last executing test programs: 3m5.238396722s ago: executing program 1 (id=946): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000c00)="d8000000180081054e81f782db4cb904021d080006407c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c8c000461c1d67f6f95001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d96f54f6f7848b66ea00a24843d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xae, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000786c6c2500000000002020207b1af8ff00000000f8000000b7030000010000008500000006000000"], &(0x7f0000000040)='syzkaller\x00', 0x10, 0xe1, &(0x7f00000002c0)=""/225, 0x40f00, 0x40, '\x00', r8, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x10, 0x2, 0x4}, 0x10, r10, r5, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002010300000094d10000000000009e060c0019800700", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20004810) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0xffffffffffffffff) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 3m4.683701086s ago: executing program 1 (id=954): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 3m4.613232393s ago: executing program 1 (id=955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="edf04dc70a9e0a8062fb5d5ee5de87e8ec84b8cb1a8e44aa3ca5fc583c21905ed05f7e034696a07261e35c70d5f7019a9741e7b9ff52b0fd7bda5562edae99539cff42"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf9200000000000007020000f8ffffffb703f3ff08000000b7040000f6004c4f850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=0xffffffffffffffff, @ANYRESDEC=r3, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x4bf30000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xffff0004, 0x97, 0x0, &(0x7f0000001380)="2b206d074843b397737ea4859da2aa22d51aa129a864102ba582b1018145cda0600a7679071874610777afdd75e2ee1d29cc95ec159b89487866f6192ab4c83ea484ee7e1f51aa8588a3d388f05d2c95573589d4f131d151952a7c933aebe0101126a584463d105ee5710ed43bec6089825a5aebcbcea3931e321f28175736ffed17d9939934e6976c098bf303b8ca28d7b251077818a5", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xd, &(0x7f0000001440)=ANY=[@ANYRESHEX=r6, @ANYRES32=r9, @ANYRES16=r5, @ANYRES32=r7, @ANYRESOCT=r9, @ANYRESOCT=r1, @ANYBLOB="4630ac146be91a17010953a2629867952ee5ab033caf5e29ed22bdce6dd3bddc7b50fc07c811ba296418a8a410845d8254ce0baacd", @ANYRESDEC=r3, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r11, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r10}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r12, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r13}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r14, &(0x7f00000006c0)}, 0x20) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2a040, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc100c6, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@errors_remount}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000300000000000011030000000000000003000000f200000400000000000002000000000000000000002e00"/81], 0x0, 0x51}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000020000ac1e0101000000000000000000000000fe8000000000000000000000000000bb0043000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d332000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329000000000000000000000000000000000000002000"/316], 0x184}}, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r15}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) syz_emit_ethernet(0x1022, &(0x7f00000002c0)=ANY=[@ANYBLOB="8b257b56cb1fbbbbbbbbbbbb88a8"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) 3m4.288513706s ago: executing program 1 (id=963): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) socket(0xa, 0x3, 0x3a) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r4}, 0x10) 3m3.621099211s ago: executing program 1 (id=967): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) io_setup(0x2, &(0x7f0000000000)) (async) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x18) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYRES64], &(0x7f00000009c0)='syzkaller\x00', 0x6b9, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x1) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0xfd61, 0x803fd, 0x1, 0x800}) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r8 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x1, 0x0) (async) r9 = fsmount(r8, 0x1, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r9, &(0x7f0000000080)='./file0\x00') readlinkat(r9, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) (async) readlinkat(r9, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) r10 = eventfd2(0x1a3, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xc0800, 0x80) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f00000002c0)=0x20) (async) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f00000002c0)=0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8000, 0x882, 0x800, 0x8400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xa}, 0x50) r14 = eventfd2(0x5, 0x80800) eventfd2(0xfffffff8, 0x0) (async) r15 = eventfd2(0xfffffff8, 0x0) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(r0, 0x8, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000040)="6f697ef3414301ec7b64444f1a2d31a24ca8116e9f293c4e9407d009100d10b3037d254acb8f67cdd169b0c2b9162b3be285763c05289e252da9ab8c01ee8ab0e13d790bfc14bdcebfc4cae75773c1270bb984a127a5f16b7eeea50db6e27159e4dbf7", 0x63, 0x5, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x81, r2, &(0x7f0000000100)="8bf5efae490ce040635a807bcd26c86e3f9cbb", 0x13, 0x200, 0x0, 0x3, r10}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x401, r11, &(0x7f00000001c0)="0cc79f253e291b9584c309f3971fa2c1fabd78eee956fc254312cc8be73b731735a55351b2686099789066b7ac13033b0a11ae708b0d91c8713e1892a2136fa0f3edaecafcbdedd02415906a7aeeb028c3ed26daec71f0faa36ab7e5aea47436e2", 0x61, 0x5, 0x0, 0x0, r12}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f0000000280)="2c4ce72d53e64eef12040ced69eb67ea3e4d02a3b11830a6772c1d18624c3b008d7eee9f7d863519ae3696f483bb070b934b613d820f971190224f246630d904a69864c5134c10037b4d88036682110d96c732adcbb23833fe136b03344428ed5469dc3a2e5e5e9664d3e0a92de867792f98e4a9aecc31f0a100ad79cb1555de97eaaa2980becec57de880a25e92b3df64dd8d3e936f10451e2fda28919f20ebcef859b90b", 0xa5, 0x8, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x0, r13, &(0x7f0000000440)="e90ac899334438db213bbeb6f9d5d4e7b0de99d700f49a521724f3a1490e7bbde202b97b6b766dde5fd040795ce69a7a3904a4d2881aab042bb64b45fce01b2e44e0958a2ea7e8a0dd3cc64c1cacfb41b0c6cf9b098c9df01bd5fef41d859048dcfc328d20eb277644", 0x69, 0x9, 0x0, 0x0, r14}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, &(0x7f0000000500)="d6206a6a439404a68218f5aec94ff2df59dc60f20899a9e2e4be0919f426fc4c997b05c2b5302cd799d365b37bf4635355", 0x31, 0x4, 0x0, 0x2, r15}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x398, 0xffffffffffffffff, &(0x7f00000006c0)="abdd1eab241a1940751645c0a113f55b9e79d99d3580b41bea15c2dfa775d95dd7faa18b258d3c6363bbdc05efbcb587c3de0cacd7c6936fdf7886823955f320ecf363a1de53076d8bc6c72132f7b8d60abe0838a4b43064cb597c478346a35e4e5fcdfb55299958ad89bf9e654d213fa64c26b1ca81af259123943d39b49cb8fdb798934d50b55390d52e6efdca1fdc4976f605e587b7d3cba7000ea8e62ac08383f6ed7ce8c5f7f2bbe1ecd85f2a648d96aa0114982bfc7dd51afc9f5d9580e2805a8adabd1def8779cf69329ab2f4c2ca82fca72048e30c3c7761a446ea04a8718565f06f6509632ea5a2bec275", 0xef, 0x4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x2, r16, &(0x7f00000007c0)="06cc1b5d56c7809eeef40371790b4d5ed5b9edb7a74b94a4c4b3386166cc3a793182b36b82cdf735427f099cdeceebb67dddbae4ac8574ba6d8b486937012146fa945e8963cc52e24201c35c5d2e5cec23e9054a30c0076d81ddd4fd53ce1afb8b85bc02807d7017f74436e62c761100ff9b4ce008c8f24efd7bdeb50e18a9cd2fd2292c7a2714e2111a95c836d730994bf0c6936c3554f8", 0x98, 0x8, 0x0, 0x4}]) socket$nl_generic(0x10, 0x3, 0x10) 3m3.497010884s ago: executing program 1 (id=971): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) getgroups(0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="021800000b0000000000000000000000030005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x24000894) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x80000001, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x20, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x8}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x940}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000100)={0x0, 0xc, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000600)={r5, @in6={{0xa, 0x4e23, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, 0xa, 0x8000}, 0x90) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m48.297592954s ago: executing program 32 (id=971): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) getgroups(0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="021800000b0000000000000000000000030005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x24000894) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x80000001, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x20, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x8}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x940}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000100)={0x0, 0xc, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000600)={r5, @in6={{0xa, 0x4e23, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, 0xa, 0x8000}, 0x90) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.748534299s ago: executing program 2 (id=3272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000300), &(0x7f0000000580)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2d8, &(0x7f0000000dc0)="$eJzs3U1rE2EQwPFpkzZpapscRFAQB73oJdT4ATRIC2JAqU1RD8LWbjRkTcpuqKSIzUW8+jmKR2+C+gV6ES/evRVB8NKDuJLdpN00L6QhTVP7/0HZyc4zu0+TbZks5MnOw3cvCjknmTPKMh5VGRepyq5IohbVjdW34148KUFVuTb9+/vFB48e301nMvOLqgvppRspVZ299Onlq/eXv5Snlz/MfozIduLJzq/Uj+3J7fM7f5ee5x3NO1osldXQlVKpbKxYpq7mnUJS9b5lGo6p+aJj2k35nFVaW6uoUVydia3ZpuOoUaxowaxouaRlu6LGMyNf1GQyqTMxb34hOa3CPYzJbi0uGumOaff0Pnsn1FS7nbadrrZPZreGMCcAADBiuvf/fq/fuf/PLPvbw/T/52qH697/iwys/0ezatOjDv3/mSFOCEfOttNGrP7324z+HwAAAAAAAAAAAAAAAAAAAACAk2DXdeOu68Zr2/ou73FERKIi4tbzewW9fKwcJ0bw9XcDPx1ff9/NY5ouBizwwb2oiPV2Pbue9bd+Pp2TvFhiypzE5Y93PdT58cKdzPycehLy2dqs12+uZ0MSadQ3JNrVj4VF/AM0109ILHj+lMTlbPvzp7Rd/aRcvRKoT0pcvj6Vkliy6l3X+/Wvr6vevpc5UD/ljQMAAAAA4H+Q1D0t79+9vDcgKq15vz5wf8B13c1u9wcOvL8OywXuJQIAAAAAMBROZaNgWJZp9xFERKS/cpG+T9otcF2RgR6wryAkx3n2TsEtERmBaRxZMCYigT1RaVxj2s8Bf8qhLlG3hzHh2gRH4InqNTju/0wAAAAABs2pbOx/wU+vvr05otkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA6taz+FWq/8lljfEuqkWhZRWwisNrfntDQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABghPwLAAD//5OVEZU=") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000004000000000000000003181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1c00000003000000001b00000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.676915186s ago: executing program 3 (id=3275): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) 2.610374883s ago: executing program 3 (id=3277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000300), &(0x7f0000000580)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2d8, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1c00000003000000001b00000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.192897714s ago: executing program 5 (id=3280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$eJzs3U9sXdWdB/DvfbYTj4lCgAyTQUBewgQMZBzbGcJEbCaxnxMz/jOyHYloNCIMSaooVqmgSIAqNZWqroraRdUF3SF10xUSG9hU2bXbbrqoVLHuDnUVddFX3fueYzv283MSxzbh87Ge3/3zu+f8zrv33SNfv3dP+CZrNpvV4x7nL/xmO5Nl9zk7/tWnn31cPn50I3vSk1eKL5L+JPWkN8mhJGPjc7PTXQq6nlxKcjMpkuxN63lTLqX4WfYtz99M8auq3tKFe2wYm9LkW22njz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiNirHx4eGRIlOTMxfeqHdWDQHeaWVtubwvq1G/iy+71psU5SP9/UtDfR86uLz6yfLX0Tzdmnu6GpA8/fnokScPvPZEb21p+w0Svht/bw+GfNcbvvfhR9ffWly88m6H9T3t5tx3hrvUucbM5Pzs5PSZc4365Pxs/fSpU8Mnzk/M1ycmpxrzF+cXGtP1sbnGmYXZufrg2Iv1kdOnT9YbQxdnL8ycGx+aaiwtfPXfR4eHT9VfH/qfxpm5+dmZE68PzY+dn5yampw5V8WUq8uYV8sD8b8nF+oLjTPT9frVa4tXTq7KaJ2Xugwa6daSMmi0W9Do8OjoyMjo6MipV06/8urwcO/ygp5UC4bvkDWb3D5os+/hPS6+hT6pbSKoPDnWt/DsDfen1u7/M5XJzORC3kh93Z+xjGcus5nusL5tqf8/dqKxYb0r+/+lXv7Q8uqnUvX/z7bmnu3U/3fIZft+3suH+SjX81YWs5greXfV2r33UGKzuX6rfv2H1mux0y1e/XMujcxkMvOZzWSmc6ZaUm8vqed0TuVUhvNmzmci86lnIpOZSiPzuZj5LKRRHVFjmUsjZ7LQ22rjYMbyYuoZyemczsnU08hQLmY2FzKTcxnPmaqUq7lWve4nN8jxdtDIZoJGNwjaoP9vL7iL/p9vqa0+hcM9a7b7/z13LK+tDR0c266kAAAAgC31r7/P/oOP/+7PSV+eqa6xAwAAAA+b6uN6T5dPfeXUMykmJqcaw2sD39/+3AAAAICtUVTfsSuSDORwa2rpm1DrXAQAAAAAvomq//8/Wz4NlFOHU/j7HwAAAB423e+x3zWiOJ56bpSr6pdbkZfbEe37/A5MTE41hsZmp14byfPVXQaqbxqsKa0nB5Lq6wcv5Ugr6shA63lgdYn9ZdTI0Gsj6c/RdkMGnyufnhtcJ3K0jHwpL7QiX1iK7M+ayJNlJAA87I5u0B9vtv9/KcdbEcefqm7f3vvUOn3wcKtn/eEOtRMAWNZ9jJ2uEcV/LA3/0+Hv/55cPdz6SMFQ3s47WczlHK++bVB94qBdam4WWS51YMXHEI53uRowsGKEl+NL1wMO71v3esDAioFejq+5ItAp9uS6r12x5XsDALbH0TX98Ab9f7PZmlpz/X/jv/8HfKQQAHaV2yPYP8CJO+vs25mmAgBtnXvpDfQ8wIQAAAAAAAAAAAAAAAAAAAAAAAAAAADgIfAg7/9fS/JgRxa4j4kbSXZBGts88Zf2bl+zqr38xo5nuGJib+6/nP5tGeHiw//bs4sP9Xub2MGTEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANumSHrWW15L9ia9w0lObH9WD86NnU5ghxW3cisfZP9O5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8LBp3/+/ltbzI61F6a0lx5JcSvK/O53jVrq10wnssBX3/y/3eZpFelu7PUXf2Pjc7HS5+7O3XP/Vp599XD7upZ6ygLKGVYNLtGvovNVj1VYD41feu/79d75XHz9bJXl2YWJqfPrc3H8tBz5ZfJ7U03osWcr3B0X7KF7d8s/Llnavt6xloqp3fG29/7Le1rfrPfbbn3du27LlNK4tXhkta1povLHw/nevfbAi6PEcSZ4bTAZX1/Sd8tGhpiPp26je4uviJ8X+/DKXqv1fplE0i3IXPZrsSe2frl5bvDL09juLlzvkdCCHk1xO+jef0+G1e2JJddTV+spah6ug8tfBLuVt6JGe/c1mq8SRDm14rDpkBu6qDfXObah0ed3bbTzZIaMn8vxd7+nnu9TY9rdmS2uu+Lr4U3E+f8yPV4z/USv3/7Fs5t1ZxlSRK46Uzm0+ttzy0ZUr3rwzsuO7kgfgp/n//Oft/V9bcf5v76vtOR+tqPGBvS+KVi/UVk0fvKNHap99OmXZzvNgK6pDnv+cl9du1yXPl7ucUbbo/b9a8XXxSTGYv+aG8X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdr0h61lteS44lOZDk0XK+njS3or7aQLEVxWzSnjVLbmxj7btH7fZUcSu38kH272g6AAAAAAAAAGyZs+NfffrZx+Wj+n98T/6t+CLpb/2nvzfJgeIXfWPjc7PTXQrqSy4luVlO999dDuV22bc8f7OcO3T3bQEANucfAQAA//+INm5i") r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=@newqdisc={0x478, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PBURST={0x8, 0x7, 0x1c4f}, @TCA_TBF_PARMS={0x28, 0x1, {{0xef, 0x0, 0x79, 0x1, 0x2, 0xffff8001}, {0xb, 0x2, 0x0, 0x8, 0x4, 0x7f}, 0x9, 0x10001, 0xf44}}, @TCA_TBF_RTAB={0x404, 0x2, [0x101, 0x3, 0x0, 0x5, 0xfd90, 0x6, 0x7, 0x7, 0x15, 0x3, 0x0, 0x1, 0x10001, 0xa, 0x6, 0x8, 0x80000000, 0x2, 0xed, 0x7, 0x3, 0x3635, 0x6, 0x3, 0x1008, 0x3aea6292, 0x0, 0xb1f4, 0x8, 0x9, 0x73, 0x5, 0x8bf, 0x9000, 0x2, 0x6, 0xf7, 0x7fff, 0x9, 0x1, 0x7, 0xffffffff, 0x4, 0x101, 0xd, 0x2, 0xef, 0x52, 0x3, 0x3, 0xfffffff6, 0x0, 0x1, 0x7, 0xf, 0xe6b, 0x1, 0x2, 0x7ff, 0x5, 0x3, 0x1, 0x0, 0x11, 0x0, 0x9, 0x1, 0x120000, 0x3ffc000, 0x288, 0x5, 0xfff, 0x4, 0x6, 0x4, 0x1000, 0x8, 0x7f, 0x4, 0xffffffff, 0x8, 0x6c, 0xb825, 0x2, 0xa4e, 0x2, 0x1, 0x7, 0x1ffe0000, 0x9, 0x305, 0x6, 0x101, 0x800, 0x0, 0xfffffffe, 0xe, 0x7, 0x1, 0x800, 0xc, 0x81, 0x3, 0x8000, 0xdb2, 0x1, 0x942, 0xff, 0x6, 0xb4ef, 0x2, 0x71, 0x7, 0xc000000, 0x300, 0x3, 0x2, 0x81, 0x4, 0x8, 0x1, 0x0, 0x9, 0xb, 0xc, 0xfffffff9, 0x9, 0x5, 0x2, 0xffffff80, 0xd4, 0x8, 0x10000, 0x1, 0x1212, 0xffffffff, 0x101, 0x3, 0x5, 0x7, 0xb, 0xe6, 0x10000, 0x1, 0x80000000, 0x200, 0x5, 0x400000, 0x4, 0xffff8000, 0x7, 0x4, 0x80, 0xeb, 0x3, 0x9, 0x200, 0x7, 0x88, 0x2, 0x7fffffff, 0xfff, 0x9, 0x6, 0x7fffffff, 0x4, 0x40, 0x5, 0x7, 0x9, 0x6, 0xffffffe4, 0xff800, 0xb, 0x8, 0x861d, 0x3, 0x8c1, 0x0, 0x5, 0x1a0, 0x300000, 0x3, 0x3, 0x8, 0x7, 0x0, 0x2, 0xffffffff, 0x8001, 0x4, 0x5, 0x6, 0x3, 0x1, 0xffff, 0x9, 0x18000000, 0x4, 0x8, 0x80, 0x6, 0xffff0000, 0x7f, 0x8, 0x5, 0x6, 0x7f, 0xca7c, 0x4, 0xfff, 0x8a7b, 0xdc, 0xc52, 0x3ff, 0x80000001, 0x0, 0x0, 0x40, 0x2, 0x2, 0x9, 0x9, 0x4, 0x1a6, 0x10, 0xfffffff3, 0x8000, 0x6, 0x8, 0x1800000, 0x5, 0x1, 0x0, 0x4, 0x2, 0x5, 0x4, 0x7de, 0xc980, 0x63376e93, 0x8001, 0x3, 0x79, 0x9, 0x10001, 0x8, 0x6, 0xc, 0x10, 0xfffffffa, 0x4d58, 0x8000, 0x2, 0x10000, 0x9]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd457dc44c41be09a}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x51}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESDEC=r3, @ANYRES64=r4, @ANYBLOB="6707aca9658d17eba804e57e5e251ce82e536be9494dab046b4e6ba551d711b32628c0c4e29127ea257a6cad393b407aaa01bfac321fb35d700b2ffa3d2238776c8771faf7fd03d6e55c2ba02c2b769c055422b761bff36a5d425cf08d89b74b5ac0a52eb81540bab938fc7d3e71ae4dfa017f7be97cda6a70ae2bc6b6a96d6f81728a361a9686c39a21f3083ae9639b492975a884fe102f0cc447f3e06e4050a91fc9809b40c7d4fa36eb13b717ab5109ab3fa1fff4d6202c57846628c793eae12fc9bf60070c08080d5310ae18d399c12be6d4b121dba95a84935a", @ANYRES64=r2], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0xffffffffffff8001}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) epoll_create1(0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000500)=""/2, 0x2, 0x3, 0x8, 0x0, 0x2, 0x804}}, 0x120) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 2.154071458s ago: executing program 4 (id=3282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="edf04dc70a9e0a8062fb5d5ee5de87e8ec84b8cb1a8e44aa3ca5fc583c21905ed05f7e034696a07261e35c70d5f7019a9741e7b9ff52b0fd7bda5562edae99539cff42"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf9200000000000007020000f8ffffffb703f3ff08000000b7040000f6004c4f850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=0xffffffffffffffff, @ANYRESDEC=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x4bf30000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xffff0004, 0x97, 0x0, &(0x7f0000001380)="2b206d074843b397737ea4859da2aa22d51aa129a864102ba582b1018145cda0600a7679071874610777afdd75e2ee1d29cc95ec159b89487866f6192ab4c83ea484ee7e1f51aa8588a3d388f05d2c95573589d4f131d151952a7c933aebe0101126a584463d105ee5710ed43bec6089825a5aebcbcea3931e321f28175736ffed17d9939934e6976c098bf303b8ca28d7b251077818a5", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xd, &(0x7f0000001440)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYRES16=r5, @ANYRES32=r6, @ANYRESOCT=r8, @ANYRESOCT=r1, @ANYBLOB="4630ac146be91a17010953a2629867952ee5ab033caf5e29ed22bdce6dd3bddc7b50fc07c811ba296418a8a410845d8254ce0baacd", @ANYRESDEC=r3, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r9}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r11, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r12}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r13, &(0x7f00000006c0)}, 0x20) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc100c6, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@errors_remount}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000020000ac1e0101000000000000000000000000fe8000000000000000000000000000bb0043000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d332000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329000000000000000000000000000000000000002000"/316], 0x184}}, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1022, &(0x7f00000002c0)=ANY=[@ANYBLOB="8b257b56cb1fbbbbbbbbbbbb88a8"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) 1.847329098s ago: executing program 2 (id=3285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x10000, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000380), 0xaf6b, 0x492082) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r5) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000680)={{{@in=@broadcast, @in=@rand_addr=0x64010102, 0x4e23, 0x1, 0x4e21, 0xc, 0x2, 0x20, 0x0, 0x2f, 0x0, r7}, {0x1, 0x7, 0x0, 0x0, 0x6, 0x5, 0xa, 0x40}, {0x3, 0x0, 0x2, 0x7}, 0x8001, 0x6e6bb5, 0x0, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x4d6, 0x63}, 0x2, @in=@empty, 0x3500, 0x2, 0x0, 0x7, 0x9, 0x200, 0x4}}, 0xe8) syz_emit_ethernet(0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaabeaaaaaaaaaaaa86dd600001000040"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x223, 0x1, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.783615325s ago: executing program 4 (id=3286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf21670000000800c400020000000800c3"], 0x24}}, 0x0) 1.664980876s ago: executing program 4 (id=3287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="edf04dc70a9e0a8062fb5d5ee5de87e8ec84b8cb1a8e44aa3ca5fc583c21905ed05f7e034696a07261e35c70d5f7019a9741e7b9ff52b0fd7bda5562edae99539cff42"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x4bf30000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.639860619s ago: executing program 0 (id=3288): r0 = open(&(0x7f0000000280)='.\x00', 0x131800, 0x9) fcntl$notify(r0, 0x402, 0x80000005) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) listen(0xffffffffffffffff, 0x6) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000010000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x706b, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) close(r5) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000fc0)='illinois', 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00'}, 0x18) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r8}, 0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f0000000380)=0x8) 1.609528271s ago: executing program 2 (id=3289): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0xffdffff8, 0xffffffff, 0x5, "ff000000000000000000000000000200"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10) r5 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf3", 0xb2}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x57) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000200)={0xfffe, 0x80, 0xe000, 0xb3, 0x17, "041000"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x4000000, @ipv4={'\x00', '\xff\xff', @local}, 0x401}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000c8ddbf4ca42fe8f800040000", @ANYRES32=r0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000400"/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000500000000000100020000b69800"/32], &(0x7f00000002c0)='GPL\x00', 0x3, 0x63, &(0x7f0000000400)=""/99, 0x41000, 0x40, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xd, 0xb4}, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000140), &(0x7f00000005c0)=r9}, 0x20) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x728, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x54) 1.551087487s ago: executing program 4 (id=3290): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0xfffffffe, r0}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) inotify_init1(0x100000) 1.52175609s ago: executing program 4 (id=3291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a00000200000000000000"], 0x10}}, 0x0) 1.479485294s ago: executing program 4 (id=3292): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0xffffffffffffffff) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000003c0)={{r2}, {@void, @actul_num={@val=0x2b, 0x7fffffffffffffff, 0x4d}}}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) r4 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.400167002s ago: executing program 5 (id=3293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x20, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.346672017s ago: executing program 5 (id=3294): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000c00)="d8000000180081054e81f782db4cb904021d080006407c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c8c000461c1d67f6f95001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d96f54f6f7848b66ea00a24843d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6", 0xcb}], 0x1}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f0000000700), 0x0, 0x0, 0x0, &(0x7f0000000480), 0x8, 0xae, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002010300000094d10000000000009e060c0019800700", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20004810) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) close(r12) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 1.292720433s ago: executing program 0 (id=3295): getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x110, 0xffffffffffffffff, 0x280000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x20, &(0x7f0000000f80)=@ringbuf={{}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xe, 0x12}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x21, 0x4, 0xe8, 0x12, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x8, 0x7, 0x4433}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="a1ab0000000000000000320000000800170156"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 1.246215987s ago: executing program 0 (id=3296): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) 1.209077941s ago: executing program 0 (id=3297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000300), &(0x7f0000000580)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2d8, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000004000000000000000003181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1c00000003000000001b00000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.052830107s ago: executing program 3 (id=3298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf21670000000800c400020000000800c3"], 0x24}}, 0x0) 995.463852ms ago: executing program 3 (id=3299): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESDEC, @ANYRES64, @ANYBLOB="6707aca9658d17eba804e57e5e251ce82e536be9494dab046b4e6ba551d711b32628c0c4e29127ea257a6cad393b407aaa01bfac321fb35d700b2ffa3d2238776c8771faf7fd03d6e55c2ba02c2b769c055422b761bff36a5d425cf08d89b74b5ac0a52eb81540bab938fc7d3e71ae4dfa017f7be97cda6a70ae2bc6b6a96d6f81728a361a9686c39a21f3083ae9639b492975a884fe102f0cc447f3e06e4050a91fc9809b40c7d4fa36eb13b717ab5109ab3fa1fff4d6202c57846628c793eae12fc9bf60070c08080d5310ae18d399c12be6d4b121dba95a84935a", @ANYRES64], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000500)=""/2, 0x2, 0x3, 0x8, 0x0, 0x2, 0x804}}, 0x120) 438.664447ms ago: executing program 2 (id=3300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbff, {0x1}}, 0x14}}, 0x4000000) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x3, 0x789800) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000300)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000040)='./file1\x00', 0x52000755) write$binfmt_elf64(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000002003e00ecffffff98030000000000004b00000000000000560000000000000000000000000038000100"], 0x78) close(r8) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)={0x45c, r10, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe, 0x3, "e08d21a9dcde1bd2df22"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x16c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @empty, 0xfffff415}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c65}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5da8}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff6d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e32}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @mcast1, 0xfffffff7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc172}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8c5771f1}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1d8}, @TIPC_NLA_NODE_ID={0xa6, 0x3, "c82f79d3bc3954721755514f24821e7db15b5ef157a06cf8f05974f166a7cac79c8a64fd3dd27a09cbff9203bd68f9a621137220d0a221d6e5bb24bf537137f280f80a2145e06f4ae835eb3db2e8c45d5948671802bdf72b2351ba81e38f6dd96b0036d8bd36380ff71c415e748f5fe5f3d6377e5b57d1c9f56272f81c0def325fd786a500b3ee73fd9bf3ca07c7ef3e12456bd72e770566d72fe2d8e32706b0126d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x125}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xef7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @local, 0x600000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4e71, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9d50}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x425}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfb08}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x29a9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0x45c}}, 0x8000) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, r11, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0xe}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c817}, 0x0) 436.082607ms ago: executing program 5 (id=3301): socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="120000000400000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 417.453619ms ago: executing program 2 (id=3302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0xfffffffe, r0}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) inotify_init1(0x100000) 379.963743ms ago: executing program 5 (id=3303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a00000200000000000000"], 0x10}}, 0x0) 362.054525ms ago: executing program 5 (id=3304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$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") r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=@newqdisc={0x478, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PBURST={0x8, 0x7, 0x1c4f}, @TCA_TBF_PARMS={0x28, 0x1, {{0xef, 0x0, 0x79, 0x1, 0x2, 0xffff8001}, {0xb, 0x2, 0x0, 0x8, 0x4, 0x7f}, 0x9, 0x10001, 0xf44}}, @TCA_TBF_RTAB={0x404, 0x2, [0x101, 0x3, 0x0, 0x5, 0xfd90, 0x6, 0x7, 0x7, 0x15, 0x3, 0x0, 0x1, 0x10001, 0xa, 0x6, 0x8, 0x80000000, 0x2, 0xed, 0x7, 0x3, 0x3635, 0x6, 0x3, 0x1008, 0x3aea6292, 0x0, 0xb1f4, 0x8, 0x9, 0x73, 0x5, 0x8bf, 0x9000, 0x2, 0x6, 0xf7, 0x7fff, 0x9, 0x1, 0x7, 0xffffffff, 0x4, 0x101, 0xd, 0x2, 0xef, 0x52, 0x3, 0x3, 0xfffffff6, 0x0, 0x1, 0x7, 0xf, 0xe6b, 0x1, 0x2, 0x7ff, 0x5, 0x3, 0x1, 0x0, 0x11, 0x0, 0x9, 0x1, 0x120000, 0x3ffc000, 0x288, 0x5, 0xfff, 0x4, 0x6, 0x4, 0x1000, 0x8, 0x7f, 0x4, 0xffffffff, 0x8, 0x6c, 0xb825, 0x2, 0xa4e, 0x2, 0x1, 0x7, 0x1ffe0000, 0x9, 0x305, 0x6, 0x101, 0x800, 0x0, 0xfffffffe, 0xe, 0x7, 0x1, 0x800, 0xc, 0x81, 0x3, 0x8000, 0xdb2, 0x1, 0x942, 0xff, 0x6, 0xb4ef, 0x2, 0x71, 0x7, 0xc000000, 0x300, 0x3, 0x2, 0x81, 0x4, 0x8, 0x1, 0x0, 0x9, 0xb, 0xc, 0xfffffff9, 0x9, 0x5, 0x2, 0xffffff80, 0xd4, 0x8, 0x10000, 0x1, 0x1212, 0xffffffff, 0x101, 0x3, 0x5, 0x7, 0xb, 0xe6, 0x10000, 0x1, 0x80000000, 0x200, 0x5, 0x400000, 0x4, 0xffff8000, 0x7, 0x4, 0x80, 0xeb, 0x3, 0x9, 0x200, 0x7, 0x88, 0x2, 0x7fffffff, 0xfff, 0x9, 0x6, 0x7fffffff, 0x4, 0x40, 0x5, 0x7, 0x9, 0x6, 0xffffffe4, 0xff800, 0xb, 0x8, 0x861d, 0x3, 0x8c1, 0x0, 0x5, 0x1a0, 0x300000, 0x3, 0x3, 0x8, 0x7, 0x0, 0x2, 0xffffffff, 0x8001, 0x4, 0x5, 0x6, 0x3, 0x1, 0xffff, 0x9, 0x18000000, 0x4, 0x8, 0x80, 0x6, 0xffff0000, 0x7f, 0x8, 0x5, 0x6, 0x7f, 0xca7c, 0x4, 0xfff, 0x8a7b, 0xdc, 0xc52, 0x3ff, 0x80000001, 0x0, 0x0, 0x40, 0x2, 0x2, 0x9, 0x9, 0x4, 0x1a6, 0x10, 0xfffffff3, 0x8000, 0x6, 0x8, 0x1800000, 0x5, 0x1, 0x0, 0x4, 0x2, 0x5, 0x4, 0x7de, 0xc980, 0x63376e93, 0x8001, 0x3, 0x79, 0x9, 0x10001, 0x8, 0x6, 0xc, 0x10, 0xfffffffa, 0x4d58, 0x8000, 0x2, 0x10000, 0x9]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd457dc44c41be09a}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x51}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESDEC=r4, @ANYRES64=r5, @ANYBLOB="6707aca9658d17eba804e57e5e251ce82e536be9494dab046b4e6ba551d711b32628c0c4e29127ea257a6cad393b407aaa01bfac321fb35d700b2ffa3d2238776c8771faf7fd03d6e55c2ba02c2b769c055422b761bff36a5d425cf08d89b74b5ac0a52eb81540bab938fc7d3e71ae4dfa017f7be97cda6a70ae2bc6b6a96d6f81728a361a9686c39a21f3083ae9639b492975a884fe102f0cc447f3e06e4050a91fc9809b40c7d4fa36eb13b717ab5109ab3fa1fff4d6202c57846628c793eae12fc9bf60070c08080d5310ae18d399c12be6d4b121dba95a84935a", @ANYRES64=r2], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0xffffffffffff8001}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) epoll_create1(0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000500)=""/2, 0x2, 0x3, 0x8, 0x0, 0x2, 0x804}}, 0x120) readv(r7, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 313.05647ms ago: executing program 2 (id=3305): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYBLOB, @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001100)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='fscache_access_volume\x00', r4, 0x0, 0x7}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@discard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e0000008500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x6, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 248.601526ms ago: executing program 0 (id=3306): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x20000000000000b3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000100)="$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") 190.818791ms ago: executing program 3 (id=3307): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x706b, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 104.86725ms ago: executing program 3 (id=3308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") 0s ago: executing program 0 (id=3309): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(0x0, 0x0, 0x5) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r1 = epoll_create1(0x80000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000180)={0x5, 0x3, 0x358, {0x9, 0x326}, 0x1, 0x7f}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000a40)={0x10000010}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500000001000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='rxrpc_rx_done\x00', r5, 0x0, 0x8000000000000}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x50b0, &(0x7f0000000440)={0x0, 0x55e0, 0x400, 0x2, 0x26b}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) kernel console output (not intermixed with test programs): T14305] EXT4-fs (loop0): 1 truncate cleaned up [ 257.308013][T14283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.317778][T14305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.385915][T14305] hub 1-0:1.0: USB hub found [ 257.391928][T14305] hub 1-0:1.0: 8 ports detected [ 257.398090][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.451480][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.469571][T14314] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2987'. [ 257.605487][T14312] loop3: detected capacity change from 0 to 1764 [ 257.629583][ T1035] hid-generic 0003:0008:0000.0026: unknown main item tag 0x4 [ 257.638333][ T1035] hid-generic 0003:0008:0000.0026: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 257.711214][T14327] fido_id[14327]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 257.759514][T14330] loop3: detected capacity change from 0 to 512 [ 257.764777][ T3416] hid-generic 0003:0008:0000.0027: unknown main item tag 0x0 [ 257.773593][ T3416] hid-generic 0003:0008:0000.0027: unknown main item tag 0x0 [ 257.782487][ T3416] hid-generic 0003:0008:0000.0027: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 257.830334][T14330] EXT4-fs: test_dummy_encryption option not supported [ 257.857757][T14331] fido_id[14331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 257.904304][T14335] bridge: RTM_NEWNEIGH with invalid ether address [ 257.919061][T14335] loop4: detected capacity change from 0 to 512 [ 257.928220][T14335] EXT4-fs: Ignoring removed nobh option [ 257.936410][T14337] loop3: detected capacity change from 0 to 512 [ 257.945959][T14337] EXT4-fs (loop3): 1 orphan inode deleted [ 257.952274][T14337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.007969][T14333] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 258.080720][T14343] netlink: 'syz.5.2994': attribute type 21 has an invalid length. [ 258.116754][T14335] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #3: comm syz.4.2993: corrupted inode contents [ 258.128878][T14335] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #3: comm syz.4.2993: mark_inode_dirty error [ 258.141042][T14335] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #3: comm syz.4.2993: corrupted inode contents [ 258.155275][T14335] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.2993: mark_inode_dirty error [ 258.167222][T14335] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2993: Failed to acquire dquot type 0 [ 258.179547][T14335] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.2993: corrupted inode contents [ 258.192477][T14335] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #16: comm syz.4.2993: mark_inode_dirty error [ 258.204822][T14335] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.2993: corrupted inode contents [ 258.217245][T14335] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2993: mark_inode_dirty error [ 258.228972][T14335] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.2993: corrupted inode contents [ 258.241256][T14335] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 258.250146][T14335] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.2993: corrupted inode contents [ 258.264363][T14335] EXT4-fs error (device loop4): ext4_truncate:4637: inode #16: comm syz.4.2993: mark_inode_dirty error [ 258.276166][T14335] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 258.285535][T14335] EXT4-fs (loop4): 1 truncate cleaned up [ 258.291768][T14335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.304561][T14335] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.333278][T14335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.347272][T14346] netlink: 'syz.5.2995': attribute type 1 has an invalid length. [ 258.355160][T14346] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2995'. [ 258.410642][T14350] loop4: detected capacity change from 0 to 512 [ 258.418577][T14350] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.427449][T14350] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.441681][T14350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.450454][T14350] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 258.483381][T14350] EXT4-fs (loop4): failed to initialize system zone (-117) [ 258.504609][T14350] EXT4-fs (loop4): mount failed [ 258.665460][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.715057][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3002'. [ 258.770410][T14369] loop0: detected capacity change from 0 to 512 [ 258.784364][T14369] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 258.816900][T14370] lo speed is unknown, defaulting to 1000 [ 258.847521][T14370] lo speed is unknown, defaulting to 1000 [ 258.860653][T14369] EXT4-fs (loop0): 1 truncate cleaned up [ 258.871836][T14372] loop5: detected capacity change from 0 to 128 [ 258.877230][T14369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.902463][T14372] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 258.902636][T14363] hub 1-0:1.0: USB hub found [ 258.949122][T14359] loop4: detected capacity change from 0 to 512 [ 258.952729][T14372] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 258.957164][T14363] hub 1-0:1.0: 8 ports detected [ 258.992227][T14359] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 259.005798][T14359] EXT4-fs (loop4): orphan cleanup on readonly fs [ 259.133752][ T23] hid-generic 0003:0008:0000.0028: unknown main item tag 0x0 [ 259.141201][ T23] hid-generic 0003:0008:0000.0028: unknown main item tag 0x0 [ 259.150008][ T23] hid-generic 0003:0008:0000.0028: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 259.175082][T14359] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.2998: corrupted inode contents [ 259.188829][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.212522][T14359] EXT4-fs (loop4): Remounting filesystem read-only [ 259.242473][T14359] EXT4-fs (loop4): 1 truncate cleaned up [ 259.248445][ T9833] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 259.259199][ T9833] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 259.298962][ T9833] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 259.300547][T14377] fido_id[14377]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.322878][T14359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.338436][T14381] loop3: detected capacity change from 0 to 512 [ 259.388852][T14381] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3005: bg 0: block 5: invalid block bitmap [ 259.420583][T14381] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 259.459913][T14381] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3005: invalid indirect mapped block 3 (level 2) [ 259.483774][T14379] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 259.492538][T14381] EXT4-fs (loop3): 1 orphan inode deleted [ 259.498749][T14381] EXT4-fs (loop3): 1 truncate cleaned up [ 259.523709][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.544077][T14381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.586100][T14387] netlink: 'syz.0.3007': attribute type 1 has an invalid length. [ 259.594001][T14387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3007'. [ 259.644860][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.683679][T14392] loop3: detected capacity change from 0 to 512 [ 259.724787][T14392] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.808547][T14392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.821620][T14392] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.854646][T11938] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 259.867246][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3008'. [ 259.947174][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.037913][T14420] loop5: detected capacity change from 0 to 2048 [ 260.177945][ T3693] Alternate GPT is invalid, using primary GPT. [ 260.184759][ T3693] loop5: p1 p2 p3 [ 260.188723][ T3693] loop5: partition table partially beyond EOD, truncated [ 260.210564][T14420] Alternate GPT is invalid, using primary GPT. [ 260.216962][T14420] loop5: p1 p2 p3 [ 260.220917][T14420] loop5: partition table partially beyond EOD, truncated [ 260.337373][T14429] lo speed is unknown, defaulting to 1000 [ 260.344669][T14429] lo speed is unknown, defaulting to 1000 [ 260.505573][T14430] loop3: detected capacity change from 0 to 128 [ 260.512748][T14430] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.591793][T14430] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 260.809024][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 260.809050][ T3512] udevd[3512]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 260.849593][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 261.018528][T11816] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 261.144628][T14493] netlink: 'syz.3.3019': attribute type 1 has an invalid length. [ 261.152751][T14493] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3019'. [ 261.210474][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 261.264767][T14505] netlink: 'syz.0.3021': attribute type 4 has an invalid length. [ 261.441684][T14539] bridge: RTM_NEWNEIGH with invalid ether address [ 261.470158][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3025'. [ 261.546777][T14549] loop5: detected capacity change from 0 to 512 [ 261.566428][T14539] loop4: detected capacity change from 0 to 512 [ 261.580736][T14549] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 261.584231][T14539] EXT4-fs: Ignoring removed nobh option [ 261.611386][T14549] EXT4-fs (loop5): 1 truncate cleaned up [ 261.644429][T14549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.781301][T14539] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #3: comm syz.4.3023: corrupted inode contents [ 261.806769][T14539] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #3: comm syz.4.3023: mark_inode_dirty error [ 261.819486][T14546] hub 1-0:1.0: USB hub found [ 261.832900][T14546] hub 1-0:1.0: 8 ports detected [ 261.874763][T14539] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #3: comm syz.4.3023: corrupted inode contents [ 261.906584][T14557] lo speed is unknown, defaulting to 1000 [ 261.913171][T14557] lo speed is unknown, defaulting to 1000 [ 261.919849][T14561] loop0: detected capacity change from 0 to 128 [ 261.935903][T14539] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.3023: mark_inode_dirty error [ 261.962884][ T7127] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.994537][T14539] __quota_error: 83 callbacks suppressed [ 261.994554][T14539] Quota error (device loop4): write_blk: dquota write failed [ 261.995224][T14561] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 262.000341][T14539] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 262.019888][T14563] loop3: detected capacity change from 0 to 128 [ 262.042454][T14539] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3023: Failed to acquire dquot type 0 [ 262.107142][T14565] loop5: detected capacity change from 0 to 512 [ 262.114363][T14565] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.119673][T14539] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.3023: corrupted inode contents [ 262.133555][T14565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.150390][T14565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 262.156445][T14539] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #16: comm syz.4.3023: mark_inode_dirty error [ 262.159028][T14565] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.181046][T14539] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.3023: corrupted inode contents [ 262.194031][T14563] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 262.201079][T14562] lo speed is unknown, defaulting to 1000 [ 262.217327][T14561] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 262.241731][T14539] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3023: mark_inode_dirty error [ 262.264957][T14565] EXT4-fs (loop5): failed to initialize system zone (-117) [ 262.274438][T14562] lo speed is unknown, defaulting to 1000 [ 262.298958][T14565] EXT4-fs (loop5): mount failed [ 262.311246][T14563] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 262.311449][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 262.321699][T14539] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.3023: corrupted inode contents [ 262.374583][T14571] loop2: detected capacity change from 0 to 512 [ 262.416465][T14539] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 262.434871][T14571] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 262.548392][T14539] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.3023: corrupted inode contents [ 262.570374][T14571] EXT4-fs (loop2): 1 truncate cleaned up [ 262.612571][T14539] EXT4-fs error (device loop4): ext4_truncate:4637: inode #16: comm syz.4.3023: mark_inode_dirty error [ 262.642633][T14571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.711697][T14539] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 262.740388][T14539] EXT4-fs (loop4): 1 truncate cleaned up [ 262.747120][T14570] hub 1-0:1.0: USB hub found [ 262.752816][T14539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.772415][T14570] hub 1-0:1.0: 8 ports detected [ 262.808631][T14539] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.907028][T11248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.920195][T14539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.965098][ T52] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.130991][T14582] lo speed is unknown, defaulting to 1000 [ 263.138197][T14582] lo speed is unknown, defaulting to 1000 [ 263.295998][T14584] loop5: detected capacity change from 0 to 128 [ 263.303204][T14584] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 263.318095][T14584] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.747573][T11938] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.822090][T14591] netlink: 'syz.5.3034': attribute type 4 has an invalid length. [ 263.933795][ T29] audit: type=1326 audit(1760139643.475:9001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 263.957944][ T29] audit: type=1326 audit(1760139643.475:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 263.996585][T11938] Bluetooth: hci0: Frame reassembly failed (-84) [ 264.011837][ T29] audit: type=1326 audit(1760139643.515:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 264.035614][ T29] audit: type=1326 audit(1760139643.525:9004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 264.060176][ T29] audit: type=1326 audit(1760139643.525:9005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 264.100724][T14581] loop2: detected capacity change from 0 to 1764 [ 264.111348][ T29] audit: type=1326 audit(1760139643.645:9006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56e52eec9 code=0x7ffc0000 [ 264.117491][ T3416] hid-generic 0003:0008:0000.0029: unknown main item tag 0x0 [ 264.135409][ T29] audit: type=1326 audit(1760139643.645:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe56e52eec9 code=0x7ffc0000 [ 264.166856][ T3416] hid-generic 0003:0008:0000.0029: unknown main item tag 0x0 [ 264.176520][ T3416] hid-generic 0003:0008:0000.0029: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 264.195448][ T29] audit: type=1326 audit(1760139643.645:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56e52eec9 code=0x7ffc0000 [ 264.231421][T14601] fido_id[14601]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 264.395630][T14599] loop0: detected capacity change from 0 to 512 [ 264.433208][T14599] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 264.441372][T14599] EXT4-fs (loop0): orphan cleanup on readonly fs [ 264.449382][T14599] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.3038: corrupted inode contents [ 264.461697][T14599] EXT4-fs (loop0): Remounting filesystem read-only [ 264.468378][T14599] EXT4-fs (loop0): 1 truncate cleaned up [ 264.474409][T11938] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 264.485093][T11938] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 264.493909][T14605] lo speed is unknown, defaulting to 1000 [ 264.502104][T14605] lo speed is unknown, defaulting to 1000 [ 264.506701][T11938] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 264.519850][T14608] loop2: detected capacity change from 0 to 128 [ 264.533879][T14599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.546793][T11814] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 264.576205][T14608] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.588349][T14608] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 264.664262][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.725091][T14614] netlink: 'syz.0.3042': attribute type 1 has an invalid length. [ 264.733155][T14614] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3042'. [ 264.889701][T14616] lo speed is unknown, defaulting to 1000 [ 264.896776][T14616] lo speed is unknown, defaulting to 1000 [ 265.373659][ T8332] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 265.573982][T14627] lo speed is unknown, defaulting to 1000 [ 265.580303][T14627] lo speed is unknown, defaulting to 1000 [ 265.613441][T14628] loop0: detected capacity change from 0 to 128 [ 265.633929][T14628] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 265.673374][T14632] lo speed is unknown, defaulting to 1000 [ 265.714001][T14628] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 265.720327][T14633] loop2: detected capacity change from 0 to 128 [ 265.730268][T14633] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 265.742706][T14633] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 265.790965][T14632] lo speed is unknown, defaulting to 1000 [ 266.042350][ T3528] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 266.478696][T14645] loop4: detected capacity change from 0 to 1764 [ 266.518764][ T3386] hid-generic 0003:0008:0000.002A: unknown main item tag 0x0 [ 266.526279][ T3386] hid-generic 0003:0008:0000.002A: unknown main item tag 0x0 [ 266.545583][ T3386] hid-generic 0003:0008:0000.002A: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 266.593042][T14650] fido_id[14650]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 266.615753][T14647] loop3: detected capacity change from 0 to 1764 [ 266.653160][T14647] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 266.697377][ T1035] hid-generic 0003:0008:0000.002B: unknown main item tag 0x4 [ 266.708167][ T1035] hid-generic 0003:0008:0000.002B: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 266.759402][T14653] fido_id[14653]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 266.889811][T14658] loop4: detected capacity change from 0 to 512 [ 266.901942][ T52] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.913094][T14658] EXT4-fs: Ignoring removed mblk_io_submit option [ 266.951230][T11814] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.998862][T14658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.000716][T14666] loop3: detected capacity change from 0 to 1024 [ 267.020398][T14658] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.044702][T14670] loop2: detected capacity change from 0 to 2048 [ 267.051525][T14666] EXT4-fs: Ignoring removed bh option [ 267.057207][T14666] EXT4-fs: inline encryption not supported [ 267.064190][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3054'. [ 267.076738][T14666] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 267.090464][T14666] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 267.099144][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 267.099183][ T29] audit: type=1326 audit(1760139646.635:9131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 267.130821][ T3001] Alternate GPT is invalid, using primary GPT. [ 267.132018][ T29] audit: type=1326 audit(1760139646.665:9132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 267.137529][ T3001] loop2: p1 p2 p3 [ 267.161077][ T29] audit: type=1326 audit(1760139646.665:9133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 267.164898][ T3001] loop2: partition table partially beyond EOD, truncated [ 267.194541][T14671] lo speed is unknown, defaulting to 1000 [ 267.196129][ T29] audit: type=1326 audit(1760139646.665:9134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 267.227305][T14666] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3056: lblock 2 mapped to illegal pblock 2 (length 1) [ 267.233023][T14671] lo speed is unknown, defaulting to 1000 [ 267.241907][T14666] EXT4-fs (loop3): Remounting filesystem read-only [ 267.253986][T14666] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 267.273139][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.283229][ T29] audit: type=1326 audit(1760139646.705:9135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 267.285092][T14675] loop5: detected capacity change from 0 to 128 [ 267.323552][T14666] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 267.334008][ T3001] Alternate GPT is invalid, using primary GPT. [ 267.336677][T14666] EXT4-fs (loop3): 1 orphan inode deleted [ 267.340280][ T3001] loop2: p1 p2 p3 [ 267.346977][T14675] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.349866][ T3001] loop2: partition table partially beyond EOD, truncated [ 267.368928][T14678] loop4: detected capacity change from 0 to 2048 [ 267.377364][T14666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.393552][T14678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.411488][T14678] ext4 filesystem being mounted at /585/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.423674][T14670] Alternate GPT is invalid, using primary GPT. [ 267.430174][T14670] loop2: p1 p2 p3 [ 267.433958][T14670] loop2: partition table partially beyond EOD, truncated [ 267.458607][ T29] audit: type=1326 audit(1760139646.995:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 267.485273][ T29] audit: type=1326 audit(1760139647.025:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 267.520132][T14675] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.572062][T14684] loop4: detected capacity change from 0 to 1024 [ 267.585062][ T29] audit: type=1326 audit(1760139647.105:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 267.586771][T14673] loop0: detected capacity change from 0 to 512 [ 267.628955][T14684] EXT4-fs: Ignoring removed bh option [ 267.664931][T14684] EXT4-fs: inline encryption not supported [ 267.671777][T14684] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 267.680160][T14690] netlink: 'syz.3.3065': attribute type 4 has an invalid length. [ 267.689692][ T3754] udevd[3754]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 267.694027][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 267.701823][T10990] udevd[10990]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 267.731669][T14673] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 267.742854][T14684] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 267.754797][T14673] EXT4-fs (loop0): orphan cleanup on readonly fs [ 267.756492][T14684] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3062: lblock 2 mapped to illegal pblock 2 (length 1) [ 267.764059][T14673] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.3060: corrupted inode contents [ 267.796222][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 267.800679][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 267.807784][ T3512] udevd[3512]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 267.829996][T14673] EXT4-fs (loop0): Remounting filesystem read-only [ 267.836948][T14684] EXT4-fs (loop4): Remounting filesystem read-only [ 267.844858][T14684] EXT4-fs (loop4): 1 orphan inode deleted [ 267.877487][T14673] EXT4-fs (loop0): 1 truncate cleaned up [ 267.893617][T11938] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 267.898465][ T3693] udevd[3693]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 267.904678][T11938] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 267.915865][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 267.938244][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 267.970513][T11938] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 268.028516][T14699] netlink: 'syz.4.3066': attribute type 21 has an invalid length. [ 268.037453][ T52] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.089669][T14704] loop5: detected capacity change from 0 to 512 [ 268.096787][T14704] EXT4-fs: test_dummy_encryption option not supported [ 268.119842][T14688] loop2: detected capacity change from 0 to 1764 [ 268.152498][ T3416] hid-generic 0003:0008:0000.002C: unknown main item tag 0x0 [ 268.160174][ T3416] hid-generic 0003:0008:0000.002C: unknown main item tag 0x0 [ 268.173896][ T3416] hid-generic 0003:0008:0000.002C: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 268.183737][T14708] loop5: detected capacity change from 0 to 512 [ 268.242242][T14708] EXT4-fs (loop5): 1 orphan inode deleted [ 268.251980][T14709] fido_id[14709]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 268.275650][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3071'. [ 268.341513][T14717] loop2: detected capacity change from 0 to 2048 [ 268.367611][T14713] loop0: detected capacity change from 0 to 512 [ 268.374961][T14713] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 268.386038][ T3304] Alternate GPT is invalid, using primary GPT. [ 268.386402][T14713] EXT4-fs (loop0): 1 truncate cleaned up [ 268.392552][ T3304] loop2: p1 p2 p3 [ 268.401755][ T3304] loop2: partition table partially beyond EOD, truncated [ 268.413801][T14713] hub 1-0:1.0: USB hub found [ 268.418795][T14713] hub 1-0:1.0: 8 ports detected [ 268.478735][T14721] lo speed is unknown, defaulting to 1000 [ 268.484997][T14721] lo speed is unknown, defaulting to 1000 [ 268.555777][T14723] loop4: detected capacity change from 0 to 128 [ 268.562946][T14723] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.582759][T14723] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.901418][T14717] Alternate GPT is invalid, using primary GPT. [ 268.907776][T14717] loop2: p1 p2 p3 [ 268.911599][T14717] loop2: partition table partially beyond EOD, truncated [ 268.939786][T14729] loop0: detected capacity change from 0 to 1024 [ 268.950178][T14729] EXT4-fs: Ignoring removed bh option [ 268.955970][T14729] EXT4-fs: inline encryption not supported [ 268.970416][T14729] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 268.989260][T14729] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 268.998340][T14729] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3075: lblock 2 mapped to illegal pblock 2 (length 1) [ 269.013039][T14729] EXT4-fs (loop0): Remounting filesystem read-only [ 269.023681][T14729] EXT4-fs (loop0): 1 orphan inode deleted [ 269.099050][ T52] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.110792][T14737] bridge: RTM_NEWNEIGH with invalid ether address [ 269.115005][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 269.148154][T14737] loop2: detected capacity change from 0 to 512 [ 269.155901][T14741] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3081'. [ 269.171722][T14737] EXT4-fs: Ignoring removed nobh option [ 269.177924][T14741] loop5: detected capacity change from 0 to 512 [ 269.198063][T14741] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 269.213525][T14737] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.3078: corrupted inode contents [ 269.227872][T14737] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #3: comm syz.2.3078: mark_inode_dirty error [ 269.240030][T14737] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.3078: corrupted inode contents [ 269.252335][T14737] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3078: mark_inode_dirty error [ 269.270156][T14741] EXT4-fs (loop5): 1 truncate cleaned up [ 269.278471][T14737] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3078: Failed to acquire dquot type 0 [ 269.291371][T14737] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3078: corrupted inode contents [ 269.305139][T14737] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #16: comm syz.2.3078: mark_inode_dirty error [ 269.319035][T14737] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3078: corrupted inode contents [ 269.340878][T14741] hub 1-0:1.0: USB hub found [ 269.345954][T14741] hub 1-0:1.0: 8 ports detected [ 269.357706][T14752] loop4: detected capacity change from 0 to 1024 [ 269.376491][T14737] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3078: mark_inode_dirty error [ 269.400739][T14737] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3078: corrupted inode contents [ 269.403850][T14752] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.413571][T14737] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 269.437296][T14752] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.3084: lblock 0 mapped to illegal pblock 0 (length 1) [ 269.451971][T14752] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 269.464570][T14752] EXT4-fs (loop4): This should not happen!! Data will be lost [ 269.464570][T14752] [ 269.474902][T14737] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3078: corrupted inode contents [ 269.523586][T14737] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.3078: mark_inode_dirty error [ 269.549369][T14760] loop0: detected capacity change from 0 to 2048 [ 269.550576][T14758] lo speed is unknown, defaulting to 1000 [ 269.562822][T14737] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 269.563735][T14758] lo speed is unknown, defaulting to 1000 [ 269.576661][T14737] EXT4-fs (loop2): 1 truncate cleaned up [ 269.587299][T14737] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.671776][ T3304] Alternate GPT is invalid, using primary GPT. [ 269.678361][ T3304] loop0: p1 p2 p3 [ 269.682126][ T3304] loop0: partition table partially beyond EOD, truncated [ 269.733790][T14760] Alternate GPT is invalid, using primary GPT. [ 269.740427][T14760] loop0: p1 p2 p3 [ 269.744417][T14760] loop0: partition table partially beyond EOD, truncated [ 269.799712][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 269.891667][T14782] loop2: detected capacity change from 0 to 512 [ 269.906974][T14777] lo speed is unknown, defaulting to 1000 [ 269.916262][T14782] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 269.939013][T14784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3097'. [ 269.943266][T14777] lo speed is unknown, defaulting to 1000 [ 269.963144][T14782] EXT4-fs (loop2): 1 truncate cleaned up [ 269.980272][T14786] loop4: detected capacity change from 0 to 128 [ 269.981415][T14784] loop0: detected capacity change from 0 to 512 [ 270.004533][T14786] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.022078][T14776] hub 1-0:1.0: USB hub found [ 270.028654][T14784] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 270.063551][T14786] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.087210][T14776] hub 1-0:1.0: 8 ports detected [ 270.103499][T14788] loop5: detected capacity change from 0 to 1024 [ 270.124993][T14784] EXT4-fs (loop0): 1 truncate cleaned up [ 270.144127][T14788] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.166310][T14788] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.3098: lblock 0 mapped to illegal pblock 0 (length 1) [ 270.186378][T14788] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 270.198825][T14788] EXT4-fs (loop5): This should not happen!! Data will be lost [ 270.198825][T14788] [ 270.229271][T14784] hub 1-0:1.0: USB hub found [ 270.239433][T14784] hub 1-0:1.0: 8 ports detected [ 270.307462][T14796] netlink: 'syz.2.3100': attribute type 4 has an invalid length. [ 270.359287][T14798] bridge: RTM_NEWNEIGH with invalid ether address [ 270.380135][T14800] loop5: detected capacity change from 0 to 512 [ 270.391507][T14798] loop0: detected capacity change from 0 to 512 [ 270.399436][T14798] EXT4-fs: Ignoring removed nobh option [ 270.412410][T14800] EXT4-fs: Ignoring removed mblk_io_submit option [ 270.434587][T14798] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #3: comm syz.0.3102: corrupted inode contents [ 270.452261][T14798] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #3: comm syz.0.3102: mark_inode_dirty error [ 270.464375][T14798] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #3: comm syz.0.3102: corrupted inode contents [ 270.478194][T14800] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.489313][T14798] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3102: mark_inode_dirty error [ 270.504199][T14798] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3102: Failed to acquire dquot type 0 [ 270.516465][T14798] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.3102: corrupted inode contents [ 270.530108][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3101'. [ 270.554369][T14798] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #16: comm syz.0.3102: mark_inode_dirty error [ 270.566213][T14798] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.3102: corrupted inode contents [ 270.578890][T14798] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3102: mark_inode_dirty error [ 270.590634][T14798] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.3102: corrupted inode contents [ 270.603053][T14798] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 270.611882][T14798] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.3102: corrupted inode contents [ 270.624694][T14798] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.3102: mark_inode_dirty error [ 270.639783][T14798] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 270.649861][T14798] EXT4-fs (loop0): 1 truncate cleaned up [ 270.658212][T14798] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.914985][T14825] loop0: detected capacity change from 0 to 1024 [ 270.924238][T14825] EXT4-fs: Ignoring removed bh option [ 270.929967][T14825] EXT4-fs: inline encryption not supported [ 270.962493][T14825] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 271.002983][T14825] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 271.023570][T14825] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3112: lblock 2 mapped to illegal pblock 2 (length 1) [ 271.047658][T14822] lo speed is unknown, defaulting to 1000 [ 271.064041][T14825] EXT4-fs (loop0): Remounting filesystem read-only [ 271.070913][T14825] EXT4-fs (loop0): 1 orphan inode deleted [ 271.110258][T14822] lo speed is unknown, defaulting to 1000 [ 271.164126][ T8189] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 271.220795][T14818] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 271.271539][T14843] netlink: 'syz.0.3116': attribute type 4 has an invalid length. [ 271.286447][T14822] chnl_net:caif_netlink_parms(): no params data found [ 271.343043][T14822] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.350449][T14822] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.358018][T14822] bridge_slave_0: entered allmulticast mode [ 271.364741][T14822] bridge_slave_0: entered promiscuous mode [ 271.371750][T14822] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.379071][T14822] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.386508][T14822] bridge_slave_1: entered allmulticast mode [ 271.394102][T14822] bridge_slave_1: entered promiscuous mode [ 271.400533][T14853] bridge: RTM_NEWNEIGH with invalid ether address [ 271.411389][T14853] loop5: detected capacity change from 0 to 512 [ 271.421454][T14853] EXT4-fs: Ignoring removed nobh option [ 271.435568][T14853] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #3: comm syz.5.3118: corrupted inode contents [ 271.447987][T14853] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #3: comm syz.5.3118: mark_inode_dirty error [ 271.450035][T14822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.461231][T14853] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #3: comm syz.5.3118: corrupted inode contents [ 271.471534][T14822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.482005][T14853] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3118: mark_inode_dirty error [ 271.502527][T14853] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3118: Failed to acquire dquot type 0 [ 271.514962][T14853] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.3118: corrupted inode contents [ 271.516240][T14822] team0: Port device team_slave_0 added [ 271.528013][T14853] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #16: comm syz.5.3118: mark_inode_dirty error [ 271.544310][T14853] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.3118: corrupted inode contents [ 271.545500][T14822] team0: Port device team_slave_1 added [ 271.556679][T14853] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3118: mark_inode_dirty error [ 271.573830][T14853] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.3118: corrupted inode contents [ 271.586466][T14853] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 271.595419][T14853] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.3118: corrupted inode contents [ 271.596234][T14822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.608143][T14853] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.3118: mark_inode_dirty error [ 271.614557][T14822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.627222][T14853] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 271.652343][T14822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.653352][T14822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.675833][T14853] EXT4-fs (loop5): 1 truncate cleaned up [ 271.679106][T14822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.685416][T14853] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.711181][T14822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.785749][T14822] hsr_slave_0: entered promiscuous mode [ 271.801770][T14822] hsr_slave_1: entered promiscuous mode [ 271.808478][T14822] debugfs: 'hsr0' already exists in 'hsr' [ 271.814306][T14822] Cannot create hsr debugfs directory [ 271.846035][T14867] loop5: detected capacity change from 0 to 512 [ 271.854875][T14867] EXT4-fs: test_dummy_encryption option not supported [ 271.900212][T14822] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.927131][T14869] loop5: detected capacity change from 0 to 512 [ 271.936610][T14869] EXT4-fs (loop5): 1 orphan inode deleted [ 271.963675][T14822] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.013924][T14822] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.053945][T14822] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.119156][T14822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.128517][T14822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.138085][T14822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.147291][T14822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.163150][T14822] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.170265][T14822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.198646][T14822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.208850][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.223193][T14822] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.234301][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.241429][ T8189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.252230][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.259553][ T8332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.325028][T14822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.394771][T14822] veth0_vlan: entered promiscuous mode [ 272.402765][T14822] veth1_vlan: entered promiscuous mode [ 272.418922][T14822] veth0_macvtap: entered promiscuous mode [ 272.426640][T14822] veth1_macvtap: entered promiscuous mode [ 272.438373][T14822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.450149][T14822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.461173][ T8189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.470202][ T8189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.479621][ T8189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.489004][ T8189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.558662][T14891] loop3: detected capacity change from 0 to 1024 [ 272.565628][T14891] EXT4-fs: Ignoring removed bh option [ 272.571207][T14891] EXT4-fs: inline encryption not supported [ 272.578251][T14891] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 272.589405][T14891] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 272.598900][T14891] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3124: lblock 2 mapped to illegal pblock 2 (length 1) [ 272.613738][T14891] EXT4-fs (loop3): Remounting filesystem read-only [ 272.620535][T14891] __quota_error: 159 callbacks suppressed [ 272.620552][T14891] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 272.634943][T14891] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 272.644042][T14891] EXT4-fs (loop3): 1 orphan inode deleted [ 272.726602][ T1035] hid-generic 0003:0008:0000.002D: unknown main item tag 0x0 [ 272.734361][ T1035] hid-generic 0003:0008:0000.002D: unknown main item tag 0x0 [ 272.823166][ T1035] hid-generic 0003:0008:0000.002D: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 272.853009][T14904] fido_id[14904]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 273.001167][ T29] audit: type=1326 audit(1760139652.535:9280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746bf8eec9 code=0x7ffc0000 [ 273.046659][T14909] loop3: detected capacity change from 0 to 128 [ 273.054627][T14909] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 273.075470][T14909] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 273.106714][T14912] lo speed is unknown, defaulting to 1000 [ 273.113792][T14912] lo speed is unknown, defaulting to 1000 [ 273.284277][ T29] audit: type=1326 audit(1760139652.565:9281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746bf8eec9 code=0x7ffc0000 [ 273.308628][ T29] audit: type=1326 audit(1760139652.565:9282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f746bf8eec9 code=0x7ffc0000 [ 273.332480][ T29] audit: type=1326 audit(1760139652.565:9283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746bf8eec9 code=0x7ffc0000 [ 273.356235][ T29] audit: type=1326 audit(1760139652.565:9284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746bf8eec9 code=0x7ffc0000 [ 273.380000][ T29] audit: type=1326 audit(1760139652.565:9285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f746bf8eec9 code=0x7ffc0000 [ 273.403823][ T29] audit: type=1326 audit(1760139652.565:9286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746bf8eec9 code=0x7ffc0000 [ 273.427641][ T29] audit: type=1326 audit(1760139652.565:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f746bf8eec9 code=0x7ffc0000 [ 273.451858][T14899] lo speed is unknown, defaulting to 1000 [ 273.464519][T14899] lo speed is unknown, defaulting to 1000 [ 273.530252][T14918] bridge: RTM_NEWNEIGH with invalid ether address [ 273.555738][T14918] loop2: detected capacity change from 0 to 512 [ 273.562828][T14918] EXT4-fs: Ignoring removed nobh option [ 273.584345][T14918] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.3130: corrupted inode contents [ 273.604798][T14918] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #3: comm syz.2.3130: mark_inode_dirty error [ 273.617104][T14918] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.3130: corrupted inode contents [ 273.629484][T14918] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3130: mark_inode_dirty error [ 273.641408][T14918] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3130: Failed to acquire dquot type 0 [ 273.654993][T11938] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 273.656648][T14918] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3130: corrupted inode contents [ 273.677659][T14918] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #16: comm syz.2.3130: mark_inode_dirty error [ 273.700927][T14918] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3130: corrupted inode contents [ 273.716886][T14899] chnl_net:caif_netlink_parms(): no params data found [ 273.734524][T14918] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3130: mark_inode_dirty error [ 273.749588][T14918] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3130: corrupted inode contents [ 273.765382][T14918] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 273.774304][T14918] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3130: corrupted inode contents [ 273.786730][T14918] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.3130: mark_inode_dirty error [ 273.805437][T14918] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 273.822609][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.855896][T14918] EXT4-fs (loop2): 1 truncate cleaned up [ 273.862260][T14918] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.903880][T14899] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.911097][T14899] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.918919][T14899] bridge_slave_0: entered allmulticast mode [ 273.925963][T14899] bridge_slave_0: entered promiscuous mode [ 273.933817][T14899] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.941042][T14899] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.961803][T14899] bridge_slave_1: entered allmulticast mode [ 273.969067][T14899] bridge_slave_1: entered promiscuous mode [ 273.986458][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.006982][T14899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.014359][T14939] loop2: detected capacity change from 0 to 1024 [ 274.018676][T14899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.025589][T14939] EXT4-fs: Ignoring removed bh option [ 274.037847][T14939] EXT4-fs: inline encryption not supported [ 274.049534][T14939] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 274.070545][T14939] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 274.080043][T14939] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.3136: lblock 2 mapped to illegal pblock 2 (length 1) [ 274.095193][T14939] EXT4-fs (loop2): Remounting filesystem read-only [ 274.096234][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.112075][T14939] EXT4-fs (loop2): 1 orphan inode deleted [ 274.122530][T14899] team0: Port device team_slave_0 added [ 274.129521][T14941] loop3: detected capacity change from 0 to 128 [ 274.133475][T14937] lo speed is unknown, defaulting to 1000 [ 274.140511][T14941] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.153098][T14899] team0: Port device team_slave_1 added [ 274.172901][T14941] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.173435][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.193709][T14937] lo speed is unknown, defaulting to 1000 [ 274.213223][T14899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.220323][T14899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.246426][T14899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.268472][T14899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.275563][T14899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.301595][T14899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.355131][ T10] hid-generic 0003:0008:0000.002E: unknown main item tag 0x0 [ 274.362781][ T10] hid-generic 0003:0008:0000.002E: unknown main item tag 0x0 [ 274.370781][T14947] loop2: detected capacity change from 0 to 1024 [ 274.384949][ T10] hid-generic 0003:0008:0000.002E: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 274.406043][T14947] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.432700][T14899] hsr_slave_0: entered promiscuous mode [ 274.442716][T14952] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3139'. [ 274.448306][T14949] fido_id[14949]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 274.466843][T14899] hsr_slave_1: entered promiscuous mode [ 274.469666][T14947] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.3138: lblock 0 mapped to illegal pblock 0 (length 1) [ 274.472955][T14899] debugfs: 'hsr0' already exists in 'hsr' [ 274.486679][T14947] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 274.491640][T14899] Cannot create hsr debugfs directory [ 274.509545][T14947] EXT4-fs (loop2): This should not happen!! Data will be lost [ 274.509545][T14947] [ 274.626309][T14957] loop2: detected capacity change from 0 to 512 [ 274.635516][T14957] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3140: bg 0: block 5: invalid block bitmap [ 274.649694][T14957] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 274.659603][T14957] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3140: invalid indirect mapped block 3 (level 2) [ 274.675754][ T52] bond0 (unregistering): Released all slaves [ 274.682809][T14957] EXT4-fs (loop2): 1 orphan inode deleted [ 274.688784][T14957] EXT4-fs (loop2): 1 truncate cleaned up [ 274.770173][ T8332] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.795848][ T52] tipc: Left network mode [ 274.997709][ T52] hsr_slave_0: left promiscuous mode [ 275.008923][ T52] hsr_slave_1: left promiscuous mode [ 275.010750][ T3386] hid-generic 0003:0008:0000.002F: unknown main item tag 0x0 [ 275.021929][ T3386] hid-generic 0003:0008:0000.002F: unknown main item tag 0x0 [ 275.029859][ T3386] hid-generic 0003:0008:0000.002F: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 275.031199][ T52] veth1_macvtap: left promiscuous mode [ 275.053975][ T52] veth0_macvtap: left promiscuous mode [ 275.062185][ T52] veth1_vlan: left promiscuous mode [ 275.067700][ T52] veth0_vlan: left promiscuous mode [ 275.173482][T14998] loop0: detected capacity change from 0 to 128 [ 275.180928][T14998] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 275.277977][T15002] netlink: 'syz.3.3149': attribute type 21 has an invalid length. [ 275.363425][T15006] loop5: detected capacity change from 0 to 512 [ 275.374432][T15006] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.381464][T15006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.454983][T14998] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.478027][ T52] team0 (unregistering): Port device dummy0 removed [ 275.486636][T15006] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.495202][T15006] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 275.509626][T14994] fido_id[14994]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 275.535448][T14996] lo speed is unknown, defaulting to 1000 [ 275.541656][T14996] lo speed is unknown, defaulting to 1000 [ 275.552245][T15006] EXT4-fs (loop5): failed to initialize system zone (-117) [ 275.580120][T15006] EXT4-fs (loop5): mount failed [ 275.883653][ T8186] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.999931][T15030] lo speed is unknown, defaulting to 1000 [ 276.007420][T15030] lo speed is unknown, defaulting to 1000 [ 276.170640][T15031] loop5: detected capacity change from 0 to 128 [ 276.178045][T15031] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 276.197870][T15031] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 276.360009][ T52] ------------[ cut here ]------------ [ 276.365589][ T52] WARNING: CPU: 1 PID: 52 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x91/0x100 [ 276.375698][ T52] Modules linked in: [ 276.379727][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 276.391126][ T52] Tainted: [W]=WARN [ 276.395104][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.405329][ T52] Workqueue: netns cleanup_net [ 276.410224][ T52] RIP: 0010:xfrm6_tunnel_net_exit+0x91/0x100 [ 276.416406][ T52] Code: 75 df a5 fc 4b 83 3c 3e 00 75 19 e8 29 74 8a fc 49 81 ff f8 07 00 00 74 1d e8 1b 74 8a fc 49 83 c7 08 eb d7 e8 10 74 8a fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 276.437191][ T52] RSP: 0018:ffffc900001bbc78 EFLAGS: 00010293 [ 276.443671][ T52] RAX: ffffffff84cccb70 RBX: ffff88810c818000 RCX: ffff888101814200 [ 276.451849][ T52] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810b682000 [ 276.459921][ T52] RBP: ffffffff86c99250 R08: 0001ffff8684802f R09: 0000000000000000 [ 276.468067][ T52] R10: ffffffff88e6f9d8 R11: ffff888101624240 R12: ffffffff86c99270 [ 276.476120][ T52] R13: ffff88810c818028 R14: ffff88810b682000 R15: 0000000000000000 [ 276.484275][ T52] FS: 0000000000000000(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 276.491823][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3156'. [ 276.493506][ T52] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.509102][ T52] CR2: ffffffffffec0000 CR3: 0000000118706000 CR4: 00000000003506f0 [ 276.517296][ T52] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 276.525775][ T52] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 276.534021][ T52] Call Trace: [ 276.537424][ T52] [ 276.540383][ T52] ops_undo_list+0x278/0x410 [ 276.545307][ T52] cleanup_net+0x2f4/0x4f0 [ 276.549764][ T52] process_scheduled_works+0x4cb/0x9d0 [ 276.555460][ T52] worker_thread+0x582/0x770 [ 276.560114][ T52] kthread+0x486/0x510 [ 276.564362][ T52] ? finish_task_switch+0xad/0x2b0 [ 276.569716][ T52] ? __pfx_worker_thread+0x10/0x10 [ 276.574927][ T52] ? __pfx_kthread+0x10/0x10 [ 276.579598][ T52] ret_from_fork+0x122/0x1b0 [ 276.580419][T15040] loop0: detected capacity change from 0 to 512 [ 276.584290][ T52] ? __pfx_kthread+0x10/0x10 [ 276.595425][ T52] ret_from_fork_asm+0x1a/0x30 [ 276.600256][ T52] [ 276.603339][ T52] ---[ end trace 0000000000000000 ]--- [ 276.610134][ T52] ------------[ cut here ]------------ [ 276.615709][ T52] WARNING: CPU: 1 PID: 52 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd5/0x100 [ 276.617794][T15040] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 276.625780][ T52] Modules linked in: [ 276.625806][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 276.651100][ T52] Tainted: [W]=WARN [ 276.655012][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.665423][ T52] Workqueue: netns cleanup_net [ 276.670254][ T52] RIP: 0010:xfrm6_tunnel_net_exit+0xd5/0x100 [ 276.676465][ T52] Code: 31 df a5 fc 49 83 3c 1e 00 75 19 e8 e5 73 8a fc 48 81 fb f8 07 00 00 74 1d e8 d7 73 8a fc 48 83 c3 08 eb d7 e8 cc 73 8a fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 ba 73 8a fc 5b 41 5e 41 5f [ 276.696800][ T52] RSP: 0018:ffffc900001bbc78 EFLAGS: 00010293 [ 276.702979][ T52] RAX: ffffffff84cccbb4 RBX: 0000000000000008 RCX: ffff888101814200 [ 276.711355][ T52] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810b682808 [ 276.714810][T15040] EXT4-fs (loop0): 1 truncate cleaned up [ 276.719666][ T52] RBP: ffffffff86c99250 R08: 0001ffff8684802f R09: 0000000000000000 [ 276.733883][ T52] R10: ffffffff88e6f9d8 R11: ffff888101624240 R12: ffffffff86c99270 [ 276.742196][ T52] R13: ffff88810c818028 R14: ffff88810b682800 R15: 00000000000007f8 [ 276.750313][ T52] FS: 0000000000000000(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 276.759603][ T52] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.766478][ T52] CR2: ffffffffffec0000 CR3: 0000000118706000 CR4: 00000000003506f0 [ 276.774727][ T52] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 276.782972][ T52] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 276.791063][ T52] Call Trace: [ 276.794449][ T52] [ 276.797407][ T52] ops_undo_list+0x278/0x410 [ 276.802339][ T52] cleanup_net+0x2f4/0x4f0 [ 276.807057][ T52] process_scheduled_works+0x4cb/0x9d0 [ 276.812803][ T52] worker_thread+0x582/0x770 [ 276.817449][ T52] kthread+0x486/0x510 [ 276.821556][ T52] ? finish_task_switch+0xad/0x2b0 [ 276.826803][ T52] ? __pfx_worker_thread+0x10/0x10 [ 276.832034][ T52] ? __pfx_kthread+0x10/0x10 [ 276.836778][ T52] ret_from_fork+0x122/0x1b0 [ 276.841763][ T52] ? __pfx_kthread+0x10/0x10 [ 276.846507][ T52] ret_from_fork_asm+0x1a/0x30 [ 276.851373][ T52] [ 276.854551][ T52] ---[ end trace 0000000000000000 ]--- [ 276.868393][T15010] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 276.905371][T15045] loop3: detected capacity change from 0 to 128 [ 276.932628][T15042] lo speed is unknown, defaulting to 1000 [ 276.938941][T15042] lo speed is unknown, defaulting to 1000 [ 276.980615][ T8332] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 276.992977][T15045] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 277.012948][T15045] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 277.078798][ T23] hid-generic 0003:0008:0000.0030: unknown main item tag 0x0 [ 277.086656][ T23] hid-generic 0003:0008:0000.0030: unknown main item tag 0x0 [ 277.120111][ T23] hid-generic 0003:0008:0000.0030: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 277.189894][T15064] loop5: detected capacity change from 0 to 512 [ 277.225482][T14899] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 277.240397][T15064] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.277984][T14899] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 277.296882][T15072] netlink: 'syz.2.3162': attribute type 4 has an invalid length. [ 277.304710][ T52] ------------[ cut here ]------------ [ 277.305379][T14899] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.310325][ T52] WARNING: CPU: 0 PID: 52 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 277.326909][ T52] Modules linked in: [ 277.331072][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 277.342560][ T52] Tainted: [W]=WARN [ 277.346390][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.356517][ T52] Workqueue: netns cleanup_net [ 277.361372][ T52] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 277.366983][ T52] Code: 48 8d bb 70 0e 00 00 e8 05 ad b7 fc 48 8b bb 70 0e 00 00 e8 89 58 c4 fc 5b 41 5e 41 5f 5d e9 3e 61 b0 00 cc e8 58 55 9c fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 4a 55 9c fc 90 0f 0b 90 4c 89 f7 e8 ce [ 277.387141][ T52] RSP: 0018:ffffc900001bbc60 EFLAGS: 00010293 [ 277.389702][T15069] fido_id[15069]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 277.393439][ T52] RAX: ffffffff84baea28 RBX: ffff88810c818000 RCX: ffff888101814200 [ 277.393459][ T52] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810c818e40 [ 277.423618][ T52] RBP: ffffffff86c91000 R08: 0001ffff8684802f R09: 0000000000000000 [ 277.432115][ T52] R10: ffffc900001bbbe8 R11: 0001c900001bbbe8 R12: ffffffff86c91020 [ 277.440338][ T52] R13: ffff88810c818028 R14: ffff88810c818e40 R15: ffff88810c818000 [ 277.448555][ T52] FS: 0000000000000000(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 277.457829][ T52] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.464469][ T52] CR2: 0000000000000000 CR3: 0000000006834000 CR4: 00000000003506f0 [ 277.472665][ T52] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 277.481015][ T52] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 277.489219][ T52] Call Trace: [ 277.492663][ T52] [ 277.495715][ T52] xfrm_net_exit+0x2d/0x60 [ 277.500706][ T52] ops_undo_list+0x278/0x410 [ 277.505651][ T52] cleanup_net+0x2f4/0x4f0 [ 277.510255][ T52] process_scheduled_works+0x4cb/0x9d0 [ 277.513633][T15078] loop0: detected capacity change from 0 to 512 [ 277.515795][ T52] worker_thread+0x582/0x770 [ 277.522971][T15078] EXT4-fs: test_dummy_encryption option not supported [ 277.526844][ T52] kthread+0x486/0x510 [ 277.538414][ T52] ? finish_task_switch+0xad/0x2b0 [ 277.543978][ T52] ? __pfx_worker_thread+0x10/0x10 [ 277.549241][ T52] ? __pfx_kthread+0x10/0x10 [ 277.553977][ T52] ret_from_fork+0x122/0x1b0 [ 277.558598][ T52] ? __pfx_kthread+0x10/0x10 [ 277.563475][ T52] ret_from_fork_asm+0x1a/0x30 [ 277.568367][ T52] [ 277.571423][ T52] ---[ end trace 0000000000000000 ]--- [ 277.593382][T15064] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.612270][T14899] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 277.629767][T15080] loop0: detected capacity change from 0 to 512 [ 277.665918][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3161'. [ 277.688659][T15087] loop2: detected capacity change from 0 to 512 [ 277.715488][T15080] EXT4-fs (loop0): 1 orphan inode deleted [ 277.721470][T15087] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.728850][T15087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.770332][T15087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.778974][T15087] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 277.823536][T15087] EXT4-fs (loop2): failed to initialize system zone (-117) [ 277.848389][T15087] EXT4-fs (loop2): mount failed [ 277.912554][T15109] loop5: detected capacity change from 0 to 1024 [ 277.954452][T15109] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.968998][T15109] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.3165: lblock 0 mapped to illegal pblock 0 (length 1) [ 278.021622][T14899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.040764][T15109] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 278.053347][T15109] EXT4-fs (loop5): This should not happen!! Data will be lost [ 278.053347][T15109] [ 278.082088][T14899] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.111144][ T8332] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.118298][ T8332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.131347][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.138484][ T8332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.184907][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3169'. [ 278.238668][ T8332] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 278.275642][T15119] loop2: detected capacity change from 0 to 512 [ 278.279915][T14899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.298498][T15119] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 278.336405][T15119] EXT4-fs (loop2): 1 truncate cleaned up [ 278.410251][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 278.410266][ T29] audit: type=1326 audit(1760139657.945:9463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 278.445343][ T29] audit: type=1326 audit(1760139657.975:9464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 278.469796][ T29] audit: type=1326 audit(1760139657.985:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 278.494071][T15130] loop3: detected capacity change from 0 to 128 [ 278.494586][T15130] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 278.500710][ T29] audit: type=1326 audit(1760139657.985:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 278.515372][T15130] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 278.537374][ T29] audit: type=1326 audit(1760139657.985:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 278.559265][T15127] lo speed is unknown, defaulting to 1000 [ 278.569921][ T29] audit: type=1326 audit(1760139657.985:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 278.570012][ T29] audit: type=1326 audit(1760139657.985:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 278.570049][ T29] audit: type=1326 audit(1760139657.985:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 278.576622][T15127] lo speed is unknown, defaulting to 1000 [ 278.600452][ T29] audit: type=1326 audit(1760139657.985:9471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 278.600494][ T29] audit: type=1326 audit(1760139657.985:9472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f29c3f3eec9 code=0x7ffc0000 [ 278.749374][T15123] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 278.866203][T11808] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 278.914065][T15146] loop2: detected capacity change from 0 to 512 [ 278.920797][T15146] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.954405][T15146] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.009157][T15158] loop5: detected capacity change from 0 to 1024 [ 279.036741][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3174'. [ 279.059170][T15158] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.087386][T15163] netlink: 'syz.3.3181': attribute type 1 has an invalid length. [ 279.095272][T15163] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3181'. [ 279.096189][T15158] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.3178: lblock 0 mapped to illegal pblock 0 (length 1) [ 279.132957][T15169] loop0: detected capacity change from 0 to 512 [ 279.147943][T15172] loop2: detected capacity change from 0 to 512 [ 279.156310][T15169] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.172451][T15158] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 279.179408][T15169] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.185509][T15158] EXT4-fs (loop5): This should not happen!! Data will be lost [ 279.185509][T15158] [ 279.202639][T15172] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.209478][T15169] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 279.218362][T15169] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.225819][T14899] veth0_vlan: entered promiscuous mode [ 279.235548][T15172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.255722][T14899] veth1_vlan: entered promiscuous mode [ 279.272488][T15172] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 279.281081][T15172] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.299577][T15169] EXT4-fs (loop0): failed to initialize system zone (-117) [ 279.308679][T14899] veth0_macvtap: entered promiscuous mode [ 279.331720][T15169] EXT4-fs (loop0): mount failed [ 279.339022][T14899] veth1_macvtap: entered promiscuous mode [ 279.371603][T14899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.385088][T15172] EXT4-fs (loop2): failed to initialize system zone (-117) [ 279.404597][T14899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.414200][T15172] EXT4-fs (loop2): mount failed [ 279.440398][ T8189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.451807][ T8189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.471618][ T8189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.484611][ T8189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.499480][T15190] loop0: detected capacity change from 0 to 512 [ 279.530671][T15190] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3188: bg 0: block 5: invalid block bitmap [ 279.586157][T15202] loop2: detected capacity change from 0 to 2048 [ 279.593321][T15190] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 279.611392][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3191'. [ 279.630017][T15190] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3188: invalid indirect mapped block 3 (level 2) [ 279.652839][T15208] netlink: 'syz.5.3193': attribute type 21 has an invalid length. [ 279.654528][T15204] bridge0: entered promiscuous mode [ 279.667076][T15204] macsec1: entered promiscuous mode [ 279.675559][T15202] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.686921][T15204] loop4: detected capacity change from 0 to 512 [ 279.696126][T15208] bridge: RTM_NEWNEIGH with invalid ether address [ 279.702553][T15190] EXT4-fs (loop0): 1 orphan inode deleted [ 279.707065][T15208] loop5: detected capacity change from 0 to 512 [ 279.708426][T15190] EXT4-fs (loop0): 1 truncate cleaned up [ 279.715447][T15208] EXT4-fs: Ignoring removed nobh option [ 279.745255][T15208] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #3: comm syz.5.3193: corrupted inode contents [ 279.794821][T15204] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 279.816986][T15208] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #3: comm syz.5.3193: mark_inode_dirty error [ 279.829355][T15204] EXT4-fs (loop4): 1 truncate cleaned up [ 279.843678][T15208] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #3: comm syz.5.3193: corrupted inode contents [ 279.857444][T15204] hub 1-0:1.0: USB hub found [ 279.862566][T15204] hub 1-0:1.0: 8 ports detected [ 279.901689][T15208] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3193: mark_inode_dirty error [ 279.919655][T15208] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3193: Failed to acquire dquot type 0 [ 279.932923][T15208] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.3193: corrupted inode contents [ 279.954297][T15208] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #16: comm syz.5.3193: mark_inode_dirty error [ 279.968769][T15208] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.3193: corrupted inode contents [ 279.987509][T15208] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3193: mark_inode_dirty error [ 279.999307][T15208] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.3193: corrupted inode contents [ 280.012481][T15208] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 280.022635][T15208] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.3193: corrupted inode contents [ 280.022881][T15212] loop3: detected capacity change from 0 to 1764 [ 280.044613][T15208] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.3193: mark_inode_dirty error [ 280.070518][T15208] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 280.083422][T15228] loop4: detected capacity change from 0 to 1024 [ 280.090641][T15228] EXT4-fs: Ignoring removed bh option [ 280.100692][T15208] EXT4-fs (loop5): 1 truncate cleaned up [ 280.101698][T15228] EXT4-fs: inline encryption not supported [ 280.112096][ T3386] hid-generic 0003:0008:0000.0031: unknown main item tag 0x0 [ 280.120289][ T3386] hid-generic 0003:0008:0000.0031: unknown main item tag 0x0 [ 280.130713][T15208] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.145055][ T3386] hid-generic 0003:0008:0000.0031: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 280.157308][ T8186] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.182966][T15228] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 280.199244][T15230] fido_id[15230]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 280.266046][T15228] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 280.275298][ T8186] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.305419][T15228] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3198: lblock 2 mapped to illegal pblock 2 (length 1) [ 280.322673][T15228] EXT4-fs (loop4): Remounting filesystem read-only [ 280.329409][T15228] EXT4-fs (loop4): 1 orphan inode deleted [ 280.335630][T15223] lo speed is unknown, defaulting to 1000 [ 280.341759][T15223] lo speed is unknown, defaulting to 1000 [ 280.357761][ T8186] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.398446][ T8186] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.472037][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3205'. [ 280.523594][T15256] loop2: detected capacity change from 0 to 512 [ 280.530756][T15254] loop5: detected capacity change from 0 to 1024 [ 280.550826][T15254] EXT4-fs: Ignoring removed bh option [ 280.561083][T15256] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 280.586498][T15254] EXT4-fs: inline encryption not supported [ 280.593927][T15256] EXT4-fs (loop2): 1 truncate cleaned up [ 280.621094][T15254] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 280.656415][T15252] hub 1-0:1.0: USB hub found [ 280.661520][T15254] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 280.670431][T15252] hub 1-0:1.0: 8 ports detected [ 280.679376][T15254] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.3206: lblock 2 mapped to illegal pblock 2 (length 1) [ 280.696217][T15254] EXT4-fs (loop5): Remounting filesystem read-only [ 280.713348][T15254] EXT4-fs (loop5): 1 orphan inode deleted [ 280.737519][T15264] netlink: 'syz.4.3209': attribute type 10 has an invalid length. [ 280.775519][ T8186] bond0 (unregistering): Released all slaves [ 280.790260][T15270] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3209'. [ 280.792426][T15248] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 280.803751][T15272] netlink: 'syz.2.3212': attribute type 21 has an invalid length. [ 280.820061][T15264] team0: Port device dummy0 added [ 280.841365][T15272] bridge: RTM_NEWNEIGH with invalid ether address [ 280.855124][T15272] loop2: detected capacity change from 0 to 512 [ 280.892861][T15272] EXT4-fs: Ignoring removed nobh option [ 280.933348][T15272] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.3212: corrupted inode contents [ 280.939948][T15281] loop3: detected capacity change from 0 to 1024 [ 280.954574][T15281] EXT4-fs: Ignoring removed bh option [ 280.959502][T15272] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #3: comm syz.2.3212: mark_inode_dirty error [ 280.967796][T15281] EXT4-fs: inline encryption not supported [ 280.982713][T15281] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 280.994300][ T8186] hsr_slave_0: left promiscuous mode [ 281.001576][T15281] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 281.010184][ T8186] hsr_slave_1: left promiscuous mode [ 281.019674][ T8186] veth1_macvtap: left promiscuous mode [ 281.029400][ T8186] veth0_macvtap: left promiscuous mode [ 281.040834][T15272] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.3212: corrupted inode contents [ 281.053854][T15281] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3214: lblock 2 mapped to illegal pblock 2 (length 1) [ 281.070512][T15272] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3212: mark_inode_dirty error [ 281.082051][T15281] EXT4-fs (loop3): Remounting filesystem read-only [ 281.083458][T15272] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3212: Failed to acquire dquot type 0 [ 281.100593][T15281] EXT4-fs (loop3): 1 orphan inode deleted [ 281.101364][ T8186] pimreg (unregistering): left allmulticast mode [ 281.108192][T15272] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3212: corrupted inode contents [ 281.138536][T15272] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #16: comm syz.2.3212: mark_inode_dirty error [ 281.152214][T15272] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3212: corrupted inode contents [ 281.166304][T15272] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3212: mark_inode_dirty error [ 281.178611][T15272] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3212: corrupted inode contents [ 281.179087][ T8186] team0 (unregistering): Port device dummy0 removed [ 281.198544][T15272] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 281.211165][T15272] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3212: corrupted inode contents [ 281.225779][T15272] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.3212: mark_inode_dirty error [ 281.238252][T15272] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 281.251180][T15272] EXT4-fs (loop2): 1 truncate cleaned up [ 281.313634][T15272] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.316341][T15223] chnl_net:caif_netlink_parms(): no params data found [ 281.353505][T15272] EXT4-fs unmount: 75 callbacks suppressed [ 281.353525][T15272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.452451][T15314] netlink: 'syz.2.3225': attribute type 10 has an invalid length. [ 281.505802][T15321] loop4: detected capacity change from 0 to 512 [ 281.530965][T15321] EXT4-fs: test_dummy_encryption option not supported [ 281.550481][T15322] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3225'. [ 281.640663][T15309] loop4: detected capacity change from 0 to 512 [ 281.675473][T15336] lo speed is unknown, defaulting to 1000 [ 281.681618][T15336] lo speed is unknown, defaulting to 1000 [ 281.760302][T15336] loop3: detected capacity change from 0 to 128 [ 281.767438][T15336] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 281.782813][T15336] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 281.812830][T15223] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.820137][T15223] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.859132][T15309] EXT4-fs (loop4): 1 orphan inode deleted [ 281.879832][T15309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.901031][T15223] bridge_slave_0: entered allmulticast mode [ 281.911384][T15342] loop2: detected capacity change from 0 to 1024 [ 281.930091][T15223] bridge_slave_0: entered promiscuous mode [ 281.955788][T15223] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.963261][T15223] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.967224][T15342] EXT4-fs: Ignoring removed bh option [ 281.970938][T15223] bridge_slave_1: entered allmulticast mode [ 281.983082][T15223] bridge_slave_1: entered promiscuous mode [ 281.994223][T15342] EXT4-fs: inline encryption not supported [ 282.000752][T15342] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 282.015075][T15342] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 282.024470][T15342] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.3227: lblock 2 mapped to illegal pblock 2 (length 1) [ 282.026557][T15223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.048447][T15339] netlink: 'syz.5.3226': attribute type 4 has an invalid length. [ 282.049768][T15223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.067875][T15342] EXT4-fs (loop2): Remounting filesystem read-only [ 282.071232][ T8186] ------------[ cut here ]------------ [ 282.080075][ T8186] WARNING: CPU: 1 PID: 8186 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 282.080167][T15342] EXT4-fs (loop2): 1 orphan inode deleted [ 282.080729][T15342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.090078][ T8186] Modules linked in: [ 282.090104][ T8186] CPU: 1 UID: 0 PID: 8186 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.124404][ T8186] Tainted: [W]=WARN [ 282.128506][ T8186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.139074][ T8186] Workqueue: netns cleanup_net [ 282.144111][ T8186] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 282.149761][ T8186] Code: 48 8d bb 70 0e 00 00 e8 05 ad b7 fc 48 8b bb 70 0e 00 00 e8 89 58 c4 fc 5b 41 5e 41 5f 5d e9 3e 61 b0 00 cc e8 58 55 9c fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 4a 55 9c fc 90 0f 0b 90 4c 89 f7 e8 ce [ 282.170336][ T8186] RSP: 0018:ffffc90000e3fc60 EFLAGS: 00010293 [ 282.176748][ T8186] RAX: ffffffff84baea28 RBX: ffff88810c81c680 RCX: ffff888119415280 [ 282.185105][ T8186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810c81d4c0 [ 282.193377][ T8186] RBP: ffffffff86c91000 R08: 0001ffff8684802f R09: 0000000000000000 [ 282.201649][ T8186] R10: ffffc90000e3fbe8 R11: 0001c90000e3fbe8 R12: ffffffff86c91020 [ 282.210030][ T8186] R13: ffff88810c81c6a8 R14: ffff88810c81d4c0 R15: ffff88810c81c680 [ 282.218066][ T8186] FS: 0000000000000000(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 282.227283][ T8186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.234127][ T8186] CR2: ffffffffffec0000 CR3: 0000000125c10000 CR4: 00000000003506f0 [ 282.242364][ T8186] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.251234][ T8186] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 282.259427][ T8186] Call Trace: [ 282.262850][ T8186] [ 282.265807][ T8186] xfrm_net_exit+0x2d/0x60 [ 282.270340][ T8186] ops_undo_list+0x278/0x410 [ 282.275018][ T8186] cleanup_net+0x2f4/0x4f0 [ 282.279549][ T8186] process_scheduled_works+0x4cb/0x9d0 [ 282.285173][ T8186] worker_thread+0x582/0x770 [ 282.289990][ T8186] kthread+0x486/0x510 [ 282.294166][ T8186] ? finish_task_switch+0xad/0x2b0 [ 282.299448][ T8186] ? __pfx_worker_thread+0x10/0x10 [ 282.304760][ T8186] ? __pfx_kthread+0x10/0x10 [ 282.309564][ T8186] ret_from_fork+0x122/0x1b0 [ 282.314444][ T8186] ? __pfx_kthread+0x10/0x10 [ 282.319251][ T8186] ret_from_fork_asm+0x1a/0x30 [ 282.324183][ T8186] [ 282.327239][ T8186] ---[ end trace 0000000000000000 ]--- [ 282.334286][T14899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.375244][T15223] team0: Port device team_slave_0 added [ 282.382936][T15223] team0: Port device team_slave_1 added [ 282.411386][T11248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.422035][T11814] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 282.446766][ T10] hid-generic 0003:0008:0000.0032: unknown main item tag 0x0 [ 282.454366][ T10] hid-generic 0003:0008:0000.0032: unknown main item tag 0x0 [ 282.465787][T15223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.472958][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.499646][T15223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.511109][ T10] hid-generic 0003:0008:0000.0032: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 282.553351][T15223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.560413][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.562064][T15377] netlink: 'syz.2.3229': attribute type 21 has an invalid length. [ 282.586687][T15223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.605239][T15376] fido_id[15376]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 282.674657][T15386] netlink: 'syz.3.3234': attribute type 21 has an invalid length. [ 282.696201][T15223] hsr_slave_0: entered promiscuous mode [ 282.702453][T15223] hsr_slave_1: entered promiscuous mode [ 282.720462][T15386] bridge: RTM_NEWNEIGH with invalid ether address [ 282.731270][T15386] loop3: detected capacity change from 0 to 512 [ 282.738175][T15386] EXT4-fs: Ignoring removed nobh option [ 282.780985][T15386] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.3234: corrupted inode contents [ 282.813514][T15386] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #3: comm syz.3.3234: mark_inode_dirty error [ 282.841657][T15386] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.3234: corrupted inode contents [ 282.857279][T15400] bridge: RTM_NEWNEIGH with invalid ether address [ 282.871860][T15400] loop2: detected capacity change from 0 to 512 [ 282.885370][T15400] EXT4-fs: Ignoring removed nobh option [ 282.891587][T15386] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3234: mark_inode_dirty error [ 282.962266][T15386] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3234: Failed to acquire dquot type 0 [ 282.976902][T15386] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.3234: corrupted inode contents [ 282.989188][T15386] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #16: comm syz.3.3234: mark_inode_dirty error [ 283.004460][T15400] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.3236: corrupted inode contents [ 283.016672][T15400] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #3: comm syz.2.3236: mark_inode_dirty error [ 283.028804][T15386] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.3234: corrupted inode contents [ 283.044923][T15400] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.3236: corrupted inode contents [ 283.057274][T15400] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3236: mark_inode_dirty error [ 283.057453][T15386] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3234: mark_inode_dirty error [ 283.069543][T15400] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3236: Failed to acquire dquot type 0 [ 283.093225][T15400] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3236: corrupted inode contents [ 283.105866][T15400] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #16: comm syz.2.3236: mark_inode_dirty error [ 283.105973][T15386] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.3234: corrupted inode contents [ 283.130505][T15400] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3236: corrupted inode contents [ 283.134980][T15386] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 283.150856][T15400] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3236: mark_inode_dirty error [ 283.163608][T15400] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3236: corrupted inode contents [ 283.175991][T15400] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 283.179865][T15386] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.3234: corrupted inode contents [ 283.198313][T15386] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.3234: mark_inode_dirty error [ 283.198386][T15400] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3236: corrupted inode contents [ 283.211405][T15386] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 283.241068][T15386] EXT4-fs (loop3): 1 truncate cleaned up [ 283.247564][T15386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.261936][T15386] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.271145][T15400] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.3236: mark_inode_dirty error [ 283.302755][T15223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 283.335333][T15386] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.393175][T15400] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 283.411174][T15223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 283.419338][T15400] EXT4-fs (loop2): 1 truncate cleaned up [ 283.425803][T15400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.438936][T15400] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.441281][T15223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 283.591048][T15442] lo speed is unknown, defaulting to 1000 [ 283.598290][T15442] lo speed is unknown, defaulting to 1000 [ 283.763897][T15443] loop4: detected capacity change from 0 to 128 [ 283.771117][T15443] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 283.786562][T15443] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 283.876262][T15223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.911356][T15400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.944491][T15446] loop3: detected capacity change from 0 to 512 [ 283.965786][T15446] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.035527][T15446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.055420][T15223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.076143][T15223] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.082541][T15446] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.095785][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.103325][ T8186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.115468][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3240'. [ 284.127880][ T8186] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.135156][ T8186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.167767][T15223] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.178637][T15223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.211277][T11814] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 284.233818][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 284.233838][ T29] audit: type=1400 audit(1760139663.775:9604): avc: denied { write } for pid=15445 comm="syz.3.3240" name="vlan0" dev="proc" ino=4026533554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 284.349496][T15484] bridge: RTM_NEWNEIGH with invalid ether address [ 284.366623][T15484] loop4: detected capacity change from 0 to 512 [ 284.402910][T15223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.412082][T15484] EXT4-fs: Ignoring removed nobh option [ 284.425037][T14822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.498678][T15484] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #3: comm syz.4.3246: corrupted inode contents [ 284.521556][T15501] netlink: 'syz.3.3247': attribute type 10 has an invalid length. [ 284.542760][T15484] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #3: comm syz.4.3246: mark_inode_dirty error [ 284.556281][T15501] team0: Port device dummy0 added [ 284.570237][T15484] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #3: comm syz.4.3246: corrupted inode contents [ 284.577098][T15501] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3247'. [ 284.584594][T15223] veth0_vlan: entered promiscuous mode [ 284.605873][T15223] veth1_vlan: entered promiscuous mode [ 284.611972][T15484] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.3246: mark_inode_dirty error [ 284.642629][T15513] loop2: detected capacity change from 0 to 128 [ 284.681993][T15513] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 284.701957][T15505] lo speed is unknown, defaulting to 1000 [ 284.713164][T15505] lo speed is unknown, defaulting to 1000 [ 284.722675][T15223] veth0_macvtap: entered promiscuous mode [ 284.742565][T15484] Quota error (device loop4): write_blk: dquota write failed [ 284.760591][T15223] veth1_macvtap: entered promiscuous mode [ 284.766934][T15484] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 284.792315][T15525] netlink: 'syz.3.3249': attribute type 21 has an invalid length. [ 284.792384][T15513] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 284.810110][T15484] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3246: Failed to acquire dquot type 0 [ 284.823311][T15484] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.3246: corrupted inode contents [ 284.826945][T15223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.846649][T15525] bridge: RTM_NEWNEIGH with invalid ether address [ 284.859452][T15223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.867002][T15525] loop3: detected capacity change from 0 to 512 [ 284.893681][T15527] netlink: 'syz.5.3250': attribute type 21 has an invalid length. [ 284.905602][T15525] EXT4-fs: Ignoring removed nobh option [ 284.925273][T15484] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #16: comm syz.4.3246: mark_inode_dirty error [ 284.968804][T15525] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.3249: corrupted inode contents [ 284.969763][T15484] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.3246: corrupted inode contents [ 285.019809][T15484] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3246: mark_inode_dirty error [ 285.033615][ T8186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.052510][T15525] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #3: comm syz.3.3249: mark_inode_dirty error [ 285.057291][ T8186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.082354][T15484] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.3246: corrupted inode contents [ 285.096590][ T8186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.107231][T15484] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 285.118083][ T8186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.127216][T15484] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.3246: corrupted inode contents [ 285.139677][T15484] EXT4-fs error (device loop4): ext4_truncate:4637: inode #16: comm syz.4.3246: mark_inode_dirty error [ 285.157696][T15525] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.3249: corrupted inode contents [ 285.197738][T15484] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 285.207628][T15525] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3249: mark_inode_dirty error [ 285.286284][T15484] EXT4-fs (loop4): 1 truncate cleaned up [ 285.292506][T15525] Quota error (device loop3): write_blk: dquota write failed [ 285.301533][T15484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.333977][T15525] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 285.352422][T15484] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.362656][T15525] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3249: Failed to acquire dquot type 0 [ 285.385187][T15484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.420951][T15525] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.3249: corrupted inode contents [ 285.424554][T15542] lo speed is unknown, defaulting to 1000 [ 285.439550][T15542] lo speed is unknown, defaulting to 1000 [ 285.446986][T15544] loop5: detected capacity change from 0 to 128 [ 285.454200][T15544] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 285.468205][T15544] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.522888][T15525] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #16: comm syz.3.3249: mark_inode_dirty error [ 285.536879][ T3386] hid-generic 0003:0008:0000.0033: unknown main item tag 0x0 [ 285.544824][ T3386] hid-generic 0003:0008:0000.0033: unknown main item tag 0x0 [ 285.553333][ T3386] hid-generic 0003:0008:0000.0033: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 285.575614][T15525] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.3249: corrupted inode contents [ 285.648428][T15525] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3249: mark_inode_dirty error [ 285.666808][T15548] fido_id[15548]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 285.689436][T15550] loop4: detected capacity change from 0 to 2048 [ 285.718211][T15551] lo speed is unknown, defaulting to 1000 [ 285.724771][T15551] lo speed is unknown, defaulting to 1000 [ 285.732514][T15525] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.3249: corrupted inode contents [ 285.745198][T15525] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 285.756140][T15553] loop0: detected capacity change from 0 to 128 [ 285.762950][T15553] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 285.779477][T15553] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.798380][T15550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.825574][T15550] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.837819][T15525] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.3249: corrupted inode contents [ 285.863798][T15525] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.3249: mark_inode_dirty error [ 285.876702][T14899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.897264][T15525] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 285.917087][T15525] EXT4-fs (loop3): 1 truncate cleaned up [ 285.925074][T15525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.954998][T15525] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.983643][T11808] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.994350][T15525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.092342][ T8186] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.148912][T15565] netlink: 'syz.4.3262': attribute type 21 has an invalid length. [ 286.217171][T15569] loop0: detected capacity change from 0 to 1024 [ 286.247480][T15574] loop4: detected capacity change from 0 to 1024 [ 286.252998][T15569] EXT4-fs: Ignoring removed bh option [ 286.259268][T15569] EXT4-fs: inline encryption not supported [ 286.272670][T15569] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 286.285587][T11808] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.301269][T15574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 286.302824][T15578] netlink: 'syz.3.3266': attribute type 1 has an invalid length. [ 286.321682][T15578] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3266'. [ 286.323784][T15569] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 286.340409][T15574] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.353746][T15569] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3263: lblock 2 mapped to illegal pblock 2 (length 1) [ 286.386773][T14899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 286.405950][T15569] EXT4-fs (loop0): Remounting filesystem read-only [ 286.413152][T15569] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 286.460680][T15569] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 286.479307][T15569] EXT4-fs (loop0): 1 orphan inode deleted [ 286.506119][T15569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.513934][T15583] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 286.573593][T15223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.674700][T15603] loop4: detected capacity change from 0 to 512 [ 286.703570][T15603] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3276: bg 0: block 5: invalid block bitmap [ 286.727316][T15603] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 286.746741][T15610] loop0: detected capacity change from 0 to 1024 [ 286.761758][T15610] EXT4-fs: Ignoring removed bh option [ 286.794127][T15606] lo speed is unknown, defaulting to 1000 [ 286.800258][T15606] lo speed is unknown, defaulting to 1000 [ 286.839789][T15611] loop2: detected capacity change from 0 to 128 [ 286.846580][T15611] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 286.860598][T15611] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.870168][T15603] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3276: invalid indirect mapped block 3 (level 2) [ 286.884304][T15610] EXT4-fs: inline encryption not supported [ 286.899949][T15610] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 286.914569][T15603] EXT4-fs (loop4): 1 orphan inode deleted [ 286.920394][T15603] EXT4-fs (loop4): 1 truncate cleaned up [ 286.927059][T15610] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 286.937305][T15610] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3271: lblock 2 mapped to illegal pblock 2 (length 1) [ 286.941006][T15603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.952136][T15610] EXT4-fs (loop0): Remounting filesystem read-only [ 286.970982][T15610] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 287.002447][T15610] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 287.011712][T15610] EXT4-fs (loop0): 1 orphan inode deleted [ 287.025362][T15610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.027593][T14899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.109389][ T29] audit: type=1326 audit(1760139666.645:9605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15617 comm="syz.5.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746bf8eec9 code=0x7ffc0000 [ 287.151282][T15620] loop3: detected capacity change from 0 to 128 [ 287.160137][T15616] lo speed is unknown, defaulting to 1000 [ 287.174154][T15616] lo speed is unknown, defaulting to 1000 [ 287.187856][T15223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.223892][T15620] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 287.243875][T15625] loop4: detected capacity change from 0 to 1024 [ 287.251719][T15625] EXT4-fs: Ignoring removed bh option [ 287.260483][ T3362] hid-generic 0003:0008:0000.0034: unknown main item tag 0x0 [ 287.267913][T15625] EXT4-fs: inline encryption not supported [ 287.268161][ T3362] hid-generic 0003:0008:0000.0034: unknown main item tag 0x0 [ 287.283881][ T3362] hid-generic 0003:0008:0000.0034: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 287.312799][T15625] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 287.352978][T15620] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.363681][T15628] fido_id[15628]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 287.372362][T15625] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 287.395914][T15625] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3282: lblock 2 mapped to illegal pblock 2 (length 1) [ 287.414152][T15625] EXT4-fs (loop4): Remounting filesystem read-only [ 287.420931][T15625] EXT4-fs (loop4): 1 orphan inode deleted [ 287.431776][T15625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.495423][ T8189] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.524110][T15634] loop0: detected capacity change from 0 to 2048 [ 287.539138][T15636] netlink: 'syz.2.3285': attribute type 1 has an invalid length. [ 287.547034][T15636] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3285'. [ 287.562733][T14899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.606428][T15634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.637241][T15623] loop5: detected capacity change from 0 to 1764 [ 287.653734][T15634] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.703970][T15623] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 287.732695][T15223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.757369][ T3399] hid-generic 0003:0008:0000.0035: unknown main item tag 0x4 [ 287.765867][ T3399] hid-generic 0003:0008:0000.0035: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 287.801848][T15651] fido_id[15651]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 287.837928][T15654] netlink: 'syz.0.3288': attribute type 10 has an invalid length. [ 287.873070][T15654] team0: Port device dummy0 added [ 287.881653][ T8186] Bluetooth: hci0: Frame reassembly failed (-84) [ 287.888798][T15660] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3288'. [ 288.013006][T15666] bridge: RTM_NEWNEIGH with invalid ether address [ 288.053869][T15666] loop5: detected capacity change from 0 to 512 [ 288.079956][T15666] EXT4-fs: Ignoring removed nobh option [ 288.104071][T15666] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #3: comm syz.5.3294: corrupted inode contents [ 288.116486][T15666] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #3: comm syz.5.3294: mark_inode_dirty error [ 288.129383][T15666] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #3: comm syz.5.3294: corrupted inode contents [ 288.141795][T15666] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3294: mark_inode_dirty error [ 288.154130][T15666] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3294: Failed to acquire dquot type 0 [ 288.166315][T15666] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.3294: corrupted inode contents [ 288.178844][T15666] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #16: comm syz.5.3294: mark_inode_dirty error [ 288.190975][T15666] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.3294: corrupted inode contents [ 288.205616][T15666] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3294: mark_inode_dirty error [ 288.232891][T15666] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.3294: corrupted inode contents [ 288.259770][T15666] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 288.269597][T15666] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.3294: corrupted inode contents [ 288.285232][T15666] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.3294: mark_inode_dirty error [ 288.297448][ T8186] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 288.298351][T15666] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 288.317934][T15666] EXT4-fs (loop5): 1 truncate cleaned up [ 288.330017][T15666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.355300][T15666] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.459294][T15680] lo speed is unknown, defaulting to 1000 [ 288.466420][T15680] lo speed is unknown, defaulting to 1000 [ 288.627029][T15681] loop0: detected capacity change from 0 to 128 [ 288.634304][T15681] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 288.662584][T15681] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 288.761368][T15666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.941983][ T3399] hid-generic 0003:0008:0000.0036: unknown main item tag 0x0 [ 288.949491][ T3399] hid-generic 0003:0008:0000.0036: unknown main item tag 0x0 [ 288.966276][ T3399] hid-generic 0003:0008:0000.0036: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 289.008682][T15693] fido_id[15693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 289.030174][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3305'. [ 289.088715][T11938] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 289.129279][T15697] loop2: detected capacity change from 0 to 512 [ 289.140253][T15699] loop0: detected capacity change from 0 to 512 [ 289.150457][T15699] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3306: bg 0: block 5: invalid block bitmap [ 289.176637][T15697] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 289.189742][T15699] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 289.199447][T15699] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3306: invalid indirect mapped block 3 (level 2) [ 289.204029][T15697] EXT4-fs (loop2): 1 truncate cleaned up [ 289.219317][T15697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.238504][T15694] loop5: detected capacity change from 0 to 1764 [ 289.248972][T15699] EXT4-fs (loop0): 1 orphan inode deleted [ 289.252037][T15696] hub 1-0:1.0: USB hub found [ 289.254902][T15699] EXT4-fs (loop0): 1 truncate cleaned up [ 289.255460][T15699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.259708][T15696] hub 1-0:1.0: 8 ports detected [ 289.297192][T15694] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 289.307063][ T10] hid-generic 0003:0008:0000.0037: unknown main item tag 0x4 [ 289.321151][ T10] hid-generic 0003:0008:0000.0037: hidraw0: USB HID v0.02 Device [syz0] on syz0 [ 289.337702][T15223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.361457][T15707] fido_id[15707]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 289.393024][T15223] ================================================================== [ 289.401179][T15223] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 289.408951][T15223] [ 289.411386][T15223] read-write to 0xffff888237d25ee8 of 1 bytes by task 15706 on cpu 1: [ 289.419634][T15223] folio_add_lru+0xa5/0x1f0 [ 289.424353][T15223] shmem_get_folio_gfp+0x7ab/0xd60 [ 289.429587][T15223] shmem_fault+0xf6/0x250 [ 289.433961][T15223] __do_fault+0xb9/0x200 [ 289.438230][T15223] handle_mm_fault+0xf78/0x2be0 [ 289.443269][T15223] __get_user_pages+0x102a/0x1ed0 [ 289.448305][T15223] __mm_populate+0x243/0x3a0 [ 289.452917][T15223] vm_mmap_pgoff+0x232/0x2e0 [ 289.457528][T15223] ksys_mmap_pgoff+0xc2/0x310 [ 289.462318][T15223] x64_sys_call+0x14a3/0x3000 [ 289.467012][T15223] do_syscall_64+0xd2/0x200 [ 289.471532][T15223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.477608][T15223] [ 289.480046][T15223] read to 0xffff888237d25ee8 of 1 bytes by task 15223 on cpu 0: [ 289.487687][T15223] __lru_add_drain_all+0x17e/0x450 [ 289.492917][T15223] lru_add_drain_all+0x10/0x20 [ 289.497718][T15223] invalidate_bdev+0x47/0x70 [ 289.502330][T15223] ext4_put_super+0x624/0x7d0 [ 289.507022][T15223] generic_shutdown_super+0xe6/0x210 [ 289.512317][T15223] kill_block_super+0x2a/0x70 [ 289.517014][T15223] ext4_kill_sb+0x42/0x80 [ 289.521465][T15223] deactivate_locked_super+0x75/0x1c0 [ 289.526885][T15223] deactivate_super+0x97/0xa0 [ 289.531677][T15223] cleanup_mnt+0x269/0x2e0 [ 289.536232][T15223] __cleanup_mnt+0x19/0x20 [ 289.540664][T15223] task_work_run+0x12e/0x1a0 [ 289.545272][T15223] exit_to_user_mode_loop+0xed/0x110 [ 289.550851][T15223] do_syscall_64+0x1d6/0x200 [ 289.555462][T15223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.561455][T15223] [ 289.563787][T15223] value changed: 0x1b -> 0x1e [ 289.568548][T15223] [ 289.570961][T15223] Reported by Kernel Concurrency Sanitizer on: [ 289.577132][T15223] CPU: 0 UID: 0 PID: 15223 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.589221][T15223] Tainted: [W]=WARN [ 289.593047][T15223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.603227][T15223] ================================================================== [ 289.640225][T15706] loop3: detected capacity change from 0 to 512 [ 289.652808][T11248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.684983][T15706] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 289.693922][T15706] EXT4-fs (loop3): orphan cleanup on readonly fs [ 289.701759][T15706] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.3308: corrupted inode contents [ 289.714583][T15706] EXT4-fs (loop3): Remounting filesystem read-only [ 289.721317][T15706] EXT4-fs (loop3): 1 truncate cleaned up [ 289.727542][T11808] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 289.738398][T11808] __quota_error: 68 callbacks suppressed [ 289.738413][T11808] Quota error (device loop3): write_blk: dquota write failed [ 289.751744][T11808] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 289.761936][T11808] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 289.772809][T11808] Quota error (device loop3): write_blk: dquota write failed [ 289.780373][T11808] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 289.790484][T11808] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 289.800755][T11808] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 289.809934][T11808] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 289.820255][T15706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.875078][T14822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.882902][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 289.884292][ T3528] Bluetooth: hci0: command 0x1003 tx timeout