last executing test programs: 47.144381688s ago: executing program 0 (id=1100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x35}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2, 0x0, 0x0, 0x1800}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0x4}, 0x94) 47.069704486s ago: executing program 0 (id=1101): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x500, 0x40080}, 0x4000c00) 46.72344517s ago: executing program 0 (id=1110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000200000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 46.550361167s ago: executing program 0 (id=1112): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x89, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r4, 0x0, 0xbf5, 0x2000402) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r6, 0x0, 0x1, 0x2000406) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_clone(0x5004011, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)=""/106, 0x6a}], 0x1, 0x81, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 46.01081853s ago: executing program 0 (id=1129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000f5ff00000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d18300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 45.042789526s ago: executing program 0 (id=1137): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x500000000000000) 45.00453534s ago: executing program 32 (id=1137): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x500000000000000) 36.266839162s ago: executing program 5 (id=1312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b700000000000700"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 36.150162743s ago: executing program 5 (id=1314): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000000c0)={[{@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000680)="$eJzs3dFrW9cZAPDvynbiJM7sbHvIwpaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX/AYGxraZ/61JdCn0uh5E9oC4H2vZTSEtokfWihrYrkqyZxZVsmlpVYvx8c33PuvfL3HQsd69x7uTeAjnUqIsYioisizkZEf7o+k5ZYWy/V/R7cvzVZLUlUKtc+TSJJ19V/V5Iuj6Qv642Iv/454h/J9+OWVlbnJgqF/FLazpXnF3OlldVzs/MTM/mZ/MLYyPDF0UujF0aHdq2vl//40f///eqfLr/1mxsfjH9y5p/VtPrSbY/3oxlrTe633vWe2t+irjsilnYS7BnWlfanp92JAADQlOp3/B9GxC8i4uFL7c4GAAAAaIXK7/viqySiAgAAAOxbmdo1sEkmm14L0BeZTDa7fg3vj+NwplAslX89XVxemFq/VnYgejLTs4X8UHqt8ED0JNX2cK3+qH1+Q3skIo5FxH/7D9Xa2cliYardBz8AAACgQxzZMP//vH99/g8AAADsMwPtTgAAAABoOfN/AAAA2P82nf8n3XubCAAAANAKf7lypVoq9edfT11fWZ4rXj83lS/NZeeXJ7OTxaXF7EyxOFO7Z9/8dr+vUCwu/jYWlm/myvlSOVdaWR2fLy4vlMdrz/Uez3tONAAAAOy9Yz+/834SEWu/O1QrVQfSbU3M1cdamx3QSpmd7Z60Kg9g73W1OwGgbba5wPedn+5VIsCecz4e2GZi/78N7R0eNgAAAJ4Fgz95qvP/zgfCc8xEHjqX8//QudzgCzqX8//Q4Q5uv0vvZhve3uVcAACAlumrlSSTTc8F9kUmk81GHK09FqAnmZ4t5Ici4gcR8V5/z8Fqe7jdSQMAAAAAAAAAAAAAAAAAAAAAAADAc6ZSSaICAAAA7GsRmY+T9EH+g/2n+zYeHziQfNFfW0bEjZevvXBzolxeGq6u/+y79eUX0/Xn23EEAwAAANioPk+vz+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDc9uH9rsl72Mu69P0TEQKP43dFbW/a+0R8Rhx8m0f3Y65KI6NqF+Gu3I+J4o/hJNa0YSLPYGD8TEYfaHP/ILsSHTnanOv6MNfr8ZeJUbdn489edlqd179Rm41+mPv7VxrlG49/RJmOcuPt6btP4tyNOdDcef+rxk6ccf//+t9XVzbZVXokYbPj/J3kiVq48v5grrayem52fmMnP5BdGRoYvjl4avTA6lJueLeTTnw1j/Odnb36zVf8PbxJ/YJv+n26y/1/fvXn/R1vEP/PLjfG/rL3/x7eIX/3b/yr9P1DdPlivr63XH3fytXdPbtX/qU36v937f6bJ/p+9+q8Pm9wVANgDpZXVuYlCIb+k8lxWeryDKltVrqYf9B2/vM0DEwAAsOsefelvdyYAAAAAAAAAAAAAAAAAAADQuVp+E7KDT95ZoLd9XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2NK3AQAA///VO9QU") r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r3, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) unlink(&(0x7f0000000000)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000180)=""/243, 0xf3) fcntl$lock(r5, 0x25, 0x0) fcntl$setflags(r1, 0x2, 0x1) 35.936555384s ago: executing program 5 (id=1320): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd69, 0x0, 0x0, 0x22, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd600a000800fe"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 35.87234613s ago: executing program 5 (id=1321): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r4 = pidfd_getfd(r0, r0, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r4}, 0x8) setns(r5, 0x4000000) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x130) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280300, 0x0) syz_io_uring_setup(0x6544, &(0x7f0000000500)={0x0, 0xd72d, 0x80, 0x2, 0x32e, 0x0, r5}, &(0x7f0000000440), &(0x7f0000000580)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pimreg1\x00', 0x1000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x2, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000bf00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000005c0)={0x5, 0x1, 0x6, 0xf, 0x15, "c4431f003f8675175f644b8c667d8f063df314"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(r6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r9, &(0x7f0000000180)="a23b472863eafd7452057b0f7e", &(0x7f00000001c0)=@udp=r6, 0x3}, 0x20) 35.728591825s ago: executing program 5 (id=1323): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 35.495603108s ago: executing program 5 (id=1331): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000, 0x0, 0x0, 0x5000000}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 35.410446466s ago: executing program 33 (id=1331): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000, 0x0, 0x0, 0x5000000}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.562430746s ago: executing program 4 (id=2068): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="ff03000000000000000000000000000000000000ff8836497a2e4cc31caa5cce396320a395192a280638c6c25bd735edca", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="040000000a0000000200"/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) statx(0xffffffffffffffff, 0x0, 0x100, 0x4, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = io_uring_setup(0x44cc, &(0x7f0000000180)={0x0, 0x79cd, 0x200, 0x1, 0x1a1}) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, r5}) 1.495945683s ago: executing program 4 (id=2070): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) 1.448765717s ago: executing program 4 (id=2072): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000010000800000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 1.428102979s ago: executing program 4 (id=2073): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r3, 0x7c96, 0xba45, 0x0, &(0x7f0000000380)={[0x8]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, './file0\x00'}}) 1.398854272s ago: executing program 6 (id=2074): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x2, 0x1}, {0x49, 0x4}, @const={0x1f0, {0xb7, 0x3f, 0x6, 0xfff8}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x14, &(0x7f00000018c0)=[{&(0x7f00000005c0)="270502001c0014000600002fb96dbcf706e105000700810003008100", 0x1c}, {&(0x7f0000000700)="e554bb04af32f00bd876", 0xa}], 0x2}, 0x20000800) 1.335897048s ago: executing program 3 (id=2075): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x20000000}}}}]}, 0x78}}, 0x0) 1.334363938s ago: executing program 6 (id=2076): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x20000004) 1.31514865s ago: executing program 6 (id=2077): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000101401"], 0x38}, 0x1, 0x0, 0xefffffffffffffff, 0x24000000}, 0x24018010) 1.301157571s ago: executing program 3 (id=2078): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x8b6c, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x84000) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r7, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$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") 1.272760474s ago: executing program 4 (id=2079): io_setup(0x205, &(0x7f0000002500)) eventfd(0xf84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x3, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) syz_read_part_table(0x5cd, &(0x7f0000000600)="$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") r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) clock_getres(0x7, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) pwritev(r2, &(0x7f0000001180), 0x10000000000000f3, 0x3fc, 0x0) 1.223998389s ago: executing program 6 (id=2080): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x35}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0x4}, 0x94) 1.223705359s ago: executing program 6 (id=2081): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4c, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {0x0, 0x7f00}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 1.183640833s ago: executing program 1 (id=2082): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x78}, 0x1, 0x7}, 0x0) syz_clone3(&(0x7f0000000500)={0x100000800, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f00000002c0)=""/84, &(0x7f0000000340)}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x3001}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x30, 0x7f, 0x81, 0x8, 0x0, 0x3ad, 0x10, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0xb}, 0x12020, 0xa, 0x1ff, 0x6, 0x59, 0x1, 0x9c, 0x0, 0x0, 0x0, 0x8000000000000001}, r5, 0xc, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0x20, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) brk(0x3) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x5, [@remote]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) keyctl$clear(0x7, r9) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000600)={0x0, 'ip6tnl0\x00', {0x2}, 0x8}) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) read(r0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000030500000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="40000000002200002c0012800c0001006d6163766c616e001c00028006000200a4ed0000100005800a0004000180c200000300000a0001"], 0x58}}, 0x0) 1.101230171s ago: executing program 1 (id=2083): inotify_rm_watch(0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0}, 0x18) (async) socket(0x10, 0xa, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async) gettid() (async) syz_clone(0x4050c80, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'], 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000002c0)) close(r2) (async) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x27, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000002000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100001ccab28fc103c4446c30da172408430586ed8a", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0x10000001}, 0x18) socket(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x57b, &(0x7f0000000640)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6e) 1.099208122s ago: executing program 6 (id=2084): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newtaction={0x80, 0x30, 0xb, 0x5, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0xfffffffc, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_LABELS={0x14, 0x7, "e14221dc6b3a3dd0a0eb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xffffffe4}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 1.039845807s ago: executing program 1 (id=2085): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000d926e2269fc16e314dbf0bf5ebde34e2d5fbefae8473b30cb737e43f46bdc75a5992c9c6f3162cfb3f91255891907b8ee217d7819d949d426c0000000000000077ea742a9c000000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000099", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rt_sigaction(0x6, 0x0, 0x0, 0x8, &(0x7f0000001300)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) semget$private(0x0, 0x6, 0x0) socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x8, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40044) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 534.630197ms ago: executing program 4 (id=2087): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb000000200000000001eff9050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c20000000000100007800a0011"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 412.174129ms ago: executing program 2 (id=2089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4b"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000608000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000004000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 395.306921ms ago: executing program 3 (id=2090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 324.559358ms ago: executing program 1 (id=2091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES64], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r0}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) rt_sigpending(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000006000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000002c0)='sys_enter\x00', r3, 0x0, 0x4e4}, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r5, @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) r6 = socket$packet(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = gettid() capget(&(0x7f0000000000)={0x20071026, r9}, &(0x7f0000000040)={0x5, 0x7, 0x4, 0x5, 0x0, 0x7}) sendmsg$nl_route(r6, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@RTM_GETNSID={0x2c, 0x5a, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NETNSA_PID={0x8}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000240)={0x1d, r12, 0x3, {0x0, 0xf0, 0x1}, 0x2}, 0x18) recvfrom$packet(r6, &(0x7f00000000c0)=""/76, 0x4c, 0x2101, &(0x7f0000000280)={0x11, 0xd, r12, 0x1, 0x3, 0x6, @link_local}, 0x14) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x7a}}, 0x14}}, 0x0) 324.114738ms ago: executing program 2 (id=2092): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$netlink(0x10, 0x3, 0x0) 263.781314ms ago: executing program 2 (id=2093): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x3, 0x100000000}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@allocspi={0x1ac, 0x16, 0x8, 0x70bd2c, 0x25dfdbfc, {{{@in6=@mcast2, @in=@remote, 0x4e23, 0xbdb, 0x4e22, 0x9, 0xa, 0xa0, 0xa0, 0x21, 0x0, 0xee01}, {@in6=@loopback, 0x4d2, 0x6c}, @in6=@private0={0xfc, 0x0, '\x00', 0xc1}, {0x16, 0x0, 0x7, 0xc, 0x2, 0x57be, 0x200, 0x9}, {0x4, 0x3, 0x8, 0x9}, {0x10000, 0x400}, 0x70bd28, 0x3503, 0x2, 0x0, 0x72, 0x4b}, 0x1ff, 0x8fbb}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x3}, @policy={0xac, 0x7, {{@in6=@remote, @in=@broadcast, 0x4e22, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x90, 0x3a, r4, r3}, {0x9, 0x0, 0x2, 0x8000000000000001, 0x8, 0x8, 0x7, 0x9}, {0x8, 0x10001, 0x0, 0x5}, 0x3, 0x6e6bb2, 0xffffffffffffffff, 0x1, 0x2, 0x3}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x1000}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000580)={r7, 0x0, 0x8, 0x7ff, 0x3264, 0x6}, &(0x7f00000005c0)=0x14) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x3) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff02"], 0x0) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfd85}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000), 0xfdef) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4102000090780001"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) write(r5, &(0x7f0000000600)="ea6af73974c0fb4b417e1c17a94889c858d4291cb18bc972d46efdd5078b630510d9ef616182906b1bde2802d784ffff456b04ba7418d74d3fefddaaff6d081d3d86086976b9052625d23b9b7b994ff1f90a825af59e0746a92568fe28f69c9dc5747ae260b485362bce9a47610fa40450e91f5e03b5a999d0157f098e711296886ae5eaafcb34a94897f84342ecd7f90beadb98a19aaa48d77666acc288f0fa6644b350950309bf57b5", 0xaa) 260.969994ms ago: executing program 3 (id=2094): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000200a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002"], 0x110}}, 0x0) 235.152907ms ago: executing program 2 (id=2095): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="f0", 0x1}], 0x1}}], 0x1, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 217.818938ms ago: executing program 3 (id=2096): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000100008000000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 158.812934ms ago: executing program 1 (id=2097): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 158.219564ms ago: executing program 3 (id=2098): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b000000070000000100010049000000010000001526c01fca35", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) (async) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x6d) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b7", 0x1}], 0x1}}], 0x1, 0x4000) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[], 0x10}}], 0x1, 0x4004000) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0xff}, 0x20) r6 = signalfd(r5, &(0x7f0000000200)={[0x80000000]}, 0x8) ioctl$USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, &(0x7f0000000680)=ANY=[@ANYBLOB="263a00001a0000000f8c018d010f8704800383070a8c0d83070b0e0d0b80058f0c0b3262e6bc5fcc21899bbcb8878dc3de92f9f3af7c7af978385f592e0a66257e65416cf054fe52f0c217c69404ed74f892439a72a7c85b1ef2f2e658"]) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2b9, &(0x7f0000000fc0)="$eJzs3E1rE3sUx/HTpm3SlDa5cLlwL1w96EY3QxtfgAZpQQwotSnqQpjaiYaMSZkJlYjYbMStr6O4dCeoL8BuxI17d0UQ3HQhjjiTaZM2rWmap7bfD5T5Z87/x5ymD5wEJpu3Xz4q5FwjZ5ZlOKYyLFKVLZHk71XNUO047K/HpF5VLk58//z/rTt3r6czmdl51bn0wqWUqk6dffv46atz78sTi6+n3kRlI3lv81vqy8Y/G/9u/lx4mHdHxdViqaymLpVKZXPJtnQ57xYM1Zu2ZbqW5ouu5TTUc3ZpZaWiZnF5Mr7iWK6rZrGiBaui5ZKWnYqaD8x8UQ3D0Mm4nG4jLezJrs/Pm+l9y16kox2h68abnXScdLV5Mbveg54AAMCAOXj+D2b9/ef/zGJwbGv+1/x+87/Ikef/D2O9fy6Pg2rDoz/M/6FE07OxjjWFrnKctBmv/f02Yv4HAAAAAAAAAAAAAAAAAAAAAOA42PK8hOd5ifAYfkVrN3iEj/vdJ7qjzZ//5T61iw6ru3EvJmK/WM2uZoNjUE/nJC+2WDItCfnh/z7UBOu5a5nZafUl5Z29VsuvrWYjEg3zoWSYH/JvQwvyZ/6aCfLamB+VeP31U5KQv5tfP9U0PyYXztflDUnIx/tSEluW/Wvv5J/NqF69kdmVH/f3AQAAAABwEhi6bc/rd7/ub4jJ3nqQP8T7A7teX4/If618RCUAAAAAADgyt/KkYNq25bSxiIrIEeIndRGRgWhj1+KKiAxAG71axEQkOKPtxL9ux1tKeS3sGRGRvj8th1j0+z8TAAAAgE7bGfoPEfr0vIsdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+rT6eWDh/j2lsHBAvO5ykZ5/gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA+RUAAP//ovscvw==") r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) getdents64(r9, &(0x7f0000002f40)=""/4098, 0x1002) (async) getdents64(r9, &(0x7f0000002f40)=""/4098, 0x1002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000002c0)=0x20100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000611100000000000006000000feffffff9500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000611100000000000006000000feffffff9500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x28) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) (async) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x2, 0x3a1}) 140.456226ms ago: executing program 2 (id=2099): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000001860000000000000000000a97600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb7"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000008"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 108.051999ms ago: executing program 1 (id=2100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = memfd_secret(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000004c0), 0x7fff, r0}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000004c0), 0x7fff, r0}, 0x38) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000007c0)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB="5c2a80bce31b6dbe0fb8a90369b1c99239c6ae7874387561a57a5cc5c01a036d9eb202d146ff36185a8e3965eb2d4609e0fdb091bae725554bdf51c84bb367a8a5b27e201219d2f39a7ddf3d35e4cd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400"], 0xa8}}, 0x0) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0000d877d147b4776c8c2f2a266ad0b395a2efc468ffe19747f8bfd8241a7938dbad172270ffa011432a0410ebf84c5eb254055da67095e4"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0000d877d147b4776c8c2f2a266ad0b395a2efc468ffe19747f8bfd8241a7938dbad172270ffa011432a0410ebf84c5eb254055da67095e4"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x18}}}}, ["", "", ""]}, 0x28}}, 0x14) (async) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x18}}}}, ["", "", ""]}, 0x28}}, 0x14) sendmsg$unix(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, 0x0, 0x0, 0x20000084}, 0x40880) (async) sendmsg$unix(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, 0x0, 0x0, 0x20000084}, 0x40880) connect$unix(r7, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x46) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000008, 0x13, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=2101): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x604000000000000) kernel console output (not intermixed with test programs): 0 r/w without journal. Quota mode: writeback. [ 111.833689][ T6968] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.843992][ T6954] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.1107: mark inode dirty (error -117) [ 111.862858][ T6954] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 111.871957][ T6954] EXT4-fs (loop1): 1 orphan inode deleted [ 111.883536][ T6954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.975229][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.001338][ T6993] loop1: detected capacity change from 0 to 1024 [ 112.017915][ T6993] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.046930][ T6993] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 112.058522][ T6993] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 112.069757][ T6993] JBD2: no valid journal superblock found [ 112.075548][ T6993] EXT4-fs (loop1): Could not load journal inode [ 112.084513][ T7005] loop3: detected capacity change from 0 to 136 [ 112.131683][ T3312] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 112.263032][ T3312] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 112.389872][ T7011] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 112.558560][ T52] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.572555][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.633034][ T52] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.709542][ T52] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.782510][ T7018] loop4: detected capacity change from 0 to 8192 [ 112.807329][ T7018] vfat filesystem being mounted at /239/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 112.822713][ T52] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.074287][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1136'. [ 113.206274][ T52] hsr_slave_0: left promiscuous mode [ 113.212567][ T7038] loop4: detected capacity change from 0 to 512 [ 113.220335][ T52] hsr_slave_1: left promiscuous mode [ 113.227090][ T7038] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.237023][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.244455][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.252971][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.260399][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.272742][ T52] veth1_macvtap: left promiscuous mode [ 113.283563][ T52] veth0_macvtap: left promiscuous mode [ 113.292377][ T52] veth1_vlan: left promiscuous mode [ 113.297759][ T52] veth0_vlan: left promiscuous mode [ 113.388264][ T52] team0 (unregistering): Port device team_slave_1 removed [ 113.398973][ T52] team0 (unregistering): Port device team_slave_0 removed [ 113.436446][ T52] team0 (unregistering): Port device dummy0 removed [ 113.597639][ T7039] lo speed is unknown, defaulting to 1000 [ 113.665325][ T7039] chnl_net:caif_netlink_parms(): no params data found [ 113.711103][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.718330][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.736750][ T7039] bridge_slave_0: entered allmulticast mode [ 113.758623][ T7039] bridge_slave_0: entered promiscuous mode [ 113.788892][ T52] IPVS: stop unused estimator thread 0... [ 113.795098][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.802201][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.817575][ T7039] bridge_slave_1: entered allmulticast mode [ 113.824697][ T7039] bridge_slave_1: entered promiscuous mode [ 113.876843][ T7063] ALSA: seq fatal error: cannot create timer (-22) [ 113.884435][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.910642][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.946679][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1145'. [ 113.960397][ T7039] team0: Port device team_slave_0 added [ 113.967172][ T7067] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1145'. [ 113.986760][ T7039] team0: Port device team_slave_1 added [ 114.015741][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.022762][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.049390][ T7039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.106841][ T7074] xt_connbytes: Forcing CT accounting to be enabled [ 114.120119][ T7074] loop1: detected capacity change from 0 to 512 [ 114.147094][ T7074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.162871][ T7076] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 114.173131][ T7074] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.185319][ T7076] bond1 (unregistering): Released all slaves [ 114.194400][ T7074] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.205649][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.213522][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.239606][ T7039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.270093][ T7039] hsr_slave_0: entered promiscuous mode [ 114.276352][ T7039] hsr_slave_1: entered promiscuous mode [ 114.283559][ T7039] debugfs: 'hsr0' already exists in 'hsr' [ 114.289369][ T7039] Cannot create hsr debugfs directory [ 114.453876][ T7093] loop4: detected capacity change from 0 to 512 [ 114.466480][ T7091] loop3: detected capacity change from 0 to 2048 [ 114.474303][ T7095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1154'. [ 114.485341][ T7093] EXT4-fs (loop4): 1 truncate cleaned up [ 114.492013][ T7039] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.495422][ T7093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.514867][ T7039] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.522730][ T7091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.544309][ T7039] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.555324][ T7039] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.566273][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.642705][ T7114] loop4: detected capacity change from 0 to 2048 [ 114.650653][ T7117] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 114.669442][ T7039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.684469][ T7039] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.694632][ T7117] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1324 with error 28 [ 114.695316][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.708012][ T7117] EXT4-fs (loop3): This should not happen!! Data will be lost [ 114.708012][ T7117] [ 114.714182][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.731082][ T7117] EXT4-fs (loop3): Total free blocks count 0 [ 114.734531][ T7114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.737987][ T7117] EXT4-fs (loop3): Free/Dirty block details [ 114.750290][ T7125] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1159'. [ 114.755059][ T7117] EXT4-fs (loop3): free_blocks=66060288 [ 114.770340][ T7117] EXT4-fs (loop3): dirty_blocks=2096 [ 114.775682][ T7117] EXT4-fs (loop3): Block reservation details [ 114.781787][ T7117] EXT4-fs (loop3): i_reserved_data_blocks=153 [ 114.796476][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.803595][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.828665][ T7039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.839153][ T7039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.909686][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.913801][ T7039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.975087][ T7141] netlink: 80 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 115.025668][ T7145] SELinux: policydb version 0 does not match my version range 15-35 [ 115.040549][ T7145] SELinux: failed to load policy [ 115.149925][ T7039] veth0_vlan: entered promiscuous mode [ 115.158952][ T7039] veth1_vlan: entered promiscuous mode [ 115.177175][ T7039] veth0_macvtap: entered promiscuous mode [ 115.186266][ T7039] veth1_macvtap: entered promiscuous mode [ 115.199551][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.211933][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.223866][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.233108][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.242726][ T7155] loop4: detected capacity change from 0 to 1024 [ 115.247993][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1324 with max blocks 2048 with error 28 [ 115.250788][ T7155] EXT4-fs: Ignoring removed orlov option [ 115.264074][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.267822][ T7155] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.286608][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.302036][ T7155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.403413][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.472904][ T7177] loop1: detected capacity change from 0 to 2048 [ 115.521039][ T7180] netlink: 'syz.2.1172': attribute type 13 has an invalid length. [ 115.536392][ T7177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.605310][ T7180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.674466][ T7180] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.693508][ T7180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.709614][ T7166] lo speed is unknown, defaulting to 1000 [ 115.754044][ T7196] SELinux: Context Ü is not valid (left unmapped). [ 115.798122][ T7200] loop4: detected capacity change from 0 to 512 [ 115.855463][ T7200] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.870241][ T7198] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 115.900870][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.918143][ T7200] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #17: comm syz.4.1179: iget: bad i_size value: -6917529027641081756 [ 115.937373][ T7200] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1179: couldn't read orphan inode 17 (err -117) [ 115.949443][ T7205] loop5: detected capacity change from 0 to 2048 [ 115.988854][ T7200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.002144][ T7205] loop5: p2 < > p3 < p5 > p4 [ 116.006948][ T7205] loop5: partition table partially beyond EOD, truncated [ 116.015228][ T7205] loop5: p2 start 4278190080 is beyond EOD, truncated [ 116.036702][ T7215] loop1: detected capacity change from 0 to 1024 [ 116.041009][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.053039][ T7205] loop5: p4 size 8192 extends beyond EOD, truncated [ 116.068050][ T7205] loop5: p5 size 8192 extends beyond EOD, truncated [ 116.075170][ T7215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.159671][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.174769][ T7225] netlink: 'syz.4.1186': attribute type 13 has an invalid length. [ 116.256198][ T7230] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 116.304102][ T7234] loop4: detected capacity change from 0 to 512 [ 116.353412][ T7234] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.360966][ T7234] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1192: bad orphan inode 13 [ 116.371777][ T7234] ext4_test_bit(bit=12, block=18) = 1 [ 116.377188][ T7234] is_bad_inode(inode)=0 [ 116.382152][ T7234] NEXT_ORPHAN(inode)=2130706432 [ 116.387021][ T7234] max_ino=32 [ 116.390269][ T7234] i_nlink=1 [ 116.394510][ T7234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.420111][ T7234] vlan3: entered allmulticast mode [ 116.469075][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 116.469095][ T29] audit: type=1400 audit(5281603710.999:2824): avc: denied { execute } for pid=7233 comm="syz.4.1192" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.498552][ T29] audit: type=1326 audit(5281603710.999:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 116.522026][ T29] audit: type=1326 audit(5281603710.999:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 116.546365][ T29] audit: type=1326 audit(5281603710.999:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 116.569873][ T29] audit: type=1326 audit(5281603710.999:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 116.594136][ T29] audit: type=1326 audit(5281603710.999:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 116.618439][ T29] audit: type=1326 audit(5281603710.999:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 116.641933][ T29] audit: type=1326 audit(5281603710.999:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 116.666163][ T29] audit: type=1326 audit(5281603710.999:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 116.689721][ T29] audit: type=1326 audit(5281603710.999:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 116.723268][ T7249] program syz.3.1196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.768443][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.768821][ T7255] tmpfs: Unknown parameter 'GPL' [ 116.857957][ T7264] loop4: detected capacity change from 0 to 4096 [ 116.873485][ T7264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.906354][ T7264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.096454][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.147378][ T7302] netlink: 'syz.2.1218': attribute type 27 has an invalid length. [ 117.163845][ T7298] loop5: detected capacity change from 0 to 164 [ 117.173963][ T7302] tunl0: left allmulticast mode [ 117.179930][ T7298] ISOFS: unable to read i-node block [ 117.185338][ T7298] isofs_fill_super: get root inode failed [ 117.191838][ T7302] gre0: left allmulticast mode [ 117.207353][ T7304] SELinux: failed to load policy [ 117.214976][ T7302] gretap0: left allmulticast mode [ 117.239672][ T7302] erspan0: left allmulticast mode [ 117.246139][ T7302] ip_vti0: left allmulticast mode [ 117.261328][ T7302] ip6_vti0: left allmulticast mode [ 117.274832][ T7302] sit0: left allmulticast mode [ 117.281070][ T7302] ip6tnl0: left allmulticast mode [ 117.332479][ T7302] ip6gre0: left allmulticast mode [ 117.339587][ T7302] syz_tun: left allmulticast mode [ 117.355756][ T7302] ip6gretap0: left allmulticast mode [ 117.369762][ T7302] vcan0: left allmulticast mode [ 117.379138][ T7302] bond0: left allmulticast mode [ 117.389733][ T7302] team0: left allmulticast mode [ 117.395136][ T7302] dummy0: left allmulticast mode [ 117.410859][ T7302] nlmon0: left allmulticast mode [ 117.416465][ T7302] caif0: left allmulticast mode [ 117.421561][ T7302] batadv0: left allmulticast mode [ 117.427576][ T7302] vxcan0: left allmulticast mode [ 117.432643][ T7302] vxcan1: left allmulticast mode [ 117.437871][ T7302] veth0: left allmulticast mode [ 117.442870][ T7302] veth1: left allmulticast mode [ 117.447973][ T7302] wg0: left allmulticast mode [ 117.452756][ T7302] wg1: left allmulticast mode [ 117.458320][ T7302] wg2: left allmulticast mode [ 117.463175][ T7302] veth0_to_bridge: left allmulticast mode [ 117.469309][ T7302] veth1_to_bridge: left allmulticast mode [ 117.475344][ T7302] veth0_to_bond: left allmulticast mode [ 117.481074][ T7302] bond_slave_0: left allmulticast mode [ 117.487533][ T7302] veth1_to_bond: left allmulticast mode [ 117.493229][ T7302] bond_slave_1: left allmulticast mode [ 117.498871][ T7302] veth0_to_team: left allmulticast mode [ 117.500032][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'. [ 117.504596][ T7302] team_slave_0: left allmulticast mode [ 117.504733][ T7302] veth1_to_team: left allmulticast mode [ 117.513635][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 117.534304][ T7302] team_slave_1: left allmulticast mode [ 117.539861][ T7302] veth0_to_batadv: left allmulticast mode [ 117.546385][ T7302] batadv_slave_0: left allmulticast mode [ 117.552173][ T7302] veth1_to_batadv: left allmulticast mode [ 117.558017][ T7302] batadv_slave_1: left allmulticast mode [ 117.563927][ T7302] xfrm0: left allmulticast mode [ 117.568985][ T7302] veth0_to_hsr: left allmulticast mode [ 117.575289][ T7302] veth1_to_hsr: left allmulticast mode [ 117.580969][ T7302] hsr0: left allmulticast mode [ 117.585743][ T7302] hsr_slave_0: left allmulticast mode [ 117.591164][ T7302] hsr_slave_1: left allmulticast mode [ 117.596740][ T7302] veth1_virt_wifi: left allmulticast mode [ 117.603140][ T7302] veth0_virt_wifi: left allmulticast mode [ 117.609025][ T7302] veth1_vlan: left allmulticast mode [ 117.614486][ T7302] vlan0: left allmulticast mode [ 117.619446][ T7302] vlan1: left allmulticast mode [ 117.624411][ T7302] macvlan1: left allmulticast mode [ 117.630308][ T7302] ipvlan0: left allmulticast mode [ 117.635469][ T7302] ipvlan1: left allmulticast mode [ 117.640531][ T7302] veth0_vlan: left allmulticast mode [ 117.645935][ T7302] veth1_macvtap: left allmulticast mode [ 117.651568][ T7302] veth0_macvtap: left allmulticast mode [ 117.657788][ T7302] macvtap0: left allmulticast mode [ 117.663096][ T7302] macsec0: left allmulticast mode [ 117.668324][ T7302] geneve0: left allmulticast mode [ 117.673491][ T7302] geneve1: left allmulticast mode [ 117.678709][ T7302] vlan2: left allmulticast mode [ 117.683636][ T7302] bridge0: left allmulticast mode [ 117.689559][ T7302] syztnl0: left allmulticast mode [ 117.694993][ T4678] lo speed is unknown, defaulting to 1000 [ 117.700784][ T4678] syz0: Port: 1 Link DOWN [ 117.775852][ T7334] FAULT_INJECTION: forcing a failure. [ 117.775852][ T7334] name failslab, interval 1, probability 0, space 0, times 0 [ 117.788626][ T7334] CPU: 1 UID: 0 PID: 7334 Comm: syz.4.1224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.788654][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.788671][ T7334] Call Trace: [ 117.788709][ T7334] [ 117.788719][ T7334] __dump_stack+0x1d/0x30 [ 117.788747][ T7334] dump_stack_lvl+0xe8/0x140 [ 117.788772][ T7334] dump_stack+0x15/0x1b [ 117.788792][ T7334] should_fail_ex+0x265/0x280 [ 117.788911][ T7334] should_failslab+0x8c/0xb0 [ 117.788953][ T7334] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 117.788993][ T7334] ? __alloc_skb+0x101/0x320 [ 117.789021][ T7334] __alloc_skb+0x101/0x320 [ 117.789072][ T7334] netlink_alloc_large_skb+0xbf/0xf0 [ 117.789105][ T7334] netlink_sendmsg+0x3cf/0x6b0 [ 117.789186][ T7334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.789218][ T7334] __sock_sendmsg+0x145/0x180 [ 117.789240][ T7334] ____sys_sendmsg+0x31e/0x4e0 [ 117.789337][ T7334] ___sys_sendmsg+0x17b/0x1d0 [ 117.789407][ T7334] __x64_sys_sendmsg+0xd4/0x160 [ 117.789451][ T7334] x64_sys_call+0x191e/0x3000 [ 117.789480][ T7334] do_syscall_64+0xd2/0x200 [ 117.789527][ T7334] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 117.789556][ T7334] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 117.789581][ T7334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.789611][ T7334] RIP: 0033:0x7fd42498eec9 [ 117.789638][ T7334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.789691][ T7334] RSP: 002b:00007fd4233ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.789711][ T7334] RAX: ffffffffffffffda RBX: 00007fd424be5fa0 RCX: 00007fd42498eec9 [ 117.789724][ T7334] RDX: 0000000020040084 RSI: 0000200000000300 RDI: 0000000000000008 [ 117.789739][ T7334] RBP: 00007fd4233ef090 R08: 0000000000000000 R09: 0000000000000000 [ 117.789753][ T7334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.789768][ T7334] R13: 00007fd424be6038 R14: 00007fd424be5fa0 R15: 00007ffebf543a28 [ 117.789795][ T7334] [ 117.878276][ T7336] lo speed is unknown, defaulting to 1000 [ 118.140669][ T7350] loop5: detected capacity change from 0 to 512 [ 118.181655][ T7350] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 118.193123][ T7350] EXT4-fs (loop5): orphan cleanup on readonly fs [ 118.209955][ T7350] EXT4-fs error (device loop5): ext4_quota_enable:7132: comm syz.5.1230: Bad quota inum: 5, type: 1 [ 118.222912][ T7350] EXT4-fs (loop5): Remounting filesystem read-only [ 118.230240][ T7350] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 118.245338][ T7350] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 118.252705][ T7350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.294678][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.310011][ T7363] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 118.353990][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1225'. [ 118.363273][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1225'. [ 118.435434][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1237'. [ 118.446708][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1237'. [ 118.466342][ T7372] hsr_slave_1 (unregistering): left promiscuous mode [ 118.499545][ T7378] loop4: detected capacity change from 0 to 512 [ 118.512907][ T7378] EXT4-fs: Ignoring removed i_version option [ 118.519006][ T7378] EXT4-fs: Ignoring removed bh option [ 118.534711][ T7378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.557058][ T7378] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.576262][ T7382] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 118.666148][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.769351][ T7410] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 118.837744][ T7419] loop5: detected capacity change from 0 to 512 [ 118.990282][ T7429] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 119.002437][ T7429] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1261'. [ 119.569217][ T7439] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 119.630621][ T7444] set match dimension is over the limit! [ 119.713852][ T7456] netlink: 'syz.4.1272': attribute type 4 has an invalid length. [ 119.721822][ T7454] netlink: 'syz.4.1272': attribute type 4 has an invalid length. [ 119.914107][ T7467] loop3: detected capacity change from 0 to 1024 [ 119.921308][ T7464] lo speed is unknown, defaulting to 1000 [ 119.979169][ T7467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.566028][ T7485] lo speed is unknown, defaulting to 1000 [ 120.688572][ T7493] loop1: detected capacity change from 0 to 512 [ 120.760112][ T7493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.779707][ T7493] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.851511][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.064002][ T7523] loop4: detected capacity change from 0 to 512 [ 121.071321][ T7523] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.083560][ T7523] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 121.098565][ T7523] EXT4-fs (loop4): 1 truncate cleaned up [ 121.104816][ T7523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.159158][ T7528] loop1: detected capacity change from 0 to 512 [ 121.167921][ T7523] lo speed is unknown, defaulting to 1000 [ 121.210164][ T7528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.235184][ T7528] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.262177][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.287858][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.299468][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 121.299486][ T29] audit: type=1326 audit(5281603718.125:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b9aeec9 code=0x7ffc0000 [ 121.330479][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1295'. [ 121.341795][ T29] audit: type=1326 audit(5281603718.167:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f068b9aeec9 code=0x7ffc0000 [ 121.365248][ T29] audit: type=1326 audit(5281603718.167:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b9aeec9 code=0x7ffc0000 [ 121.388699][ T29] audit: type=1326 audit(5281603718.167:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f068b9aeec9 code=0x7ffc0000 [ 121.412084][ T29] audit: type=1326 audit(5281603718.177:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b9aeec9 code=0x7ffc0000 [ 121.435598][ T29] audit: type=1326 audit(5281603718.177:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f068b9aeec9 code=0x7ffc0000 [ 121.459437][ T29] audit: type=1326 audit(5281603718.177:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b9aeec9 code=0x7ffc0000 [ 121.483242][ T29] audit: type=1326 audit(5281603718.177:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f068b9aeec9 code=0x7ffc0000 [ 121.506766][ T29] audit: type=1326 audit(5281603718.177:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b9aeec9 code=0x7ffc0000 [ 121.530664][ T29] audit: type=1326 audit(5281603718.177:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f068b9ad710 code=0x7ffc0000 [ 121.576021][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.628211][ T7551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.641804][ T7551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.658133][ T7556] 9pnet_fd: Insufficient options for proto=fd [ 121.664776][ T7555] 9pnet_fd: Insufficient options for proto=fd [ 121.743040][ T7568] netlink: 'syz.3.1309': attribute type 5 has an invalid length. [ 121.751108][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1309'. [ 121.789681][ T7568] netlink: 'syz.3.1309': attribute type 39 has an invalid length. [ 121.798730][ T7571] netlink: 104 bytes leftover after parsing attributes in process `+}[@'. [ 121.818867][ T7572] loop1: detected capacity change from 0 to 1024 [ 121.853845][ T7576] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 122.038824][ T7587] loop5: detected capacity change from 0 to 512 [ 122.079386][ T7587] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.160242][ T7598] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 122.188038][ T7601] bond0 (unregistering): Released all slaves [ 122.230165][ T7607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.289567][ T7615] loop5: detected capacity change from 0 to 512 [ 122.298545][ T7615] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.311363][ T7615] EXT4-fs (loop5): 1 orphan inode deleted [ 122.317438][ T7615] EXT4-fs (loop5): 1 truncate cleaned up [ 122.350642][ T7615] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.5.1321: path /30/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 122.373704][ T7615] EXT4-fs (loop5): Remounting filesystem read-only [ 122.458448][ T7620] lo speed is unknown, defaulting to 1000 [ 122.540524][ T7631] loop4: detected capacity change from 0 to 2048 [ 122.572210][ T7637] __nla_validate_parse: 1 callbacks suppressed [ 122.572230][ T7637] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1328'. [ 122.632286][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.810086][ T7646] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 122.848842][ T7646] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 122.861419][ T7646] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.861419][ T7646] [ 122.871851][ T7646] EXT4-fs (loop4): Total free blocks count 0 [ 122.877964][ T7646] EXT4-fs (loop4): Free/Dirty block details [ 122.883887][ T7646] EXT4-fs (loop4): free_blocks=66060288 [ 122.889563][ T7646] EXT4-fs (loop4): dirty_blocks=2608 [ 122.895713][ T7646] EXT4-fs (loop4): Block reservation details [ 122.901726][ T7646] EXT4-fs (loop4): i_reserved_data_blocks=163 [ 122.979288][ T7653] lo speed is unknown, defaulting to 1000 [ 123.063585][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.269028][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.317227][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.399071][ T57] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1272 with error 28 [ 123.412727][ T57] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.412727][ T57] [ 123.426506][ T12] bridge_slave_1: left allmulticast mode [ 123.432333][ T12] bridge_slave_1: left promiscuous mode [ 123.438304][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.448852][ T7675] loop3: detected capacity change from 0 to 512 [ 123.511448][ T12] bridge_slave_0: left allmulticast mode [ 123.512624][ T7675] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1340: casefold flag without casefold feature [ 123.518148][ T12] bridge_slave_0: left promiscuous mode [ 123.535880][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.544234][ T7675] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1340: couldn't read orphan inode 15 (err -117) [ 123.567343][ T7681] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 123.617107][ T7685] netlink: 'syz.2.1344': attribute type 10 has an invalid length. [ 123.633926][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 123.645547][ T7687] ALSA: seq fatal error: cannot create timer (-22) [ 123.668334][ T7675] SELinux: policydb version -299076691 does not match my version range 15-35 [ 123.677670][ T7675] SELinux: failed to load policy [ 123.690743][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.704623][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.719779][ T12] bond0 (unregistering): Released all slaves [ 123.784504][ T7641] lo speed is unknown, defaulting to 1000 [ 123.846142][ T7652] lo speed is unknown, defaulting to 1000 [ 123.879185][ T12] hsr_slave_0: left promiscuous mode [ 123.884967][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.892445][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.902536][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.910863][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.940827][ T12] veth1_macvtap: left promiscuous mode [ 123.946796][ T12] veth0_macvtap: left promiscuous mode [ 123.954850][ T12] veth1_vlan: left promiscuous mode [ 123.960909][ T12] veth0_vlan: left promiscuous mode [ 124.003819][ T7712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1354'. [ 124.091850][ T12] team0 (unregistering): Port device team_slave_1 removed [ 124.104564][ T12] team0 (unregistering): Port device team_slave_0 removed [ 124.152450][ T7718] wireguard0: entered promiscuous mode [ 124.157981][ T7718] wireguard0: entered allmulticast mode [ 124.219449][ T7652] chnl_net:caif_netlink_parms(): no params data found [ 124.262976][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.270236][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.278283][ T7652] bridge_slave_0: entered allmulticast mode [ 124.285137][ T7652] bridge_slave_0: entered promiscuous mode [ 124.292677][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.299839][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.308028][ T7652] bridge_slave_1: entered allmulticast mode [ 124.314876][ T7652] bridge_slave_1: entered promiscuous mode [ 124.324388][ T7718] wireguard0: entered promiscuous mode [ 124.329882][ T7718] wireguard0: entered allmulticast mode [ 124.347028][ T7727] netlink: 'syz.1.1357': attribute type 4 has an invalid length. [ 124.358661][ T7652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.370550][ T7652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.394423][ T7652] team0: Port device team_slave_0 added [ 124.401525][ T7652] team0: Port device team_slave_1 added [ 124.422110][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.429198][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.455852][ T7652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.467629][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.474607][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.501295][ T7652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.551395][ T7718] wireguard0: entered promiscuous mode [ 124.556984][ T7718] wireguard0: entered allmulticast mode [ 124.577379][ T7735] random: crng reseeded on system resumption [ 124.591892][ T7735] loop4: detected capacity change from 0 to 164 [ 124.601894][ T7735] Unable to read rock-ridge attributes [ 124.674512][ T7652] hsr_slave_0: entered promiscuous mode [ 124.698288][ T7652] hsr_slave_1: entered promiscuous mode [ 124.704947][ T7652] debugfs: 'hsr0' already exists in 'hsr' [ 124.710709][ T7652] Cannot create hsr debugfs directory [ 124.783058][ T7718] wireguard0: entered promiscuous mode [ 124.788732][ T7718] wireguard0: entered allmulticast mode [ 124.894385][ T7745] netlink: 'syz.2.1364': attribute type 10 has an invalid length. [ 125.010702][ T7758] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1369'. [ 125.021481][ T7652] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 125.071319][ T7652] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 125.101259][ T7768] bridge3: entered promiscuous mode [ 125.113371][ T7652] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 125.139902][ T7652] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 125.237955][ T7787] loop3: detected capacity change from 0 to 164 [ 125.239986][ T7652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.256748][ T7727] syz.1.1357 (7727) used greatest stack depth: 6376 bytes left [ 125.275284][ T7652] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.291909][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.299237][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.328787][ T7652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.340023][ T7652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.347187][ T7794] loop4: detected capacity change from 0 to 128 [ 125.353751][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.363758][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.387499][ T7797] loop1: detected capacity change from 0 to 1024 [ 125.410771][ T7797] EXT4-fs (loop1): unsupported inode size: 4097 [ 125.417129][ T7797] EXT4-fs (loop1): blocksize: 1024 [ 125.425531][ T7794] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.449306][ T7804] netlink: 'syz.3.1382': attribute type 29 has an invalid length. [ 125.453269][ T7783] lo speed is unknown, defaulting to 1000 [ 125.514933][ T7813] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 125.517738][ T7652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.565431][ T7821] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.717009][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 125.726067][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1390'. [ 125.745417][ T52] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.756872][ T52] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.779418][ T52] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.802480][ T52] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.818186][ T7652] veth0_vlan: entered promiscuous mode [ 125.861577][ T7652] veth1_vlan: entered promiscuous mode [ 125.884166][ T7652] veth0_macvtap: entered promiscuous mode [ 125.892186][ T7652] veth1_macvtap: entered promiscuous mode [ 125.916244][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.928413][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.938128][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.952728][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.974615][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.986496][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.194138][ T7855] loop4: detected capacity change from 0 to 32768 [ 126.228622][ T7855] loop4: p1 p3 < > [ 126.247197][ T7881] loop3: detected capacity change from 0 to 512 [ 126.262976][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 126.262996][ T29] audit: type=1326 audit(5281603979.333:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7883 comm="syz.6.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 126.288389][ T7884] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 126.292860][ T29] audit: type=1326 audit(5281603979.333:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7883 comm="syz.6.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 126.303650][ T7881] EXT4-fs: Ignoring removed nobh option [ 126.325179][ T29] audit: type=1326 audit(5281603979.333:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7883 comm="syz.6.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 126.325304][ T29] audit: type=1326 audit(5281603979.333:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7883 comm="syz.6.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 126.325378][ T29] audit: type=1326 audit(5281603979.333:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7883 comm="syz.6.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 126.325471][ T29] audit: type=1326 audit(5281603979.333:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7883 comm="syz.6.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 126.325500][ T29] audit: type=1326 audit(5281603979.333:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7883 comm="syz.6.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 126.325534][ T29] audit: type=1326 audit(5281603979.333:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7883 comm="syz.6.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 126.325565][ T29] audit: type=1326 audit(5281603979.333:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7883 comm="syz.6.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 126.325701][ T29] audit: type=1326 audit(5281603979.333:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7883 comm="syz.6.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 126.542200][ T7892] loop6: detected capacity change from 0 to 128 [ 126.556904][ T7892] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.591890][ T7881] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.1402: corrupted inode contents [ 126.626113][ T7881] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #3: comm syz.3.1402: mark_inode_dirty error [ 126.643771][ T7881] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.1402: corrupted inode contents [ 126.658134][ T7881] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1402: mark_inode_dirty error [ 126.680183][ T7881] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1402: Failed to acquire dquot type 0 [ 126.698921][ T7902] loop6: detected capacity change from 0 to 512 [ 126.705405][ T7881] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.1402: corrupted inode contents [ 126.717937][ T7902] ext4: Unknown parameter 'bsddf"data' [ 126.727084][ T7881] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #16: comm syz.3.1402: mark_inode_dirty error [ 126.755852][ T7881] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.1402: corrupted inode contents [ 126.774550][ T7881] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1402: mark_inode_dirty error [ 126.804494][ T7881] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.1402: corrupted inode contents [ 126.818391][ T7881] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 126.829473][ T7928] xt_hashlimit: max too large, truncated to 1048576 [ 126.839438][ T7881] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.1402: corrupted inode contents [ 126.863516][ T7881] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.1402: mark_inode_dirty error [ 126.875843][ T7881] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 126.907378][ T7881] EXT4-fs (loop3): 1 truncate cleaned up [ 126.913593][ T7881] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.034613][ T7958] netlink: 'syz.4.1432': attribute type 10 has an invalid length. [ 127.097188][ T7968] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1435'. [ 127.106285][ T7968] netem: unknown loss type 12 [ 127.111167][ T7968] netem: change failed [ 127.162819][ T7971] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 127.223419][ T7971] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 127.231255][ T7971] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1436'. [ 127.248958][ T7975] netlink: 'syz.6.1438': attribute type 11 has an invalid length. [ 127.266939][ T7975] netlink: 'syz.6.1438': attribute type 10 has an invalid length. [ 127.280602][ T7975] team0: Device dummy0 is up. Set it down before adding it as a team port [ 127.393839][ T7987] loop1: detected capacity change from 0 to 512 [ 127.403162][ T7987] EXT4-fs: Ignoring removed bh option [ 127.408715][ T7987] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.416898][ T7987] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 127.437037][ T7987] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 127.445616][ T7987] EXT4-fs (loop1): orphan cleanup on readonly fs [ 127.452999][ T7987] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1444: Failed to acquire dquot type 1 [ 127.476409][ T7994] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1445'. [ 127.533078][ T7987] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1444: Invalid block bitmap block 0 in block_group 0 [ 127.548969][ T7987] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1444: Invalid block bitmap block 0 in block_group 0 [ 127.563223][ T7987] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1444: Invalid block bitmap block 0 in block_group 0 [ 127.581244][ T7987] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1444: Failed to acquire dquot type 1 [ 127.593930][ T7987] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1444: Failed to acquire dquot type 1 [ 127.614142][ T7987] EXT4-fs (loop1): 1 orphan inode deleted [ 127.681030][ T8007] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 127.710991][ T8007] loop1: detected capacity change from 0 to 512 [ 127.732500][ T8007] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.744991][ T8016] loop6: detected capacity change from 0 to 512 [ 127.753680][ T8016] EXT4-fs: Ignoring removed i_version option [ 127.759789][ T8016] EXT4-fs: Ignoring removed bh option [ 127.771485][ T8007] EXT4-fs (loop1): 1 truncate cleaned up [ 127.853916][ T8007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8007 comm=syz.1.1452 [ 127.916702][ T8016] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.952228][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 127.961202][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1457'. [ 128.028972][ T8023] SELinux: failed to load policy [ 128.042430][ T8026] loop3: detected capacity change from 0 to 512 [ 128.054622][ T8026] EXT4-fs (loop3): orphan cleanup on readonly fs [ 128.061460][ T8026] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1456: bad orphan inode 13 [ 128.071787][ T8026] ext4_test_bit(bit=12, block=18) = 1 [ 128.077291][ T8026] is_bad_inode(inode)=0 [ 128.081494][ T8026] NEXT_ORPHAN(inode)=2130706432 [ 128.083929][ T8031] loop6: detected capacity change from 0 to 512 [ 128.086482][ T8026] max_ino=32 [ 128.086492][ T8026] i_nlink=1 [ 128.113060][ T8031] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 128.115981][ T8023] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1456: deleted inode referenced: 12 [ 128.139030][ T8023] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1456: deleted inode referenced: 12 [ 128.154311][ T8031] EXT4-fs (loop6): 1 truncate cleaned up [ 128.161042][ T8023] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1456: deleted inode referenced: 12 [ 128.173171][ T8038] vlan4: entered promiscuous mode [ 128.178279][ T8038] geneve1: entered promiscuous mode [ 128.183667][ T8038] vlan4: entered allmulticast mode [ 128.188874][ T8038] geneve1: entered allmulticast mode [ 128.198121][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1462'. [ 128.207334][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1462'. [ 128.312139][ T8047] loop1: detected capacity change from 0 to 2048 [ 128.346274][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1470'. [ 128.435800][ T8073] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 128.450914][ T8073] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1434 with error 28 [ 128.464117][ T8073] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.464117][ T8073] [ 128.473877][ T8073] EXT4-fs (loop1): Total free blocks count 0 [ 128.479982][ T8073] EXT4-fs (loop1): Free/Dirty block details [ 128.486654][ T8073] EXT4-fs (loop1): free_blocks=66060288 [ 128.492230][ T8073] EXT4-fs (loop1): dirty_blocks=1920 [ 128.497609][ T8073] EXT4-fs (loop1): Block reservation details [ 128.503620][ T8073] EXT4-fs (loop1): i_reserved_data_blocks=126 [ 128.509177][ T8077] loop4: detected capacity change from 0 to 164 [ 128.588458][ T8081] loop4: detected capacity change from 0 to 512 [ 128.595867][ T8081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.613220][ T8081] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.727444][ T8087] loop3: detected capacity change from 0 to 1024 [ 128.746317][ T8087] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.768129][ T8087] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.1480: lblock 3 mapped to illegal pblock 3 (length 3) [ 128.783788][ T8087] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 128.796150][ T8087] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.796150][ T8087] [ 128.824678][ T8087] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1480: lblock 3 mapped to illegal pblock 3 (length 1) [ 128.840531][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1483'. [ 128.886155][ T8087] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.1480: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 128.906845][ T8087] EXT4-fs error (device loop3) in ext4_setattr:6042: Corrupt filesystem [ 129.030297][ T8129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=8129 comm=syz.4.1495 [ 129.042968][ T8129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8129 comm=syz.4.1495 [ 129.075657][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1434 with max blocks 2048 with error 28 [ 129.089229][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.089229][ T37] [ 129.149540][ T8137] loop3: detected capacity change from 0 to 512 [ 129.263654][ T8146] lo speed is unknown, defaulting to 1000 [ 129.313350][ T8154] netlink: 'syz.1.1504': attribute type 1 has an invalid length. [ 129.321186][ T8154] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1504'. [ 129.360166][ T8156] xt_bpf: check failed: parse error [ 129.454758][ T8167] No such timeout policy "syz1" [ 129.512122][ T8176] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 129.576849][ T8183] netlink: 'syz.4.1516': attribute type 4 has an invalid length. [ 129.610932][ T8183] netlink: 'syz.4.1516': attribute type 4 has an invalid length. [ 129.813250][ T8204] vlan5: entered allmulticast mode [ 129.818454][ T8204] erspan0: entered allmulticast mode [ 129.916374][ T3415] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 129.923831][ T3415] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 129.931296][ T3415] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 129.938767][ T3415] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 129.946267][ T3415] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 129.953712][ T3415] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 129.961243][ T3415] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 129.968710][ T3415] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 129.976327][ T3415] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 129.983842][ T3415] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 130.000712][ T3415] hid-generic 0003:0003:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 130.014947][ T8216] loop6: detected capacity change from 0 to 2048 [ 130.052583][ T8210] lo speed is unknown, defaulting to 1000 [ 130.167246][ T8220] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 130.183342][ T8220] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1298 with error 28 [ 130.195843][ T8220] EXT4-fs (loop6): This should not happen!! Data will be lost [ 130.195843][ T8220] [ 130.205562][ T8220] EXT4-fs (loop6): Total free blocks count 0 [ 130.212297][ T8220] EXT4-fs (loop6): Free/Dirty block details [ 130.218234][ T8220] EXT4-fs (loop6): free_blocks=66060288 [ 130.223857][ T8220] EXT4-fs (loop6): dirty_blocks=2048 [ 130.229206][ T8220] EXT4-fs (loop6): Block reservation details [ 130.235215][ T8220] EXT4-fs (loop6): i_reserved_data_blocks=150 [ 130.296640][ T8224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1526'. [ 130.427051][ T8233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1529'. [ 130.499819][ T8242] xt_bpf: check failed: parse error [ 130.561622][ T8243] loop3: detected capacity change from 0 to 512 [ 130.585277][ T8243] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.625766][ T8251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8251 comm=syz.1.1536 [ 130.817788][ T355] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1298 with max blocks 2048 with error 28 [ 130.830763][ T355] EXT4-fs (loop6): This should not happen!! Data will be lost [ 130.830763][ T355] [ 131.119055][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 131.119071][ T29] audit: type=1326 audit(5281603984.435:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.6.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 131.200381][ T29] audit: type=1326 audit(5281603984.435:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.6.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 131.224602][ T29] audit: type=1326 audit(5281603984.435:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.6.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 131.248802][ T29] audit: type=1326 audit(5281603984.435:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.6.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 131.272425][ T29] audit: type=1326 audit(5281603984.435:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.6.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 131.296642][ T29] audit: type=1326 audit(5281603984.435:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.6.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 131.320167][ T29] audit: type=1326 audit(5281603984.435:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.6.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 131.344369][ T29] audit: type=1326 audit(5281603984.435:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.6.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 131.367853][ T29] audit: type=1326 audit(5281603984.435:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.6.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 131.392020][ T29] audit: type=1326 audit(5281603984.435:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.6.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 131.474481][ T8313] loop6: detected capacity change from 0 to 256 [ 131.483863][ T8313] vfat filesystem being mounted at /31/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 131.616490][ T8327] loop4: detected capacity change from 0 to 2048 [ 131.675691][ T8327] Alternate GPT is invalid, using primary GPT. [ 131.682044][ T8327] loop4: p1 p2 p3 [ 132.533470][ T8387] netem: incorrect gi model size [ 132.711638][ T8420] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.784028][ T8423] dummy0: entered promiscuous mode [ 132.799772][ T8423] dummy0: left promiscuous mode [ 132.882172][ T8428] __nla_validate_parse: 3 callbacks suppressed [ 132.882190][ T8428] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1592'. [ 132.909137][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1592'. [ 133.037215][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1600'. [ 133.046337][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1600'. [ 133.086356][ T8448] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1601'. [ 133.132508][ T8455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.139807][ T8455] IPv6: NLM_F_CREATE should be set when creating new route [ 133.147091][ T8455] IPv6: NLM_F_CREATE should be set when creating new route [ 133.165756][ T8455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.192904][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1600'. [ 133.202031][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1600'. [ 133.207815][ T8459] loop4: detected capacity change from 0 to 512 [ 133.221300][ T8459] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 133.236147][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1600'. [ 133.245342][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1600'. [ 133.572702][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.606751][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.661935][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'. [ 133.727058][ T8474] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.774341][ T8484] syzkaller0: entered promiscuous mode [ 133.779864][ T8484] syzkaller0: entered allmulticast mode [ 133.846940][ T8484] lo speed is unknown, defaulting to 1000 [ 133.979621][ T8494] lo speed is unknown, defaulting to 1000 [ 134.014606][ T8496] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 134.868091][ T8527] loop3: detected capacity change from 0 to 1024 [ 134.909091][ T8527] EXT4-fs mount: 38 callbacks suppressed [ 134.909112][ T8527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.004571][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.089584][ T8555] loop6: detected capacity change from 0 to 1024 [ 135.115937][ T8555] EXT4-fs: Ignoring removed bh option [ 135.135774][ T8559] loop1: detected capacity change from 0 to 512 [ 135.144922][ T8559] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 135.164370][ T8555] EXT4-fs: inline encryption not supported [ 135.172660][ T8555] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.206939][ T8559] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.224521][ T8559] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.1633: corrupted inode contents [ 135.259125][ T8555] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 135.268721][ T8559] EXT4-fs (loop1): Remounting filesystem read-only [ 135.277275][ T8559] EXT4-fs (loop1): 1 truncate cleaned up [ 135.286922][ T8403] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 135.297611][ T8403] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 135.313373][ T8403] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 135.323938][ T8555] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.1638: lblock 2 mapped to illegal pblock 2 (length 1) [ 135.339348][ T8559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.359441][ T8555] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.1638: lblock 0 mapped to illegal pblock 48 (length 1) [ 135.379865][ T8555] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1638: Failed to acquire dquot type 0 [ 135.393115][ T8555] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 135.396500][ T8571] macsec1: entered promiscuous mode [ 135.403483][ T8555] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.1638: mark_inode_dirty error [ 135.407828][ T8571] bridge0: entered promiscuous mode [ 135.425865][ T8571] bridge0: port 3(macsec1) entered blocking state [ 135.428042][ T8555] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 135.432445][ T8571] bridge0: port 3(macsec1) entered disabled state [ 135.442625][ T8555] EXT4-fs (loop6): 1 orphan inode deleted [ 135.450407][ T8571] macsec1: entered allmulticast mode [ 135.456078][ T8555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.461028][ T8571] bridge0: entered allmulticast mode [ 135.474237][ T57] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 135.494817][ T57] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 135.508055][ T8571] macsec1: left allmulticast mode [ 135.513156][ T8571] bridge0: left allmulticast mode [ 135.514007][ T8555] x_tables: unsorted underflow at hook 3 [ 135.524312][ T8571] bridge0: left promiscuous mode [ 135.533093][ T8578] veth0: entered promiscuous mode [ 135.560125][ T8578] veth0 (unregistering): left promiscuous mode [ 135.567901][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.577350][ T7652] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 135.602337][ T7652] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 135.613164][ T7652] EXT4-fs error (device loop6): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 135.776731][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.852829][ T8625] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 135.888111][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 135.888144][ T29] audit: type=1326 audit(5281603989.442:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.6.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcaf8ac5d67 code=0x7ffc0000 [ 135.919703][ T29] audit: type=1326 audit(5281603989.474:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.6.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcaf8a6af79 code=0x7ffc0000 [ 135.943234][ T29] audit: type=1326 audit(5281603989.474:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.6.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcaf8ac5d67 code=0x7ffc0000 [ 135.966840][ T29] audit: type=1326 audit(5281603989.474:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.6.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcaf8a6af79 code=0x7ffc0000 [ 135.990969][ T29] audit: type=1400 audit(5281603989.474:4534): avc: denied { rmdir } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=1616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 136.017289][ T29] audit: type=1326 audit(5281603989.474:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.6.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 136.041475][ T29] audit: type=1326 audit(5281603989.526:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.6.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcaf8ac5d67 code=0x7ffc0000 [ 136.064852][ T29] audit: type=1326 audit(5281603989.526:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.6.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcaf8a6af79 code=0x7ffc0000 [ 136.088826][ T29] audit: type=1326 audit(5281603989.526:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.6.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 136.112244][ T29] audit: type=1326 audit(5281603989.526:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.6.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcaf8ac5d67 code=0x7ffc0000 [ 136.329046][ T8652] loop4: detected capacity change from 0 to 1024 [ 136.355165][ T8652] EXT4-fs: Ignoring removed orlov option [ 136.360977][ T8652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.386484][ T8652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.408170][ T8669] 9pnet_fd: Insufficient options for proto=fd [ 136.429406][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.647635][ T8695] wg2: entered promiscuous mode [ 136.652627][ T8695] wg2: entered allmulticast mode [ 136.765723][ T8695] loop6: detected capacity change from 0 to 512 [ 136.774808][ T8695] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 136.783462][ T8695] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.1689: invalid block [ 136.799208][ T8695] EXT4-fs (loop6): Remounting filesystem read-only [ 136.806550][ T8695] EXT4-fs (loop6): 1 truncate cleaned up [ 136.813520][ T8695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.210512][ T8740] loop3: detected capacity change from 0 to 128 [ 137.221742][ T8740] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 137.260749][ T8740] vfat filesystem being mounted at /347/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 137.291289][ T8740] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 137.299489][ T8740] FAT-fs (loop3): Filesystem has been set read-only [ 137.306223][ T8740] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 137.437390][ T8759] loop3: detected capacity change from 0 to 1024 [ 137.448686][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.453678][ T8751] infiniband syz!: set down [ 137.462342][ T8751] infiniband syz!: added team_slave_0 [ 137.474233][ T8751] RDS/IB: syz!: added [ 137.488205][ T8759] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 137.499190][ T8759] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 137.518282][ T8759] JBD2: no valid journal superblock found [ 137.524071][ T8759] EXT4-fs (loop3): Could not load journal inode [ 137.642364][ T8780] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 137.840764][ T8784] __nla_validate_parse: 19 callbacks suppressed [ 137.840794][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1717'. [ 137.865304][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.001258][ T8787] lo speed is unknown, defaulting to 1000 [ 138.005981][ T8797] loop6: detected capacity change from 0 to 256 [ 138.031175][ T8797] msdos: Bad value for 'gid' [ 138.036149][ T8797] msdos: Bad value for 'gid' [ 138.723327][ T8822] netlink: 'syz.3.1731': attribute type 13 has an invalid length. [ 138.734897][ T8822] bridge0: left allmulticast mode [ 138.951074][ T8826] loop1: detected capacity change from 0 to 1024 [ 138.965325][ T8826] EXT4-fs: Ignoring removed orlov option [ 138.976161][ T8837] loop4: detected capacity change from 0 to 512 [ 138.998752][ T8837] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.013559][ T8834] loop6: detected capacity change from 0 to 4096 [ 139.035835][ T8834] ext4: Unknown parameter 'uid' [ 139.051800][ T8837] EXT4-fs (loop4): 1 truncate cleaned up [ 139.057956][ T8837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.070825][ T8834] IPv6: addrconf: prefix option has invalid lifetime [ 139.071301][ T8826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.085181][ T8845] loop3: detected capacity change from 0 to 2048 [ 139.109108][ T8834] netlink: 'syz.6.1737': attribute type 11 has an invalid length. [ 139.144236][ T8845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.245446][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.270665][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.286539][ T8855] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 139.306750][ T8853] xt_CT: No such helper "pptp" [ 139.326276][ T8855] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 338 with error 28 [ 139.338765][ T8855] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.338765][ T8855] [ 139.349376][ T8855] EXT4-fs (loop3): Total free blocks count 0 [ 139.355634][ T8855] EXT4-fs (loop3): Free/Dirty block details [ 139.361581][ T8855] EXT4-fs (loop3): free_blocks=66060288 [ 139.367156][ T8855] EXT4-fs (loop3): dirty_blocks=352 [ 139.372363][ T8855] EXT4-fs (loop3): Block reservation details [ 139.378382][ T8855] EXT4-fs (loop3): i_reserved_data_blocks=22 [ 139.443129][ T8859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1744'. [ 139.752633][ T8864] lo speed is unknown, defaulting to 1000 [ 139.768112][ T8871] wg2: left promiscuous mode [ 139.772777][ T8871] wg2: left allmulticast mode [ 139.901386][ T8403] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 338 with max blocks 2048 with error 28 [ 139.915317][ T8881] wg2: entered promiscuous mode [ 139.920303][ T8881] wg2: entered allmulticast mode [ 139.993451][ T8889] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 140.003904][ T8887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1755'. [ 140.150928][ T8902] netlink: 'syz.4.1760': attribute type 10 has an invalid length. [ 140.306344][ T8906] lo speed is unknown, defaulting to 1000 [ 140.387662][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 140.419134][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'. [ 140.472399][ T8924] lo speed is unknown, defaulting to 1000 [ 140.615503][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1771'. [ 141.084096][ T29] kauditd_printk_skb: 643 callbacks suppressed [ 141.084115][ T29] audit: type=1326 audit(5281603994.896:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 141.144492][ T29] audit: type=1326 audit(5281603994.938:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 141.168758][ T29] audit: type=1326 audit(5281603994.938:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 141.192236][ T29] audit: type=1326 audit(5281603994.938:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 141.216482][ T29] audit: type=1326 audit(5281603994.938:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 141.239947][ T29] audit: type=1326 audit(5281603994.938:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 141.264108][ T29] audit: type=1326 audit(5281603994.948:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 141.287610][ T29] audit: type=1326 audit(5281603994.948:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 141.311890][ T29] audit: type=1326 audit(5281603994.948:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 141.335313][ T29] audit: type=1326 audit(5281603994.948:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf8aceec9 code=0x7ffc0000 [ 141.437345][ T8959] tipc: Started in network mode [ 141.443176][ T8959] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 141.452858][ T8959] tipc: Enabled bearer , priority 10 [ 141.564976][ T8974] set match dimension is over the limit! [ 141.600838][ T8978] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8978 comm=syz.1.1787 [ 141.667107][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 142.541095][ T10] tipc: Node number set to 4269801488 [ 142.725209][ T9029] SELinux: Context system_u:object_r:usr_t:s0 is not valid (left unmapped). [ 142.811498][ T9036] lo speed is unknown, defaulting to 1000 [ 142.911619][ T9047] vlan0: entered allmulticast mode [ 142.917066][ T9047] bridge_slave_0: entered allmulticast mode [ 143.158868][ T9060] loop6: detected capacity change from 0 to 512 [ 143.166019][ T9060] EXT4-fs: Mount option(s) incompatible with ext3 [ 143.231432][ T9074] loop3: detected capacity change from 0 to 512 [ 143.242781][ T9074] ------------[ cut here ]------------ [ 143.248318][ T9074] EA inode 11 i_nlink=2 [ 143.248559][ T9074] WARNING: CPU: 0 PID: 9074 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 143.254233][ T9078] Ÿë: port 1(veth0_to_team) entered blocking state [ 143.263110][ T9074] Modules linked in: [ 143.263142][ T9074] CPU: 0 UID: 0 PID: 9074 Comm: wÞ££‘ Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.269784][ T9078] Ÿë: port 1(veth0_to_team) entered disabled state [ 143.270344][ T9078] veth0_to_team: entered allmulticast mode [ 143.271187][ T9078] veth0_to_team: entered promiscuous mode [ 143.274362][ T9074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.274382][ T9074] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 143.319421][ T9074] Code: 90 49 8d 7e 40 e8 66 01 b9 ff 4d 8b 6e 40 4c 89 e7 e8 7a fc b8 ff 41 8b 56 48 48 c7 c7 b2 4d 55 86 4c 89 ee e8 c7 08 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 77 b0 03 0f 1f 84 00 00 00 00 00 [ 143.339704][ T9074] RSP: 0018:ffffc90014b535a0 EFLAGS: 00010246 [ 143.345783][ T9074] RAX: 0b89b3a162160600 RBX: ffff8881194b6468 RCX: 0000000000080000 [ 143.353782][ T9074] RDX: ffffc900041c9000 RSI: 0000000000004a3c RDI: 0000000000004a3d [ 143.361853][ T9074] RBP: 0000000000000002 R08: 0001c90014b53427 R09: 0000000000000000 [ 143.370516][ T9074] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881194b6418 [ 143.378593][ T9074] R13: 000000000000000b R14: ffff8881194b63d0 R15: 0000000000000001 [ 143.386662][ T9074] FS: 00007f60e34d76c0(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 143.396257][ T9074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.402870][ T9074] CR2: 00007fcaf98556c0 CR3: 0000000109a78000 CR4: 00000000003506f0 [ 143.410877][ T9074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 143.418933][ T9074] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000602 [ 143.427699][ T9074] Call Trace: [ 143.431064][ T9074] [ 143.434043][ T9074] ext4_xattr_set_entry+0x77f/0x1020 [ 143.439448][ T9074] ext4_xattr_ibody_set+0x184/0x3c0 [ 143.444753][ T9074] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 143.451287][ T9074] __ext4_expand_extra_isize+0x246/0x280 [ 143.456981][ T9074] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 143.462541][ T9074] ext4_evict_inode+0x80e/0xd90 [ 143.467432][ T9074] ? __pfx_ext4_evict_inode+0x10/0x10 [ 143.472895][ T9074] evict+0x2e3/0x550 [ 143.476816][ T9074] ? __dquot_initialize+0x146/0x7c0 [ 143.482652][ T9074] iput+0x4ed/0x650 [ 143.486506][ T9074] ext4_process_orphan+0x1a9/0x1c0 [ 143.491656][ T9074] ext4_orphan_cleanup+0x6a8/0xa00 [ 143.496824][ T9074] ext4_fill_super+0x3483/0x3810 [ 143.501829][ T9074] ? snprintf+0x86/0xb0 [ 143.506070][ T9074] ? set_blocksize+0x1a8/0x310 [ 143.511459][ T9074] ? sb_set_blocksize+0xe3/0x100 [ 143.516407][ T9074] ? setup_bdev_super+0x30e/0x370 [ 143.521463][ T9074] ? __pfx_ext4_fill_super+0x10/0x10 [ 143.526862][ T9074] get_tree_bdev_flags+0x291/0x300 [ 143.532005][ T9074] ? __pfx_ext4_fill_super+0x10/0x10 [ 143.537898][ T9074] get_tree_bdev+0x1f/0x30 [ 143.542335][ T9074] ext4_get_tree+0x1c/0x30 [ 143.546830][ T9074] vfs_get_tree+0x57/0x1d0 [ 143.551281][ T9074] do_new_mount+0x24d/0x660 [ 143.555946][ T9074] path_mount+0x4a5/0xb70 [ 143.560376][ T9074] ? user_path_at+0x109/0x130 [ 143.565848][ T9074] __se_sys_mount+0x28c/0x2e0 [ 143.570603][ T9074] __x64_sys_mount+0x67/0x80 [ 143.575224][ T9074] x64_sys_call+0x2b51/0x3000 [ 143.579915][ T9074] do_syscall_64+0xd2/0x200 [ 143.584545][ T9074] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.590681][ T9074] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.597021][ T9074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.602926][ T9074] RIP: 0033:0x7f60e4a7066a [ 143.607383][ T9074] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.627630][ T9074] RSP: 002b:00007f60e34d6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 143.636088][ T9074] RAX: ffffffffffffffda RBX: 00007f60e34d6ef0 RCX: 00007f60e4a7066a [ 143.644126][ T9074] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f60e34d6eb0 [ 143.652776][ T9074] RBP: 0000200000000180 R08: 00007f60e34d6ef0 R09: 0000000000800718 [ 143.660803][ T9074] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 143.668787][ T9074] R13: 00007f60e34d6eb0 R14: 0000000000000473 R15: 0000200000000680 [ 143.676809][ T9074] [ 143.680442][ T9074] ---[ end trace 0000000000000000 ]--- [ 143.686278][ T9074] EXT4-fs (loop3): 1 orphan inode deleted [ 143.693179][ T9074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.729646][ T9074] xt_socket: unknown flags 0x50 [ 143.759157][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 143.776244][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.835267][ T9098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1832'. [ 143.940076][ T9106] lo speed is unknown, defaulting to 1000 [ 144.040512][ T9118] syz.3.1838: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 144.055143][ T9118] CPU: 1 UID: 0 PID: 9118 Comm: syz.3.1838 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.055220][ T9118] Tainted: [W]=WARN [ 144.055229][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.055247][ T9118] Call Trace: [ 144.055256][ T9118] [ 144.055266][ T9118] __dump_stack+0x1d/0x30 [ 144.055290][ T9118] dump_stack_lvl+0xe8/0x140 [ 144.055315][ T9118] dump_stack+0x15/0x1b [ 144.055386][ T9118] warn_alloc+0x12b/0x1a0 [ 144.055420][ T9118] ? __rcu_read_unlock+0x4f/0x70 [ 144.055448][ T9118] __vmalloc_node_range_noprof+0x9d/0xed0 [ 144.055489][ T9118] ? __futex_wait+0x1fa/0x260 [ 144.055530][ T9118] ? __pfx_futex_wake_mark+0x10/0x10 [ 144.055612][ T9118] ? __rcu_read_unlock+0x4f/0x70 [ 144.055639][ T9118] ? avc_has_perm_noaudit+0x1b1/0x200 [ 144.055684][ T9118] ? should_fail_ex+0x30/0x280 [ 144.055807][ T9118] ? xskq_create+0x36/0xe0 [ 144.055833][ T9118] vmalloc_user_noprof+0x7d/0xb0 [ 144.055890][ T9118] ? xskq_create+0x80/0xe0 [ 144.055914][ T9118] xskq_create+0x80/0xe0 [ 144.055938][ T9118] xsk_init_queue+0x95/0xf0 [ 144.056013][ T9118] xsk_setsockopt+0x477/0x640 [ 144.056036][ T9118] ? __pfx_xsk_setsockopt+0x10/0x10 [ 144.056099][ T9118] __sys_setsockopt+0x184/0x200 [ 144.056126][ T9118] __x64_sys_setsockopt+0x64/0x80 [ 144.056160][ T9118] x64_sys_call+0x20ec/0x3000 [ 144.056222][ T9118] do_syscall_64+0xd2/0x200 [ 144.056244][ T9118] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.056268][ T9118] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.056288][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.056308][ T9118] RIP: 0033:0x7f60e4a6eec9 [ 144.056358][ T9118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.056374][ T9118] RSP: 002b:00007f60e34d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 144.056441][ T9118] RAX: ffffffffffffffda RBX: 00007f60e4cc5fa0 RCX: 00007f60e4a6eec9 [ 144.056452][ T9118] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 144.056463][ T9118] RBP: 00007f60e4af1f91 R08: 0000000000000004 R09: 0000000000000000 [ 144.056538][ T9118] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 144.056549][ T9118] R13: 00007f60e4cc6038 R14: 00007f60e4cc5fa0 R15: 00007fffd904c428 [ 144.056571][ T9118] [ 144.056587][ T9118] Mem-Info: [ 144.116685][ T9121] loop3: detected capacity change from 0 to 512 [ 144.121024][ T9118] active_anon:22136 inactive_anon:0 isolated_anon:0 [ 144.121024][ T9118] active_file:15336 inactive_file:9339 isolated_file:0 [ 144.121024][ T9118] unevictable:0 dirty:293 writeback:0 [ 144.121024][ T9118] slab_reclaimable:3576 slab_unreclaimable:138694 [ 144.121024][ T9118] mapped:29258 shmem:16725 pagetables:2137 [ 144.121024][ T9118] sec_pagetables:0 bounce:0 [ 144.121024][ T9118] kernel_misc_reclaimable:0 [ 144.121024][ T9118] free:1717801 free_pcp:17821 free_cma:0 [ 144.129481][ T9121] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.1838: EA inode hash validation failed [ 144.131305][ T9118] Node 0 active_anon:88544kB inactive_anon:0kB active_file:61344kB inactive_file:37356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117032kB dirty:1172kB writeback:0kB shmem:66900kB kernel_stack:4048kB pagetables:8548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 144.138047][ T9121] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.1838: corrupted inode contents [ 144.141584][ T9118] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.146762][ T9121] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #15: comm syz.3.1838: mark_inode_dirty error [ 144.151078][ T9118] lowmem_reserve[]: 0 2883 7862 7862 [ 144.151119][ T9118] Node 0 DMA32 free:2949056kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 144.156385][ T9121] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.1838: corrupted inode contents [ 144.159871][ T9118] lowmem_reserve[]: [ 144.164681][ T9121] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.1838: mark_inode_dirty error [ 144.169083][ T9118] 0 0 4978 4978 [ 144.169117][ T9118] Node 0 Normal free:3906788kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:88544kB inactive_anon:0kB active_file:61344kB inactive_file:37356kB unevictable:0kB writepending:1172kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:67628kB local_pcp:42036kB free_cma:0kB [ 144.169322][ T9118] lowmem_reserve[]: 0 0 0 0 [ 144.169359][ T9118] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 144.169574][ T9118] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 4*16kB (M) 1*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) [ 144.175489][ T9121] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.1838: mark inode dirty (error -117) [ 144.179886][ T9118] 3*2048kB (M) 717*4096kB (M) [ 144.185479][ T9121] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 144.189726][ T9118] = 2949056kB [ 144.189739][ T9118] Node 0 Normal: 247*4kB [ 144.195579][ T9121] EXT4-fs (loop3): 1 orphan inode deleted [ 144.200348][ T9118] (ME) 121*8kB (UME) 254*16kB [ 144.206705][ T9121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.212058][ T9118] (UME) 517*32kB [ 144.584036][ T9124] loop4: detected capacity change from 0 to 512 [ 144.591853][ T9118] (UME) [ 144.598558][ T9124] EXT4-fs (loop4): 1 truncate cleaned up [ 144.599441][ T9118] 321*64kB (UME) 91*128kB [ 144.606237][ T9124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.610369][ T9118] (UME) 91*256kB (UME) 120*512kB (UME) 109*1024kB (UME) 57*2048kB (UME) 864*4096kB (UM) = 3906788kB [ 144.668056][ T9118] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 144.677378][ T9118] 41453 total pagecache pages [ 144.682073][ T9118] 9 pages in swap cache [ 144.686303][ T9118] Free swap = 124428kB [ 144.690473][ T9118] Total swap = 124996kB [ 144.694622][ T9118] 2097051 pages RAM [ 144.698454][ T9118] 0 pages HighMem/MovableOnly [ 144.703195][ T9118] 80479 pages reserved [ 144.830055][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.868380][ T9138] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1845'. [ 144.877344][ T9136] loop3: detected capacity change from 0 to 2048 [ 145.043015][ T9136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.631084][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.657214][ T9156] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.675975][ T9157] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 145.724387][ T9138] netlink: 'syz.2.1845': attribute type 7 has an invalid length. [ 145.744175][ T9157] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 332 with error 28 [ 145.757318][ T9157] EXT4-fs (loop3): This should not happen!! Data will be lost [ 145.757318][ T9157] [ 145.766992][ T9157] EXT4-fs (loop3): Total free blocks count 0 [ 145.773135][ T9157] EXT4-fs (loop3): Free/Dirty block details [ 145.779107][ T9157] EXT4-fs (loop3): free_blocks=66060288 [ 145.785500][ T9157] EXT4-fs (loop3): dirty_blocks=336 [ 145.790814][ T9157] EXT4-fs (loop3): Block reservation details [ 145.796895][ T9157] EXT4-fs (loop3): i_reserved_data_blocks=21 [ 145.854899][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 145.854917][ T29] audit: type=1326 audit(5281603999.903:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9163 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 145.944650][ T8403] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 332 with max blocks 374 with error 28 [ 145.964378][ T29] audit: type=1326 audit(5281604000.019:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 145.987438][ T29] audit: type=1326 audit(5281604000.019:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 146.010617][ T29] audit: type=1326 audit(5281604000.019:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 146.033603][ T29] audit: type=1326 audit(5281604000.019:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 146.057133][ T29] audit: type=1326 audit(5281604000.019:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 146.060560][ T9171] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 146.080096][ T29] audit: type=1326 audit(5281604000.019:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 146.080134][ T29] audit: type=1326 audit(5281604000.019:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 146.080201][ T29] audit: type=1326 audit(5281604000.019:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 146.232717][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1861'. [ 146.283418][ T29] audit: type=1326 audit(5281604000.323:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9190 comm="syz.1.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068b9aeec9 code=0x7ffc0000 [ 146.309370][ T9196] netlink: 'syz.2.1864': attribute type 10 has an invalid length. [ 146.316477][ T9200] SELinux: Context  is not valid (left unmapped). [ 146.337732][ T9199] loop1: detected capacity change from 0 to 512 [ 146.344330][ T8406] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.354783][ T9196] netlink: 'syz.2.1864': attribute type 10 has an invalid length. [ 146.364526][ T8406] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.364780][ T9199] loop1: detected capacity change from 0 to 512 [ 146.380724][ T9196] team0: Port device dummy0 removed [ 146.391582][ T9196] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 146.400609][ T8406] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.415392][ T9199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.432401][ T9199] ext4 filesystem being mounted at /367/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.432615][ T8406] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.515364][ T9217] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1868'. [ 146.530704][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.541737][ T9211] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.552169][ T9211] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.595576][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1873'. [ 146.626751][ T9211] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.637214][ T9211] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.681042][ T9223] netlink: 'syz.3.1873': attribute type 4 has an invalid length. [ 146.696471][ T9211] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.706871][ T9211] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.874792][ T9211] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.885189][ T9211] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.961778][ T8406] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.970281][ T8406] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.987989][ T9249] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 147.002833][ T8406] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.011167][ T8406] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.032189][ T9249] SELinux: failed to load policy [ 147.055340][ T8406] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.063703][ T8406] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.121199][ T8406] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.130138][ T8406] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.145880][ T9254] 9pnet: Could not find request transport: fd, priority 10 [ 152.497864][ T9498] loop4: detected capacity change from 0 to 2048 [ 152.560328][ T9509] loop6: detected capacity change from 0 to 2048 [ 152.648301][ T9509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.660972][ T9498] EXT4-fs (loop4): failed to initialize system zone (-117) [ 152.661012][ T9498] EXT4-fs (loop4): mount failed [ 152.664275][ T9508] netlink: 'syz.3.1964': attribute type 11 has an invalid length. [ 152.688194][ T9508] netlink: 'syz.3.1964': attribute type 10 has an invalid length. [ 152.700592][ T9508] team0: Port device dummy0 added [ 152.764107][ T9516] lo speed is unknown, defaulting to 1000 [ 152.811580][ T9522] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 152.831106][ T9522] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1842 with error 28 [ 152.843876][ T9522] EXT4-fs (loop6): This should not happen!! Data will be lost [ 152.843876][ T9522] [ 152.853566][ T9522] EXT4-fs (loop6): Total free blocks count 0 [ 152.859635][ T9522] EXT4-fs (loop6): Free/Dirty block details [ 152.862259][ T9523] loop3: detected capacity change from 0 to 2048 [ 152.865686][ T9522] EXT4-fs (loop6): free_blocks=66060288 [ 152.877548][ T9522] EXT4-fs (loop6): dirty_blocks=1856 [ 152.882955][ T9522] EXT4-fs (loop6): Block reservation details [ 152.888949][ T9522] EXT4-fs (loop6): i_reserved_data_blocks=130 [ 152.910862][ T9523] loop3: p1 < > p4 [ 152.915712][ T9523] loop3: p4 start 42180 is beyond EOD, truncated [ 152.926976][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1966'. [ 153.227976][ T9543] lo speed is unknown, defaulting to 1000 [ 153.377159][ T9560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1977'. [ 153.386318][ T9560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1977'. [ 153.402266][ T9564] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 153.428831][ T8396] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1842 with max blocks 2048 with error 28 [ 153.452074][ T9560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1977'. [ 153.461262][ T9560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1977'. [ 153.529644][ T9560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1977'. [ 153.538692][ T9560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1977'. [ 153.577934][ T9579] loop4: detected capacity change from 0 to 512 [ 153.585226][ T9579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.617582][ T9579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.636839][ T9592] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 153.646553][ T9579] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.673616][ T9579] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1986: corrupted xattr block 19: overlapping e_value [ 153.702784][ T9579] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 153.720962][ T9579] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1986: corrupted xattr block 19: overlapping e_value [ 153.792710][ T9579] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 153.809053][ T9579] EXT4-fs error (device loop4): ext4_xattr_block_find:1874: inode #15: comm syz.4.1986: corrupted xattr block 19: overlapping e_value [ 153.937119][ T9610] loop3: detected capacity change from 0 to 512 [ 154.194694][ T9616] netlink: 'syz.2.1998': attribute type 1 has an invalid length. [ 154.274899][ T9621] netlink: 'syz.1.2000': attribute type 3 has an invalid length. [ 154.301884][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.383982][ T9627] loop4: detected capacity change from 0 to 512 [ 154.403170][ T9627] loop4: detected capacity change from 0 to 512 [ 154.450646][ T9627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.464447][ T9627] ext4 filesystem being mounted at /426/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.541069][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.615244][ T9650] loop3: detected capacity change from 0 to 512 [ 154.633721][ T9650] EXT4-fs: Ignoring removed oldalloc option [ 154.640637][ T9650] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 154.656277][ T9652] loop4: detected capacity change from 0 to 512 [ 154.656963][ T9650] EXT4-fs (loop3): 1 truncate cleaned up [ 154.663335][ T9652] EXT4-fs: Ignoring removed i_version option [ 154.674529][ T9652] EXT4-fs: Ignoring removed bh option [ 154.678758][ T9650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.699460][ T9650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2011'. [ 154.718913][ T9652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.733596][ T9652] ext4 filesystem being mounted at /428/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.744646][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.785457][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.865954][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2019'. [ 154.958094][ T9680] loop4: detected capacity change from 0 to 2048 [ 155.005507][ T9680] loop4: p1 < > p4 [ 155.009985][ T9680] loop4: p4 start 42180 is beyond EOD, truncated [ 155.020294][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2022'. [ 155.058151][ T9690] loop3: detected capacity change from 0 to 2048 [ 155.073563][ T9690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.202307][ T9700] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 155.218748][ T9700] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1222 with error 28 [ 155.232040][ T9700] EXT4-fs (loop3): This should not happen!! Data will be lost [ 155.232040][ T9700] [ 155.241814][ T9700] EXT4-fs (loop3): Total free blocks count 0 [ 155.247934][ T9700] EXT4-fs (loop3): Free/Dirty block details [ 155.254588][ T9700] EXT4-fs (loop3): free_blocks=66060288 [ 155.260158][ T9700] EXT4-fs (loop3): dirty_blocks=2336 [ 155.265478][ T9700] EXT4-fs (loop3): Block reservation details [ 155.271737][ T9700] EXT4-fs (loop3): i_reserved_data_blocks=167 [ 155.280720][ T9694] netlink: 660 bytes leftover after parsing attributes in process `syz.1.2026'. [ 155.438929][ T9715] netlink: 'syz.6.2033': attribute type 39 has an invalid length. [ 155.455634][ T9719] netem: incorrect gi model size [ 155.460618][ T9719] netem: change failed [ 155.751799][ T9735] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 155.837515][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 155.837535][ T29] audit: type=1326 audit(5281604010.380:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 155.845981][ T9743] loop4: detected capacity change from 0 to 512 [ 155.868009][ T29] audit: type=1326 audit(5281604010.380:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 155.897689][ T29] audit: type=1326 audit(5281604010.380:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 155.921948][ T29] audit: type=1326 audit(5281604010.380:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 155.945371][ T29] audit: type=1326 audit(5281604010.380:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 155.969623][ T29] audit: type=1326 audit(5281604010.380:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 155.993066][ T29] audit: type=1326 audit(5281604010.380:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 156.017158][ T29] audit: type=1326 audit(5281604010.380:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 156.040694][ T29] audit: type=1326 audit(5281604010.391:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 156.064808][ T29] audit: type=1326 audit(5281604010.391:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42498eec9 code=0x7ffc0000 [ 156.073155][ T9743] loop4: detected capacity change from 0 to 512 [ 156.099020][ T8401] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1222 with max blocks 2048 with error 28 [ 156.129238][ T9743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.142542][ T9743] ext4 filesystem being mounted at /440/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.278581][ T9772] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2054'. [ 156.315481][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.461361][ T9794] bridge0: port 1(batadv0) entered blocking state [ 156.468688][ T9794] bridge0: port 1(batadv0) entered disabled state [ 156.476483][ T9782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2060'. [ 156.492266][ T9794] batadv0: entered allmulticast mode [ 156.498296][ T9794] batadv0: entered promiscuous mode [ 156.516449][ T9785] lo speed is unknown, defaulting to 1000 [ 156.629800][ T9799] lo speed is unknown, defaulting to 1000 [ 156.670176][ T9810] loop3: detected capacity change from 0 to 2048 [ 156.723768][ T9810] Alternate GPT is invalid, using primary GPT. [ 156.730201][ T9810] loop3: p2 p3 p7 [ 156.751148][ T9818] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 156.772487][ T9820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2075'. [ 156.961120][ T8391] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 156.970413][ T8391] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 156.989818][ T9831] loop4: detected capacity change from 0 to 2048 [ 157.014213][ T9836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.032735][ T9831] loop4: p1 < > p4 [ 157.042723][ T9831] loop4: p4 start 42180 is beyond EOD, truncated [ 157.201412][ T9851] lo speed is unknown, defaulting to 1000 [ 157.440904][ T9851] loop3: detected capacity change from 0 to 4096 [ 157.494391][ T9851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.659100][ T9866] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2088'. [ 157.732439][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.865297][ T9880] macvtap1: entered allmulticast mode [ 157.870829][ T9880] veth0_macvtap: entered allmulticast mode [ 158.008447][ T8396] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.022254][ T8396] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.047950][ T8396] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.056520][ T8396] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.070986][ T9894] loop3: detected capacity change from 0 to 128 [ 158.083079][ T9894] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.103838][ T9900] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.111120][ T9900] IPv6: NLM_F_CREATE should be set when creating new route [ 158.118333][ T9900] IPv6: NLM_F_CREATE should be set when creating new route [ 158.125997][ T9900] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.150513][ T9894] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.178854][ T9894] vfat filesystem being mounted at /430/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 158.232517][ T9905] ================================================================== [ 158.240684][ T9905] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 158.248101][ T9905] [ 158.250441][ T9905] write to 0xffff8881ab479000 of 4096 bytes by task 9898 on cpu 1: [ 158.258357][ T9905] _copy_from_iter+0x133/0xe80 [ 158.263153][ T9905] copy_page_from_iter+0x178/0x2a0 [ 158.268292][ T9905] process_vm_rw+0x659/0x960 [ 158.272929][ T9905] __x64_sys_process_vm_writev+0x78/0x90 [ 158.278603][ T9905] x64_sys_call+0x2a80/0x3000 [ 158.283320][ T9905] do_syscall_64+0xd2/0x200 [ 158.287854][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.293785][ T9905] [ 158.296122][ T9905] write to 0xffff8881ab479000 of 4096 bytes by task 9905 on cpu 0: [ 158.304032][ T9905] _copy_from_iter+0x133/0xe80 [ 158.308832][ T9905] copy_page_from_iter+0x178/0x2a0 [ 158.313975][ T9905] process_vm_rw+0x659/0x960 [ 158.318603][ T9905] __x64_sys_process_vm_writev+0x78/0x90 [ 158.324268][ T9905] x64_sys_call+0x2a80/0x3000 [ 158.328980][ T9905] do_syscall_64+0xd2/0x200 [ 158.333549][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.339467][ T9905] [ 158.341806][ T9905] Reported by Kernel Concurrency Sanitizer on: [ 158.347979][ T9905] CPU: 0 UID: 0 PID: 9905 Comm: syz.1.2100 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.359295][ T9905] Tainted: [W]=WARN [ 158.363114][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.373186][ T9905] ==================================================================