last executing test programs: 5.898475898s ago: executing program 3 (id=2621): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 2.405438653s ago: executing program 4 (id=2703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x4}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0x1c00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) close(r0) 2.298807733s ago: executing program 4 (id=2706): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x100) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1, 0x100, 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x8401) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) set_tid_address(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r4}, 0x18) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r6, 0x0, 0x8}, 0x18) gettid() r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000300)='ext3\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.939550417s ago: executing program 1 (id=2708): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(r0, r1) 1.918812637s ago: executing program 1 (id=2709): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x36}, 0x18) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000000)={0x80fd, 0x2}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000c730d315aaa417e6050001000700000005000400030000000900ebff72797a310000000011000300686173683a6e65742c6e657400000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec850000007500000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000101010100000000000000000a0000003c0001802c00018010000100fc02000000000000000000000000000014000400fc010000000000000000000000000000f6030280050001003a0000000c001980080001"], 0x5c}}, 0x0) unshare(0x400) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.883005057s ago: executing program 3 (id=2712): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) dup2(r0, 0xffffffffffffffff) 1.817427707s ago: executing program 1 (id=2714): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.817041737s ago: executing program 0 (id=2715): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x5, 0x2, 0x0, 0x1, [@generic="a5"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4, 0x0, 0x10}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)="7f", 0x1}], 0x2, 0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x0, 0x18, 0x0, 0x16, 0x0, 0xffa}) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x10000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdnR?', @ANYRES16=r2, @ANYRES64=r5]) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000600)) syz_read_part_table(0x5c2, &(0x7f0000000000)="$eJzs2z1oU2sYB/AnavCil+vi5GQdnFwURzOoJFFRCNEu4qCgiBi4EEGIECjoYDO0NEPp2KUUsvRjapqhw6Wlhc6ldOil0KHTpV0KXZpL6Xv39vYDhN8PDg/v+/7Pec4znPEEv7QL8U+3281ERPfy8e/ubeULT2+WHpZfRWTiTUT0/PXH1MFJJiX+e+qttF5P67HRK53+nSfZ1trL3dtv5xsX0nlfuq6Ot3tPPBxnbiK3cO37j2pxoJb7tFqsb/5cWX4xuZ0vt583mlPPso/fp9xiqpdS/RK1+Baf411UohIfonpK/UdaG3f3bxRbMx8f7BU6g3P3Uq50wjmP2v9rz9DrZv3Rnenrw/drs0vlrYuHucr/+LoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh/E7mFa99/VIsDtdyn1WJ98+fK8ovJ7Xy5/bzRnHqWffw+5RZTvZTql6jFt/gc76ISlfgQ1VPqP9LauLt/o9ia+fhgr9AZnLuXcqUTznnU/l97hl4364/uTF8fvl+bXSpvXTzMVS6f0QsAAAAAAAAAAAAAAAAAAABAROQLT2+WHpZfRWTiTUT8+fvczMF+N/3vnkm5W6mup/2x0Sud/p0n2dbay93bb+cbf6f9vt8i+iLi6ni799yH4dj+DQAA///B9JXf") sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x10, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf, 0xd}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x240280c0}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$nl_route(0x10, 0x3, 0x0) 1.816768467s ago: executing program 3 (id=2716): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x18, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="48c26a7c95d9fe4b5635e47c879359755d4dd6d42934bc6e488c76dcc3df69c6f5ab4d4d3cd97b351aaff8fd56a500866261f279fdbfab67fc3ad3455bfe202d1ff5ad4e89c81f3660f8cf004e63863b5134043f92f3c3d5ac8b83c79a5f43bcfedd70237a19e4136f6d"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8080000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) (async) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r2 = shmget$private(0x0, 0x3000, 0x100, &(0x7f00002aa000/0x3000)=nil) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000580)={{0x2, 0xee00, 0xee01, 0x0, 0x0, 0x60, 0xe}, 0x2, 0x7, 0x2, 0x1ff, 0x0, 0x0, 0x5}) (async) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bda", 0x7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async) inotify_init1(0x80800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) 1.768234787s ago: executing program 1 (id=2717): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00/8O?\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)="395e601eac4aa0f7", 0x8}, 0x68) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x10, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.742845798s ago: executing program 3 (id=2719): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1, 0x100, 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x8401) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) set_tid_address(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r3}, 0x18) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x8}, 0x18) gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000300)='ext3\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.672509718s ago: executing program 1 (id=2721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x40}, 0x18) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) sendto$inet6(r0, &(0x7f0000000240)='I', 0x1, 0x2004c841, &(0x7f0000000200)={0xa, 0x4e23, 0x808001, @loopback, 0xfffffffb}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 1.44141624s ago: executing program 4 (id=2723): io_setup(0x7, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) readahead(0xffffffffffffffff, 0x80000000, 0x7c) creat(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x40, 0x0, 0xfc, 0x0, 0x0, 0x109, 0x154444, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xeec, 0x1, @perf_bp={&(0x7f00000003c0), 0x1}, 0x100410, 0x1fc, 0x6, 0x1, 0x9, 0xc, 0x2, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0x1) r6 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESDEC=r6, @ANYRESHEX]) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) 1.096887812s ago: executing program 2 (id=2728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000023c0)=r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r9 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r9, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680), 0x0, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002100)={0x77359400}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f00000020c0)={'pim6reg0\x00', {0x2, 0x0, @dev}}) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000024c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c00003000028008000100", @ANYRES32=r7, @ANYBLOB="05000600480000000000000000000000001d92e5c19e1bba17b0ecceca6f2541e7275a42454a452d600417bb9de33ddeea8d102c3b2e"], 0x60}}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x2}) 971.425593ms ago: executing program 2 (id=2729): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 865.336594ms ago: executing program 3 (id=2730): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) rseq(0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xe64, 0x0, @loopback, 0xc4}, 0x1c) sendto$inet6(r0, 0x0, 0xffffff21, 0x24000881, &(0x7f0000000100)={0xa, 0x4e24, 0x5, @loopback, 0x7fffffff}, 0x1c) 842.906394ms ago: executing program 2 (id=2731): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00/8O?\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)="395e601eac4aa0f7", 0x8}, 0x68) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x10, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 800.425364ms ago: executing program 0 (id=2732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setresuid(0x0, 0xee00, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) 779.627575ms ago: executing program 1 (id=2733): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x100) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1, 0x100, 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x8401) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) set_tid_address(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r4}, 0x18) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r6, 0x0, 0x8}, 0x18) gettid() r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000300)='ext3\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 779.248205ms ago: executing program 2 (id=2734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) 722.054785ms ago: executing program 0 (id=2735): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x106) rt_tgsigqueueinfo(0x0, 0x0, 0x2d, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 584.329796ms ago: executing program 0 (id=2736): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r1], 0x2c}}, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 580.440136ms ago: executing program 0 (id=2737): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x453) 540.475486ms ago: executing program 0 (id=2738): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001000)={0x0, [], 0x0, "735c1cfca5a071"}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 234.401738ms ago: executing program 2 (id=2739): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000023c0)=r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r9 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r9, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680), 0x0, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002100)={0x77359400}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f00000020c0)={'pim6reg0\x00', {0x2, 0x0, @dev}}) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000024c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c00003000028008000100", @ANYRES32=r7, @ANYBLOB="05000600480000000000000000000000001d92e5c19e1bba17b0ecceca6f2541e7275a42454a452d600417bb9de33ddeea8d102c3b2e"], 0x60}}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x2}) 110.723809ms ago: executing program 4 (id=2740): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000020000f8ffffffb703000008000000b700"/65], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='-\x0f-\x00') getsockopt$sock_cred(r0, 0x1, 0x2f, &(0x7f0000caaffb), &(0x7f0000cab000)=0x5) (async) getsockopt$sock_cred(r0, 0x1, 0x2f, &(0x7f0000caaffb), &(0x7f0000cab000)=0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x40, 0xb516, 0x4, {{0x9, 0x4, 0x0, 0x2, 0x24, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, {[@cipso={0x86, 0xe, 0x3, [{0x6, 0x6, "167772ae"}, {0x7, 0x2}]}]}}}}}) 65.3329ms ago: executing program 2 (id=2741): r0 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x511f, 0x800, 0x3, 0x388}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00050095", @ANYRESOCT=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x97}, 0x18) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x22500, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r7, 0x3309) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000900)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd69f0a60400101100fc000000000000000000000000000000ff0200000000000000000000000000014e234e20001090780209000080000000874d18b9141a9ae9d95ec889b791ff84bd04cd3d013c631b7b85a9fd6b932e2fbbc6bacfbe16bd3c1bbc8fd61fc05099d9c57277ce8ec673b8626e5fc12a26780546ad012b8103c83ed4eef3b9e77efcec1b0dc363ef79349773c9eb6c49d756ef0bf68304ab962247ada04cf7cf66dcbe3015de378542a374c093f244ee068d422355b061414ead35e03cae0d"], 0x0) recvmmsg(r5, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}, 0x400000}, {{&(0x7f0000000580)=@nfc_llcp, 0x80, &(0x7f0000000840)=[{&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/241, 0xf1}, {&(0x7f0000000bc0)=""/246, 0xf6}, {&(0x7f0000000cc0)=""/216, 0xd8}, {&(0x7f0000000dc0)=""/142, 0x8e}, {&(0x7f00000003c0)=""/61, 0x3d}], 0x6}, 0x5}, {{&(0x7f0000000e80)=@nfc, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/183, 0xb7}, {&(0x7f00000004c0)=""/28, 0x1c}], 0x3}, 0x8756}], 0x3, 0x10060, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000000), &(0x7f0000000400)}, 0x20) clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000002, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="1e89372bafb1091435272053972110cce7be5d6f084bdfd07a16b21deeb1d08c5bfa9404ad7074a809f28be66c0df0aa1c8fa98421a65f9ce4758a009990952fb024945f2c834433b9e8e0ce20cc17e835e0d558fec5f3a0090b4c476b5389ba6e2e016a", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x10000002}, 0x18) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4c23, @local}}, 0x0, 0x0, 0x3f, 0x0, "bd131a850810fcd18c0448734d20d5ac652dafacd33061762ee6ff7de1231ab45358cb73940a8ee9605f4291416850b05b3ffe4b328614a6a02e70351ef496146a4cf56e441481cf96f801d8c68fe3d9"}, 0xd8) setsockopt$inet_tcp_int(r10, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) io_uring_enter(r0, 0x47ba, 0x85cb, 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000640)='./file1\x00') 18.10232ms ago: executing program 4 (id=2742): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 17.73919ms ago: executing program 4 (id=2743): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd144, 0x0, 0xffffffff, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r1, 0x3516, 0xddd6, 0x4, 0x0, 0x300) 0s ago: executing program 3 (id=2744): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 250.763065][T10250] EXT4-fs (loop4): too many log groups per flexible block group [ 250.776789][T10250] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 250.783632][T10250] EXT4-fs (loop4): mount failed [ 250.879560][T10263] loop4: detected capacity change from 0 to 512 [ 250.898067][T10263] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2126: bg 0: block 248: padding at end of block bitmap is not set [ 250.912794][T10263] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2126: Failed to acquire dquot type 1 [ 250.924679][T10263] EXT4-fs (loop4): 1 truncate cleaned up [ 250.930838][T10263] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.952311][T10263] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.2126: deleted inode referenced: 12 [ 250.964492][T10263] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.2126: deleted inode referenced: 12 [ 251.043767][ T3448] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 1 [ 251.454013][T10280] siw: device registration error -23 [ 251.677522][T10286] /dev/loop0: Can't lookup blockdev [ 251.680726][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.693546][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 251.708371][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.726821][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.744368][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.759665][T10292] loop2: detected capacity change from 0 to 512 [ 251.766805][T10292] EXT4-fs: Ignoring removed nobh option [ 251.788920][T10292] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.2135: corrupted inode contents [ 251.803479][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 251.811142][T10292] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.2135: mark_inode_dirty error [ 251.824673][T10292] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.2135: corrupted inode contents [ 251.836994][T10292] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.2135: mark_inode_dirty error [ 251.849077][T10292] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2135: Failed to acquire dquot type 0 [ 251.862122][T10292] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2135: corrupted inode contents [ 251.874176][T10296] loop1: detected capacity change from 0 to 2048 [ 251.874963][T10292] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.2135: mark_inode_dirty error [ 251.892987][T10292] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2135: corrupted inode contents [ 251.907100][T10292] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2135: mark_inode_dirty error [ 251.920028][T10292] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2135: corrupted inode contents [ 251.932531][T10292] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 251.941758][T10292] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2135: corrupted inode contents [ 251.954081][T10292] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.2135: mark_inode_dirty error [ 251.983902][T10292] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 251.993610][T10292] EXT4-fs (loop2): 1 truncate cleaned up [ 252.000414][T10292] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.072319][T10314] siw: device registration error -23 [ 252.560539][ T3313] EXT4-fs unmount: 69 callbacks suppressed [ 252.560558][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.630872][T10341] loop3: detected capacity change from 0 to 512 [ 252.659495][T10341] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2150: bg 0: block 248: padding at end of block bitmap is not set [ 252.691800][T10341] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2150: Failed to acquire dquot type 1 [ 252.703986][T10341] EXT4-fs (loop3): 1 truncate cleaned up [ 252.710251][T10341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.722945][T10341] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.741347][T10341] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.2150: deleted inode referenced: 12 [ 252.753754][T10341] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.2150: deleted inode referenced: 12 [ 252.834108][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.843712][ T383] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 1 [ 253.102034][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 253.141405][T10371] lo speed is unknown, defaulting to 1000 [ 253.155891][T10367] hub 2-0:1.0: USB hub found [ 253.160914][T10367] hub 2-0:1.0: 8 ports detected [ 253.214798][T10372] loop1: detected capacity change from 0 to 2048 [ 253.215812][T10377] loop2: detected capacity change from 0 to 512 [ 253.247692][T10372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.248761][T10377] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2163: bg 0: block 248: padding at end of block bitmap is not set [ 253.281054][T10377] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2163: Failed to acquire dquot type 1 [ 253.294050][T10377] EXT4-fs (loop2): 1 truncate cleaned up [ 253.300271][T10377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.313080][T10377] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.331588][T10377] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.2163: deleted inode referenced: 12 [ 253.344747][T10377] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.2163: deleted inode referenced: 12 [ 253.360275][T10387] loop4: detected capacity change from 0 to 128 [ 253.367130][T10387] vfat: Unknown parameter '00000000000000000004ÿÿÿÿÿÿÿÿÿÿ00000000000000000000000' [ 253.378717][T10387] loop4: detected capacity change from 0 to 128 [ 253.450410][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.459803][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 253.553662][T10396] netlink: 'syz.0.2165': attribute type 10 has an invalid length. [ 253.567205][T10396] bond0: (slave dummy0): Releasing backup interface [ 253.576913][T10396] team0: Port device dummy0 added [ 253.593015][T10396] netlink: 'syz.0.2165': attribute type 10 has an invalid length. [ 253.605626][T10396] team0: Port device dummy0 removed [ 253.612959][T10396] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 253.935950][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.995339][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2168'. [ 254.007207][T10401] veth1_macvtap: left promiscuous mode [ 254.341144][T10404] lo speed is unknown, defaulting to 1000 [ 254.356120][T10406] ------------[ cut here ]------------ [ 254.361711][T10406] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 254.381721][T10406] WARNING: CPU: 1 PID: 10406 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 254.392304][T10406] Modules linked in: [ 254.396299][T10406] CPU: 1 UID: 0 PID: 10406 Comm: syz.1.2170 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 254.407771][T10406] Tainted: [W]=WARN [ 254.411687][T10406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.421846][T10406] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 254.428186][T10406] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 32 f9 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 254.448212][T10406] RSP: 0018:ffffc9000fd13408 EFLAGS: 00010282 [ 254.454319][T10406] RAX: 1340b1bf693d7e00 RBX: ffff888109a0c040 RCX: ffff88810c49d280 [ 254.462345][T10406] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000002 [ 254.470375][T10406] RBP: 0000000000000000 R08: 0000000000019e4e R09: 0000000000400000 [ 254.478419][T10406] R10: 000000000033c9c8 R11: ffffc9000203b000 R12: ffff888109a0c000 [ 254.486412][T10406] R13: ffff88810ca78000 R14: ffff88810ca78000 R15: ffff888109a0c038 [ 254.494633][T10406] FS: 00007fcf153676c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 254.503880][T10406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.510912][T10406] CR2: 00005555913154a8 CR3: 000000012b29c000 CR4: 00000000003506f0 [ 254.518991][T10406] Call Trace: [ 254.522346][T10406] [ 254.525316][T10406] reg_set_min_max+0x1eb/0x260 [ 254.530159][T10406] check_cond_jmp_op+0x1370/0x19e0 [ 254.535358][T10406] do_check+0x3363/0x8460 [ 254.540288][T10406] do_check_common+0xc5e/0x12b0 [ 254.545257][T10406] bpf_check+0xaaae/0xd9d0 [ 254.549760][T10406] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 254.555821][T10406] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 254.561910][T10406] ? css_rstat_updated+0xb7/0x240 [ 254.566974][T10406] ? try_charge_memcg+0x215/0xa10 [ 254.572051][T10406] ? _find_next_zero_bit+0x29/0xa0 [ 254.577222][T10406] ? pcpu_block_update+0x24e/0x3b0 [ 254.582411][T10406] ? pcpu_block_refresh_hint+0x10b/0x170 [ 254.588087][T10406] ? pcpu_block_refresh_hint+0x157/0x170 [ 254.593810][T10406] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 254.599999][T10406] ? css_rstat_updated+0xb7/0x240 [ 254.605136][T10406] ? __rcu_read_unlock+0x4f/0x70 [ 254.610159][T10406] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 254.616020][T10406] ? bpf_prog_alloc+0x5b/0x150 [ 254.620923][T10406] ? pcpu_alloc_noprof+0xd29/0x1250 [ 254.626142][T10406] ? should_fail_ex+0x30/0x280 [ 254.630952][T10406] ? should_failslab+0x8c/0xb0 [ 254.635740][T10406] ? __kmalloc_noprof+0x2a2/0x570 [ 254.640823][T10406] ? security_bpf_prog_load+0x60/0x140 [ 254.646465][T10406] ? selinux_bpf_prog_load+0xad/0xd0 [ 254.651795][T10406] ? security_bpf_prog_load+0x9e/0x140 [ 254.657354][T10406] bpf_prog_load+0xf6e/0x1100 [ 254.662120][T10406] ? security_bpf+0x2b/0x90 [ 254.666731][T10406] __sys_bpf+0x469/0x7c0 [ 254.671035][T10406] __x64_sys_bpf+0x41/0x50 [ 254.675523][T10406] x64_sys_call+0x2aee/0x3000 [ 254.680261][T10406] do_syscall_64+0xd2/0x200 [ 254.684788][T10406] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 254.690995][T10406] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 254.696806][T10406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.702715][T10406] RIP: 0033:0x7fcf168fefc9 [ 254.707251][T10406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.726931][T10406] RSP: 002b:00007fcf15367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.735434][T10406] RAX: ffffffffffffffda RBX: 00007fcf16b55fa0 RCX: 00007fcf168fefc9 [ 254.743448][T10406] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 254.751481][T10406] RBP: 00007fcf16981f91 R08: 0000000000000000 R09: 0000000000000000 [ 254.759497][T10406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.767495][T10406] R13: 00007fcf16b56038 R14: 00007fcf16b55fa0 R15: 00007ffd9cae6a68 [ 254.775493][T10406] [ 254.778633][T10406] ---[ end trace 0000000000000000 ]--- [ 254.820687][T10409] lo speed is unknown, defaulting to 1000 [ 254.908472][T10412] loop2: detected capacity change from 0 to 512 [ 254.945505][T10412] EXT4-fs (loop2): too many log groups per flexible block group [ 254.953358][T10412] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 254.970439][T10412] EXT4-fs (loop2): mount failed [ 255.255469][T10425] lo speed is unknown, defaulting to 1000 [ 255.330208][ T29] kauditd_printk_skb: 705 callbacks suppressed [ 255.330227][ T29] audit: type=1326 audit(1761711998.555:22811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 255.360129][ T29] audit: type=1326 audit(1761711998.565:22812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 255.383785][ T29] audit: type=1326 audit(1761711998.565:22813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 255.407454][ T29] audit: type=1326 audit(1761711998.565:22814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 255.431061][ T29] audit: type=1326 audit(1761711998.565:22815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 255.454667][ T29] audit: type=1326 audit(1761711998.565:22816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 255.478265][ T29] audit: type=1326 audit(1761711998.565:22817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 255.501903][ T29] audit: type=1326 audit(1761711998.565:22818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 255.525645][ T29] audit: type=1326 audit(1761711998.565:22819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 255.549293][ T29] audit: type=1326 audit(1761711998.565:22820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 255.604668][T10438] loop3: detected capacity change from 0 to 512 [ 255.623692][T10440] loop2: detected capacity change from 0 to 128 [ 255.635348][T10440] vfat: Unknown parameter '00000000000000000004ÿÿÿÿÿÿÿÿÿÿ00000000000000000000000' [ 255.646392][T10438] EXT4-fs (loop3): 1 orphan inode deleted [ 255.647500][T10440] loop2: detected capacity change from 0 to 128 [ 255.659274][T10438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.673811][T10438] SELinux: policydb magic number 0x74696e69 does not match expected magic number 0xf97cff8c [ 255.684177][T10438] SELinux: failed to load policy [ 255.699970][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.777138][T10454] rdma_op ffff88811b3c3d80 conn xmit_rdma 0000000000000000 [ 255.787606][T10454] loop3: detected capacity change from 0 to 512 [ 255.794251][T10454] vfat: Unknown parameter 'uY:(lìÉ>dÂ'ÉZ ·„bWðzrÂ4fL [ 255.794251][T10454] ù6 [ 255.794251][T10454] z^k`q0ÈŸÀÁ‹…2‰Ð¢zè°ž' [ 255.849062][T10461] lo speed is unknown, defaulting to 1000 [ 255.857398][T10463] Cannot find set identified by id 0 to match [ 256.015999][T10469] lo speed is unknown, defaulting to 1000 [ 256.089426][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 256.129826][T10469] lo speed is unknown, defaulting to 1000 [ 256.369061][T10478] loop1: detected capacity change from 0 to 128 [ 256.737236][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2197'. [ 256.755253][T10493] hub 2-0:1.0: USB hub found [ 256.770459][T10493] hub 2-0:1.0: 8 ports detected [ 256.833993][T10499] loop1: detected capacity change from 0 to 512 [ 256.870123][T10499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 256.877071][T10497] lo speed is unknown, defaulting to 1000 [ 256.895457][T10505] macvtap0: refused to change device tx_queue_len [ 256.898094][T10499] EXT4-fs (loop1): 1 truncate cleaned up [ 256.908078][T10499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.968893][T10510] loop4: detected capacity change from 0 to 128 [ 257.076538][T10515] siw: device registration error -23 [ 257.159228][T10526] lo speed is unknown, defaulting to 1000 [ 257.176049][T10528] loop4: detected capacity change from 0 to 512 [ 257.185950][T10528] EXT4-fs (loop4): 1 orphan inode deleted [ 257.192756][T10528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.209207][T10528] SELinux: policydb string SE Lix00 does not match my string SE Linux [ 257.217877][T10528] SELinux: failed to load policy [ 257.234975][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.267255][T10533] loop4: detected capacity change from 0 to 512 [ 257.273726][T10530] lo speed is unknown, defaulting to 1000 [ 257.289764][T10533] EXT4-fs (loop4): too many log groups per flexible block group [ 257.298795][T10533] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 257.308890][T10533] EXT4-fs (loop4): mount failed [ 257.356245][T10540] macvtap0: refused to change device tx_queue_len [ 257.386814][T10544] bridge0: port 3(gretap0) entered blocking state [ 257.393412][T10544] bridge0: port 3(gretap0) entered disabled state [ 257.400047][T10544] gretap0: entered allmulticast mode [ 257.413217][T10544] gretap0: entered promiscuous mode [ 257.420259][T10544] bridge0: port 3(gretap0) entered blocking state [ 257.426809][T10544] bridge0: port 3(gretap0) entered forwarding state [ 257.445786][T10544] gretap0: left allmulticast mode [ 257.450921][T10544] gretap0: left promiscuous mode [ 257.456098][T10544] bridge0: port 3(gretap0) entered disabled state [ 257.502740][T10547] lo speed is unknown, defaulting to 1000 [ 257.616015][T10553] loop3: detected capacity change from 0 to 512 [ 257.623853][T10553] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 257.635005][T10553] EXT4-fs (loop3): 1 truncate cleaned up [ 257.642532][T10553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.673709][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.692709][T10556] loop4: detected capacity change from 0 to 512 [ 257.706315][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.724096][T10556] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2220: bg 0: block 248: padding at end of block bitmap is not set [ 257.756081][T10556] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2220: Failed to acquire dquot type 1 [ 257.773783][T10556] EXT4-fs (loop4): 1 truncate cleaned up [ 257.780057][T10556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.802226][T10556] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.821809][T10556] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.2220: deleted inode referenced: 12 [ 257.833960][T10556] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.2220: deleted inode referenced: 12 [ 257.920795][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.932355][ T3448] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 1 [ 257.944285][T10572] loop2: detected capacity change from 0 to 512 [ 257.968064][T10572] EXT4-fs (loop2): too many log groups per flexible block group [ 257.976067][T10566] lo speed is unknown, defaulting to 1000 [ 257.985612][T10574] loop4: detected capacity change from 0 to 128 [ 257.994551][T10572] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 258.012074][T10572] EXT4-fs (loop2): mount failed [ 258.042720][T10574] bio_check_eod: 30 callbacks suppressed [ 258.042755][T10574] syz.4.2224: attempt to access beyond end of device [ 258.042755][T10574] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 258.067904][T10578] lo speed is unknown, defaulting to 1000 [ 258.079261][T10580] loop2: detected capacity change from 0 to 512 [ 258.086142][T10580] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 258.099588][T10580] EXT4-fs (loop2): 1 truncate cleaned up [ 258.103280][T10574] syz.4.2224: attempt to access beyond end of device [ 258.103280][T10574] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 258.120504][T10574] buffer_io_error: 16 callbacks suppressed [ 258.120542][T10574] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 258.126950][T10580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.129330][T10574] syz.4.2224: attempt to access beyond end of device [ 258.129330][T10574] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 258.164084][T10574] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 258.174290][T10574] syz.4.2224: attempt to access beyond end of device [ 258.174290][T10574] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 258.194762][T10574] syz.4.2224: attempt to access beyond end of device [ 258.194762][T10574] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 258.212028][T10574] syz.4.2224: attempt to access beyond end of device [ 258.212028][T10574] loop4: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 258.226234][T10574] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 258.258984][T10581] lo speed is unknown, defaulting to 1000 [ 258.280616][T10574] syz.4.2224: attempt to access beyond end of device [ 258.280616][T10574] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 258.300896][T10574] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 258.314791][T10574] syz.4.2224: attempt to access beyond end of device [ 258.314791][T10574] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 258.332569][T10574] syz.4.2224: attempt to access beyond end of device [ 258.332569][T10574] loop4: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 258.349328][T10574] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 258.360948][T10574] syz.4.2224: attempt to access beyond end of device [ 258.360948][T10574] loop4: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 258.375122][T10574] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 258.389863][T10574] Buffer I/O error on dev loop4, logical block 111, lost async page write [ 258.399584][T10574] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 258.412925][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.421931][T10574] Buffer I/O error on dev loop4, logical block 115, lost async page write [ 258.431143][T10574] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 258.464806][T10590] lo speed is unknown, defaulting to 1000 [ 258.547148][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'. [ 258.560443][T10594] hub 2-0:1.0: USB hub found [ 258.565135][T10594] hub 2-0:1.0: 8 ports detected [ 258.610275][T10601] loop2: detected capacity change from 0 to 512 [ 258.619587][T10601] EXT4-fs (loop2): 1 orphan inode deleted [ 258.625741][T10601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.641922][T10601] SELinux: policydb magic number 0x74696e69 does not match expected magic number 0xf97cff8c [ 258.652508][T10601] SELinux: failed to load policy [ 258.674947][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.712761][T10611] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2234'. [ 258.734624][T10613] loop1: detected capacity change from 0 to 512 [ 258.748006][T10613] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2236: bg 0: block 248: padding at end of block bitmap is not set [ 258.762725][T10613] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2236: Failed to acquire dquot type 1 [ 258.774723][T10613] EXT4-fs (loop1): 1 truncate cleaned up [ 258.780913][T10613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.793560][T10613] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.833056][T10613] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2236: deleted inode referenced: 12 [ 258.846289][T10613] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2236: deleted inode referenced: 12 [ 258.927373][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.946936][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 258.975582][T10625] macvtap0: refused to change device tx_queue_len [ 259.000809][T10627] loop1: detected capacity change from 0 to 128 [ 259.016094][T10623] loop2: detected capacity change from 0 to 2048 [ 259.030546][T10623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.425363][T10639] Cannot find set identified by id 0 to match [ 259.818406][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.929662][T10650] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2247'. [ 260.033613][T10654] siw: device registration error -23 [ 260.060409][T10656] loop1: detected capacity change from 0 to 512 [ 260.112710][T10662] loop2: detected capacity change from 0 to 128 [ 260.136406][T10656] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2249: bg 0: block 248: padding at end of block bitmap is not set [ 260.151508][T10656] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2249: Failed to acquire dquot type 1 [ 260.164878][T10656] EXT4-fs (loop1): 1 truncate cleaned up [ 260.171287][T10656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.184610][T10656] ext4 filesystem being mounted at /477/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.201645][T10656] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2249: deleted inode referenced: 12 [ 260.214351][T10656] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2249: deleted inode referenced: 12 [ 260.241265][T10667] loop3: detected capacity change from 0 to 512 [ 260.254556][T10667] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 260.266169][T10667] EXT4-fs (loop3): 1 truncate cleaned up [ 260.272269][T10667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.331386][T10673] netlink: 'syz.4.2250': attribute type 10 has an invalid length. [ 260.341239][T10673] bond0: (slave dummy0): Releasing backup interface [ 260.350555][T10673] team0: Port device dummy0 added [ 260.369977][T10673] netlink: 'syz.4.2250': attribute type 10 has an invalid length. [ 260.380917][T10673] team0: Port device dummy0 removed [ 260.388797][T10673] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 260.438734][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 260.438749][ T29] audit: type=1326 audit(1761712003.555:23438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf168fefc9 code=0x7ffc0000 [ 260.468666][ T29] audit: type=1326 audit(1761712003.555:23439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf168ff003 code=0x7ffc0000 [ 260.492210][ T29] audit: type=1326 audit(1761712003.555:23440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcf168ff087 code=0x7ffc0000 [ 260.515800][ T29] audit: type=1326 audit(1761712003.555:23441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcf168b644d code=0x7ffc0000 [ 260.539411][ T29] audit: type=1326 audit(1761712003.555:23442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fcf16933709 code=0x7ffc0000 [ 260.563109][ T29] audit: type=1326 audit(1761712003.555:23443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcf168b64b7 code=0x7ffc0000 [ 260.586625][ T29] audit: type=1326 audit(1761712003.555:23444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fcf168b5bc7 code=0x7ffc0000 [ 260.610237][ T29] audit: type=1326 audit(1761712003.555:23446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcf168b5c26 code=0x7ffc0000 [ 260.633743][ T29] audit: type=1326 audit(1761712003.555:23445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf168fefc9 code=0x7ffc0000 [ 260.657363][ T29] audit: type=1326 audit(1761712003.555:23447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf168fefc9 code=0x7ffc0000 [ 260.706171][T10674] macvtap0: refused to change device tx_queue_len [ 260.859804][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.090352][T10677] loop2: detected capacity change from 0 to 2048 [ 261.108116][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 261.140031][T10677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.217759][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.319278][T10689] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2260'. [ 261.369743][T10691] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.379577][T10691] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.458398][T10691] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.468262][T10691] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.538312][T10691] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.548190][T10691] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.603621][T10695] lo speed is unknown, defaulting to 1000 [ 261.612803][T10691] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.622642][T10691] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.682101][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.769037][ T31] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.777407][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.803821][ T31] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.812096][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.885306][T10702] loop2: detected capacity change from 0 to 512 [ 261.895756][T10704] loop3: detected capacity change from 0 to 512 [ 261.912299][ T31] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.920691][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.936481][T10702] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 261.949665][T10706] macvtap0: refused to change device tx_queue_len [ 261.958296][T10704] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2265: bg 0: block 248: padding at end of block bitmap is not set [ 261.973492][T10702] EXT4-fs (loop2): 1 truncate cleaned up [ 261.979393][ T31] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.987615][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.006595][T10702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.019643][T10704] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2265: Failed to acquire dquot type 1 [ 262.073816][T10704] EXT4-fs (loop3): 1 truncate cleaned up [ 262.087628][T10704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.105694][T10704] ext4 filesystem being mounted at /469/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.113612][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.129472][T10715] siw: device registration error -23 [ 262.141161][T10704] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.2265: deleted inode referenced: 12 [ 262.155618][T10717] loop1: detected capacity change from 0 to 512 [ 262.175220][T10720] loop2: detected capacity change from 0 to 512 [ 262.182481][T10720] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 262.184507][T10704] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.2265: deleted inode referenced: 12 [ 262.194282][T10720] EXT4-fs (loop2): 1 truncate cleaned up [ 262.210079][T10720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.234226][T10717] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2270: bg 0: block 248: padding at end of block bitmap is not set [ 262.249099][T10717] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2270: Failed to acquire dquot type 1 [ 262.261555][T10717] EXT4-fs (loop1): 1 truncate cleaned up [ 262.271160][T10717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.291545][T10717] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.303003][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.336993][T10717] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2270: deleted inode referenced: 12 [ 262.352786][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.362414][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 262.375366][T10717] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2270: deleted inode referenced: 12 [ 262.390123][T10738] macvtap0: refused to change device tx_queue_len [ 262.487441][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.499068][T10751] netlink: 'syz.0.2280': attribute type 10 has an invalid length. [ 262.516348][T10751] bond0: (slave dummy0): Releasing backup interface [ 262.526919][T10751] team0: Port device dummy0 added [ 262.536281][T10751] netlink: 'syz.0.2280': attribute type 10 has an invalid length. [ 262.565762][T10751] team0: Port device dummy0 removed [ 262.573194][T10751] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 262.648823][T10756] lo speed is unknown, defaulting to 1000 [ 262.661612][T10758] loop3: detected capacity change from 0 to 512 [ 262.677964][T10758] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 262.746036][T10759] lo speed is unknown, defaulting to 1000 [ 262.767600][T10758] EXT4-fs (loop3): 1 truncate cleaned up [ 262.773914][T10758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.888275][T10765] loop2: detected capacity change from 0 to 512 [ 262.900027][T10765] EXT4-fs (loop2): too many log groups per flexible block group [ 262.908542][T10765] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 262.915389][T10765] EXT4-fs (loop2): mount failed [ 263.082943][T10771] loop4: detected capacity change from 0 to 512 [ 263.099255][T10771] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2288: bg 0: block 248: padding at end of block bitmap is not set [ 263.113917][T10771] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2288: Failed to acquire dquot type 1 [ 263.131258][T10771] EXT4-fs (loop4): 1 truncate cleaned up [ 263.137700][T10771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.150423][T10771] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.166793][T10771] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.2288: deleted inode referenced: 12 [ 263.179256][T10771] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.2288: deleted inode referenced: 12 [ 263.389496][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 263.422420][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.432751][ T52] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 263.526726][T10787] loop4: detected capacity change from 0 to 128 [ 263.533316][T10787] vfat: Unknown parameter '00000000000000000004ÿÿÿÿÿÿÿÿÿÿ00000000000000000000000ÿÿÿÿÿÿÿÿ' [ 263.555183][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.578165][T10787] loop4: detected capacity change from 0 to 128 [ 263.744710][T10796] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2295'. [ 263.878344][T10799] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2294'. [ 263.887503][T10799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2294'. [ 264.077550][T10800] lo speed is unknown, defaulting to 1000 [ 264.203754][T10804] loop2: detected capacity change from 0 to 128 [ 264.271354][T10807] siw: device registration error -23 [ 264.472596][T10810] loop4: detected capacity change from 0 to 512 [ 264.618227][T10818] loop3: detected capacity change from 0 to 512 [ 264.649784][T10810] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2299: bg 0: block 248: padding at end of block bitmap is not set [ 264.664799][T10810] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2299: Failed to acquire dquot type 1 [ 264.664830][T10818] EXT4-fs (loop3): too many log groups per flexible block group [ 264.684708][T10810] EXT4-fs (loop4): 1 truncate cleaned up [ 264.690918][T10818] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 264.698405][T10810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.716623][T10818] EXT4-fs (loop3): mount failed [ 264.736769][T10810] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.779288][T10827] netlink: 'syz.1.2302': attribute type 10 has an invalid length. [ 264.788771][T10831] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2305'. [ 264.789492][T10810] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.2299: deleted inode referenced: 12 [ 264.808584][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2305'. [ 264.818388][T10831] netlink: 'syz.3.2305': attribute type 1 has an invalid length. [ 264.826174][T10831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2305'. [ 264.838476][T10833] netlink: 'syz.1.2302': attribute type 10 has an invalid length. [ 264.866300][T10810] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.2299: deleted inode referenced: 12 [ 264.866775][T10827] bond0: (slave dummy0): Releasing backup interface [ 264.890651][T10833] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 264.904308][T10837] Cannot find set identified by id 0 to match [ 265.004217][T10836] lo speed is unknown, defaulting to 1000 [ 265.046774][T10834] lo speed is unknown, defaulting to 1000 [ 265.087958][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.098165][ T52] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 265.929893][ T29] kauditd_printk_skb: 570 callbacks suppressed [ 265.929911][ T29] audit: type=1326 audit(1761712009.185:24005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.3.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdeca4efc9 code=0x7ffc0000 [ 265.960037][ T29] audit: type=1326 audit(1761712009.185:24006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.3.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdeca4efc9 code=0x7ffc0000 [ 265.992951][T10845] macvtap0: refused to change device tx_queue_len [ 266.108432][T10847] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2308'. [ 266.136225][T10847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2308'. [ 266.149199][T10857] loop2: detected capacity change from 0 to 512 [ 266.156128][T10857] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 266.179488][T10847] hub 2-0:1.0: USB hub found [ 266.194387][T10847] hub 2-0:1.0: 8 ports detected [ 266.207413][T10857] EXT4-fs (loop2): 1 truncate cleaned up [ 266.239123][T10857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.252889][T10864] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2315'. [ 266.292811][T10866] loop4: detected capacity change from 0 to 512 [ 266.304632][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.324452][T10866] EXT4-fs (loop4): too many log groups per flexible block group [ 266.402351][T10866] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 266.437752][ T29] audit: type=1326 audit(1761712009.685:24007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 266.461408][ T29] audit: type=1326 audit(1761712009.685:24008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 266.485045][ T29] audit: type=1326 audit(1761712009.685:24009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 266.508665][ T29] audit: type=1326 audit(1761712009.685:24010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 266.526603][T10866] EXT4-fs (loop4): mount failed [ 266.532487][ T29] audit: type=1326 audit(1761712009.685:24011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 266.560922][ T29] audit: type=1326 audit(1761712009.685:24012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 266.584643][ T29] audit: type=1326 audit(1761712009.685:24013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 266.608289][ T29] audit: type=1326 audit(1761712009.685:24014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 266.633748][T10872] loop2: detected capacity change from 0 to 128 [ 266.671870][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'. [ 266.690334][T10879] macvtap0: refused to change device tx_queue_len [ 266.701141][T10872] bio_check_eod: 110 callbacks suppressed [ 266.701203][T10872] syz.2.2317: attempt to access beyond end of device [ 266.701203][T10872] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 266.732159][T10877] hub 2-0:1.0: USB hub found [ 266.738566][T10881] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.748385][T10881] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.764217][T10872] syz.2.2317: attempt to access beyond end of device [ 266.764217][T10872] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 266.779601][T10872] buffer_io_error: 68 callbacks suppressed [ 266.779998][T10872] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 266.797529][T10877] hub 2-0:1.0: 8 ports detected [ 266.856043][T10888] lo speed is unknown, defaulting to 1000 [ 266.882515][T10872] syz.2.2317: attempt to access beyond end of device [ 266.882515][T10872] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 266.898790][T10872] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 266.916969][T10872] syz.2.2317: attempt to access beyond end of device [ 266.916969][T10872] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 266.932453][T10881] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.942354][T10881] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.957186][T10872] syz.2.2317: attempt to access beyond end of device [ 266.957186][T10872] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 266.975856][T10872] syz.2.2317: attempt to access beyond end of device [ 266.975856][T10872] loop2: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 266.990556][T10872] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 267.000327][T10872] syz.2.2317: attempt to access beyond end of device [ 267.000327][T10872] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 267.014786][T10872] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 267.025745][T10872] syz.2.2317: attempt to access beyond end of device [ 267.025745][T10872] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 267.048110][T10872] syz.2.2317: attempt to access beyond end of device [ 267.048110][T10872] loop2: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 267.062320][T10872] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 267.071485][T10872] syz.2.2317: attempt to access beyond end of device [ 267.071485][T10872] loop2: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 267.072388][T10881] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.089206][T10872] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 267.094978][T10881] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.117290][T10888] lo speed is unknown, defaulting to 1000 [ 267.124494][T10872] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 267.134545][T10872] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 267.148083][T10872] Buffer I/O error on dev loop2, logical block 115, lost async page write [ 267.157852][T10872] Buffer I/O error on dev loop2, logical block 116, lost async page write [ 267.158630][T10881] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.176477][T10881] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.481293][T10907] hub 2-0:1.0: USB hub found [ 267.486210][T10907] hub 2-0:1.0: 8 ports detected [ 267.548881][T10908] netlink: 'syz.4.2326': attribute type 10 has an invalid length. [ 267.601806][T10909] netlink: 'syz.4.2326': attribute type 10 has an invalid length. [ 267.610275][T10908] bond0: (slave dummy0): Releasing backup interface [ 267.639941][T10908] team0: Port device dummy0 added [ 267.670302][T10909] team0: Port device dummy0 removed [ 267.678521][T10909] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 267.945071][T10916] siw: device registration error -23 [ 268.005794][T10915] lo speed is unknown, defaulting to 1000 [ 268.351951][T10922] loop3: detected capacity change from 0 to 512 [ 268.407845][T10922] EXT4-fs (loop3): too many log groups per flexible block group [ 268.435982][T10922] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 268.443407][T10920] lo speed is unknown, defaulting to 1000 [ 268.449529][T10922] EXT4-fs (loop3): mount failed [ 268.522449][T10927] loop3: detected capacity change from 0 to 512 [ 268.551146][T10927] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 268.602589][T10927] EXT4-fs (loop3): 1 truncate cleaned up [ 268.617668][T10927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.867818][ T37] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.876130][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.925508][ T37] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.933760][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.942016][ T37] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.950291][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.977243][T10932] __nla_validate_parse: 3 callbacks suppressed [ 268.977264][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 269.002257][T10932] hub 2-0:1.0: USB hub found [ 269.011478][T10932] hub 2-0:1.0: 8 ports detected [ 269.087403][T10934] lo speed is unknown, defaulting to 1000 [ 269.137801][T10936] loop2: detected capacity change from 0 to 512 [ 269.167659][T10936] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2336: bg 0: block 248: padding at end of block bitmap is not set [ 269.205881][T10936] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2336: Failed to acquire dquot type 1 [ 269.242253][T10936] EXT4-fs (loop2): 1 truncate cleaned up [ 269.261898][T10936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.301354][T10936] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.357554][T10936] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.2336: deleted inode referenced: 12 [ 269.386931][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.395246][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.418990][T10936] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.2336: deleted inode referenced: 12 [ 269.431866][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.514693][T10946] lo speed is unknown, defaulting to 1000 [ 269.531706][T10944] loop3: detected capacity change from 0 to 128 [ 269.541768][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.556615][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 269.637737][T10956] lo speed is unknown, defaulting to 1000 [ 269.667523][T10952] lo speed is unknown, defaulting to 1000 [ 269.824820][T10958] lo speed is unknown, defaulting to 1000 [ 269.917603][T10966] lo speed is unknown, defaulting to 1000 [ 270.037483][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'. [ 270.050642][T10973] hub 2-0:1.0: USB hub found [ 270.055452][T10973] hub 2-0:1.0: 8 ports detected [ 270.065868][T10979] loop4: detected capacity change from 0 to 512 [ 270.091322][T10979] EXT4-fs (loop4): 1 orphan inode deleted [ 270.098024][T10979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.110458][T10984] loop1: detected capacity change from 0 to 512 [ 270.137420][T10984] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 270.200015][T10984] EXT4-fs (loop1): 1 truncate cleaned up [ 270.206290][T10984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.219519][T10979] SELinux: policydb string SE Linu0 does not match my string SE Linux [ 270.236658][T10979] SELinux: failed to load policy [ 270.306531][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.315906][T10992] loop2: detected capacity change from 0 to 512 [ 270.330036][T10992] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2352: bg 0: block 248: padding at end of block bitmap is not set [ 270.344965][T10992] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2352: Failed to acquire dquot type 1 [ 270.357487][T10992] EXT4-fs (loop2): 1 truncate cleaned up [ 270.364316][T10992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.377347][T10992] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.463171][T11001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2347'. [ 270.473011][T10997] loop4: detected capacity change from 0 to 128 [ 270.525037][T10992] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.2352: deleted inode referenced: 12 [ 270.575615][T10992] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.2352: deleted inode referenced: 12 [ 270.671052][T11004] loop4: detected capacity change from 0 to 128 [ 270.840086][T10999] lo speed is unknown, defaulting to 1000 [ 270.857695][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.943901][ T37] __quota_error: 436 callbacks suppressed [ 270.943933][ T37] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 270.958783][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 271.031881][T11010] lo speed is unknown, defaulting to 1000 [ 271.083360][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.213874][ T29] audit: type=1326 audit(1761712014.465:24446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 271.277209][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 271.289728][T11024] hub 2-0:1.0: USB hub found [ 271.294517][T11024] hub 2-0:1.0: 8 ports detected [ 271.312768][T11012] loop2: detected capacity change from 0 to 128 [ 271.336726][ T29] audit: type=1326 audit(1761712014.465:24447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 271.360506][ T29] audit: type=1326 audit(1761712014.465:24448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 271.369517][T11010] lo speed is unknown, defaulting to 1000 [ 271.384385][ T29] audit: type=1326 audit(1761712014.465:24449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 271.413959][ T29] audit: type=1326 audit(1761712014.465:24450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 271.437600][ T29] audit: type=1326 audit(1761712014.465:24451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 271.461228][ T29] audit: type=1326 audit(1761712014.465:24452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 271.485117][ T29] audit: type=1326 audit(1761712014.465:24453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 271.509072][ T29] audit: type=1326 audit(1761712014.465:24454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 271.564524][T11029] Cannot find set identified by id 0 to match [ 271.711359][T11026] loop1: detected capacity change from 0 to 512 [ 271.720569][T11026] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 271.737490][T11012] bio_check_eod: 151 callbacks suppressed [ 271.737639][T11012] syz.2.2356: attempt to access beyond end of device [ 271.737639][T11012] loop2: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 271.777877][T11026] EXT4-fs (loop1): 1 truncate cleaned up [ 271.786939][T11026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.821388][T11012] syz.2.2356: attempt to access beyond end of device [ 271.821388][T11012] loop2: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 271.835738][T11012] buffer_io_error: 94 callbacks suppressed [ 271.835807][T11012] Buffer I/O error on dev loop2, logical block 87, lost async page write [ 271.856656][T11012] syz.2.2356: attempt to access beyond end of device [ 271.856656][T11012] loop2: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 271.875861][T11012] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 271.893003][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.940796][T11036] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2364'. [ 271.972544][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2364'. [ 271.981661][T11036] netlink: 'syz.1.2364': attribute type 1 has an invalid length. [ 271.989436][T11036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2364'. [ 272.076246][T11043] Cannot find set identified by id 0 to match [ 272.082695][T11045] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 272.089248][T11045] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.096902][T11045] vhci_hcd vhci_hcd.0: Device attached [ 272.099098][T11049] loop1: detected capacity change from 0 to 512 [ 272.109772][T11049] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.132445][T11045] loop2: detected capacity change from 0 to 512 [ 272.138764][T11049] EXT4-fs (loop1): 1 truncate cleaned up [ 272.145405][T11049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.233399][T11056] lo speed is unknown, defaulting to 1000 [ 272.249304][T11045] EXT4-fs (loop2): 1 orphan inode deleted [ 272.255631][T11045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.270070][T11046] vhci_hcd: connection closed [ 272.270420][ T52] vhci_hcd: stop threads [ 272.279551][ T52] vhci_hcd: release socket [ 272.284033][ T52] vhci_hcd: disconnect device [ 272.316755][ T10] vhci_hcd: vhci_device speed not set [ 272.324368][T11059] lo speed is unknown, defaulting to 1000 [ 272.440396][T11065] loop4: detected capacity change from 0 to 128 [ 272.464463][T11065] syz.4.2374: attempt to access beyond end of device [ 272.464463][T11065] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 272.485135][T11065] syz.4.2374: attempt to access beyond end of device [ 272.485135][T11065] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 272.499044][T11065] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 272.514794][T11065] syz.4.2374: attempt to access beyond end of device [ 272.514794][T11065] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 272.529253][T11065] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 272.529814][T11067] loop3: detected capacity change from 0 to 512 [ 272.549536][T11067] EXT4-fs: Ignoring removed nobh option [ 272.557026][T11065] syz.4.2374: attempt to access beyond end of device [ 272.557026][T11065] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 272.574069][T11067] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.2375: corrupted inode contents [ 272.580790][T11065] syz.4.2374: attempt to access beyond end of device [ 272.580790][T11065] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 272.586830][T11067] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.2375: mark_inode_dirty error [ 272.611095][T11065] syz.4.2374: attempt to access beyond end of device [ 272.611095][T11065] loop4: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 272.613318][T11067] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.2375: corrupted inode contents [ 272.625534][T11065] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 272.639266][T11067] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.2375: mark_inode_dirty error [ 272.648063][T11065] syz.4.2374: attempt to access beyond end of device [ 272.648063][T11065] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 272.659284][T11067] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2375: Failed to acquire dquot type 0 [ 272.672743][T11065] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 272.684807][T11067] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.2375: corrupted inode contents [ 272.705973][T11067] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.2375: mark_inode_dirty error [ 272.717862][T11067] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.2375: corrupted inode contents [ 272.730171][T11067] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2375: mark_inode_dirty error [ 272.740115][T11065] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 272.741881][T11067] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.2375: corrupted inode contents [ 272.752272][T11065] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 272.764423][T11067] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 272.780593][T11067] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.2375: corrupted inode contents [ 272.793209][T11067] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.2375: mark_inode_dirty error [ 272.804951][T11065] Buffer I/O error on dev loop4, logical block 111, lost async page write [ 272.807015][T11067] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 272.827352][T11067] EXT4-fs (loop3): 1 truncate cleaned up [ 272.828117][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.833735][T11067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.842440][T11065] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 272.854749][T11067] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.896857][T11072] macvtap0: refused to change device tx_queue_len [ 272.897549][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.952602][T11076] loop2: detected capacity change from 0 to 128 [ 273.100110][T11088] lo speed is unknown, defaulting to 1000 [ 273.118992][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2386'. [ 273.160246][T11095] lo speed is unknown, defaulting to 1000 [ 273.181148][T11097] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 273.187801][T11097] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 273.195312][T11097] vhci_hcd vhci_hcd.0: Device attached [ 273.197929][T11094] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11094 comm=syz.3.2386 [ 273.251704][T11098] vhci_hcd: connection closed [ 273.251947][ T52] vhci_hcd: stop threads [ 273.261079][ T52] vhci_hcd: release socket [ 273.265557][ T52] vhci_hcd: disconnect device [ 273.272496][T11105] macvtap0: refused to change device tx_queue_len [ 273.541217][T11133] loop3: detected capacity change from 0 to 512 [ 273.558098][T11133] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2400: bg 0: block 248: padding at end of block bitmap is not set [ 273.573133][T11133] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2400: Failed to acquire dquot type 1 [ 273.585240][T11133] EXT4-fs (loop3): 1 truncate cleaned up [ 273.591783][T11133] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.617800][T11133] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.2400: deleted inode referenced: 12 [ 273.634408][T11133] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.2400: deleted inode referenced: 12 [ 273.713511][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 273.790562][T11144] loop3: detected capacity change from 0 to 128 [ 273.800964][T11141] Falling back ldisc for ttyS3. [ 273.825057][T11147] lo speed is unknown, defaulting to 1000 [ 273.905057][T11148] lo speed is unknown, defaulting to 1000 [ 274.007571][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2404'. [ 274.021397][T11153] hub 2-0:1.0: USB hub found [ 274.027194][T11153] hub 2-0:1.0: 8 ports detected [ 274.081354][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 274.129090][T11155] hub 2-0:1.0: USB hub found [ 274.138917][T11155] hub 2-0:1.0: 8 ports detected [ 274.219042][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2410'. [ 274.231655][T11167] veth1_macvtap: left promiscuous mode [ 274.252077][T11171] loop1: detected capacity change from 0 to 512 [ 274.282709][T11176] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.301822][T11171] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2411: bg 0: block 248: padding at end of block bitmap is not set [ 274.318972][T11171] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2411: Failed to acquire dquot type 1 [ 274.336352][T11171] EXT4-fs (loop1): 1 truncate cleaned up [ 274.344021][T11171] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.354898][T11178] loop3: detected capacity change from 0 to 512 [ 274.378044][T11176] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.389852][T11178] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2414: couldn't read orphan inode 26 (err -116) [ 274.410799][T11178] EXT4-fs (loop3): Remounting filesystem read-only [ 274.425508][T11171] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2411: deleted inode referenced: 12 [ 274.426569][T11178] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.469458][T11176] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.480174][T11189] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2411: deleted inode referenced: 12 [ 274.527249][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2416'. [ 274.538590][T11176] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.583827][T11191] hub 2-0:1.0: USB hub found [ 274.591401][T11191] hub 2-0:1.0: 8 ports detected [ 274.602217][ T3448] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 1 [ 274.614492][ T126] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.655929][ T126] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.665798][ T126] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.674578][ T126] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.698633][T11199] loop1: detected capacity change from 0 to 512 [ 274.712665][T11200] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2420'. [ 274.717300][T11199] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 274.734781][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2420'. [ 274.744032][T11200] netlink: 'syz.4.2420': attribute type 1 has an invalid length. [ 274.751808][T11200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2420'. [ 274.762095][T11199] EXT4-fs (loop1): 1 truncate cleaned up [ 274.970521][T11227] loop3: detected capacity change from 0 to 128 [ 274.999552][T11229] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.069039][T11229] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.158504][T11229] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.218327][T11229] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.275802][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.287791][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.296642][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2429'. [ 275.305675][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.317021][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.325807][T11239] hub 2-0:1.0: USB hub found [ 275.330580][T11239] hub 2-0:1.0: 8 ports detected [ 275.363175][T11243] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.394123][T11245] Cannot find set identified by id 0 to match [ 275.444958][T11243] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.484183][T11252] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.528345][T11243] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.560251][T11252] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.593657][T11256] loop2: detected capacity change from 0 to 128 [ 275.611462][T11243] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.650634][T11252] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.696014][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.710317][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.730698][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.743564][T11252] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.781638][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.898913][T11263] lo speed is unknown, defaulting to 1000 [ 275.906260][T11264] loop3: detected capacity change from 0 to 512 [ 275.919837][T11264] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 275.932586][T11264] EXT4-fs (loop3): 1 truncate cleaned up [ 275.949874][ T29] kauditd_printk_skb: 437 callbacks suppressed [ 275.949892][ T29] audit: type=1326 audit(1761712019.205:24884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf168fefc9 code=0x7ffc0000 [ 275.994897][ T29] audit: type=1326 audit(1761712019.245:24885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fcf168fefc9 code=0x7ffc0000 [ 276.018766][ T29] audit: type=1326 audit(1761712019.245:24886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf168fefc9 code=0x7ffc0000 [ 276.042389][ T29] audit: type=1326 audit(1761712019.245:24887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf168fefc9 code=0x7ffc0000 [ 276.066705][ T29] audit: type=1326 audit(1761712019.255:24888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcf168fefc9 code=0x7ffc0000 [ 276.090454][ T29] audit: type=1326 audit(1761712019.315:24889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf168ff003 code=0x7ffc0000 [ 276.114018][ T29] audit: type=1326 audit(1761712019.315:24890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf168ff003 code=0x7ffc0000 [ 276.137738][ T29] audit: type=1326 audit(1761712019.315:24891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf168fefc9 code=0x7ffc0000 [ 276.161371][ T29] audit: type=1326 audit(1761712019.365:24892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11261 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf168fefc9 code=0x7ffc0000 [ 276.204951][ T29] audit: type=1326 audit(1761712019.455:24893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.0.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 276.248427][T11275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2443'. [ 276.276525][T11275] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2443'. [ 276.290218][T11275] hub 2-0:1.0: USB hub found [ 276.303601][T11275] hub 2-0:1.0: 8 ports detected [ 276.347939][T11281] loop3: detected capacity change from 0 to 128 [ 276.377098][T11285] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.437942][T11285] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.498590][T11285] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.528137][T11285] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.587565][T11291] loop3: detected capacity change from 0 to 128 [ 276.751635][T11294] lo speed is unknown, defaulting to 1000 [ 277.286299][T11310] Cannot find set identified by id 0 to match [ 277.411825][T11316] loop1: detected capacity change from 0 to 128 [ 277.631802][T11324] lo speed is unknown, defaulting to 1000 [ 277.763733][T11332] loop3: detected capacity change from 0 to 512 [ 277.770869][T11332] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 277.782990][T11332] EXT4-fs (loop3): 1 truncate cleaned up [ 277.787320][T11330] hub 2-0:1.0: USB hub found [ 277.793724][T11330] hub 2-0:1.0: 8 ports detected [ 277.834111][T11335] loop1: detected capacity change from 0 to 512 [ 277.848550][T11335] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2466: bg 0: block 248: padding at end of block bitmap is not set [ 277.863249][T11335] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2466: Failed to acquire dquot type 1 [ 277.875642][T11335] EXT4-fs (loop1): 1 truncate cleaned up [ 277.882024][T11335] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.903468][T11335] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2466: deleted inode referenced: 12 [ 277.915883][T11335] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2466: deleted inode referenced: 12 [ 277.995631][ T383] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 1 [ 278.064768][T11344] loop1: detected capacity change from 0 to 128 [ 278.088255][T11344] bio_check_eod: 115 callbacks suppressed [ 278.088336][T11344] syz.1.2469: attempt to access beyond end of device [ 278.088336][T11344] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 278.112786][T11344] syz.1.2469: attempt to access beyond end of device [ 278.112786][T11344] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 278.127164][T11344] buffer_io_error: 72 callbacks suppressed [ 278.127194][T11344] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 278.142440][T11344] syz.1.2469: attempt to access beyond end of device [ 278.142440][T11344] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 278.156040][T11344] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 278.165245][T11344] syz.1.2469: attempt to access beyond end of device [ 278.165245][T11344] loop1: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 278.180867][T11344] syz.1.2469: attempt to access beyond end of device [ 278.180867][T11344] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 278.196984][T11344] syz.1.2469: attempt to access beyond end of device [ 278.196984][T11344] loop1: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 278.210815][T11344] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 278.220803][T11344] syz.1.2469: attempt to access beyond end of device [ 278.220803][T11344] loop1: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 278.235284][T11344] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 278.247259][T11344] syz.1.2469: attempt to access beyond end of device [ 278.247259][T11344] loop1: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 278.263508][T11344] syz.1.2469: attempt to access beyond end of device [ 278.263508][T11344] loop1: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 278.278088][T11344] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 278.287440][T11344] syz.1.2469: attempt to access beyond end of device [ 278.287440][T11344] loop1: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 278.301880][T11344] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 278.314570][T11344] Buffer I/O error on dev loop1, logical block 111, lost async page write [ 278.323443][T11344] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 278.336901][T11344] Buffer I/O error on dev loop1, logical block 115, lost async page write [ 278.345870][T11344] Buffer I/O error on dev loop1, logical block 116, lost async page write [ 278.564047][T11357] lo speed is unknown, defaulting to 1000 [ 278.680964][T11367] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.717928][T11367] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.789507][ T383] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.800563][T11367] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.815246][ T126] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.836759][ T126] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.864858][ T126] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.891138][T11367] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.955374][T11378] loop2: detected capacity change from 0 to 128 [ 278.965178][T11380] netlink: 'syz.1.2483': attribute type 1 has an invalid length. [ 279.141912][T11387] lo speed is unknown, defaulting to 1000 [ 279.365444][T11400] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.400058][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.417354][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.428263][T11400] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.442547][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.456574][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.488106][T11400] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.508585][T11403] loop4: detected capacity change from 0 to 512 [ 279.518722][T11403] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 279.530623][T11400] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.541694][T11403] EXT4-fs (loop4): 1 truncate cleaned up [ 279.648109][T11410] loop4: detected capacity change from 0 to 128 [ 279.810005][T11412] loop4: detected capacity change from 0 to 512 [ 279.839109][T11412] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.875368][T11412] __nla_validate_parse: 5 callbacks suppressed [ 279.875386][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2496'. [ 279.920282][ T3448] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.943709][T11416] loop1: detected capacity change from 0 to 128 [ 279.953388][ T3448] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.976969][ T3448] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.992859][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2496'. [ 280.026709][ T3448] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.188803][T11429] Cannot find set identified by id 0 to match [ 280.239763][T11431] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2503'. [ 280.249123][T11431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2503'. [ 280.261648][T11431] hub 2-0:1.0: USB hub found [ 280.266397][T11431] hub 2-0:1.0: 8 ports detected [ 280.278168][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 280.288924][T11433] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2505'. [ 280.298064][T11433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2505'. [ 280.328537][T11433] hub 2-0:1.0: USB hub found [ 280.333332][T11433] hub 2-0:1.0: 8 ports detected [ 280.412832][T11442] Cannot find set identified by id 0 to match [ 280.449742][T11436] netlink: 'syz.3.2506': attribute type 10 has an invalid length. [ 280.475853][T11436] bond0: (slave dummy0): Releasing backup interface [ 280.485667][T11436] team0: Port device dummy0 added [ 280.493067][T11436] netlink: 'syz.3.2506': attribute type 10 has an invalid length. [ 280.506905][T11436] team0: Port device dummy0 removed [ 280.514355][T11436] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 280.582544][T11446] loop1: detected capacity change from 0 to 512 [ 280.597994][T11446] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2510: bg 0: block 248: padding at end of block bitmap is not set [ 280.613437][T11446] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2510: Failed to acquire dquot type 1 [ 280.625473][T11446] EXT4-fs (loop1): 1 truncate cleaned up [ 280.632107][T11446] ext4 filesystem being mounted at /522/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.647351][T11450] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2511'. [ 280.656596][T11450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2511'. [ 280.670489][T11450] hub 2-0:1.0: USB hub found [ 280.675225][T11450] hub 2-0:1.0: 8 ports detected [ 280.691372][T11446] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2510: deleted inode referenced: 12 [ 280.720175][T11446] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.2510: deleted inode referenced: 12 [ 280.766734][T11460] loop3: detected capacity change from 0 to 128 [ 280.818877][T11461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2513'. [ 280.859888][ T52] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 280.945173][T11470] veth1_macvtap: left promiscuous mode [ 281.115163][T11478] lo speed is unknown, defaulting to 1000 [ 281.128507][T11476] netlink: 'syz.3.2522': attribute type 10 has an invalid length. [ 281.138155][T11476] bond0: (slave dummy0): Releasing backup interface [ 281.147270][T11476] team0: Port device dummy0 added [ 281.153802][T11476] netlink: 'syz.3.2522': attribute type 10 has an invalid length. [ 281.164534][T11476] team0: Port device dummy0 removed [ 281.171823][T11476] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 281.228477][T11480] lo speed is unknown, defaulting to 1000 [ 281.241108][T11483] loop3: detected capacity change from 0 to 512 [ 281.248156][T11483] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 281.261072][T11483] EXT4-fs (loop3): 1 truncate cleaned up [ 281.344392][T11491] loop3: detected capacity change from 0 to 512 [ 281.351097][T11491] EXT4-fs: Ignoring removed nobh option [ 281.367926][T11491] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.2527: corrupted inode contents [ 281.385354][T11491] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.2527: mark_inode_dirty error [ 281.397509][T11491] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.2527: corrupted inode contents [ 281.409553][T11491] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.2527: mark_inode_dirty error [ 281.413173][T11495] netlink: 'syz.1.2528': attribute type 1 has an invalid length. [ 281.421871][T11491] __quota_error: 778 callbacks suppressed [ 281.421891][T11491] Quota error (device loop3): write_blk: dquota write failed [ 281.441966][T11491] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 281.451973][T11491] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2527: Failed to acquire dquot type 0 [ 281.465593][T11491] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.2527: corrupted inode contents [ 281.480815][T11491] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.2527: mark_inode_dirty error [ 281.496562][T11491] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.2527: corrupted inode contents [ 281.509812][T11491] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2527: mark_inode_dirty error [ 281.527224][T11491] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.2527: corrupted inode contents [ 281.539696][T11491] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 281.549055][T11491] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.2527: corrupted inode contents [ 281.563462][T11491] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.2527: mark_inode_dirty error [ 281.567079][T11497] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11497 comm=syz.1.2529 [ 281.575123][T11491] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 281.597860][T11491] EXT4-fs (loop3): 1 truncate cleaned up [ 281.604166][T11491] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.651773][ T29] audit: type=1326 audit(1761712024.905:25666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11498 comm="syz.0.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 281.675516][ T29] audit: type=1326 audit(1761712024.905:25667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11498 comm="syz.0.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 281.699226][ T29] audit: type=1326 audit(1761712024.905:25668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11498 comm="syz.0.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 281.722973][ T29] audit: type=1326 audit(1761712024.905:25669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11498 comm="syz.0.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 281.746852][ T29] audit: type=1326 audit(1761712024.905:25670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11498 comm="syz.0.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 281.763595][T11505] lo speed is unknown, defaulting to 1000 [ 281.770569][ T29] audit: type=1326 audit(1761712024.905:25671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11498 comm="syz.0.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 281.770598][ T29] audit: type=1326 audit(1761712024.905:25672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11498 comm="syz.0.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 281.770625][ T29] audit: type=1326 audit(1761712024.905:25673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11498 comm="syz.0.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ac7efc9 code=0x7ffc0000 [ 281.847697][T11503] veth1_macvtap: left promiscuous mode [ 281.897238][T11505] lo speed is unknown, defaulting to 1000 [ 282.643095][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.654379][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.666325][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.677259][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.773702][T11538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11538 comm=syz.1.2545 [ 282.794241][T11540] loop2: detected capacity change from 0 to 128 [ 282.978230][T11551] netlink: 'syz.2.2551': attribute type 1 has an invalid length. [ 283.009968][T11553] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.068244][T11553] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.118488][T11553] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.178013][T11553] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.476934][T11564] siw: device registration error -23 [ 283.648188][T11568] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.658029][T11568] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.688780][T11568] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.698672][T11568] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.754883][T11568] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.764710][T11568] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.808868][T11568] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.818764][T11568] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.873798][ T3448] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.882170][ T3448] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.902049][ T3448] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.910513][ T3448] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.919370][ T3448] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.927676][ T3448] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.944799][ T3448] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.953115][ T3448] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.997667][T11576] loop1: detected capacity change from 0 to 128 [ 284.004399][T11576] vfat: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿÿÿ00000000000000000000000ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ01777777777777777777777' [ 284.012996][T11578] binfmt_misc: register: failed to install interpreter file ./file2 [ 284.027655][T11576] loop1: detected capacity change from 0 to 128 [ 284.424714][T11597] netlink: 'syz.4.2570': attribute type 10 has an invalid length. [ 284.441969][T11597] bond0: (slave dummy0): Releasing backup interface [ 284.450950][T11597] team0: Port device dummy0 added [ 284.461514][T11597] netlink: 'syz.4.2570': attribute type 10 has an invalid length. [ 284.471853][T11597] team0: Port device dummy0 removed [ 284.479786][T11597] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 284.503378][T11598] loop3: detected capacity change from 0 to 128 [ 284.522069][T11598] bio_check_eod: 70 callbacks suppressed [ 284.522082][T11598] syz.3.2571: attempt to access beyond end of device [ 284.522082][T11598] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 284.542291][T11598] syz.3.2571: attempt to access beyond end of device [ 284.542291][T11598] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 284.555869][T11598] buffer_io_error: 42 callbacks suppressed [ 284.555883][T11598] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 284.570524][T11598] syz.3.2571: attempt to access beyond end of device [ 284.570524][T11598] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 284.584029][T11598] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 284.592977][T11598] syz.3.2571: attempt to access beyond end of device [ 284.592977][T11598] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 284.607505][T11598] syz.3.2571: attempt to access beyond end of device [ 284.607505][T11598] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 284.622198][T11598] syz.3.2571: attempt to access beyond end of device [ 284.622198][T11598] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 284.635803][T11598] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 284.644972][T11598] syz.3.2571: attempt to access beyond end of device [ 284.644972][T11598] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 284.658466][T11598] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 284.667439][T11598] syz.3.2571: attempt to access beyond end of device [ 284.667439][T11598] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 284.681540][T11598] syz.3.2571: attempt to access beyond end of device [ 284.681540][T11598] loop3: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 284.695077][T11598] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 284.704074][T11598] syz.3.2571: attempt to access beyond end of device [ 284.704074][T11598] loop3: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 284.717601][T11598] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 284.727105][T11598] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 284.735749][T11598] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 284.745272][T11598] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 284.753923][T11598] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 285.032273][T11609] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.089633][T11611] __nla_validate_parse: 14 callbacks suppressed [ 285.089655][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2577'. [ 285.110186][T11609] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.166510][T11618] loop3: detected capacity change from 0 to 128 [ 285.189167][T11609] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.267313][T11609] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.283449][T11621] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.293295][T11621] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.340335][ T3448] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.357554][ T126] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.377405][T11621] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.387283][T11621] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.438278][ T126] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.447219][ T126] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.468318][T11621] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.478183][T11621] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.509590][T11624] FAULT_INJECTION: forcing a failure. [ 285.509590][T11624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.522804][T11624] CPU: 0 UID: 0 PID: 11624 Comm: syz.1.2580 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 285.522845][T11624] Tainted: [W]=WARN [ 285.522854][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.522867][T11624] Call Trace: [ 285.522874][T11624] [ 285.522938][T11624] __dump_stack+0x1d/0x30 [ 285.522966][T11624] dump_stack_lvl+0xe8/0x140 [ 285.522992][T11624] dump_stack+0x15/0x1b [ 285.523028][T11624] should_fail_ex+0x265/0x280 [ 285.523050][T11624] should_fail+0xb/0x20 [ 285.523136][T11624] should_fail_usercopy+0x1a/0x20 [ 285.523219][T11624] _copy_from_iter+0xd2/0xe80 [ 285.523248][T11624] ? __build_skb_around+0x1ab/0x200 [ 285.523285][T11624] ? __alloc_skb+0x223/0x320 [ 285.523321][T11624] netlink_sendmsg+0x471/0x6b0 [ 285.523379][T11624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.523404][T11624] __sock_sendmsg+0x145/0x180 [ 285.523434][T11624] ____sys_sendmsg+0x31e/0x4e0 [ 285.523480][T11624] ___sys_sendmsg+0x17b/0x1d0 [ 285.523545][T11624] __x64_sys_sendmsg+0xd4/0x160 [ 285.523637][T11624] x64_sys_call+0x191e/0x3000 [ 285.523663][T11624] do_syscall_64+0xd2/0x200 [ 285.523747][T11624] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 285.523781][T11624] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 285.523828][T11624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.523854][T11624] RIP: 0033:0x7fcf168fefc9 [ 285.523884][T11624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.523901][T11624] RSP: 002b:00007fcf15367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.523920][T11624] RAX: ffffffffffffffda RBX: 00007fcf16b55fa0 RCX: 00007fcf168fefc9 [ 285.523936][T11624] RDX: 0000000000040010 RSI: 00002000000001c0 RDI: 0000000000000004 [ 285.523955][T11624] RBP: 00007fcf15367090 R08: 0000000000000000 R09: 0000000000000000 [ 285.523970][T11624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.523985][T11624] R13: 00007fcf16b56038 R14: 00007fcf16b55fa0 R15: 00007ffd9cae6a68 [ 285.524048][T11624] [ 285.749451][T11621] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.759366][T11621] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.772555][T11626] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2581'. [ 285.787411][T11626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2581'. [ 285.796470][T11626] netlink: 'syz.3.2581': attribute type 1 has an invalid length. [ 285.804211][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2581'. [ 285.894747][T11640] loop1: detected capacity change from 0 to 128 [ 286.094272][T11648] netlink: 'syz.4.2591': attribute type 10 has an invalid length. [ 286.144744][T11651] netlink: 'syz.4.2591': attribute type 10 has an invalid length. [ 286.153010][T11648] bond0: (slave dummy0): Releasing backup interface [ 286.162105][T11648] team0: Port device dummy0 added [ 286.177145][T11651] team0: Port device dummy0 removed [ 286.184641][T11651] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 286.212445][T11650] loop1: detected capacity change from 0 to 128 [ 286.402634][ T3448] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.417593][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.447354][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.471531][T11654] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2593'. [ 286.484011][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.501480][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2593'. [ 286.510546][T11654] netlink: 'syz.1.2593': attribute type 1 has an invalid length. [ 286.518376][T11654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2593'. [ 286.528128][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2594'. [ 286.581112][T11658] lo speed is unknown, defaulting to 1000 [ 286.715585][T11661] lo speed is unknown, defaulting to 1000 [ 286.914452][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 286.914469][ T29] audit: type=1326 audit(1761712030.165:25835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdeca4efc9 code=0x7ffc0000 [ 286.944718][ T29] audit: type=1326 audit(1761712030.165:25836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdeca4efc9 code=0x7ffc0000 [ 286.968458][ T29] audit: type=1326 audit(1761712030.165:25837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdeca4efc9 code=0x7ffc0000 [ 286.992047][ T29] audit: type=1326 audit(1761712030.165:25838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdeca4efc9 code=0x7ffc0000 [ 287.015691][ T29] audit: type=1326 audit(1761712030.165:25839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdeca4efc9 code=0x7ffc0000 [ 287.039306][ T29] audit: type=1326 audit(1761712030.165:25840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdeca4efc9 code=0x7ffc0000 [ 287.062960][ T29] audit: type=1326 audit(1761712030.165:25841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdeca4efc9 code=0x7ffc0000 [ 287.086638][ T29] audit: type=1326 audit(1761712030.165:25842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fcdeca4efc9 code=0x7ffc0000 [ 287.136396][T11674] siw: device registration error -23 [ 287.296696][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 287.310545][T11680] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2602'. [ 287.328063][T11680] hub 2-0:1.0: USB hub found [ 287.332834][T11680] hub 2-0:1.0: 8 ports detected [ 287.360681][ T29] audit: type=1326 audit(1761712030.445:25843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdeca4efc9 code=0x7ffc0000 [ 287.384385][ T29] audit: type=1326 audit(1761712030.445:25844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.3.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdeca4efc9 code=0x7ffc0000 [ 287.412514][T11684] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.497512][T11684] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.563132][T11692] loop1: detected capacity change from 0 to 512 [ 287.589555][T11684] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.603746][T11692] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 287.642668][T11692] EXT4-fs (loop1): 1 truncate cleaned up [ 287.660893][T11692] EXT4-fs mount: 25 callbacks suppressed [ 287.660909][T11692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.682333][T11684] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.739548][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.849728][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.872610][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.881085][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.896618][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.924767][T11702] loop1: detected capacity change from 0 to 2048 [ 287.939954][T11702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.057278][T11716] hub 2-0:1.0: USB hub found [ 288.068370][ T52] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.076621][T11716] hub 2-0:1.0: 8 ports detected [ 288.076645][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.118410][T11722] loop3: detected capacity change from 0 to 512 [ 288.126312][T11722] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 288.126730][ T126] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.144533][ T126] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.157757][ T126] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.166078][ T126] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.167328][T11722] EXT4-fs (loop3): 1 truncate cleaned up [ 288.174929][ T126] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.188370][ T126] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.201258][T11722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.234007][T11729] lo speed is unknown, defaulting to 1000 [ 288.256693][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.292602][T11733] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.338629][T11733] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.413650][T11733] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.457946][T11694] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 288.489907][T11750] hub 2-0:1.0: USB hub found [ 288.494804][T11750] hub 2-0:1.0: 8 ports detected [ 288.511340][T11733] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.605571][T11756] loop4: detected capacity change from 0 to 128 [ 288.639980][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.754983][T11768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11768 comm=syz.2.2636 [ 288.781413][T11770] hub 2-0:1.0: USB hub found [ 288.786788][T11770] hub 2-0:1.0: 8 ports detected [ 288.941336][T11792] loop4: detected capacity change from 0 to 128 [ 288.989547][T11794] loop2: detected capacity change from 0 to 128 [ 289.019851][T11796] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11796 comm=syz.1.2649 [ 289.081674][T11800] netlink: 'syz.1.2651': attribute type 1 has an invalid length. [ 289.112569][T11802] loop4: detected capacity change from 0 to 128 [ 289.126265][T11804] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11804 comm=syz.1.2653 [ 289.164024][T11806] loop2: detected capacity change from 0 to 512 [ 289.178159][T11806] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2654: bg 0: block 248: padding at end of block bitmap is not set [ 289.192859][T11806] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2654: Failed to acquire dquot type 1 [ 289.204775][T11806] EXT4-fs (loop2): 1 truncate cleaned up [ 289.210959][T11806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.223722][T11806] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.239884][T11806] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.2654: deleted inode referenced: 12 [ 289.251954][T11806] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.2654: deleted inode referenced: 12 [ 289.285540][T11819] loop4: detected capacity change from 0 to 512 [ 289.297961][T11819] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2658: bg 0: block 248: padding at end of block bitmap is not set [ 289.312734][T11819] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2658: Failed to acquire dquot type 1 [ 289.326675][T11819] EXT4-fs (loop4): 1 truncate cleaned up [ 289.332998][T11819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.346712][T11819] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.364809][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.367433][T11819] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.2658: deleted inode referenced: 12 [ 289.394894][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 289.413543][T11819] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.2658: deleted inode referenced: 12 [ 289.457136][T11830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11830 comm=syz.2.2660 [ 289.499458][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.512136][ T52] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 289.624227][T11843] loop1: detected capacity change from 0 to 128 [ 289.791808][T11855] lo speed is unknown, defaulting to 1000 [ 289.887927][T11864] /dev/loop0: Can't lookup blockdev [ 289.947974][T11866] loop4: detected capacity change from 0 to 128 [ 290.048792][T11876] siw: device registration error -23 [ 290.243732][T11883] netlink: 'syz.2.2682': attribute type 10 has an invalid length. [ 290.296620][T11884] netlink: 'syz.2.2682': attribute type 10 has an invalid length. [ 290.326851][T11883] bond0: (slave dummy0): Releasing backup interface [ 290.335919][T11883] team0: Port device dummy0 added [ 290.344732][T11884] team0: Port device dummy0 removed [ 290.352151][T11884] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 290.437073][T11886] binfmt_misc: register: failed to install interpreter file ./file2 [ 291.270156][T11896] /dev/loop0: Can't lookup blockdev [ 291.281814][T11896] __nla_validate_parse: 21 callbacks suppressed [ 291.281855][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2690'. [ 291.343810][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2690'. [ 291.438065][T11909] siw: device registration error -23 [ 291.571826][T11915] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2698'. [ 291.582263][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2698'. [ 291.591273][T11915] netlink: 'syz.0.2698': attribute type 1 has an invalid length. [ 291.599094][T11915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2698'. [ 291.647634][T11919] loop2: detected capacity change from 0 to 512 [ 291.654326][T11919] EXT4-fs: Ignoring removed nobh option [ 291.664995][T11921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2701'. [ 291.676028][T11919] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.2700: corrupted inode contents [ 291.688253][T11919] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.2700: mark_inode_dirty error [ 291.702860][T11919] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.2700: corrupted inode contents [ 291.715435][T11919] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.2700: mark_inode_dirty error [ 291.736148][T11919] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2700: Failed to acquire dquot type 0 [ 291.748711][T11919] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2700: corrupted inode contents [ 291.760886][T11919] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.2700: mark_inode_dirty error [ 291.774098][T11919] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2700: corrupted inode contents [ 291.786716][T11919] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2700: mark_inode_dirty error [ 291.798432][T11919] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2700: corrupted inode contents [ 291.811010][T11919] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 291.821375][T11919] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2700: corrupted inode contents [ 291.833706][T11919] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.2700: mark_inode_dirty error [ 291.845472][T11919] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 291.855841][T11919] EXT4-fs (loop2): 1 truncate cleaned up [ 291.862213][T11919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.874941][T11919] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.896260][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.916982][ T29] kauditd_printk_skb: 559 callbacks suppressed [ 291.916997][ T29] audit: type=1326 audit(1761712035.175:26396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.4.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 291.946984][ T29] audit: type=1326 audit(1761712035.175:26397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.4.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 291.970730][ T29] audit: type=1326 audit(1761712035.175:26398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.4.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 291.994377][ T29] audit: type=1326 audit(1761712035.175:26399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.4.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 292.018011][ T29] audit: type=1326 audit(1761712035.175:26400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.4.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 292.020968][T11940] siw: device registration error -23 [ 292.041709][ T29] audit: type=1326 audit(1761712035.175:26401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.4.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 292.070530][ T29] audit: type=1326 audit(1761712035.175:26402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.4.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 292.094169][ T29] audit: type=1326 audit(1761712035.175:26403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.4.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 292.117758][ T29] audit: type=1326 audit(1761712035.175:26404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.4.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 292.141478][ T29] audit: type=1326 audit(1761712035.175:26405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.4.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed910eefc9 code=0x7ffc0000 [ 292.173232][ T383] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.184901][ T383] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.196038][ T383] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.210864][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.254106][T11947] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2709'. [ 292.273553][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2709'. [ 292.282589][T11947] netlink: 'syz.1.2709': attribute type 1 has an invalid length. [ 292.290513][T11947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2709'. [ 292.342878][T11957] smc: net device bond0 applied user defined pnetid SYZ2 [ 292.436867][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2717'. [ 292.444989][T11970] lo speed is unknown, defaulting to 1000 [ 292.504325][T11980] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.579531][T11980] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.630756][T11980] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.688539][T11980] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.738584][T11987] Cannot find set identified by id 0 to match [ 292.777167][ T383] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.802334][ T383] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.820759][ T383] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.853617][ T383] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.420295][T12014] loop2: detected capacity change from 0 to 128 [ 293.457383][T12014] bio_check_eod: 110 callbacks suppressed [ 293.457403][T12014] syz.2.2734: attempt to access beyond end of device [ 293.457403][T12014] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 293.497055][T12014] syz.2.2734: attempt to access beyond end of device [ 293.497055][T12014] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 293.510691][T12014] buffer_io_error: 68 callbacks suppressed [ 293.510710][T12014] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 293.526704][T12014] syz.2.2734: attempt to access beyond end of device [ 293.526704][T12014] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 293.540187][T12014] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 293.570054][T12014] syz.2.2734: attempt to access beyond end of device [ 293.570054][T12014] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 293.588738][T12014] syz.2.2734: attempt to access beyond end of device [ 293.588738][T12014] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 293.602961][T12014] syz.2.2734: attempt to access beyond end of device [ 293.602961][T12014] loop2: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 293.616501][T12014] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 293.625187][T12014] syz.2.2734: attempt to access beyond end of device [ 293.625187][T12014] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 293.638673][T12014] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 293.649060][T12014] syz.2.2734: attempt to access beyond end of device [ 293.649060][T12014] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 293.663287][T12014] syz.2.2734: attempt to access beyond end of device [ 293.663287][T12014] loop2: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 293.676769][T12014] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 293.685457][T12014] syz.2.2734: attempt to access beyond end of device [ 293.685457][T12014] loop2: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 293.699001][T12014] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 293.729659][T12014] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 293.748368][T12014] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 293.759714][T12014] Buffer I/O error on dev loop2, logical block 115, lost async page write [ 293.768595][T12014] Buffer I/O error on dev loop2, logical block 116, lost async page write [ 293.917313][T12026] netlink: 'syz.0.2738': attribute type 10 has an invalid length. [ 293.949779][T12026] bond0: (slave dummy0): Releasing backup interface [ 293.962898][T12026] team0: Port device dummy0 added [ 294.015521][T12029] netlink: 'syz.0.2738': attribute type 10 has an invalid length. [ 294.059706][T12029] team0: Port device dummy0 removed [ 294.075637][T12029] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 294.165715][ T3540] ================================================================== [ 294.173856][ T3540] BUG: KCSAN: data-race in p9_poll_mux / p9_write_work [ 294.180732][ T3540] [ 294.183070][ T3540] write to 0xffff88811b1eb89c of 4 bytes by task 4333 on cpu 1: [ 294.190714][ T3540] p9_write_work+0x414/0x720 [ 294.195323][ T3540] process_scheduled_works+0x4ce/0x9d0 [ 294.200826][ T3540] worker_thread+0x582/0x770 [ 294.205424][ T3540] kthread+0x489/0x510 [ 294.209543][ T3540] ret_from_fork+0x122/0x1b0 [ 294.214158][ T3540] ret_from_fork_asm+0x1a/0x30 [ 294.218945][ T3540] [ 294.221317][ T3540] read to 0xffff88811b1eb89c of 4 bytes by task 3540 on cpu 0: [ 294.228869][ T3540] p9_poll_mux+0x127/0x2f0 [ 294.233306][ T3540] p9_poll_workfn+0xbf/0x120 [ 294.237912][ T3540] process_scheduled_works+0x4ce/0x9d0 [ 294.243412][ T3540] worker_thread+0x582/0x770 [ 294.248016][ T3540] kthread+0x489/0x510 [ 294.252110][ T3540] ret_from_fork+0x122/0x1b0 [ 294.256722][ T3540] ret_from_fork_asm+0x1a/0x30 [ 294.261502][ T3540] [ 294.263831][ T3540] value changed: 0x00000015 -> 0x00000000 [ 294.269552][ T3540] [ 294.271878][ T3540] Reported by Kernel Concurrency Sanitizer on: [ 294.278036][ T3540] CPU: 0 UID: 0 PID: 3540 Comm: kworker/0:6 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.289421][ T3540] Tainted: [W]=WARN [ 294.293229][ T3540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.303293][ T3540] Workqueue: events p9_poll_workfn [ 294.308421][ T3540] ==================================================================