWN [ 120.991591][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 121.022774][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.031053][ T6395] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.062678][ T6395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.078220][ T3471] lo speed is unknown, defaulting to 1000 [ 121.083998][ T3471] syz2: Port: 1 Link ACTIVE [ 121.492332][ T6407] lo speed is unknown, defaulting to 1000 [ 121.695228][ T6409] team0: Port device bridge0 removed [ 121.702486][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 121.702503][ T29] audit: type=1326 audit(1749266886.954:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 121.732068][ T29] audit: type=1326 audit(1749266886.954:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 121.755589][ T29] audit: type=1326 audit(1749266886.964:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 121.779015][ T29] audit: type=1326 audit(1749266886.964:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 121.802381][ T29] audit: type=1326 audit(1749266886.964:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 121.825808][ T29] audit: type=1326 audit(1749266886.964:7180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 121.849203][ T29] audit: type=1326 audit(1749266886.964:7181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 121.872673][ T29] audit: type=1326 audit(1749266886.964:7182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 121.896043][ T29] audit: type=1326 audit(1749266886.964:7183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 121.919350][ T29] audit: type=1326 audit(1749266886.964:7184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c7e929 code=0x7ffc0000 [ 122.018864][ T6416] __nla_validate_parse: 15 callbacks suppressed [ 122.018894][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 122.036926][ T6412] xt_hashlimit: max too large, truncated to 1048576 [ 122.071171][ T6423] SELinux: syz.1.708 (6423) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 122.311309][ T6432] netlink: 108 bytes leftover after parsing attributes in process `syz.1.710'. [ 122.329188][ T6433] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 122.346742][ T6435] loop1: detected capacity change from 0 to 2048 [ 122.353889][ T6435] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.363974][ T6435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.384802][ T6435] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.712: bg 0: block 234: padding at end of block bitmap is not set [ 122.399335][ T6435] EXT4-fs (loop1): Remounting filesystem read-only [ 122.464494][ T6440] loop2: detected capacity change from 0 to 128 [ 122.477286][ T6440] loop2: detected capacity change from 0 to 512 [ 122.483765][ T6441] random: crng reseeded on system resumption [ 122.495348][ T6440] cgroup2: Unknown parameter 'cpu' [ 122.720070][ T6447] netlink: 268 bytes leftover after parsing attributes in process `syz.4.715'. [ 123.090785][ T6453] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 123.115353][ T6453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.727'. [ 123.183152][ T6458] blktrace: Concurrent blktraces are not allowed on sg0 [ 123.246748][ T6458] loop3: detected capacity change from 0 to 2048 [ 123.280136][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.299550][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 123.329940][ T6458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.362008][ T6469] loop2: detected capacity change from 0 to 512 [ 123.418762][ T6469] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 123.427527][ T6469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.582562][ T5377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.604464][ T6469] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 123.629197][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.638339][ T6481] loop3: detected capacity change from 0 to 2048 [ 123.756775][ T6483] netlink: 40 bytes leftover after parsing attributes in process `syz.0.725'. [ 123.919701][ T6489] loop2: detected capacity change from 0 to 1024 [ 123.926926][ T6489] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 123.937981][ T6489] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 123.949344][ T6481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.961303][ T6489] JBD2: no valid journal superblock found [ 123.961401][ T6489] EXT4-fs (loop2): Could not load journal inode [ 123.981476][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 123.996477][ T6489] loop2: detected capacity change from 0 to 128 [ 124.027317][ T6493] loop2: detected capacity change from 0 to 512 [ 124.076914][ T5377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.100323][ T6500] SELinux: syz.3.731 (6500) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 124.301846][ T6507] loop1: detected capacity change from 0 to 764 [ 124.321928][ T6507] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 124.370448][ T6511] loop1: detected capacity change from 0 to 256 [ 124.409001][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'. [ 124.529006][ T6515] loop3: detected capacity change from 0 to 1024 [ 124.539400][ T6515] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 124.552835][ T6515] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 124.567254][ T6515] JBD2: no valid journal superblock found [ 124.573534][ T6515] EXT4-fs (loop3): Could not load journal inode [ 124.617091][ T6521] netlink: 32 bytes leftover after parsing attributes in process `syz.4.738'. [ 124.625419][ T6515] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 124.702797][ T6529] loop3: detected capacity change from 0 to 2048 [ 124.721249][ T6526] netlink: 76 bytes leftover after parsing attributes in process `syz.4.739'. [ 124.752118][ T6529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.765440][ T6537] loop2: detected capacity change from 0 to 128 [ 124.790762][ T6529] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.873581][ T6542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6542 comm=syz.2.741 [ 124.999248][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.017199][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.068754][ T5377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.318576][ T6551] loop1: detected capacity change from 0 to 512 [ 125.332847][ T6551] EXT4-fs: Ignoring removed orlov option [ 125.339133][ T6551] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.362971][ T6551] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.369953][ T6551] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.745: bg 0: block 248: padding at end of block bitmap is not set [ 125.403261][ T6551] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.745: Failed to acquire dquot type 1 [ 125.423233][ T6551] EXT4-fs (loop1): 1 truncate cleaned up [ 125.435972][ T6551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.527303][ T6562] netlink: 'syz.2.746': attribute type 13 has an invalid length. [ 125.828539][ T6571] usb usb9: usbfs: process 6571 (syz.3.751) did not claim interface 0 before use [ 125.838388][ T6571] vhci_hcd: default hub control req: 0100 v0000 i0000 l0 [ 126.058929][ T6577] lo speed is unknown, defaulting to 1000 [ 126.320926][ T6580] netlink: 'syz.3.752': attribute type 10 has an invalid length. [ 126.365381][ T6580] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 126.675047][ T6590] loop2: detected capacity change from 0 to 256 [ 126.714888][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.740618][ T6584] ================================================================== [ 126.748755][ T6584] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 126.755559][ T6584] [ 126.757890][ T6584] write to 0xffff88810bd80130 of 8 bytes by task 6591 on cpu 1: [ 126.765619][ T6584] vms_clear_ptes+0x18f/0x2d0 [ 126.770339][ T6584] vms_complete_munmap_vmas+0x159/0x440 [ 126.775911][ T6584] do_vmi_align_munmap+0x383/0x3d0 [ 126.781039][ T6584] do_vmi_munmap+0x1db/0x220 [ 126.785641][ T6584] __vm_munmap+0x1a1/0x280 [ 126.790069][ T6584] __x64_sys_munmap+0x36/0x50 [ 126.794761][ T6584] x64_sys_call+0xa65/0x2fb0 [ 126.799408][ T6584] do_syscall_64+0xd2/0x200 [ 126.803926][ T6584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.809938][ T6584] [ 126.812266][ T6584] read to 0xffff88810bd80130 of 8 bytes by task 6584 on cpu 0: [ 126.819837][ T6584] getrusage+0xa52/0xbb0 [ 126.824097][ T6584] io_sq_thread+0x5dd/0x1110 [ 126.828716][ T6584] ret_from_fork+0xda/0x150 [ 126.833234][ T6584] ret_from_fork_asm+0x1a/0x30 [ 126.838012][ T6584] [ 126.840344][ T6584] value changed: 0x00000000000014ea -> 0x0000000000001715 [ 126.847461][ T6584] [ 126.849790][ T6584] Reported by Kernel Concurrency Sanitizer on: [ 126.855957][ T6584] CPU: 0 UID: 0 PID: 6584 Comm: iou-sqp-6583 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 126.868207][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.878270][ T6584] ================================================================== [ 126.892638][ T6591] loop3: detected capacity change from 0 to 1764 [ 126.977612][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 126.977627][ T29] audit: type=1326 audit(1749266892.254:7668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 127.007494][ T29] audit: type=1326 audit(1749266892.254:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 127.030997][ T29] audit: type=1326 audit(1749266892.254:7670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 127.054877][ T29] audit: type=1326 audit(1749266892.254:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 127.078224][ T29] audit: type=1326 audit(1749266892.254:7672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 127.101665][ T29] audit: type=1326 audit(1749266892.264:7673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 127.125208][ T29] audit: type=1326 audit(1749266892.264:7674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 127.148698][ T29] audit: type=1326 audit(1749266892.264:7675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 127.172110][ T29] audit: type=1326 audit(1749266892.264:7676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000 [ 127.195482][ T29] audit: type=1326 audit(1749266892.264:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7fc8b0e929 code=0x7ffc0000