last executing test programs: 3.65605453s ago: executing program 3 (id=3584): r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1c00, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xaa25, 0x8003}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000000000000, r0, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x2000, 0x10000, 0x7, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[], 0x5b0) close(r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r3, 0x3, 0x1) getdents64(r3, 0x0, 0x0) 3.048189151s ago: executing program 3 (id=3592): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0xa8}, 0x100002, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) fchown(r3, 0x0, 0xffffffffffffffff) 2.653858029s ago: executing program 2 (id=3595): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0xa8}, 0x100002, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) fchown(r4, 0x0, 0xffffffffffffffff) 2.212331797s ago: executing program 3 (id=3602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r1 = socket$kcm(0xa, 0x2, 0x73) dup2(r0, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) ioprio_get$uid(0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x418, 0x0, 0x230, 0xffffffff, 0x300, 0x300, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0x0, 'tunl0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x52}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x7, 0x4, 0xc, 0x0, 0x4], 0x3, 0x7}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @rand_addr=0x64010101, @multicast1, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0x2}}, @common=@ttl={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7f, 0xc, [0xe, 0x22, 0x3e, 0x11, 0x1b, 0x7, 0x15, 0x31, 0x12, 0xe, 0x27, 0x18, 0x26, 0x38, 0x2a, 0x33], 0x0, 0x7fffffff, 0x81}}}, {{@ip={@loopback, @local, 0xffffffff, 0x0, 'caif0\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @multicast2, @loopback, @icmp_id=0x64, @gre_key=0xfffe}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x78195242f88d37ad, @rand_addr=0x64010100, @broadcast, @icmp_id=0x67, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000280)=""/6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800400, &(0x7f0000003240)=ANY=[], 0x2, 0x33c, &(0x7f0000000340)="$eJzs3M9rK1UUwPGTyY8mKW2yEEVBetGNboY2uhaDtCAGLG0jtoIwbScaMiYlEyoRse3Krbh3JbgoXXZXUP+Bbtzpxo27bgQXdqFvHvOrmfxq07yU9LXfD5Tc3HNPMjP3JpwZOrn4+LsvahVbrxgt0dJKYiIilyJ50SQUCx41r52SqENJBK0PiqXS8ppSK8WNtwpKqfmFn7/8OhMEz2bkPP/pxd+Fv85fPH/54snG51VbVW1Vb7SUobYbf7aMbctUu1W7piu1apmGbapq3TabfrzhxytWY2+vrYz67lx2r2natjLqbVUz26rVUK1mWxmfGdW60nVdzWUFNykfr60ZxTGTdya8MbgjzWbRiItIpi9SPp7KBgEAgKnqrf81t6S/Vf3/5uw/v7+6vrkl81797w7u1P8nr/3amv3odD6o/89Sg+r/t//wX6ur/k+LyDj1/w9yi/q/vyJ6XJ6p/sf9sJDq64p1PXPr/2zw+fUcfXKy6DWo/wEAAAAAAAAAAAAAAAAAAAAAeB5cOk7OcZxc+Bj+dW4hCJ7jQRo2/zMiknZn32H+H7L1zS1JezfuuXNsfbtf3i/7j270f8cnpixKTv7z1kPYJ44T3nmkXHn5xToI8g/2y3EvUqxIVSwxZUlyku/Nd5yV90vLS8oX5F/dppSN5hckJy8Mzi905wfvn5I3Xo/k65KT33akIZbseuu6k//NklLvfVjqyc944wAAAAAAeAh0dWXg+buuD4v7vzJSrHiXiYZcH/DPrxcHnp8ncq8kpr33AAAAAAA8Dnb7q5phWWbzmkZGbh4zfiMx2uBUT0/yusHxyB6Ouj0p70KGyLAx8QFHTJPoGDdaM34c8ah2NcJ/pOgKpYPO8Q5vuP8Tm6/DaI8mI2Qlejd+we1Qt3z3o2BHrnrCy0apIcdZVvtfR+taCd1HNTmx9fzS9z/9O7kPyDun4Qq4efBRpCc58pq3LDPdu+q8RnL4N4Y2gW8dAAAAANPQKfrDnnej4dhUNgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfmTn7Sr6cx7X0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7ounAQAA//8QRPLT") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000080000e00b53767961a2d037212f76fc8121b43886634a736277dc8b4c193ff94f8fb1f4d20fe194f6d6e0cfee3b3006cee4102fe614f51711b04a3485db55b5df0734179136700"/102, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x14, 0x0, &(0x7f0000000500)="3d25ab555b19c4cbd0017085080040fee5a990ec", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x2) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.145447229s ago: executing program 3 (id=3603): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") gettid() r0 = gettid() tkill(r0, 0x28) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x30, r1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="08004500001c006600000011907800000000e0000029884b0f4ab24154fd"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071105300000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r6, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b00000008000200000000000800020009000000070001006962000034000280080003006400000008000400090000000800030051bd000008000300fc00000008000300a90f0000080001001b0000000c00098008000200000000001c000980080002000e00000008000200e5d8000008000200060000005c0004800900010073797a31000000002c000780080002000300000008000400f50c00000800020005000000080001000000000008000100100000000900010073797a31000000001300010062726f6164636173742d6c696e6b0000e8000280080001000300000008000200020000004c000380080002008100000008000200ff01000008000100000400000800010008000000080002000000000008000100ffff00000800020005000000080002005d0000000800010001000100040004002c0003800800020007000000080001000000000008000100aede010008000100ff7f000008000100810000001c0003800800010007000000080001000600000008000200050000003c000380080002000200000008000100b73500000800010007000000080002000002000008000100ae0d0000080002000700000008000100090000001400028008000100fdffffff08000100060000000c000980080002005b000000600005800800010065746800080001006574680007000100696200003c00028008000400000000400800040004000000080001"], 0x2ac}}, 0x0) r7 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x1500, 0x1, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440), 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xa4c42, 0x108) fallocate(r1, 0x0, 0xbf5, 0x2000402) 1.634528729s ago: executing program 2 (id=3608): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x0, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x0) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) close(r0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000100)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}, 0x0) open(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r7 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_timeval(r7, 0x1, 0x43, 0x0, &(0x7f0000000180)) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 1.501675561s ago: executing program 2 (id=3611): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_pts(r1, 0x82082) pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff}, 0x80880) r8 = pidfd_getfd(r0, r4, 0x0) sendmsg$netlink(r0, &(0x7f0000000900)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)=[{&(0x7f00000004c0)={0x280, 0x2b, 0x20, 0x70bd27, 0x25dfdbfd, "", [@typed={0x4, 0x76}, @generic="f40bf0f344913d9fea69637e2082d40ed4dea6fce25d5f3b0c00f81047fd5f6cad30dfd129c3600b5959dcd744f65a46c28e105291d12981c40ded91e1de1244fe68ee14cf74188f6d7be61ca4f7b6efaddb2d8f08e2e8e35956f9fb53b82d0b0803bf85338b", @nested={0x129, 0x134, 0x0, 0x1, [@nested={0x4, 0x31}, @generic="ee099fa8bc0849a205848be1f8096c17d082da5ab32b1e6cc1d69718470b436e6d4ccf3520d50c6fa09d93e85263", @nested={0x4, 0x147}, @generic="b6dacdc518c81648e7bd6b4ccea845db8b0d161d1a8b1b6b7ce73ec7fb976032ac862660e34a8217e4bfaf809e15ef7267611e82eb0094f7c0b2e238c2a0de099667472ee52ba4cb2ddfbfcb0c7304e5d451ad5778f4e849431f52b2c129ed8521e3d7e2f50c52b6a3d2b317727405384bdb8cf28a471baf5634ef2686295801224d1fedfa8fb8316d5fb0c3b987b348e6579a16a5353bd5d246d95166dcf88a87da33a36a51ac78ed94ebfb6b157715c3159fd26b56220d81745fe944bf98557f", @generic="22760c774081134c4834c8b37b8de05595d732bd44878f6c5d74", @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @generic="bd9a594a9fdb4b4d55179d55ad413b1cefc95cd429c57d4169db45eec87ae668aa37b39e2df54738d73ff10006843a5ab28222724cb587c90043979c78888d7573b02d21ebb0b40d0a6e52c5d2b63c904fc59d2a5a866b95ab03c254aedc7ac3c9bc35457c90f80198575082d24bf244835ea2949282ec04a177eea952927a786633b67f57892e655cbe03270db1cb1bacfd8844041726fed7bd4a46af9de319c4fd3e62d974bc2a49172c483d50d0bdd6e09174e046b13bc652c944ab6d3629724397218bd38086c17291f74e73d651d01697e3b25482"]}, 0x280}], 0x1, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r7, r2, r3, 0xffffffffffffffff, r8]}}], 0x90, 0x4000000}, 0xc009) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0xf00) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f00000028c0)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.115417659s ago: executing program 3 (id=3612): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0xa8}, 0x100002, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) fchown(r3, 0x0, 0xffffffffffffffff) 1.008821761s ago: executing program 2 (id=3614): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x40003, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r1, 0x6b03, 0xd5c5, 0x4, 0x0, 0x0) 871.457294ms ago: executing program 1 (id=3616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff0200"], 0x0) 838.848144ms ago: executing program 2 (id=3617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a3000000000"], 0xa4}}, 0x0) 827.966594ms ago: executing program 1 (id=3618): socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000200000000000000000000000006fa84215380fedf841868633fcf8b49b90dc206ada4c3a5fccbc7d84b6d09f88a4329f3f"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180057df8976fdc6ea910000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x3, 0x9, 0xb, 0x8}, {0xfffb, 0x23, 0x1, 0x7}, {0x4, 0x87, 0x2, 0xffffff7f}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r7) getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r8, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @local}, 0x14) 770.791385ms ago: executing program 2 (id=3619): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 687.742447ms ago: executing program 0 (id=3623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000007112220000000000950000000000000011942f18c05e8b6a6d1dabdb994b5246c73758baeea571c007bf04086d049e77281d6a2127298b0b582dd5877b5d519080c954026b0b8df08f5368f8e007ba1286cb974e9fa98500b09fab"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setitimer(0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = io_uring_setup(0x5cf0, &(0x7f0000000100)={0x0, 0x9371, 0x0, 0xfffffffd, 0x20}) close(r2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r3, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) getxattr(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) utimes(&(0x7f0000000340)='./file0\x00', 0x0) 630.211268ms ago: executing program 1 (id=3625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000007112220000000000950000000000000011942f18c05e8b6a6d1dabdb994b5246c73758baeea571c007bf04086d049e77281d6a2127298b0b582dd5877b5d519080c954026b0b8df08f5368f8e007ba1286cb974e9fa98500b09fab"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setitimer(0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = io_uring_setup(0x5cf0, &(0x7f0000000100)={0x0, 0x9371, 0x0, 0xfffffffd, 0x20}) close(r2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r3, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) getxattr(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) utimes(&(0x7f0000000340)='./file0\x00', 0x0) 617.495938ms ago: executing program 0 (id=3626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 572.369919ms ago: executing program 0 (id=3628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff0200"], 0x0) 551.51125ms ago: executing program 0 (id=3629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000007112220000000000950000000000000011942f18c05e8b6a6d1dabdb994b5246c73758baeea571c007bf04086d049e77281d6a2127298b0b582dd5877b5d519080c954026b0b8df08f5368f8e007ba1286cb974e9fa98500b09fab"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setitimer(0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = io_uring_setup(0x5cf0, &(0x7f0000000100)={0x0, 0x9371, 0x0, 0xfffffffd, 0x20}) close(r2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r3, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) getxattr(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) utimes(&(0x7f0000000340)='./file0\x00', 0x0) 532.2124ms ago: executing program 1 (id=3630): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder1\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = getpid() getpriority(0x0, r0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x5, 0x3, 0xffb, 0xd4c, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x1c000e80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r2}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000001080)=@newtaction={0x674, 0x30, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{0x660, 0x1, [@m_nat={0xf0, 0xb, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xff, 0x4, 0x4, 0x10001}, @broadcast, @private=0xa010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0xa, 0x3, 0xe40}, @loopback, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x598, 0x5, 0x1, 0xd13, 0x4}, @multicast2, @private=0xa010101, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xb, 0x2, 0x6, 0xb3}, @private=0xa010100, @empty, 0xffffff00, 0x3}}]}, {0x26, 0x6, "b9a6ac5b3d59c7f0bfae58c94ad0ae7ca3b0658e884df9554febcc0984683afc0877"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_sample={0x144, 0x80, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x9, 0xffffffffffffffff, 0x1000, 0xff}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x19, 0x17b, 0x10000000, 0x10000, 0x9}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0xe, 0x1, 0xffffffff, 0x7}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xb6, 0x6, "548bc743ed9a31139d3914e2ac54ff76c0669025723ceeef506da92fe66a12934a5cfd9c7f29a80b0c8810ce9d1a7b01b7f548915e62696ce1231fea83cec9a0eb845a33c5d497c8287e30650aeee0cbb81683997a212ce6d9ce95d88e48dc20f9ab82431fd810320b4a25ddfdfed9f681241824d10c13df6522d04729fe022ee8180808f7aa00d9593433bcd36edcbe6fd9920901040c6f50d5b7589f4766d12a4c667f485dd71f0fa5ef6d0090ba778686"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x7c, 0x16, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfffffffb, 0x20000000, 0x1, 0x5}, @broadcast, @local, 0xff}}]}, {0x29, 0x6, "49a0e6e12ead954b7ca216ce14b098187fcd2e9d51b68edf83eaeb21dd6431201d546a6170"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x114, 0xa, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xe}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xfff2}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_MARK={0x8}]}, {0xbe, 0x6, "c81a2088071cea1637b9d4b4799dadc3ec182a57a7fc9932777cef54aef6bd6c4d397cd1532ebbda116c6ac768c4890fd02338040d91527228e46de50b6f878e8fe502ea2fb693714d1d350d64930f15ae6b19779b668b5b88927050410b80600e01e28be492847275b0c7aa41ab6ca31efb739eff7ebcf83d821eb694d5dacac6efc4213a6ddbac295e1569a931f050c943f4747e1af5cf4eed7b0a8f3d3964df4f345fafbd3e39fff96849a2bff61315a37e8407331a61d9ba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x114, 0x11, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0xb20f, 0x8b, 0xff, 0xffffff81}, {0x6, 0x5, 0x18, 0x4}, {0x4, 0x7, 0x6, 0x7}, {0x18, 0x2, 0x40, 0x2}, {0x6abe, 0x8, 0x2, 0x100}, {0x2, 0x8, 0x5, 0xffffa0c2}, {0x9, 0x4, 0x7, 0x14}, {0xce1, 0x70, 0x4, 0x9}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0xdbe7, 0xffffffffffffffff, 0xc400, 0xe}}]}, {0x6b, 0x6, "ae884974dd13a37deb2c33c8c97dce31a0cce1d33c4770aaa81fe48943b9cc37d6ee83db781925b4a6909adfd57ecfd7c7ba77aeecd0e1ff138c099f98e21e10e55c4068515e31aba35259293a7e0cb0a23a4540955e642b08df0a76eddc94cfeecf177e7c29b7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x184, 0x9, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80c, 0x10000, 0x3, 0x50a, 0x5}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffd}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x101}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x200, 0x1, 0x5, 0x6}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffff9, 0x0, 0x8, 0x9, 0x8}}]}, {0xf5, 0x6, "8b0d367d9e0e1a3048956830e6234f4110ecbb2d4cd13e2437f548b65edadd24dec97f7b1aff508eae3a4581a747581bc3fb265a734577c2d4edb16987839528c52b730a6ab0b779efe869c5b09ef066b59e400cb9ce2137f6b7ed2849ab78ed81a39003dca038b5dcbb5dc9a359738916982a8b9da68aa541656159443e1bac12c0ebe401257c79b941fcc57e7af594d28a7043410e123b26ac4d3c7bea35fef159d5ca9e54a251066075cfa63c47713aeb6a998c2b9550db6d39e53d2951dd6d9cba92af4661e190baa4edf7215755209737700c22fdff67924d6ede30013d029847d21411ed279e00e7f236c3750289"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x674}, 0x1, 0x0, 0x0, 0x40000}, 0x88040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000340)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 451.932351ms ago: executing program 0 (id=3632): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18f", 0x4b}, {&(0x7f0000001340)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb0270642a96a9e14d116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a95525b5f3f2edd74ae9d664a1f2e932493b61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d5", 0xe52}], 0x2}, 0x9cdc2384056b48b8) 363.257933ms ago: executing program 4 (id=3634): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r2, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r2, 0x30, 0x1, @ib={0x1b, 0x8000, 0x3, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0xf}}}, 0xa0) 323.385084ms ago: executing program 1 (id=3635): socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000200000000000000000000000006fa84215380fedf841868633fcf8b49b90dc206ada4c3a5fccbc7d84b6d09f88a4329f3f"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180057df8976fdc6ea910000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x3, 0x9, 0xb, 0x8}, {0xfffb, 0x23, 0x1, 0x7}, {0x4, 0x87, 0x2, 0xffffff7f}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r7) getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r8, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @local}, 0x14) 320.899514ms ago: executing program 4 (id=3636): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_pts(r1, 0x82082) pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff}, 0x80880) r8 = pidfd_getfd(r0, r4, 0x0) sendmsg$netlink(r0, &(0x7f0000000900)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)=[{&(0x7f00000004c0)={0x280, 0x2b, 0x20, 0x70bd27, 0x25dfdbfd, "", [@typed={0x4, 0x76}, @generic="f40bf0f344913d9fea69637e2082d40ed4dea6fce25d5f3b0c00f81047fd5f6cad30dfd129c3600b5959dcd744f65a46c28e105291d12981c40ded91e1de1244fe68ee14cf74188f6d7be61ca4f7b6efaddb2d8f08e2e8e35956f9fb53b82d0b0803bf85338b", @nested={0x129, 0x134, 0x0, 0x1, [@nested={0x4, 0x31}, @generic="ee099fa8bc0849a205848be1f8096c17d082da5ab32b1e6cc1d69718470b436e6d4ccf3520d50c6fa09d93e85263", @nested={0x4, 0x147}, @generic="b6dacdc518c81648e7bd6b4ccea845db8b0d161d1a8b1b6b7ce73ec7fb976032ac862660e34a8217e4bfaf809e15ef7267611e82eb0094f7c0b2e238c2a0de099667472ee52ba4cb2ddfbfcb0c7304e5d451ad5778f4e849431f52b2c129ed8521e3d7e2f50c52b6a3d2b317727405384bdb8cf28a471baf5634ef2686295801224d1fedfa8fb8316d5fb0c3b987b348e6579a16a5353bd5d246d95166dcf88a87da33a36a51ac78ed94ebfb6b157715c3159fd26b56220d81745fe944bf98557f", @generic="22760c774081134c4834c8b37b8de05595d732bd44878f6c5d74", @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @generic="bd9a594a9fdb4b4d55179d55ad413b1cefc95cd429c57d4169db45eec87ae668aa37b39e2df54738d73ff10006843a5ab28222724cb587c90043979c78888d7573b02d21ebb0b40d0a6e52c5d2b63c904fc59d2a5a866b95ab03c254aedc7ac3c9bc35457c90f80198575082d24bf244835ea2949282ec04a177eea952927a786633b67f57892e655cbe03270db1cb1bacfd8844041726fed7bd4a46af9de319c4fd3e62d974bc2a49172c483d50d0bdd6e09174e046b13bc652c944ab6d3629724397218bd38086c17291f74e73d651d01697e3b25482"]}, 0x280}], 0x1, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r7, r2, r3, 0xffffffffffffffff, r8]}}], 0x90, 0x4000000}, 0xc009) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0xf00) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f00000028c0)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 255.440125ms ago: executing program 0 (id=3637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd/3\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfffffffb, '\x00', r3, r2, 0x2, 0x1, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 248.226596ms ago: executing program 4 (id=3638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140"], 0xa4}}, 0x0) 219.304996ms ago: executing program 4 (id=3639): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 160.350447ms ago: executing program 4 (id=3640): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff020000000000000000"], 0x0) 159.871437ms ago: executing program 1 (id=3641): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbc, 0x0, @perf_config_ext}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="15452f1c17ce03519634b0f248cd4f35bfbe040d6bec3aac", 0x18}, {&(0x7f0000000100)="445fad3126ce24909e1424d14663981d8c0359c7bc376dafed5c51728053486f03e6c2c2c7", 0x25}], 0x2}, 0x404c080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={0x0}}, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000d40)={0x14, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) 159.208327ms ago: executing program 4 (id=3642): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='cachefiles_io_error\x00', r0, 0x0, 0x50ca57aa}, 0x18) socket$inet6(0xa, 0x3, 0x3c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[], 0x110}}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000240)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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") r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r1, &(0x7f0000000000), 0x100000, 0x3000}]) 0s ago: executing program 3 (id=3643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd/3\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfffffffb, '\x00', r3, r2, 0x2, 0x1, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x94) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): tdevsim2 netdevsim2: renamed from eth2 [ 195.755408][T12178] Falling back ldisc for ttyS3. [ 195.765235][T12178] loop4: detected capacity change from 0 to 128 [ 195.773934][T12059] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.845317][T12059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.867788][T12059] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.879306][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.886458][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.907641][T12185] netlink: 'syz.3.3020': attribute type 7 has an invalid length. [ 195.921464][ T2746] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.928627][ T2746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.966883][T12202] loop3: detected capacity change from 0 to 512 [ 195.979497][T12202] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.084351][T12059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.097085][T12208] loop4: detected capacity change from 0 to 1024 [ 196.104428][T12208] EXT4-fs: Ignoring removed orlov option [ 196.126927][T12208] EXT4-fs mount: 80 callbacks suppressed [ 196.126949][T12208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.219794][T12224] loop1: detected capacity change from 0 to 1024 [ 196.228156][T12224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.241832][T12224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.347402][T12222] __nla_validate_parse: 7 callbacks suppressed [ 196.347423][T12222] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3029'. [ 196.754450][T12059] veth0_vlan: entered promiscuous mode [ 196.776199][T12059] veth1_vlan: entered promiscuous mode [ 196.792534][T11442] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.833782][T12059] veth0_macvtap: entered promiscuous mode [ 196.860667][T12059] veth1_macvtap: entered promiscuous mode [ 196.873619][T11800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.878039][T12059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.893551][T12059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.903266][ T2746] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.950314][ T2746] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.983714][ T2746] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.013324][ T2746] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.019580][T12248] loop2: detected capacity change from 0 to 2048 [ 197.081357][T12253] loop4: detected capacity change from 0 to 2048 [ 197.089629][T12253] EXT4-fs: Ignoring removed i_version option [ 197.101282][T12248] Alternate GPT is invalid, using primary GPT. [ 197.107878][T12248] loop2: p1 p2 p3 [ 197.111719][T12248] loop2: partition table partially beyond EOD, truncated [ 197.119276][T12239] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 197.125971][T12239] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 197.138515][T12259] tmpfs: Bad value for 'mpol' [ 197.151638][T12239] vhci_hcd vhci_hcd.0: Device attached [ 197.164038][T12253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.177621][T12256] vhci_hcd: connection closed [ 197.178505][T10046] vhci_hcd: stop threads [ 197.180960][T12253] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.183445][T10046] vhci_hcd: release socket [ 197.183467][T10046] vhci_hcd: disconnect device [ 197.247011][T12266] loop2: detected capacity change from 0 to 128 [ 197.272149][T12266] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 197.320441][T12264] infiniband syz!: set active [ 197.325232][T12264] infiniband syz!: added team_slave_0 [ 197.376726][T12264] RDS/IB: syz!: added [ 197.395699][T12266] syz.2.3040: attempt to access beyond end of device [ 197.395699][T12266] loop2: rw=0, sector=97, nr_sectors = 944 limit=128 [ 197.431962][T10046] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 197.457570][T11442] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.647434][T12285] FAULT_INJECTION: forcing a failure. [ 197.647434][T12285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.660807][T12285] CPU: 0 UID: 0 PID: 12285 Comm: syz.4.3048 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 197.660910][T12285] Tainted: [W]=WARN [ 197.660973][T12285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.660988][T12285] Call Trace: [ 197.660994][T12285] [ 197.661004][T12285] __dump_stack+0x1d/0x30 [ 197.661045][T12285] dump_stack_lvl+0xe8/0x140 [ 197.661146][T12285] dump_stack+0x15/0x1b [ 197.661185][T12285] should_fail_ex+0x265/0x280 [ 197.661268][T12285] should_fail+0xb/0x20 [ 197.661289][T12285] should_fail_usercopy+0x1a/0x20 [ 197.661315][T12285] _copy_to_user+0x20/0xa0 [ 197.661399][T12285] simple_read_from_buffer+0xb5/0x130 [ 197.661429][T12285] proc_fail_nth_read+0x10e/0x150 [ 197.661462][T12285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.661535][T12285] vfs_read+0x1a5/0x770 [ 197.661563][T12285] ? __rcu_read_unlock+0x4f/0x70 [ 197.661594][T12285] ? __fget_files+0x184/0x1c0 [ 197.661696][T12285] ksys_read+0xda/0x1a0 [ 197.661766][T12285] __x64_sys_read+0x40/0x50 [ 197.661796][T12285] x64_sys_call+0x27c0/0x3000 [ 197.661821][T12285] do_syscall_64+0xd2/0x200 [ 197.661902][T12285] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 197.661927][T12285] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 197.661957][T12285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.661993][T12285] RIP: 0033:0x7f9fcd7cd8dc [ 197.662013][T12285] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.662072][T12285] RSP: 002b:00007f9fcc237030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.662103][T12285] RAX: ffffffffffffffda RBX: 00007f9fcda25fa0 RCX: 00007f9fcd7cd8dc [ 197.662119][T12285] RDX: 000000000000000f RSI: 00007f9fcc2370a0 RDI: 0000000000000006 [ 197.662135][T12285] RBP: 00007f9fcc237090 R08: 0000000000000000 R09: 0000000000000000 [ 197.662150][T12285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.662199][T12285] R13: 00007f9fcda26038 R14: 00007f9fcda25fa0 R15: 00007ffe5f502448 [ 197.662302][T12285] [ 197.912781][T12287] loop3: detected capacity change from 0 to 1024 [ 197.920989][T12287] EXT4-fs: Ignoring removed orlov option [ 197.994368][T12287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.994837][T12275] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 198.013517][T12275] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 198.022525][T12275] vhci_hcd vhci_hcd.0: Device attached [ 198.025000][T12291] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3050'. [ 198.037654][T12297] vhci_hcd: connection closed [ 198.038039][ T37] vhci_hcd: stop threads [ 198.047210][ T37] vhci_hcd: release socket [ 198.051687][ T37] vhci_hcd: disconnect device [ 198.061313][T12291] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3050'. [ 198.269987][T12312] loop1: detected capacity change from 0 to 1024 [ 198.291023][T12312] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 198.302168][T12312] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 198.313333][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.323177][T12312] JBD2: no valid journal superblock found [ 198.329001][T12312] EXT4-fs (loop1): Could not load journal inode [ 198.372958][T12316] lo speed is unknown, defaulting to 1000 [ 198.383412][T12316] lo speed is unknown, defaulting to 1000 [ 198.392985][T12316] lo speed is unknown, defaulting to 1000 [ 198.400042][T12316] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 198.411681][T12316] lo speed is unknown, defaulting to 1000 [ 198.418381][T12316] lo speed is unknown, defaulting to 1000 [ 198.425742][T12321] Falling back ldisc for ttyS3. [ 198.433052][T12323] loop1: detected capacity change from 0 to 128 [ 198.440433][T12323] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.453840][T12316] lo speed is unknown, defaulting to 1000 [ 198.460800][T12316] lo speed is unknown, defaulting to 1000 [ 198.468162][T12323] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.481434][T12316] lo speed is unknown, defaulting to 1000 [ 198.495145][T12322] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 198.529545][T12327] loop1: detected capacity change from 0 to 2048 [ 198.536970][T12327] EXT4-fs: Ignoring removed i_version option [ 198.568384][T12327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.581650][T12327] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.588226][T12318] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 198.598629][T12318] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 198.615062][T12318] vhci_hcd vhci_hcd.0: Device attached [ 198.624499][T12330] vhci_hcd: connection closed [ 198.624661][ T2746] vhci_hcd: stop threads [ 198.633836][ T2746] vhci_hcd: release socket [ 198.638413][ T2746] vhci_hcd: disconnect device [ 198.694139][T12339] lo speed is unknown, defaulting to 1000 [ 198.793477][T12339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3065'. [ 198.869807][T11800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.917849][T12343] loop2: detected capacity change from 0 to 2048 [ 198.925712][T12343] EXT4-fs: Ignoring removed i_version option [ 198.936085][T12345] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.948397][T12343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.961059][T12343] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.018864][T12345] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.088882][T12345] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.147773][ T4632] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 199.156831][ T4632] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.168030][T12059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.200352][T12345] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.247126][T12354] loop2: detected capacity change from 0 to 1024 [ 199.275168][T12354] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 199.286262][T12354] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 199.297242][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.313496][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.330896][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.344831][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.353399][T12354] JBD2: no valid journal superblock found [ 199.359313][T12354] EXT4-fs (loop2): Could not load journal inode [ 199.431414][T12364] loop3: detected capacity change from 0 to 128 [ 199.468051][T12364] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.517920][T12364] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.545017][T12372] Falling back ldisc for ttyS3. [ 199.550036][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 199.550052][ T29] audit: type=1400 audit(2000000130.230:19083): avc: denied { ioctl } for pid=12359 comm="syz.3.3073" path="socket:[39344]" dev="sockfs" ino=39344 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.587625][T12372] loop1: detected capacity change from 0 to 128 [ 199.618331][T12364] : renamed from bond0 [ 199.670685][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3079'. [ 199.680264][T12384] netlink: 'syz.0.3079': attribute type 4 has an invalid length. [ 199.714471][ T3391] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 199.722670][ T3391] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.749988][T12392] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3084'. [ 199.762602][T12390] syz!: rxe_newlink: already configured on team_slave_0 [ 199.771000][T12392] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3084'. [ 199.954086][T12398] loop4: detected capacity change from 0 to 1024 [ 199.961382][T12398] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 199.972371][T12398] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 199.983399][T12398] JBD2: no valid journal superblock found [ 199.989221][T12398] EXT4-fs (loop4): Could not load journal inode [ 200.028750][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3086'. [ 200.114952][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3089'. [ 200.166613][ T29] audit: type=1326 audit(2000000130.850:19084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 200.190616][ T29] audit: type=1326 audit(2000000130.850:19085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 200.214303][ T29] audit: type=1326 audit(2000000130.850:19086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 200.238101][ T29] audit: type=1326 audit(2000000130.850:19087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 200.261790][ T29] audit: type=1326 audit(2000000130.850:19088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 200.285368][ T29] audit: type=1326 audit(2000000130.850:19089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 200.309032][ T29] audit: type=1326 audit(2000000130.850:19090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 200.332596][ T29] audit: type=1326 audit(2000000130.850:19091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 200.356486][ T29] audit: type=1326 audit(2000000130.850:19092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 200.401788][T12411] netlink: 'syz.3.3091': attribute type 1 has an invalid length. [ 200.410061][T12408] loop2: detected capacity change from 0 to 2048 [ 200.417589][T12408] EXT4-fs: Ignoring removed i_version option [ 200.423293][T12411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.439372][T12408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.468688][T12408] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.481202][T12419] loop3: detected capacity change from 0 to 1024 [ 200.491449][T12419] EXT4-fs: Ignoring removed orlov option [ 200.522992][T12419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.567179][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.693510][T12434] tmpfs: Bad value for 'mpol' [ 201.047878][T12059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.275911][T12449] netlink: 'syz.2.3101': attribute type 4 has an invalid length. [ 201.493733][T12460] tmpfs: Bad value for 'mpol' [ 201.507562][T12459] siw: device registration error -23 [ 201.711628][T12465] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 201.934098][T12468] loop3: detected capacity change from 0 to 512 [ 201.941590][T12468] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.950946][T12468] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 201.960866][T12468] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 201.969043][T12468] System zones: 0-2, 18-18, 34-35 [ 201.975330][T12468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 201.995175][T12468] batman_adv: batadv0: Adding interface: dummy0 [ 202.001482][T12468] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.030819][T12468] batman_adv: batadv0: Interface activated: dummy0 [ 202.042340][T12468] batadv0: mtu less than device minimum [ 202.048480][T12468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.059320][T12468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.070180][T12468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.080995][T12468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.091882][T12468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.103631][T12468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.114360][T12468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.125373][T12468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.136256][T12468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.170223][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.197109][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3112'. [ 202.236233][T12479] loop2: detected capacity change from 0 to 1024 [ 202.247258][T12479] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3115: Failed to acquire dquot type 0 [ 202.260293][T12479] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 202.275345][T12479] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.3115: corrupted inode contents [ 202.287710][T12479] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #13: comm syz.2.3115: mark_inode_dirty error [ 202.299520][T12479] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.3115: corrupted inode contents [ 202.311967][T12479] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.3115: mark_inode_dirty error [ 202.323699][T12479] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.3115: corrupted inode contents [ 202.325748][T12484] Falling back ldisc for ttyS3. [ 202.340898][T12479] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 202.354375][T12484] loop3: detected capacity change from 0 to 128 [ 202.398078][T12479] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.3115: corrupted inode contents [ 202.410830][T12479] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.3115: mark_inode_dirty error [ 202.429378][T12479] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 202.442431][T12479] EXT4-fs (loop2): 1 truncate cleaned up [ 202.455406][T12479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.498049][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3120'. [ 202.524988][T12479] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 202.575631][T12059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.588699][T12503] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3124'. [ 202.626604][T12503] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3124'. [ 202.687306][T12493] lo speed is unknown, defaulting to 1000 [ 202.702283][T10046] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.712136][T10046] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.774740][T12520] ALSA: seq fatal error: cannot create timer (-19) [ 202.827954][T12524] tmpfs: Bad value for 'mpol' [ 202.847890][T10046] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.857826][T10046] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.905396][T12493] chnl_net:caif_netlink_parms(): no params data found [ 202.934066][T10046] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.943977][T10046] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.969393][T12533] netlink: 'syz.4.3131': attribute type 15 has an invalid length. [ 202.982850][T12493] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.990119][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.997439][T12493] bridge_slave_0: entered allmulticast mode [ 203.004269][T12493] bridge_slave_0: entered promiscuous mode [ 203.013532][T12493] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.020872][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.028086][T12493] bridge_slave_1: entered allmulticast mode [ 203.034600][T12493] bridge_slave_1: entered promiscuous mode [ 203.056503][T10046] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.066404][T10046] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.078994][T12493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.089856][T12493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.120547][T12493] team0: Port device team_slave_0 added [ 203.132585][T12493] team0: Port device team_slave_1 added [ 203.150966][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3136'. [ 203.161597][T12493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.168764][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.196606][T12493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.217711][T12493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.224814][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.251197][T12493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.281695][T10046] batadv1: left allmulticast mode [ 203.287060][T10046] batadv1: left promiscuous mode [ 203.290219][T12555] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3138'. [ 203.292486][T10046] bridge0: port 4(batadv1) entered disabled state [ 203.310589][T10046] batadv0: left allmulticast mode [ 203.315877][T10046] batadv0: left promiscuous mode [ 203.321216][T10046] bridge0: port 3(batadv0) entered disabled state [ 203.328489][T10046] bridge_slave_1: left allmulticast mode [ 203.334211][T10046] bridge_slave_1: left promiscuous mode [ 203.340103][T10046] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.348217][T10046] bridge_slave_0: left allmulticast mode [ 203.353890][T10046] bridge_slave_0: left promiscuous mode [ 203.359743][T10046] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.453708][T10046] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 204.001691][T12573] loop2: detected capacity change from 0 to 2048 [ 204.063056][T12581] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3150'. [ 204.077993][T12584] syz.2.3151 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 204.130227][T12582] sg_read: process 191 (syz.4.3150) changed security contexts after opening file descriptor, this is not allowed. [ 204.206287][T10046] bond1 (unregistering): Released all slaves [ 204.214576][T10046] bond2 (unregistering): Released all slaves [ 204.223304][T10046]  (unregistering): Released all slaves [ 204.231862][T10046] bond0 (unregistering): Released all slaves [ 204.260223][T12493] hsr_slave_0: entered promiscuous mode [ 204.271577][T12493] hsr_slave_1: entered promiscuous mode [ 204.281998][T12493] debugfs: 'hsr0' already exists in 'hsr' [ 204.287923][T12493] Cannot create hsr debugfs directory [ 204.302364][T12598] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.318169][T10046] tipc: Left network mode [ 204.349147][T12598] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.361653][T10046] batman_adv: batadv0: Interface deactivated: dummy0 [ 204.368877][T10046] batman_adv: batadv0: Removing interface: dummy0 [ 204.383264][T10046] hsr_slave_0: left promiscuous mode [ 204.392102][T10046] hsr_slave_1: left promiscuous mode [ 204.399910][T10046] veth1_macvtap: left promiscuous mode [ 204.405552][T10046] veth0_macvtap: left promiscuous mode [ 204.411101][T10046] veth1_vlan: left promiscuous mode [ 204.416524][T10046] veth0_vlan: left promiscuous mode [ 204.502834][T10046] team0 (unregistering): Port device team_slave_1 removed [ 204.515204][T10046] team0 (unregistering): Port device team_slave_0 removed [ 204.562955][T12603] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.575069][ T4632] lo speed is unknown, defaulting to 1000 [ 204.581411][ T4632] infiniband syz0: ib_query_port failed (-19) [ 204.600270][T12598] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.618001][T12607] loop1: detected capacity change from 0 to 1024 [ 204.625494][T12607] EXT4-fs: Ignoring removed orlov option [ 204.637925][T12607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.653986][T12603] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.696986][T12598] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.723720][T12603] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.768865][T11800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.772780][ T149] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.794236][ T149] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.806959][ T149] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.816000][ T149] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.826743][T12603] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.873929][T12621] FAULT_INJECTION: forcing a failure. [ 204.873929][T12621] name failslab, interval 1, probability 0, space 0, times 0 [ 204.886748][T12621] CPU: 0 UID: 0 PID: 12621 Comm: syz.1.3166 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.886876][T12621] Tainted: [W]=WARN [ 204.886885][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.886901][T12621] Call Trace: [ 204.886909][T12621] [ 204.886975][T12621] __dump_stack+0x1d/0x30 [ 204.887020][T12621] dump_stack_lvl+0xe8/0x140 [ 204.887061][T12621] dump_stack+0x15/0x1b [ 204.887168][T12621] should_fail_ex+0x265/0x280 [ 204.887212][T12621] should_failslab+0x8c/0xb0 [ 204.887298][T12621] kmem_cache_alloc_noprof+0x50/0x480 [ 204.887382][T12621] ? getname_kernel+0x3c/0x1f0 [ 204.887422][T12621] getname_kernel+0x3c/0x1f0 [ 204.887539][T12621] kern_path+0x23/0x130 [ 204.887638][T12621] do_loopback+0x67/0x2a0 [ 204.887717][T12621] ? security_capable+0x83/0x90 [ 204.887759][T12621] path_mount+0x3dc/0xb70 [ 204.887787][T12621] ? user_path_at+0x109/0x130 [ 204.887811][T12621] __se_sys_mount+0x28c/0x2e0 [ 204.887840][T12621] ? fput+0x8f/0xc0 [ 204.887890][T12621] __x64_sys_mount+0x67/0x80 [ 204.887919][T12621] x64_sys_call+0x2b51/0x3000 [ 204.887964][T12621] do_syscall_64+0xd2/0x200 [ 204.887994][T12621] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 204.888017][T12621] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 204.888039][T12621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.888128][T12621] RIP: 0033:0x7f643fb4eec9 [ 204.888141][T12621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.888157][T12621] RSP: 002b:00007f643e5b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.888173][T12621] RAX: ffffffffffffffda RBX: 00007f643fda5fa0 RCX: 00007f643fb4eec9 [ 204.888184][T12621] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000002c0 [ 204.888195][T12621] RBP: 00007f643e5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 204.888241][T12621] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000001 [ 204.888251][T12621] R13: 00007f643fda6038 R14: 00007f643fda5fa0 R15: 00007ffd9e97bc58 [ 204.888268][T12621] [ 205.114114][T12623] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3167'. [ 205.134855][T12623] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3167'. [ 205.149669][ T149] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.161395][T10046] IPVS: stop unused estimator thread 0... [ 205.168902][ T149] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.185287][ T149] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.193643][ T149] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.259564][T12493] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 205.268415][T12493] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.276052][T12630] loop4: detected capacity change from 0 to 128 [ 205.288660][T12630] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 205.305465][T12493] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 205.312622][T12630] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.341166][T12493] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.412999][T11442] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.443226][T12645] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.488174][T12651] tmpfs: Bad value for 'mpol' [ 205.492939][T12493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.500391][T12643] Falling back ldisc for ttyS3. [ 205.513260][T12643] loop4: detected capacity change from 0 to 128 [ 205.528154][T12493] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.541654][T12654] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3176'. [ 205.559208][T12645] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.572644][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.579864][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.580087][T12658] loop4: detected capacity change from 0 to 1024 [ 205.592701][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.601036][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.609702][T12658] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.620781][T12658] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 205.632649][T12658] JBD2: no valid journal superblock found [ 205.638589][T12658] EXT4-fs (loop4): Could not load journal inode [ 205.656176][T12493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.666873][T12493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.750863][T12645] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.786010][T12493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.849406][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 205.849425][ T29] audit: type=1326 audit(2000000136.530:19230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 205.880858][T12645] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.903121][T12670] loop1: detected capacity change from 0 to 2048 [ 205.910212][T12670] EXT4-fs: Ignoring removed i_version option [ 205.916585][ T29] audit: type=1326 audit(2000000136.570:19231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 205.940496][ T29] audit: type=1326 audit(2000000136.570:19232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 205.965012][ T29] audit: type=1326 audit(2000000136.570:19233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 205.989694][ T29] audit: type=1326 audit(2000000136.570:19234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 206.013997][ T29] audit: type=1326 audit(2000000136.570:19235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 206.037660][ T29] audit: type=1326 audit(2000000136.570:19236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 206.061488][ T29] audit: type=1326 audit(2000000136.570:19237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 206.071843][T12493] veth0_vlan: entered promiscuous mode [ 206.085617][ T29] audit: type=1326 audit(2000000136.570:19238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 206.085658][ T29] audit: type=1326 audit(2000000136.570:19239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 206.123271][T12493] veth1_vlan: entered promiscuous mode [ 206.148826][T12678] netlink: 'syz.2.3181': attribute type 5 has an invalid length. [ 206.157997][T12493] veth0_macvtap: entered promiscuous mode [ 206.166322][T12493] veth1_macvtap: entered promiscuous mode [ 206.178194][T12493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.190635][T12493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.200094][T12670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.213072][T10046] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.214903][T12670] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.224243][T10046] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.243513][T10046] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.253030][T10046] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.311836][T12687] loop3: detected capacity change from 0 to 512 [ 206.355081][T12685] Falling back ldisc for ttyS3. [ 206.362376][T12692] loop2: detected capacity change from 0 to 128 [ 206.369220][T12692] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 206.381895][T12692] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 206.451891][T12691] netlink: 'syz.4.3185': attribute type 7 has an invalid length. [ 206.474161][T12699] 9pnet: Could not find request transport: d [ 206.483063][T12699] netlink: 'syz.2.3187': attribute type 1 has an invalid length. [ 206.505241][T12699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.517898][T12699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.542087][T11800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.563648][T12708] loop1: detected capacity change from 0 to 128 [ 206.572927][T12708] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 206.586336][T12708] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.616002][T11800] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.635872][T12715] loop3: detected capacity change from 0 to 1024 [ 206.645798][T12715] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 206.656021][T12715] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 206.668735][T12717] loop1: detected capacity change from 0 to 512 [ 206.676311][T12717] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 206.685328][T12715] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 206.697710][T12715] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: inode #32: comm syz.3.3194: iget: special inode unallocated [ 206.710752][T12715] EXT4-fs (loop3): no journal found [ 206.716074][T12715] EXT4-fs (loop3): can't get journal size [ 206.723501][T12715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.755162][T12720] netlink: 'syz.1.3195': attribute type 10 has an invalid length. [ 206.768146][T12720] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 206.799519][T12717] netlink: 'syz.1.3195': attribute type 1 has an invalid length. [ 207.126316][T12733] batman_adv: batadv0: Adding interface: dummy0 [ 207.132604][T12733] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.158151][T12733] batman_adv: batadv0: Interface activated: dummy0 [ 207.158365][T12727] Falling back ldisc for ttyS3. [ 207.172064][T12734] loop1: detected capacity change from 0 to 128 [ 207.178925][T12734] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.191537][T12734] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 207.225235][T12736] Falling back ldisc for ttyS3. [ 207.232551][T12736] loop2: detected capacity change from 0 to 128 [ 207.259993][T12740] lo speed is unknown, defaulting to 1000 [ 207.266227][T12740] lo speed is unknown, defaulting to 1000 [ 207.272282][T12740] lo speed is unknown, defaulting to 1000 [ 207.279682][T12740] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 207.290615][T12740] lo speed is unknown, defaulting to 1000 [ 207.305588][T12740] lo speed is unknown, defaulting to 1000 [ 207.312590][T12740] lo speed is unknown, defaulting to 1000 [ 207.320282][T12740] lo speed is unknown, defaulting to 1000 [ 207.326679][T12740] lo speed is unknown, defaulting to 1000 [ 207.465110][T12493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.515588][T12752] tmpfs: Bad value for 'mpol' [ 207.589396][T12748] netlink: 'syz.3.3207': attribute type 7 has an invalid length. [ 207.597243][T12748] __nla_validate_parse: 7 callbacks suppressed [ 207.597260][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3207'. [ 207.638615][T12759] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3211'. [ 207.696174][T12767] loop3: detected capacity change from 0 to 4096 [ 207.702905][T12767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.711680][T12767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.727711][T12767] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 207.757353][T12493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.791931][T12779] netlink: 'syz.3.3216': attribute type 1 has an invalid length. [ 207.800429][T12779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3216'. [ 207.805824][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 207.834012][T12781] loop4: detected capacity change from 0 to 1024 [ 207.845717][T12781] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 207.851234][T12785] loop3: detected capacity change from 0 to 2048 [ 207.855632][T12781] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 207.872098][T12781] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 207.882184][T12781] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: inode #32: comm syz.4.3217: iget: special inode unallocated [ 207.895286][T12781] EXT4-fs (loop4): no journal found [ 207.900580][T12781] EXT4-fs (loop4): can't get journal size [ 207.908094][T12781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.933201][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3219'. [ 207.942882][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3219'. [ 207.962477][T12795] loop3: detected capacity change from 0 to 1024 [ 207.969878][T12795] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 207.979709][T12795] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 207.989736][T12795] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 208.000071][T12795] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: inode #32: comm syz.3.3219: iget: special inode unallocated [ 208.013326][T12795] EXT4-fs (loop3): no journal found [ 208.018633][T12795] EXT4-fs (loop3): can't get journal size [ 208.027104][T12795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.232370][T12826] netlink: 'syz.2.3221': attribute type 7 has an invalid length. [ 208.240359][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3221'. [ 208.442618][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3223'. [ 208.470815][T12850] loop2: detected capacity change from 0 to 8192 [ 208.491168][ T4617] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 208.499585][ T4617] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 208.655899][T11442] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.778117][T12493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.800327][T12900] loop3: detected capacity change from 0 to 1024 [ 208.807274][T12900] EXT4-fs: Ignoring removed orlov option [ 208.818319][T12900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.959277][T12896] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 208.965930][T12896] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 208.977778][T12900] lo speed is unknown, defaulting to 1000 [ 209.019613][T12896] vhci_hcd vhci_hcd.0: Device attached [ 209.034604][T12910] vhci_hcd: connection closed [ 209.035861][ T149] vhci_hcd: stop threads [ 209.045375][ T149] vhci_hcd: release socket [ 209.050115][ T149] vhci_hcd: disconnect device [ 209.117467][T12493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.142353][T12916] loop1: detected capacity change from 0 to 1024 [ 209.189848][T12916] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 209.200946][T12916] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 209.212088][T12916] JBD2: no valid journal superblock found [ 209.218125][T12916] EXT4-fs (loop1): Could not load journal inode [ 209.234843][T12918] Falling back ldisc for ttyS3. [ 209.246949][T12918] loop3: detected capacity change from 0 to 128 [ 209.286059][T12923] loop1: detected capacity change from 0 to 2048 [ 209.367645][T12931] SELinux: policydb version 0 does not match my version range 15-35 [ 209.377392][T12931] SELinux: failed to load policy [ 209.425111][T12940] netlink: 'syz.3.3243': attribute type 1 has an invalid length. [ 209.433480][T12940] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3243'. [ 209.508816][T12945] loop2: detected capacity change from 0 to 1024 [ 209.517430][T12945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.530462][T12945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.606150][T12948] netlink: 'syz.1.3244': attribute type 7 has an invalid length. [ 209.614047][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3244'. [ 209.811868][T12957] loop4: detected capacity change from 0 to 1024 [ 209.837592][T12957] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 209.848798][T12957] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 209.920023][T12957] JBD2: no valid journal superblock found [ 209.925976][T12957] EXT4-fs (loop4): Could not load journal inode [ 209.973691][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.986945][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.003014][T12959] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 210.004441][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.009690][T12959] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 210.028026][T12959] vhci_hcd vhci_hcd.0: Device attached [ 210.034876][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.044806][T12963] vhci_hcd: connection closed [ 210.045649][ T52] vhci_hcd: stop threads [ 210.054925][ T52] vhci_hcd: release socket [ 210.059463][ T52] vhci_hcd: disconnect device [ 210.071439][ T3153] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 210.079653][ T3153] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.123139][T12972] loop4: detected capacity change from 0 to 164 [ 210.237071][T12059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.269263][T12976] team0 (unregistering): Port device team_slave_0 removed [ 210.285110][T12976] team0 (unregistering): Port device team_slave_1 removed [ 210.298480][T12978] loop1: detected capacity change from 0 to 2048 [ 210.367927][T12980] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 210.915346][T12989] Falling back ldisc for ttyS3. [ 210.923376][T12994] loop1: detected capacity change from 0 to 128 [ 210.978334][T12989] loop2: detected capacity change from 0 to 128 [ 210.999397][T12994] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 211.022680][T12994] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.023313][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 211.023330][ T29] audit: type=1400 audit(2000000141.700:19352): avc: denied { unmount } for pid=11442 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 211.081314][T11800] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.175253][ T29] audit: type=1326 audit(2000000141.860:19353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 211.199489][ T29] audit: type=1326 audit(2000000141.860:19354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 211.223320][ T29] audit: type=1326 audit(2000000141.860:19355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 211.247734][ T29] audit: type=1326 audit(2000000141.860:19356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 211.272043][ T29] audit: type=1326 audit(2000000141.860:19357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 211.272403][T13012] loop1: detected capacity change from 0 to 512 [ 211.295811][ T29] audit: type=1326 audit(2000000141.860:19358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 211.325782][ T29] audit: type=1326 audit(2000000141.860:19359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 211.350637][ T29] audit: type=1326 audit(2000000141.860:19360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 211.350737][T13013] loop3: detected capacity change from 0 to 1024 [ 211.374827][ T29] audit: type=1326 audit(2000000141.860:19361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13008 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f643fb4eec9 code=0x7ffc0000 [ 211.408067][T13013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.419284][T13012] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.422155][T13013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.443018][T13005] netlink: 'syz.2.3267': attribute type 7 has an invalid length. [ 211.460382][T13012] EXT4-fs (loop1): 1 orphan inode deleted [ 211.466893][T13012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.479703][T12872] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 1 [ 211.491828][T13012] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.506017][T13023] ip6gre1: entered allmulticast mode [ 211.645030][T13029] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 211.928014][T12493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.967718][T13031] batadv1: entered promiscuous mode [ 211.973769][T13031] batadv1: entered allmulticast mode [ 211.990912][T13035] tmpfs: Bad value for 'mpol' [ 212.018468][T11800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.041159][T13037] siw: device registration error -23 [ 212.195424][T13039] Falling back ldisc for ttyS3. [ 212.226119][T13039] loop4: detected capacity change from 0 to 128 [ 212.239566][T13048] loop3: detected capacity change from 0 to 1024 [ 212.248736][T13048] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 212.259753][T13048] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 212.269780][T13048] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 212.281149][T13048] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: inode #32: comm syz.3.3281: iget: special inode unallocated [ 212.295575][T13048] EXT4-fs (loop3): no journal found [ 212.301109][T13048] EXT4-fs (loop3): can't get journal size [ 212.309475][T13048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.331280][T13053] sch_fq: defrate 8 ignored. [ 212.344337][T13053] netlink: 'syz.4.3283': attribute type 12 has an invalid length. [ 212.352435][T13053] netlink: 'syz.4.3283': attribute type 11 has an invalid length. [ 212.416183][T13058] netlink: 'syz.4.3286': attribute type 1 has an invalid length. [ 212.443213][T13058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.591395][T13070] tmpfs: Bad value for 'mpol' [ 212.713586][T13064] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 212.720343][T13064] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 212.729274][T13064] vhci_hcd vhci_hcd.0: Device attached [ 212.743528][T13073] vhci_hcd: connection closed [ 212.743823][ T149] vhci_hcd: stop threads [ 212.752935][ T149] vhci_hcd: release socket [ 212.757862][ T149] vhci_hcd: disconnect device [ 212.800496][T13081] netlink: 'syz.4.3294': attribute type 1 has an invalid length. [ 212.814488][T13081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.824035][T13081] __nla_validate_parse: 13 callbacks suppressed [ 212.824131][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3294'. [ 212.840086][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3294'. [ 212.898910][T13091] loop1: detected capacity change from 0 to 1024 [ 212.906112][T13091] EXT4-fs: Ignoring removed orlov option [ 212.911161][T13089] loop4: detected capacity change from 0 to 4096 [ 212.921164][T13089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.926719][T13091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.942671][T13089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.967008][T13089] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 212.992998][T11442] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.012436][T13091] lo speed is unknown, defaulting to 1000 [ 213.018757][T13094] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 213.048395][T13101] loop4: detected capacity change from 0 to 1024 [ 213.057589][T13101] EXT4-fs: Ignoring removed orlov option [ 213.079428][T12493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.091645][T13101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.148173][T11800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.169831][T13106] loop3: detected capacity change from 0 to 4096 [ 213.177089][T13106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.204433][T13106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.223930][T13101] lo speed is unknown, defaulting to 1000 [ 213.233814][T13106] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 213.263747][T12493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.324048][T13121] netlink: 'syz.1.3307': attribute type 1 has an invalid length. [ 213.347398][T13121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.357953][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3307'. [ 213.366957][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3307'. [ 213.378899][T11442] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.439619][T13129] loop4: detected capacity change from 0 to 1024 [ 213.448824][T13129] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 213.460643][T13129] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 213.473529][T13129] JBD2: no valid journal superblock found [ 213.479339][T13129] EXT4-fs (loop4): Could not load journal inode [ 213.489445][T13136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3314'. [ 213.507675][T13138] loop3: detected capacity change from 0 to 128 [ 213.535426][T13138] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 213.565034][T13138] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.608544][T12493] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.667104][T13150] loop4: detected capacity change from 0 to 1024 [ 213.674096][T13150] EXT4-fs: Ignoring removed orlov option [ 213.690670][T13150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.704970][T13146] Falling back ldisc for ttyS3. [ 213.707805][ T4603] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 213.727262][T13146] loop3: detected capacity change from 0 to 128 [ 213.770798][ T4603] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.823289][T13150] lo speed is unknown, defaulting to 1000 [ 213.912306][T11442] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.945577][T13169] tmpfs: Bad value for 'mpol' [ 214.141372][T13182] loop1: detected capacity change from 0 to 1024 [ 214.172498][T13182] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.248833][T13182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.269633][T13175] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 214.276419][T13175] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 214.285601][T13175] vhci_hcd vhci_hcd.0: Device attached [ 214.311131][T13183] vhci_hcd: connection closed [ 214.311476][ T52] vhci_hcd: stop threads [ 214.320542][ T52] vhci_hcd: release socket [ 214.324986][ T52] vhci_hcd: disconnect device [ 214.540196][T13191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3333'. [ 214.549276][T13191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3333'. [ 214.576923][T13193] FAULT_INJECTION: forcing a failure. [ 214.576923][T13193] name failslab, interval 1, probability 0, space 0, times 0 [ 214.589661][T13193] CPU: 1 UID: 0 PID: 13193 Comm: syz.0.3334 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 214.589698][T13193] Tainted: [W]=WARN [ 214.589705][T13193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.589717][T13193] Call Trace: [ 214.589737][T13193] [ 214.589744][T13193] __dump_stack+0x1d/0x30 [ 214.589801][T13193] dump_stack_lvl+0xe8/0x140 [ 214.589873][T13193] dump_stack+0x15/0x1b [ 214.589907][T13193] should_fail_ex+0x265/0x280 [ 214.590002][T13193] should_failslab+0x8c/0xb0 [ 214.590033][T13193] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 214.590065][T13193] ? __d_alloc+0x3d/0x340 [ 214.590098][T13193] __d_alloc+0x3d/0x340 [ 214.590182][T13193] ? mpol_shared_policy_init+0xbd/0x4c0 [ 214.590202][T13193] d_alloc_pseudo+0x1e/0x80 [ 214.590258][T13193] alloc_file_pseudo+0x71/0x160 [ 214.590296][T13193] __shmem_file_setup+0x1de/0x210 [ 214.590336][T13193] shmem_file_setup+0x3b/0x50 [ 214.590372][T13193] __se_sys_memfd_create+0x2c3/0x590 [ 214.590485][T13193] __x64_sys_memfd_create+0x31/0x40 [ 214.590510][T13193] x64_sys_call+0x2ac2/0x3000 [ 214.590535][T13193] do_syscall_64+0xd2/0x200 [ 214.590590][T13193] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 214.590623][T13193] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 214.590681][T13193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.590768][T13193] RIP: 0033:0x7f17e668eec9 [ 214.590825][T13193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.590844][T13193] RSP: 002b:00007f17e50eee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 214.590876][T13193] RAX: ffffffffffffffda RBX: 000000000000042f RCX: 00007f17e668eec9 [ 214.590892][T13193] RDX: 00007f17e50eeef0 RSI: 0000000000000000 RDI: 00007f17e6712960 [ 214.590908][T13193] RBP: 0000200000000940 R08: 00007f17e50eebb7 R09: 00007f17e50eee40 [ 214.590923][T13193] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 214.590942][T13193] R13: 00007f17e50eeef0 R14: 00007f17e50eeeb0 R15: 0000200000000200 [ 214.590965][T13193] [ 214.854798][T13203] siw: device registration error -23 [ 214.862180][T11800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.989923][T13213] tmpfs: Bad value for 'mpol' [ 215.146437][T13218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3345'. [ 215.155573][T13218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3345'. [ 215.288394][T13224] FAULT_INJECTION: forcing a failure. [ 215.288394][T13224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.301788][T13224] CPU: 1 UID: 0 PID: 13224 Comm: syz.1.3348 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 215.301829][T13224] Tainted: [W]=WARN [ 215.301838][T13224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.301855][T13224] Call Trace: [ 215.301864][T13224] [ 215.301872][T13224] __dump_stack+0x1d/0x30 [ 215.301934][T13224] dump_stack_lvl+0xe8/0x140 [ 215.301996][T13224] dump_stack+0x15/0x1b [ 215.302030][T13224] should_fail_ex+0x265/0x280 [ 215.302099][T13224] should_fail+0xb/0x20 [ 215.302189][T13224] should_fail_usercopy+0x1a/0x20 [ 215.302213][T13224] _copy_from_user+0x1c/0xb0 [ 215.302237][T13224] lo_ioctl+0x4b5/0x12b0 [ 215.302259][T13224] ? avc_has_extended_perms+0x73d/0x940 [ 215.302374][T13224] ? blkdev_common_ioctl+0xad6/0x1ad0 [ 215.302476][T13224] ? do_vfs_ioctl+0x866/0xe10 [ 215.302496][T13224] ? selinux_file_ioctl+0x308/0x3a0 [ 215.302531][T13224] ? __pfx_lo_ioctl+0x10/0x10 [ 215.302554][T13224] ? __pfx_blkdev_ioctl+0x10/0x10 [ 215.302579][T13224] blkdev_ioctl+0x356/0x440 [ 215.302603][T13224] ? __pfx_blkdev_ioctl+0x10/0x10 [ 215.302657][T13224] __se_sys_ioctl+0xce/0x140 [ 215.302734][T13224] __x64_sys_ioctl+0x43/0x50 [ 215.302758][T13224] x64_sys_call+0x1816/0x3000 [ 215.302784][T13224] do_syscall_64+0xd2/0x200 [ 215.302845][T13224] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 215.302947][T13224] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 215.302980][T13224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.303096][T13224] RIP: 0033:0x7f643fb4eec9 [ 215.303112][T13224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.303171][T13224] RSP: 002b:00007f643e5b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.303195][T13224] RAX: ffffffffffffffda RBX: 00007f643fda5fa0 RCX: 00007f643fb4eec9 [ 215.303255][T13224] RDX: 0000200000000200 RSI: 0000000000004c04 RDI: 0000000000000003 [ 215.303267][T13224] RBP: 00007f643e5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.303279][T13224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.303291][T13224] R13: 00007f643fda6038 R14: 00007f643fda5fa0 R15: 00007ffd9e97bc58 [ 215.303311][T13224] [ 215.800540][T13239] loop3: detected capacity change from 0 to 512 [ 215.831166][T13241] loop4: detected capacity change from 0 to 2048 [ 215.848583][T13231] loop1: detected capacity change from 0 to 8192 [ 215.856675][T13239] EXT4-fs (loop3): too many log groups per flexible block group [ 215.867242][T13246] batman_adv: batadv0: Interface deactivated: dummy0 [ 215.867429][T13239] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 215.873974][T13246] batman_adv: batadv0: Removing interface: dummy0 [ 215.887751][T13239] EXT4-fs (loop3): mount failed [ 215.956732][T13255] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3358'. [ 216.205470][T13259] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 216.212169][T13259] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 216.226498][T13259] vhci_hcd vhci_hcd.0: Device attached [ 216.240700][T13274] vhci_hcd: connection closed [ 216.245581][T13214] lo speed is unknown, defaulting to 1000 [ 216.322394][ T52] vhci_hcd: stop threads [ 216.327438][ T52] vhci_hcd: release socket [ 216.331979][ T52] vhci_hcd: disconnect device [ 216.356454][ T149] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.366667][T13282] loop3: detected capacity change from 0 to 1024 [ 216.376513][T13284] loop1: detected capacity change from 0 to 2048 [ 216.385432][T13282] __quota_error: 53 callbacks suppressed [ 216.385451][T13282] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 216.397190][T13214] chnl_net:caif_netlink_parms(): no params data found [ 216.400423][T13282] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 216.417022][T13282] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3367: Failed to acquire dquot type 0 [ 216.431675][T13282] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 216.447896][T13282] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3367: corrupted inode contents [ 216.462585][T13282] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #13: comm syz.3.3367: mark_inode_dirty error [ 216.474911][T13282] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3367: corrupted inode contents [ 216.495906][T13282] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.3367: mark_inode_dirty error [ 216.551282][T13282] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3367: corrupted inode contents [ 216.568894][T13282] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 216.582484][T13282] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3367: corrupted inode contents [ 216.595524][T13282] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.3367: mark_inode_dirty error [ 216.607629][T13282] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 216.618439][T13282] EXT4-fs (loop3): 1 truncate cleaned up [ 216.625172][T13291] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16408 sclass=netlink_audit_socket pid=13291 comm=syz.1.3369 [ 216.646188][ T149] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.659266][T13282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.723570][ T149] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.752115][T13214] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.759443][T13214] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.825246][T13282] FAULT_INJECTION: forcing a failure. [ 216.825246][T13282] name failslab, interval 1, probability 0, space 0, times 0 [ 216.838293][T13282] CPU: 0 UID: 0 PID: 13282 Comm: syz.3.3367 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.838333][T13282] Tainted: [W]=WARN [ 216.838418][T13282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 216.838435][T13282] Call Trace: [ 216.838444][T13282] [ 216.838454][T13282] __dump_stack+0x1d/0x30 [ 216.838500][T13282] dump_stack_lvl+0xe8/0x140 [ 216.838544][T13282] dump_stack+0x15/0x1b [ 216.838579][T13282] should_fail_ex+0x265/0x280 [ 216.838621][T13282] ? ext4_init_fs_context+0x32/0x90 [ 216.838644][T13282] should_failslab+0x8c/0xb0 [ 216.838676][T13282] __kmalloc_cache_noprof+0x4c/0x4a0 [ 216.838713][T13282] ext4_init_fs_context+0x32/0x90 [ 216.838789][T13282] alloc_fs_context+0x3ec/0x4e0 [ 216.838822][T13282] fs_context_for_reconfigure+0x42/0x50 [ 216.838854][T13282] path_mount+0xa38/0xb70 [ 216.838915][T13282] ? user_path_at+0x109/0x130 [ 216.838939][T13282] __se_sys_mount+0x28c/0x2e0 [ 216.838986][T13282] ? fput+0x8f/0xc0 [ 216.839025][T13282] __x64_sys_mount+0x67/0x80 [ 216.839056][T13282] x64_sys_call+0x2b51/0x3000 [ 216.839083][T13282] do_syscall_64+0xd2/0x200 [ 216.839159][T13282] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 216.839185][T13282] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 216.839224][T13282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.839246][T13282] RIP: 0033:0x7f107637eec9 [ 216.839262][T13282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.839285][T13282] RSP: 002b:00007f1074de7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.839306][T13282] RAX: ffffffffffffffda RBX: 00007f10765d5fa0 RCX: 00007f107637eec9 [ 216.839318][T13282] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 216.839335][T13282] RBP: 00007f1074de7090 R08: 0000000000000000 R09: 0000000000000000 [ 216.839379][T13282] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 216.839391][T13282] R13: 00007f10765d6038 R14: 00007f10765d5fa0 R15: 00007fff0f750ea8 [ 216.839410][T13282] [ 216.913099][T13214] bridge_slave_0: entered allmulticast mode [ 216.989910][T13303] siw: device registration error -23 [ 217.006923][T13214] bridge_slave_0: entered promiscuous mode [ 217.044893][ T29] audit: type=1400 audit(2000000147.720:19414): avc: granted { setsecparam } for pid=13296 comm="syz.1.3371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 217.054210][T13214] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.082325][T13304] loop4: detected capacity change from 0 to 512 [ 217.087666][T13214] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.105410][T13304] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 217.108342][T13214] bridge_slave_1: entered allmulticast mode [ 217.125621][T13214] bridge_slave_1: entered promiscuous mode [ 217.134565][T13304] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3373: invalid indirect mapped block 4294967295 (level 0) [ 217.149118][T13304] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3373: invalid indirect mapped block 4294967295 (level 1) [ 217.163582][T13304] EXT4-fs (loop4): 1 orphan inode deleted [ 217.169537][T13304] EXT4-fs (loop4): 1 truncate cleaned up [ 217.177107][T13304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.191473][ T149] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.210280][ T29] audit: type=1400 audit(2000000147.890:19415): avc: denied { mounton } for pid=13300 comm="syz.4.3373" path="/137/bus/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.254629][T13214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.263962][T13312] loop3: detected capacity change from 0 to 1024 [ 217.266025][T13214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.271506][T13312] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 217.290593][T13312] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 217.301526][T13312] JBD2: no valid journal superblock found [ 217.307342][T13312] EXT4-fs (loop3): Could not load journal inode [ 217.315571][T13214] team0: Port device team_slave_0 added [ 217.327212][T13214] team0: Port device team_slave_1 added [ 217.339148][ T29] audit: type=1326 audit(2000000148.020:19416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13314 comm="syz.3.3377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f107637eec9 code=0x0 [ 217.371875][T13310] netlink: 'syz.2.3376': attribute type 7 has an invalid length. [ 217.377492][T13214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.386726][T13214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.412964][T13214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.426161][T13214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.433333][T13214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.462329][T13214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.479009][ T149] bridge_slave_1: left allmulticast mode [ 217.484840][ T149] bridge_slave_1: left promiscuous mode [ 217.490606][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.499026][ T149] bridge_slave_0: left allmulticast mode [ 217.504891][ T149] bridge_slave_0: left promiscuous mode [ 217.510740][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.547442][T13322] loop2: detected capacity change from 0 to 128 [ 217.556462][T13322] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.591306][ T149] bond2 (unregistering): (slave ip6erspan0): Releasing backup interface [ 217.760338][T13331] loop1: detected capacity change from 0 to 512 [ 218.178190][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.189372][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.199984][ T149] bond0 (unregistering): Released all slaves [ 218.209376][ T149] bond1 (unregistering): Released all slaves [ 218.218727][ T149] bond2 (unregistering): Released all slaves [ 218.225055][T13338] loop3: detected capacity change from 0 to 512 [ 218.229026][ T149] bond3 (unregistering): Released all slaves [ 218.232155][T13338] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 218.242077][ T149] bond4 (unregistering): Released all slaves [ 218.269819][T13326] batadv1: entered promiscuous mode [ 218.275470][T13326] batadv1: entered allmulticast mode [ 218.288714][T13333] __nla_validate_parse: 2 callbacks suppressed [ 218.288729][T13333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3383'. [ 218.304353][T13333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3383'. [ 218.315986][T13339] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3385'. [ 218.334968][ T149] tipc: Left network mode [ 218.341799][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3385'. [ 218.350839][T13339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3385'. [ 218.362693][T13214] hsr_slave_0: entered promiscuous mode [ 218.377418][T13214] hsr_slave_1: entered promiscuous mode [ 218.383718][T13214] debugfs: 'hsr0' already exists in 'hsr' [ 218.389549][T13214] Cannot create hsr debugfs directory [ 218.415675][T13338] netlink: 'syz.3.3385': attribute type 10 has an invalid length. [ 218.447252][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3387'. [ 218.454883][ T29] audit: type=1326 audit(2000000149.130:19417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcd7ceec9 code=0x7ffc0000 [ 218.480308][ T29] audit: type=1326 audit(2000000149.130:19418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcd7ceec9 code=0x7ffc0000 [ 218.483920][T13338] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 218.505408][ T29] audit: type=1326 audit(2000000149.150:19419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fcd7ceec9 code=0x7ffc0000 [ 218.536553][ T29] audit: type=1326 audit(2000000149.150:19420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcd7ceec9 code=0x7ffc0000 [ 218.560195][ T29] audit: type=1326 audit(2000000149.150:19421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fcd7ceec9 code=0x7ffc0000 [ 218.575728][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3387'. [ 218.593914][T13348] loop4: detected capacity change from 0 to 2048 [ 218.599130][T13351] loop2: detected capacity change from 0 to 128 [ 218.602557][T13348] EXT4-fs: Ignoring removed i_version option [ 218.607038][T13338] netlink: 'syz.3.3385': attribute type 1 has an invalid length. [ 218.620641][ T149] hsr_slave_0: left promiscuous mode [ 218.626570][ T149] hsr_slave_1: left promiscuous mode [ 218.632417][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.633473][T13351] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.639886][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.666021][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.673542][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.683253][T13348] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.703700][ T149] veth1_macvtap: left promiscuous mode [ 218.709567][ T149] veth0_macvtap: left promiscuous mode [ 218.715653][ T149] veth1_vlan: left promiscuous mode [ 218.721038][ T149] veth0_vlan: left promiscuous mode [ 218.814350][ T149] team0 (unregistering): Port device team_slave_1 removed [ 218.825588][ T149] team0 (unregistering): Port device team_slave_0 removed [ 218.866368][T13347] bridge2: entered promiscuous mode [ 218.888540][T13359] bond1: option min_links: invalid value (18446744073709551608) [ 218.896402][T13359] bond1: option min_links: allowed values 0 - 2147483647 [ 218.913744][T13359] bond1 (unregistering): Released all slaves [ 219.007228][T13379] loop3: detected capacity change from 0 to 128 [ 219.015485][T13368] Falling back ldisc for ttyS3. [ 219.022996][T13368] loop1: detected capacity change from 0 to 128 [ 219.032082][T13382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3401'. [ 219.044586][T13379] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.076587][T13384] loop1: detected capacity change from 0 to 2048 [ 219.130379][T13397] loop3: detected capacity change from 0 to 512 [ 219.177488][T13397] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 219.188956][T13397] EXT4-fs (loop3): 1 truncate cleaned up [ 219.209580][T13397] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 219.221055][T13398] lo speed is unknown, defaulting to 1000 [ 219.291190][ T149] IPVS: stop unused estimator thread 0... [ 219.331491][T13412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3413'. [ 219.356923][T13413] tmpfs: Bad value for 'mpol' [ 219.459526][T13214] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.544192][T13214] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 219.551264][T13417] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 219.569549][T13214] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.586466][T13425] loop1: detected capacity change from 0 to 1024 [ 219.586503][T13417] SELinux: failed to load policy [ 219.599630][T13425] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 219.606438][T13214] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.609698][T13425] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 219.632301][T13425] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 219.652551][T13425] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: inode #32: comm syz.1.3419: iget: special inode unallocated [ 219.686659][T13214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.692248][T13425] EXT4-fs (loop1): no journal found [ 219.698663][T13425] EXT4-fs (loop1): can't get journal size [ 219.708964][T13214] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.723171][T12872] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.730328][T12872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.740509][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'. [ 219.760887][T12877] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.768084][T12877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.801677][T13446] tmpfs: Bad value for 'mpol' [ 219.879090][T13214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.894041][T13457] loop1: detected capacity change from 0 to 512 [ 219.904078][T13457] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 219.928735][T13459] loop4: detected capacity change from 0 to 2048 [ 219.937809][T13457] EXT4-fs (loop1): 1 truncate cleaned up [ 219.946885][T13459] EXT4-fs: Ignoring removed i_version option [ 219.947226][T13457] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 219.970810][T13459] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.989533][T13214] veth0_vlan: entered promiscuous mode [ 219.998749][T13214] veth1_vlan: entered promiscuous mode [ 220.015661][T13214] veth0_macvtap: entered promiscuous mode [ 220.024149][T13214] veth1_macvtap: entered promiscuous mode [ 220.037255][T13214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.050647][T13214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.062817][T13457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.091574][T13457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.113536][T12877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.131515][T12877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.160828][T12877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.180191][T12877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.241909][T13473] loop1: detected capacity change from 0 to 8192 [ 220.305398][T13477] Falling back ldisc for ttyS3. [ 220.338342][T13489] loop1: detected capacity change from 0 to 1024 [ 220.339238][T13492] tmpfs: Bad value for 'mpol' [ 220.345996][T13489] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 220.359405][T13489] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 220.369429][T13489] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 220.380546][T13489] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: inode #32: comm syz.1.3434: iget: special inode unallocated [ 220.393779][T13489] EXT4-fs (loop1): no journal found [ 220.399181][T13489] EXT4-fs (loop1): can't get journal size [ 220.423281][T13486] netlink: 'syz.2.3436': attribute type 7 has an invalid length. [ 220.618313][T13523] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 220.655175][T13524] loop2: detected capacity change from 0 to 2048 [ 220.662448][T13510] lo speed is unknown, defaulting to 1000 [ 220.681228][T13530] batadv1: entered promiscuous mode [ 220.681888][T13528] loop4: detected capacity change from 0 to 1024 [ 220.686813][T13530] batadv1: entered allmulticast mode [ 220.701363][T13528] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 220.707439][T13507] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 220.711307][T13528] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 220.717832][T13507] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 220.719268][T13507] vhci_hcd vhci_hcd.0: Device attached [ 220.728552][T13528] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 220.745457][T13531] vhci_hcd: connection closed [ 220.754023][T12878] vhci_hcd: stop threads [ 220.763112][T12878] vhci_hcd: release socket [ 220.767576][T12878] vhci_hcd: disconnect device [ 220.772389][T13528] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: inode #32: comm syz.4.3451: iget: special inode unallocated [ 220.786143][T13528] EXT4-fs (loop4): no journal found [ 220.791415][T13528] EXT4-fs (loop4): can't get journal size [ 220.912964][ T4617] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 220.922138][ T4617] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 221.054624][T13557] tmpfs: Bad value for 'mpol' [ 221.122643][T13559] Falling back ldisc for ttyS3. [ 221.132919][T13559] loop4: detected capacity change from 0 to 128 [ 221.186973][T13566] loop1: detected capacity change from 0 to 1024 [ 221.206015][T13566] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 221.216056][T13566] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 221.230739][T13566] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 221.249954][T13566] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: inode #32: comm syz.1.3466: iget: special inode unallocated [ 221.273338][T13566] EXT4-fs (loop1): no journal found [ 221.278743][T13566] EXT4-fs (loop1): can't get journal size [ 221.379028][T13585] netlink: 'syz.4.3476': attribute type 1 has an invalid length. [ 221.415313][T13585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.432312][T13592] loop3: detected capacity change from 0 to 2048 [ 221.476777][T13597] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 221.485815][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 221.485833][ T29] audit: type=1326 audit(2000000152.170:19604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 221.523625][ T29] audit: type=1326 audit(2000000152.200:19605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 221.547619][ T29] audit: type=1326 audit(2000000152.200:19606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 221.571494][ T29] audit: type=1326 audit(2000000152.200:19607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 221.595152][ T29] audit: type=1326 audit(2000000152.200:19608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 221.615177][T13600] loop2: detected capacity change from 0 to 2048 [ 221.618858][ T29] audit: type=1326 audit(2000000152.200:19609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 221.636402][T13600] EXT4-fs: Ignoring removed i_version option [ 221.648836][ T29] audit: type=1326 audit(2000000152.200:19610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 221.678794][ T29] audit: type=1326 audit(2000000152.200:19611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 221.702932][ T29] audit: type=1326 audit(2000000152.200:19612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc042b5ef03 code=0x7ffc0000 [ 221.726481][ T29] audit: type=1326 audit(2000000152.200:19613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc042b5d97f code=0x7ffc0000 [ 221.752184][T13583] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 221.753253][T13600] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.759072][T13583] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 221.759824][T13583] vhci_hcd vhci_hcd.0: Device attached [ 221.791608][T13603] vhci_hcd: connection closed [ 221.791906][T12878] vhci_hcd: stop threads [ 221.801008][T12878] vhci_hcd: release socket [ 221.805469][T12878] vhci_hcd: disconnect device [ 221.819537][T13614] loop3: detected capacity change from 0 to 1024 [ 221.826710][T13614] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 221.836738][T13614] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 221.836860][T13607] Falling back ldisc for ttyS3. [ 221.854937][T13615] loop4: detected capacity change from 0 to 128 [ 221.861669][T13615] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 221.873930][T13615] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 221.874975][T13614] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 221.894952][T13614] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: inode #32: comm syz.3.3485: iget: special inode unallocated [ 221.908087][T13614] EXT4-fs (loop3): no journal found [ 221.913331][T13614] EXT4-fs (loop3): can't get journal size [ 221.954532][T13622] loop4: detected capacity change from 0 to 1024 [ 221.961899][T13622] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 221.973299][T13622] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 221.984444][T13622] JBD2: no valid journal superblock found [ 221.990350][T13622] EXT4-fs (loop4): Could not load journal inode [ 222.011431][T13625] netlink: 'syz.2.3489': attribute type 1 has an invalid length. [ 222.026562][T13625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.159203][T13646] program syz.2.3499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.164344][T13644] loop4: detected capacity change from 0 to 2048 [ 222.529547][T13668] loop2: detected capacity change from 0 to 1024 [ 222.552072][T13668] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 222.584924][T13668] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #11: comm syz.2.3499: iget: bogus i_mode (1) [ 222.637803][T13668] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3499: couldn't read orphan inode 11 (err -117) [ 222.717954][T13678] batadv1: entered promiscuous mode [ 222.723266][T13678] batadv1: entered allmulticast mode [ 222.936152][T13692] bond0: (slave dummy0): Releasing backup interface [ 222.962784][T13692] batman_adv: batadv0: Adding interface: dummy0 [ 222.969144][T13692] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.994747][T13692] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 223.288288][T13696] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 223.318693][T13696] SELinux: failed to load policy [ 223.373457][T13702] loop1: detected capacity change from 0 to 2048 [ 223.382464][T13702] EXT4-fs: Ignoring removed i_version option [ 223.397884][T13702] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.430146][T13706] loop2: detected capacity change from 0 to 1024 [ 223.455009][T13706] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 223.465046][T13706] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 223.495730][T13706] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 223.519257][T13712] loop3: detected capacity change from 0 to 512 [ 223.526233][T13706] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: inode #32: comm syz.2.3523: iget: special inode unallocated [ 223.540761][T13712] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 223.550965][T13706] EXT4-fs (loop2): no journal found [ 223.556337][T13706] EXT4-fs (loop2): can't get journal size [ 223.564367][T13712] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3525: invalid indirect mapped block 4294967295 (level 0) [ 223.592050][T13712] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3525: invalid indirect mapped block 4294967295 (level 1) [ 223.611711][T13712] EXT4-fs (loop3): 1 orphan inode deleted [ 223.617566][T13712] EXT4-fs (loop3): 1 truncate cleaned up [ 223.625144][T13718] loop1: detected capacity change from 0 to 2048 [ 223.712578][ T3539] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 223.715894][T13723] loop3: detected capacity change from 0 to 2048 [ 223.726932][ T3539] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.057444][T13750] __nla_validate_parse: 10 callbacks suppressed [ 224.057583][T13750] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3541'. [ 224.087324][T13747] loop3: detected capacity change from 0 to 512 [ 224.096671][T13747] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.157162][T13755] loop1: detected capacity change from 0 to 1024 [ 224.173692][T13755] EXT4-fs: Ignoring removed bh option [ 224.187105][T13755] EXT4-fs: inline encryption not supported [ 224.193782][T13755] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 224.205112][T13747] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3540: invalid indirect mapped block 4294967295 (level 0) [ 224.220271][T13755] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 224.227162][T13747] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3540: invalid indirect mapped block 4294967295 (level 1) [ 224.232143][T13755] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.3542: lblock 2 mapped to illegal pblock 2 (length 1) [ 224.243367][T13747] EXT4-fs (loop3): 1 orphan inode deleted [ 224.259754][T13755] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3542: lblock 0 mapped to illegal pblock 48 (length 1) [ 224.262480][T13747] EXT4-fs (loop3): 1 truncate cleaned up [ 224.277598][T13758] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 224.283642][T13736] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 224.295959][T13736] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 224.304971][T13736] vhci_hcd vhci_hcd.0: Device attached [ 224.304919][T13755] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3542: Failed to acquire dquot type 0 [ 224.326746][T13755] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 224.344523][T13759] vhci_hcd: connection closed [ 224.345786][T13755] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.3542: mark_inode_dirty error [ 224.363432][T13755] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 224.376706][T13755] EXT4-fs (loop1): 1 orphan inode deleted [ 224.376890][ T37] vhci_hcd: stop threads [ 224.386903][ T37] vhci_hcd: release socket [ 224.391406][ T37] vhci_hcd: disconnect device [ 224.394864][T12872] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 224.411196][T12872] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 0 [ 224.425906][T13755] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3542: lblock 0 mapped to illegal pblock 48 (length 1) [ 224.550450][T13778] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3548'. [ 224.563202][T13778] batadv1: entered promiscuous mode [ 224.568965][T13778] batadv1: entered allmulticast mode [ 224.680788][T13787] netlink: 'syz.3.3552': attribute type 1 has an invalid length. [ 224.695653][T13787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.725339][T13790] tmpfs: Bad value for 'mpol' [ 224.774124][T13792] loop3: detected capacity change from 0 to 512 [ 224.783500][T13792] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.796548][T13792] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3554: invalid indirect mapped block 4294967295 (level 0) [ 224.813515][T13792] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3554: invalid indirect mapped block 4294967295 (level 1) [ 224.828569][T13792] EXT4-fs (loop3): 1 orphan inode deleted [ 224.834494][T13792] EXT4-fs (loop3): 1 truncate cleaned up [ 224.849236][T13798] loop1: detected capacity change from 0 to 1024 [ 224.867913][T13798] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 224.878058][T13798] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 224.890740][T13798] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 224.901166][T13798] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: inode #32: comm syz.1.3556: iget: special inode unallocated [ 224.920472][T13798] EXT4-fs (loop1): no journal found [ 224.925960][T13798] EXT4-fs (loop1): can't get journal size [ 224.955117][T13807] loop3: detected capacity change from 0 to 2048 [ 224.961883][T13807] EXT4-fs: Ignoring removed i_version option [ 224.994968][T13807] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.051351][T13819] FAULT_INJECTION: forcing a failure. [ 225.051351][T13819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.064892][T13819] CPU: 1 UID: 0 PID: 13819 Comm: syz.4.3564 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.065003][T13819] Tainted: [W]=WARN [ 225.065011][T13819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 225.065023][T13819] Call Trace: [ 225.065031][T13819] [ 225.065042][T13819] __dump_stack+0x1d/0x30 [ 225.065086][T13819] dump_stack_lvl+0xe8/0x140 [ 225.065171][T13819] dump_stack+0x15/0x1b [ 225.065201][T13819] should_fail_ex+0x265/0x280 [ 225.065299][T13819] should_fail+0xb/0x20 [ 225.065374][T13819] should_fail_usercopy+0x1a/0x20 [ 225.065402][T13819] copy_to_user_nofault+0x7f/0x120 [ 225.065441][T13819] bpf_probe_write_user+0x83/0xc0 [ 225.065470][T13819] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 225.065513][T13819] bpf_trace_run3+0x10c/0x1d0 [ 225.065545][T13819] ? decay_va_pool_node+0x42b/0x8c0 [ 225.065587][T13819] ? __slab_free+0x77/0x270 [ 225.065612][T13819] ? decay_va_pool_node+0x42b/0x8c0 [ 225.065667][T13819] __traceiter_kmem_cache_free+0x35/0x60 [ 225.065822][T13819] ? decay_va_pool_node+0x42b/0x8c0 [ 225.065867][T13819] kmem_cache_free+0x329/0x3d0 [ 225.065892][T13819] ? rb_insert_color+0x277/0x2b0 [ 225.065997][T13819] decay_va_pool_node+0x42b/0x8c0 [ 225.066048][T13819] __purge_vmap_area_lazy+0xdf/0x7b0 [ 225.066092][T13819] _vm_unmap_aliases+0x3b0/0x430 [ 225.066225][T13819] vm_unmap_aliases+0x19/0x20 [ 225.066256][T13819] change_page_attr_set_clr+0x1ee/0x9f0 [ 225.066307][T13819] set_memory_nx+0x81/0xb0 [ 225.066329][T13819] machine_kexec_cleanup+0x32/0xb0 [ 225.066491][T13819] kimage_free+0x649/0x890 [ 225.066533][T13819] do_kexec_load+0x1ac/0x500 [ 225.066561][T13819] ? _copy_from_user+0x89/0xb0 [ 225.066594][T13819] __se_sys_kexec_load+0x134/0x160 [ 225.066622][T13819] __x64_sys_kexec_load+0x55/0x70 [ 225.066649][T13819] x64_sys_call+0x289c/0x3000 [ 225.066723][T13819] do_syscall_64+0xd2/0x200 [ 225.066801][T13819] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 225.066856][T13819] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 225.066889][T13819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.066917][T13819] RIP: 0033:0x7f9fcd7ceec9 [ 225.066936][T13819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.066957][T13819] RSP: 002b:00007f9fcc237038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 225.067022][T13819] RAX: ffffffffffffffda RBX: 00007f9fcda25fa0 RCX: 00007f9fcd7ceec9 [ 225.067035][T13819] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.067047][T13819] RBP: 00007f9fcc237090 R08: 0000000000000000 R09: 0000000000000000 [ 225.067063][T13819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.067078][T13819] R13: 00007f9fcda26038 R14: 00007f9fcda25fa0 R15: 00007ffe5f502448 [ 225.067103][T13819] [ 225.352839][T13806] netlink: 'syz.0.3560': attribute type 7 has an invalid length. [ 225.360655][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3560'. [ 225.394374][T13824] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3566'. [ 225.483661][T13829] siw: device registration error -23 [ 225.526402][T13831] loop2: detected capacity change from 0 to 512 [ 225.703108][T13831] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 225.737741][T13831] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3569: invalid indirect mapped block 4294967295 (level 0) [ 225.759850][T13837] loop4: detected capacity change from 0 to 1024 [ 225.769326][T13837] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 225.779210][T13837] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 225.789724][T13831] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3569: invalid indirect mapped block 4294967295 (level 1) [ 225.805878][T13831] EXT4-fs (loop2): 1 orphan inode deleted [ 225.811676][T13831] EXT4-fs (loop2): 1 truncate cleaned up [ 225.819279][T13837] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 225.830026][T13837] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: inode #32: comm syz.4.3572: iget: special inode unallocated [ 225.850798][T13837] EXT4-fs (loop4): no journal found [ 225.856175][T13837] EXT4-fs (loop4): can't get journal size [ 226.298652][T13842] tmpfs: Bad value for 'mpol' [ 226.300511][T13845] tmpfs: Bad value for 'mpol' [ 226.368090][T13853] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3578'. [ 226.415889][T13855] loop2: detected capacity change from 0 to 1024 [ 226.423945][T13861] tmpfs: Bad value for 'mpol' [ 226.429163][T13855] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 226.487092][T13865] loop3: detected capacity change from 0 to 512 [ 226.499526][T13865] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 226.536831][T13865] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3584: invalid indirect mapped block 4294967295 (level 0) [ 226.551246][T13865] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3584: invalid indirect mapped block 4294967295 (level 1) [ 226.566750][T13865] EXT4-fs (loop3): 1 orphan inode deleted [ 226.572551][T13865] EXT4-fs (loop3): 1 truncate cleaned up [ 226.578690][T13865] EXT4-fs mount: 50 callbacks suppressed [ 226.578716][T13865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.606333][T13863] netlink: 'syz.1.3583': attribute type 7 has an invalid length. [ 226.614371][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3583'. [ 226.624120][T13880] batman_adv: batadv0: Adding interface: dummy0 [ 226.630498][T13880] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.668866][T13880] batman_adv: batadv0: Interface activated: dummy0 [ 226.747719][T13883] loop2: detected capacity change from 0 to 512 [ 226.775052][T13883] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 226.800443][T12493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.818516][T13883] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3588: invalid indirect mapped block 4294967295 (level 0) [ 226.833238][T13883] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3588: invalid indirect mapped block 4294967295 (level 1) [ 226.853197][T13883] EXT4-fs (loop2): 1 orphan inode deleted [ 226.859158][T13883] EXT4-fs (loop2): 1 truncate cleaned up [ 226.866130][T13883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.957129][T12059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.159090][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 227.159168][ T29] audit: type=1326 audit(2000000157.820:19785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13889 comm="syz.3.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107637eec9 code=0x7ffc0000 [ 227.167321][T13895] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3593'. [ 227.189032][ T29] audit: type=1326 audit(2000000157.820:19786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13889 comm="syz.3.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107637eec9 code=0x7ffc0000 [ 227.221571][ T29] audit: type=1326 audit(2000000157.820:19787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13889 comm="syz.3.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f107637eec9 code=0x7ffc0000 [ 227.244195][T13895] batadv1: entered promiscuous mode [ 227.245090][ T29] audit: type=1326 audit(2000000157.820:19788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13889 comm="syz.3.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107637eec9 code=0x7ffc0000 [ 227.250296][T13895] batadv1: entered allmulticast mode [ 227.273869][ T29] audit: type=1326 audit(2000000157.820:19789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13889 comm="syz.3.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f107637eec9 code=0x7ffc0000 [ 227.302723][ T29] audit: type=1326 audit(2000000157.820:19790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13889 comm="syz.3.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107637eec9 code=0x7ffc0000 [ 227.326443][ T29] audit: type=1326 audit(2000000157.830:19791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13889 comm="syz.3.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107637eec9 code=0x7ffc0000 [ 227.354519][T13892] loop2: detected capacity change from 0 to 2048 [ 227.422518][T13899] tmpfs: Bad value for 'mpol' [ 227.505023][T13903] tmpfs: Bad value for 'mpol' [ 227.524289][ T29] audit: type=1326 audit(2000000158.200:19792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 227.547993][ T29] audit: type=1326 audit(2000000158.200:19793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 227.588224][ T29] audit: type=1326 audit(2000000158.200:19794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc042b5eec9 code=0x7ffc0000 [ 227.602672][T13906] loop4: detected capacity change from 0 to 2048 [ 227.620315][T13906] EXT4-fs: Ignoring removed i_version option [ 227.638445][T13906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.665925][T13906] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.779790][T13913] SELinux: failed to load policy [ 227.870002][T11442] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.918076][T13920] loop3: detected capacity change from 0 to 128 [ 227.944598][T13915] netlink: 'syz.1.3600': attribute type 7 has an invalid length. [ 227.952551][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3600'. [ 227.977639][T13924] loop3: detected capacity change from 0 to 512 [ 228.013153][T13926] loop4: detected capacity change from 0 to 2048 [ 228.019645][T13924] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 228.026388][T13930] tmpfs: Bad value for 'mpol' [ 228.068309][T13888] syz.0.3589 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 228.082876][T13888] CPU: 0 UID: 0 PID: 13888 Comm: syz.0.3589 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 228.082921][T13888] Tainted: [W]=WARN [ 228.082965][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 228.083036][T13888] Call Trace: [ 228.083046][T13888] [ 228.083056][T13888] __dump_stack+0x1d/0x30 [ 228.083104][T13888] dump_stack_lvl+0xe8/0x140 [ 228.083148][T13888] dump_stack+0x15/0x1b [ 228.083239][T13888] dump_header+0x81/0x220 [ 228.083276][T13888] oom_kill_process+0x342/0x400 [ 228.083348][T13888] out_of_memory+0x979/0xb80 [ 228.083377][T13888] try_charge_memcg+0x5e6/0x9e0 [ 228.083409][T13888] obj_cgroup_charge_pages+0xa6/0x150 [ 228.083521][T13888] __memcg_kmem_charge_page+0x9f/0x170 [ 228.083554][T13888] __alloc_frozen_pages_noprof+0x188/0x360 [ 228.083629][T13888] alloc_pages_mpol+0xb3/0x260 [ 228.083671][T13888] ? alloc_pages_noprof+0xf4/0x130 [ 228.083712][T13888] alloc_pages_noprof+0x90/0x130 [ 228.083825][T13888] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 228.083880][T13888] __kvmalloc_node_noprof+0x483/0x670 [ 228.083923][T13888] ? ip_set_alloc+0x24/0x30 [ 228.083958][T13888] ? ip_set_alloc+0x24/0x30 [ 228.084021][T13888] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 228.084051][T13888] ip_set_alloc+0x24/0x30 [ 228.084166][T13888] hash_netiface_create+0x282/0x740 [ 228.084282][T13888] ? __pfx_hash_netiface_create+0x10/0x10 [ 228.084327][T13888] ip_set_create+0x3cc/0x970 [ 228.084370][T13888] nfnetlink_rcv_msg+0x4c6/0x590 [ 228.084436][T13888] netlink_rcv_skb+0x120/0x220 [ 228.084505][T13888] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 228.084554][T13888] nfnetlink_rcv+0x167/0x16c0 [ 228.084591][T13888] ? kmem_cache_free+0xe4/0x3d0 [ 228.084667][T13888] ? __kfree_skb+0x109/0x150 [ 228.084709][T13888] ? nlmon_xmit+0x4f/0x60 [ 228.084783][T13888] ? consume_skb+0x49/0x150 [ 228.084823][T13888] ? nlmon_xmit+0x4f/0x60 [ 228.084907][T13888] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 228.084953][T13888] ? __dev_queue_xmit+0x1200/0x2000 [ 228.084979][T13888] ? __dev_queue_xmit+0x182/0x2000 [ 228.085005][T13888] ? ref_tracker_free+0x37d/0x3e0 [ 228.085086][T13888] ? __netlink_deliver_tap+0x4dc/0x500 [ 228.085117][T13888] netlink_unicast+0x5c0/0x690 [ 228.085159][T13888] netlink_sendmsg+0x58b/0x6b0 [ 228.085181][T13888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.085271][T13888] __sock_sendmsg+0x145/0x180 [ 228.085306][T13888] ____sys_sendmsg+0x31e/0x4e0 [ 228.085338][T13888] ___sys_sendmsg+0x17b/0x1d0 [ 228.085384][T13888] __x64_sys_sendmsg+0xd4/0x160 [ 228.085442][T13888] x64_sys_call+0x191e/0x3000 [ 228.085466][T13888] do_syscall_64+0xd2/0x200 [ 228.085533][T13888] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 228.085682][T13888] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 228.085716][T13888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.085738][T13888] RIP: 0033:0x7f7158ddeec9 [ 228.085754][T13888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.085772][T13888] RSP: 002b:00007f715783f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.085844][T13888] RAX: ffffffffffffffda RBX: 00007f7159035fa0 RCX: 00007f7158ddeec9 [ 228.085861][T13888] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 228.085878][T13888] RBP: 00007f7158e61f91 R08: 0000000000000000 R09: 0000000000000000 [ 228.085893][T13888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.085905][T13888] R13: 00007f7159036038 R14: 00007f7159035fa0 R15: 00007fffbdcde4b8 [ 228.085924][T13888] [ 228.431722][T13888] memory: usage 307200kB, limit 307200kB, failcnt 227 [ 228.438697][T13888] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 228.446770][T13888] kmem: usage 306964kB, limit 9007199254740988kB, failcnt 0 [ 228.447655][T13924] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3603'. [ 228.454065][T13888] Memory cgroup stats for /syz0: [ 228.469855][T13932] loop4: detected capacity change from 0 to 512 [ 228.481401][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3603'. [ 228.494322][T13932] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 228.503519][T13936] FAULT_INJECTION: forcing a failure. [ 228.503519][T13936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.505637][T13924] netlink: 'syz.3.3603': attribute type 10 has an invalid length. [ 228.516774][T13936] CPU: 0 UID: 0 PID: 13936 Comm: syz.1.3609 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 228.516891][T13936] Tainted: [W]=WARN [ 228.516900][T13936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 228.516918][T13936] Call Trace: [ 228.516926][T13936] [ 228.516936][T13936] __dump_stack+0x1d/0x30 [ 228.516984][T13936] dump_stack_lvl+0xe8/0x140 [ 228.517074][T13936] dump_stack+0x15/0x1b [ 228.517116][T13936] should_fail_ex+0x265/0x280 [ 228.517214][T13936] should_fail+0xb/0x20 [ 228.517235][T13936] should_fail_usercopy+0x1a/0x20 [ 228.517264][T13936] strncpy_from_user+0x25/0x230 [ 228.517375][T13936] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 228.517415][T13936] __se_sys_memfd_create+0x1ff/0x590 [ 228.517459][T13936] __x64_sys_memfd_create+0x31/0x40 [ 228.517491][T13936] x64_sys_call+0x2ac2/0x3000 [ 228.517519][T13936] do_syscall_64+0xd2/0x200 [ 228.517605][T13936] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 228.517663][T13936] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 228.517698][T13936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.517728][T13936] RIP: 0033:0x7f643fb4eec9 [ 228.517759][T13936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.517784][T13936] RSP: 002b:00007f643e5b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 228.517810][T13936] RAX: ffffffffffffffda RBX: 0000000000000521 RCX: 00007f643fb4eec9 [ 228.517877][T13936] RDX: 00007f643e5b6ef0 RSI: 0000000000000000 RDI: 00007f643fbd2960 [ 228.517895][T13936] RBP: 0000200000000b80 R08: 00007f643e5b6bb7 R09: 00007f643e5b6e40 [ 228.517912][T13936] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000240 [ 228.517929][T13936] R13: 00007f643e5b6ef0 R14: 00007f643e5b6eb0 R15: 0000200000000200 [ 228.518009][T13936] [ 228.545033][T13888] cache 40960 [ 228.571232][T13937] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 228.574148][T13888] rss 200704 [ 228.574160][T13888] shmem 0 [ 228.574169][T13888] mapped_file 40960 [ 228.574179][T13888] dirty 8192 [ 228.618012][T13939] tmpfs: Bad value for 'mpol' [ 228.620705][T13888] writeback 0 [ 228.740963][T13888] workingset_refault_anon 0 [ 228.745656][T13888] workingset_refault_file 0 [ 228.750169][T13888] swap 0 [ 228.753575][T13888] swapcached 0 [ 228.757020][T13888] pgpgin 534230 [ 228.760544][T13888] pgpgout 534171 [ 228.764312][T13888] pgfault 248760 [ 228.767972][T13888] pgmajfault 6 [ 228.771369][T13888] inactive_anon 200704 [ 228.775670][T13888] active_anon 0 [ 228.779148][T13888] inactive_file 0 [ 228.782801][T13888] active_file 40960 [ 228.786657][T13888] unevictable 0 [ 228.790131][T13888] hierarchical_memory_limit 314572800 [ 228.795634][T13888] hierarchical_memsw_limit 9223372036854771712 [ 228.801813][T13888] total_cache 40960 [ 228.805826][T13888] total_rss 200704 [ 228.809670][T13888] total_shmem 0 [ 228.813136][T13888] total_mapped_file 40960 [ 228.817568][T13888] total_dirty 8192 [ 228.821294][T13888] total_writeback 0 [ 228.823769][T13947] loop2: detected capacity change from 0 to 128 [ 228.825155][T13888] total_workingset_refault_anon 0 [ 228.825176][T13888] total_workingset_refault_file 0 [ 228.825223][T13888] total_swap 0 [ 228.832696][T13947] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.836622][T13888] total_swapcached 0 [ 228.836635][T13888] total_pgpgin 534230 [ 228.836647][T13888] total_pgpgout 534171 [ 228.842987][T13947] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.845129][T13888] total_pgfault 248760 [ 228.845143][T13888] total_pgmajfault 6 [ 228.845155][T13888] total_inactive_anon 200704 [ 228.890613][T13888] total_active_anon 0 [ 228.894595][T13888] total_inactive_file 0 [ 228.898891][T13888] total_active_file 40960 [ 228.903231][T13888] total_unevictable 0 [ 228.907271][T13888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3589,pid=13885,uid=0 [ 228.922253][T13888] Memory cgroup out of memory: Killed process 13885 (syz.0.3589) total-vm:93884kB, anon-rss:1256kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 228.998960][T13948] netlink: 'syz.4.3607': attribute type 10 has an invalid length. [ 229.025906][T13945] Falling back ldisc for ttyS3. [ 229.068653][T13951] netlink: 'syz.4.3607': attribute type 1 has an invalid length. [ 229.078653][T13948] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 229.287990][T13962] __nla_validate_parse: 4 callbacks suppressed [ 229.288012][T13962] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3617'. [ 229.436600][T13965] netlink: 'syz.1.3618': attribute type 7 has an invalid length. [ 229.444388][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 229.480412][T13980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3624'. [ 229.593232][T13994] syz_tun: entered allmulticast mode [ 229.603366][T13994] dvmrp8: entered allmulticast mode [ 229.617066][T13992] syz_tun: left allmulticast mode [ 229.622497][T13992] dvmrp8: left allmulticast mode [ 229.835073][T14006] Falling back ldisc for ttyS3. [ 229.842455][T14006] loop4: detected capacity change from 0 to 128 [ 229.872045][T14012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3638'. [ 229.881556][T14010] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3637'. [ 229.895978][T14010] batadv1: entered promiscuous mode [ 229.901260][T14010] batadv1: entered allmulticast mode [ 229.915518][T14004] netlink: 'syz.1.3635': attribute type 7 has an invalid length. [ 229.923316][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3635'. [ 229.977067][T14019] loop4: detected capacity change from 0 to 2048 [ 229.984281][T14019] EXT4-fs: Ignoring removed i_version option [ 229.985832][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3641'. [ 230.001323][T14021] bridge_slave_1: left allmulticast mode [ 230.006898][T14019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.008193][T14021] bridge_slave_1: left promiscuous mode [ 230.024830][T14019] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.031419][T14021] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.046884][T14024] loop1: detected capacity change from 0 to 512 [ 230.063178][T14021] bridge_slave_0: left allmulticast mode [ 230.070040][T14021] bridge_slave_0: left promiscuous mode [ 230.078432][T14021] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.092605][T14024] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 230.101033][T14024] EXT4-fs (loop1): orphan cleanup on readonly fs [ 230.119207][T14024] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.3641: corrupted inode contents [ 230.147382][T14024] EXT4-fs (loop1): Remounting filesystem read-only [ 230.159923][T14024] EXT4-fs (loop1): 1 truncate cleaned up [ 230.167819][T14019] ================================================================== [ 230.175953][T14019] BUG: KCSAN: data-race in xas_find_marked / xas_init_marks [ 230.183721][T14019] [ 230.186379][T14019] read-write to 0xffff888106eb5d90 of 8 bytes by task 149 on cpu 0: [ 230.194377][T14019] xas_init_marks+0x18a/0x320 [ 230.199269][T14019] xas_store+0x3cf/0xce0 [ 230.203564][T14019] __filemap_remove_folio+0x195/0x2a0 [ 230.208980][T14019] folio_unmap_invalidate+0x1dd/0x360 [ 230.214376][T14019] folio_end_dropbehind+0x127/0x240 [ 230.216847][T14029] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3643'. [ 230.219601][T14019] folio_end_writeback+0x24/0x70 [ 230.219635][T14019] ext4_finish_bio+0x459/0x8c0 [ 230.219664][T14019] ext4_release_io_end+0x9f/0x1f0 [ 230.228782][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 230.233570][T14019] ext4_end_io_end+0x18d/0x240 [ 230.233610][T14019] ext4_end_io_rsv_work+0x151/0x1e0 [ 230.233644][T14019] process_scheduled_works+0x4ce/0x9d0 [ 230.233680][T14019] worker_thread+0x582/0x770 [ 230.233710][T14019] kthread+0x489/0x510 [ 230.238523][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 230.243509][T14019] ret_from_fork+0x122/0x1b0 [ 230.243532][T14019] ret_from_fork_asm+0x1a/0x30 [ 230.243553][T14019] [ 230.243559][T14019] read to 0xffff888106eb5d90 of 8 bytes by task 14019 on cpu 1: [ 230.274929][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 230.278133][T14019] xas_find_marked+0x218/0x620 [ 230.278172][T14019] find_get_entry+0x5d/0x380 [ 230.278198][T14019] filemap_get_folios_tag+0x13b/0x210 [ 230.278225][T14019] file_write_and_wait_range+0x1ea/0x2c0 [ 230.338783][T14019] generic_buffers_fsync_noflush+0x45/0x120 [ 230.344727][T14019] ext4_sync_file+0x1ab/0x690 [ 230.349450][T14019] vfs_fsync_range+0x10d/0x130 [ 230.354310][T14019] ext4_buffered_write_iter+0x34f/0x3c0 [ 230.359983][T14019] ext4_file_write_iter+0x387/0xf60 [ 230.365248][T14019] aio_write+0x2e5/0x410 [ 230.369530][T14019] io_submit_one+0xacd/0x11d0 [ 230.374237][T14019] __se_sys_io_submit+0xfb/0x280 [ 230.379206][T14019] __x64_sys_io_submit+0x43/0x50 [ 230.384260][T14019] x64_sys_call+0x2d6c/0x3000 [ 230.388980][T14019] do_syscall_64+0xd2/0x200 [ 230.393527][T14019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.399619][T14019] [ 230.401964][T14019] value changed: 0xfffffffffffffff0 -> 0xffffffffffffff80 [ 230.409165][T14019] [ 230.411560][T14019] Reported by Kernel Concurrency Sanitizer on: [ 230.415344][T14024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.417733][T14019] CPU: 1 UID: 0 PID: 14019 Comm: syz.4.3642 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 230.441567][T14019] Tainted: [W]=WARN [ 230.445401][T14019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.455594][T14019] ================================================================== [ 230.548695][T14029] batadv1: entered promiscuous mode [ 230.553932][T14029] batadv1: entered allmulticast mode [ 230.572502][T11442] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.600936][T11800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.