last executing test programs: 42.192331625s ago: executing program 1 (id=194): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_procfs(0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000280)={0x1001}, 0x10) 42.035612962s ago: executing program 1 (id=195): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_procfs(0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000280)={0x1001}, 0x10) (fail_nth: 1) 41.760797423s ago: executing program 1 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r4 = socket$inet6(0xa, 0x80002, 0x88) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x50) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x200000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 41.721997236s ago: executing program 1 (id=200): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x210080, &(0x7f0000000180)={[{@nodelalloc}, {@nouid32}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@bsdgroups}, {@nombcache}, {@bh}, {@journal_dev={'journal_dev', 0x3d, 0x401}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010326bd7000fbdbdf251c00000018000180140002006c6f0000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000240)=0x60, 0x80800) connect$nfc_llcp(r4, &(0x7f0000000400)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0xfb, 0x80, "37eeb167ad406c56cf33e196f736c946f974273b39918fef82a98da0c84d381f6f32c0bb38478c6ccaaa9a61d55ee28c4b01bfc61fe5177987fafce3fd17b7", 0x29}, 0x60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x90480, 0x0) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000500)) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000000", @ANYRES32], 0x20) getpeername(r6, &(0x7f0000000040)=@nl=@proc, &(0x7f00000000c0)=0x80) 41.564255322s ago: executing program 1 (id=206): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x9, 0x0, 0xfffffc80, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xfffdffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x272, 0xb, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb9a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8003, 0x0, 0xfffffffe, 0x1, 0x0, 0x800009, 0xfffffffd, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x5, 0x2, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4000, 0xffffffff, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x5, 0x0, 0x9, 0xfffffffd, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x26c, 0x4, 0x7, 0xffff, 0x0, 0x8, 0xfffffffd, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 40.480006619s ago: executing program 1 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 40.4523178s ago: executing program 32 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.911740937s ago: executing program 4 (id=906): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0xd1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 1.695304326s ago: executing program 2 (id=914): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x50) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000300)={0x1, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x29404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x0, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) 1.586635361s ago: executing program 0 (id=919): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003340)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.564982152s ago: executing program 0 (id=920): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x50) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a310000000005000100070000"], 0x4c}}, 0x4000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000180)={0x7ff, 0x0, 0x2, 0x6, 0x7, "3ba8f3ce17542e33"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) perf_event_open(&(0x7f0000000300)={0x1, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x29404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x0, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x24eb, &(0x7f0000000000)={0x0, 0xd13d, 0x400, 0x1, 0x2f6}) 1.396808729s ago: executing program 2 (id=924): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) 1.351138831s ago: executing program 2 (id=925): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240), 0x1, 0x5a2, &(0x7f0000000bc0)="$eJzs3U9oHGUbAPBnZrNN/+T70g8+QaWHokKF0k3SP1o9tVexUOhB8KJhsw0lm2zJJtqEgOm9iD2ISi/1pgePigcP4sWjVy+KZ6HYoND0oCubnU3TdFM3aTYbs78fzO77zszO874z+8zODDNsAD3raP0ljXgmIi4mEYNrpvVFNvFoY77lpYXi/aWFYhK12qXfkkgi4t7SQrE5f5K9H4qIxYh4OiK+y0ccT1cXua9ZqM7NT4yWy6XprD40M3l1qDo3f+LK5Oh4abw0derlV86cPX1m5OTI2uber62t5TfX1xs/33z/xg+v3b75+RdHFosfjiZxLgayaWv7sZ0a6yQf59aNP92JYF2UdLsBbEkuy/N6Kj0Vg5HLsr6V2tqdQ/+ONA/ooFp/RG3VmiLQAxJJDz2qeRxQP/9tDjt5/HHnfOMEpB53eWmh+F404/c1rk3E/pVzk4O/Jw+dmdTPNw/vZEPZkxavR8RwX9+j3/8k+/5t3fB2NJCO+vZ8Y0M9uv3T1f1PtNj/DDSvnT6h5v5vOdv/LbeIn9tg/3exzRh/vvnLJxvGv94fz7aMn6zGT1rETyPi7Tbj33rj67MbTat9GnEsWsdvSh5/fXjo8pVyabjx2jLGN8eOvLpx/yMObhC/cc12/0pD1vZ/X9amtM3+f/X9l88tPib+i88/fvu3Wv8HIuKDNuP/795nr2807c715G79KGCz2z+JfNxuM/5L547+lBVdNQQAAAAAAAAAgG2UrtzLlqSF1XKaFgqNZ3j/HwfTcqU6c/xyZXZqrHHP2+HIp807rQYb9aReH8nux23WT66rn8plAXMHVuqFYqU81uW+AwAAAAAAAAAAAAAAAAAAwG5xaN3z/3/kVp7/X/931cBetfFffgN7nfyH3vVw/iddawew8/z+Q8+qbS3/HSfAXuD3H3qX/IfeJf+hd8l/6F3yH3qX/AcAAAAAAAAAAAAAAAAAAAAAAAAAgI64eOFCfajdX1oo1utjfXOzE5V3ToyVqhOFydlioViZvloYr1TGy6VCsTL5T8tLKpWrwzE1e21oplSdGarOzb81WZmdav5XWCnf8R4BAAAAAAAAAAAAAAAAAADAv8/AypCkhYh8o56mhULEfyLicBLJ5Svl0nBE/Dcifszl++v1kW43GgAAAAAAAAAAAAAAAAAAAPaY6tz8xGi5XJruXKEvC9XBEO0X+jYzc0Qsbm8z6kvc9Kfy2Qrs8qrbFYX0SZeT2x3fw91f6OJOCQAAAAAAAAAAAAAAAAAAetSDh37b/cRfnW0QAAAAAAAAAAAAAAAAAAAA9KT01yQi6sOxwRcG1k/dlyznVt4j4t1blz66NjozMz1SH393dfzMx9n4k91oP9CuZp6mEVHPYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCB6tz8xGi5XJreYqG/jXm63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArfg7AAD///VtzfM=") r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='pwc_handler_enter\x00', r2, 0x0, 0xffff}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="676e9b0676001cf20072ef6a6321cb4d699057f47ab0290000000000000041a893305e7483241041d595994cb51b9c8f99961be6e4cc7dc3cdfd1fd6869d68784af718eaae509679eb8635007e1e0a4931a429720965ca92ecf94e11f8a6c9ab322dc5f1d8bb24f215a615ba0a4bf6b75b234649f39ad98c03a2556f77461547ef8256b7d781d851df2987ae08f81c14565aaae91d888f2ce9a3f0564d58935f4aaba79142", @ANYRES32=0x0, @ANYBLOB="00000000031201001c0012800b00010062726964676500000c0002800600270020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) statfs(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x78) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') read$rfkill(r8, &(0x7f0000000200), 0x8) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) write(r6, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) 1.236952366s ago: executing program 5 (id=927): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) 1.226512126s ago: executing program 2 (id=929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xfc}}, 0x0) 1.199087518s ago: executing program 3 (id=930): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x9) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x8) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) 1.198446657s ago: executing program 5 (id=931): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=@newtaction={0x14, 0x30, 0x10b}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) r7 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x2000004, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b744912af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x69d, &(0x7f0000001c00)="$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") 1.132453091s ago: executing program 2 (id=932): socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}]}}]}, 0x44}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x13, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000"], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) 1.086511972s ago: executing program 3 (id=933): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000100)={[{@bsdgroups}]}, 0x1, 0x58d, &(0x7f0000000bc0)="$eJzs3U9sHFcZAPBvdh0ncU3ThEZqyiGBRKR/lNjtSk4DB8IBDhT1UiRUqRysZGOHrJMQu6I2F/fGiSIBAlRRNeKABBKJxAE4VBQkDkgECYEQEWolEAf+tIBwD5QARrM7a2+8s/Yi2zvF8/tJm33zZuzvvd18b3ffm/UEUFpH0n+SiNGIuBkR+1qbdx5wpHX37dqN6eu1G9NJLC8/+dekedy12o3p9qHtn7srIhYj4r6I+NH5iLO7uuPOzi9cnGw06lez7bG5mStjs/MLJy7MTE7Vp+qXarXHTk9MnD41Mf4/9CZZd+/Hr7x+4NfTT0y9dPhfT52a+fpfkjjT7Hes6cdWymvRUBJxZjuCFaCa9iciRvo8/mD9+Ze3uUn06YsHbo2lz929EXGsmf/7otp8NiM+8OLTf98X77/d62dv3nrxj4NsKwCwdZZTu9ffDexMlUg/+yeVkxHRKlcqJ0+2PsPfGyOVxuXZuYfPX37m0rnWHME9saty/kKjPp7NFdwTu5J0+5FmeXX70TXbtYjYHxGfre5tbp88e7lxbqAjHdA2GvHadz51dviuNfn/h2or/4GdK83/X/74ez9Iy29Wi24NMEhp/n/zzZnHQ/7DDjS87t6N83/PNrULKJrXfygv+Q/l1Z3/6587C+wcXv+hvOQ/lJf8h/KS/1Be8h/KqzP/pT+U0/7Dr9xKImLxfXubt+g4czDnz/YAO8jycuJL/lBS3vtDeQ2tFvcW2Q5g8HzGBzY6+7/nt4GvbH1bgMGoFN0AoDDHD1n/g7Iy/w/lNVR0A4DCeI8PmP+H8jH/D+U12uP6X+/ouHbXeETcHRE/re7a3b7WF/D/azTitRdufvfpiMqfkuz9//F9x0YnX3/1h53HDSf/aC4RDEfEp1948svPTs7NXX0krf/bSv3cV7L6R4vqDdCPdp628xgor9n5hYuTjUb9qoLCmkLE26IZCttYaI8D12o3ptu3QY09zz8U8cYHWychpHGvZ7fW3qFsbnJPc41yZCm541yFZAvWLj93ImLxuYi4L6//SXa989bKx8hStSv+O7P79HYomz9JjznYZ/zq3ZuLf39H/MMd8d/VZ/xbH+vzwG2y/1vFxn/pNyvLXkN5j//QJr8Se2CD/Y9/Y1O/ftN+/7ti4x87XGz8L12OeCUdf8bz8q+SpuXKymfn+POFz7fmTde/wuLGPnN8dfy73jX+VVbGv2qP8e9In3F+8lT9E3n11Z9FvPFcxP258dvx9jRjjSxVuuIf7Rh/Hlgn/p8/+ouLefVnXo1YvhZxPPLjd8Yam5u5MjY7v3DiwszkVH2qfqlWe+z0xMTpUxPjY8056rH2THW3J24f/FBe/dGvtfo/0iN+u/+9Hv/ldfrcaeGrnxx9d079zw+14j9wNP/5P5DFbz3+Q13x35Pdp/9P/p2dy5se81ZE7M7qH4yI77+8/6G8dn3kdiv+uR79r9wRv7v/D/fZ//jtf57Jq372w/3+AgBgK/WeGii6ZQAAwFYbxEpj0X0E8o0sDUfnMnCy2LGusLi6rpDWv5WtL1QXI/6ZrTGk9Q9mq2RpOXehAXjbObjw3l8V3QYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAspudX7g42WjUr84W3RJg0P4bAAD//y/L/6E=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa0000, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c2, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) add_key(&(0x7f0000000180)='ceph\x00', 0x0, &(0x7f0000000300)="010001000000000000e10f00015b2dbab04dd577460127a93cdb8b", 0x1b, 0xfffffffffffffffd) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) syz_io_uring_setup(0x56ee, &(0x7f0000000000)={0x0, 0xb544, 0x800, 0x0, 0x249, 0x0, r0}, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r8}, 0x10) listen(r7, 0x3) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close(r9) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x982, 0x29, 0x21}, 0x18) syz_io_uring_submit(r1, r5, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, r10, &(0x7f0000000280), &(0x7f0000000380)='./file0\x00', 0x20}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000003f80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r11, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002abd7000fedbdf7464657673696d0000000f0402006e4c7464657673896d300000478a62217a359362866f4cbe32ce0d857f6d298214c886f7dd838ab947a0b1eb60009c455cfe346571e2d98ce18189633dcae896c368ccc42c5a9955b8ed26ec9ae63e37b80306ff922612ddae6d3bb334d9f0578346a2872df56adcfe191198a18fa3a99956d3674f2d34a5cca0cf10273173f51b21e33fd93b702dbc2bf99a7d9f8c280b91"], 0x34}, 0x1, 0x0, 0x0, 0x4000884}, 0x8002) 1.072112893s ago: executing program 2 (id=934): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) sendfile(r3, r1, 0x0, 0x10000a007) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000", 0x2c}], 0x1}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4008084) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r7, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4040040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x2009, 0x0, 0x2}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x18) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 1.033351915s ago: executing program 0 (id=935): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x50) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000300)={0x1, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x29404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x0, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) 765.974377ms ago: executing program 4 (id=936): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r0) 579.234624ms ago: executing program 3 (id=937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x8000) 568.113765ms ago: executing program 4 (id=938): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00) 510.909227ms ago: executing program 4 (id=939): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='io_uring_link\x00', r0, 0x0, 0x6}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000040), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) close_range(r4, r4, 0x0) pipe(&(0x7f0000000440)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000ba0a000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) 492.220468ms ago: executing program 3 (id=940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 430.278421ms ago: executing program 3 (id=941): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) dup3(r0, r1, 0x0) request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000001c0)='grpquota', 0xfffffffffffffffc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f00000000c0)={[{@grpquota}, {@resuid={'resuid', 0x3d, r2}}, {@errors_remount}, {@oldalloc}]}, 0x1, 0x524, &(0x7f0000001200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) 424.810181ms ago: executing program 4 (id=942): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) 386.529423ms ago: executing program 0 (id=943): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xfc}}, 0x0) 279.427227ms ago: executing program 5 (id=944): socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}]}}]}, 0x44}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x13, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000"], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) 180.997171ms ago: executing program 4 (id=945): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x50) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a310000000005000100070000"], 0x4c}}, 0x4000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000180)={0x7ff, 0x0, 0x2, 0x6, 0x7, "3ba8f3ce17542e33"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) perf_event_open(&(0x7f0000000300)={0x1, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x29404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x0, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x24eb, &(0x7f0000000000)={0x0, 0xd13d, 0x400, 0x1, 0x2f6}) 168.447842ms ago: executing program 0 (id=946): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003340)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 159.353993ms ago: executing program 5 (id=947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 98.017185ms ago: executing program 3 (id=948): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240), 0x1, 0x5a2, &(0x7f0000000bc0)="$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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='pwc_handler_enter\x00', r2, 0x0, 0xffff}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="676e9b0676001cf20072ef6a6321cb4d699057f47ab0290000000000000041a893305e7483241041d595994cb51b9c8f99961be6e4cc7dc3cdfd1fd6869d68784af718eaae509679eb8635007e1e0a4931a429720965ca92ecf94e11f8a6c9ab322dc5f1d8bb24f215a615ba0a4bf6b75b234649f39ad98c03a2556f77461547ef8256b7d781d851df2987ae08f81c14565aaae91d888f2ce9a3f0564d58935f4aaba79142", @ANYRES32=0x0, @ANYBLOB="00000000031201001c0012800b00010062726964676500000c0002800600270020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) statfs(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x78) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') read$rfkill(r8, &(0x7f0000000200), 0x8) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) uname(&(0x7f00000004c0)=""/200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r10, &(0x7f0000000080), 0x12) write(r6, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105040, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r11, 0x0) 97.360175ms ago: executing program 0 (id=949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c008051}, 0x4050) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca, 0x9}]}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_lazy_itable_init\x00', r1, 0x0, 0x8}, 0x18) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000001f) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) close_range(r7, r8, 0x0) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 45.215058ms ago: executing program 5 (id=950): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYBLOB="f3ce6ee1c44128f8e8c4a99ad7c6da8a95a797d2f3dcd89dbb658a98fecdf3c8e74d3cdcdcaab140b36e5e4ceae344ed78bded0c456de05fb1cddd9a47d792ddaf29f10eb911a78b5b27c655da7ad010680d8f91dbf86716fd9bb0634800b6049246f8222c02c39fc7a25034efd6c70fd25db3b2abec3f37194f3ad63ee723e08e95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000200)={0x3, 0x2, 0x9}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0xb}, 0x18) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r5, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r7, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) (async) io_setup(0x58, &(0x7f00000001c0)) (async) shutdown(0xffffffffffffffff, 0x0) (async) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 0s ago: executing program 5 (id=951): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESDEC=0x0], 0x48) r1 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89fe, &(0x7f0000000340)={'veth0_vlan\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000001100)={'syztnl1\x00', r4, 0x8000, 0x7, 0x4211, 0x4, {{0xc, 0x4, 0x1, 0x7, 0x30, 0x66, 0x0, 0x9, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, {[@timestamp={0x44, 0x8, 0xde, 0x0, 0x2, [0xfffffffa]}, @timestamp_addr={0x44, 0x14, 0x1e, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x3}, {@multicast1, 0xc}]}]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085006d28b5a4bba683bb0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa3) kernel console output (not intermixed with test programs): _adv: batadv0: Adding interface: batadv_slave_0 [ 30.990099][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.016142][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.027238][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.034238][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.060139][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.076785][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.083784][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.109735][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.126039][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.133104][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.159096][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.170303][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.177343][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.203313][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.214784][ T3325] team0: Port device team_slave_0 added [ 31.220669][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.227645][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.253637][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.287047][ T3325] team0: Port device team_slave_1 added [ 31.295291][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.302248][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.328217][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.353502][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.360506][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.386526][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.404127][ T3322] hsr_slave_0: entered promiscuous mode [ 31.410330][ T3322] hsr_slave_1: entered promiscuous mode [ 31.421515][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.428568][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.454505][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.477826][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.484815][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.510757][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.524521][ T3321] hsr_slave_0: entered promiscuous mode [ 31.530634][ T3321] hsr_slave_1: entered promiscuous mode [ 31.536663][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 31.542386][ T3321] Cannot create hsr debugfs directory [ 31.563807][ T3329] hsr_slave_0: entered promiscuous mode [ 31.569988][ T3329] hsr_slave_1: entered promiscuous mode [ 31.576022][ T3329] debugfs: 'hsr0' already exists in 'hsr' [ 31.581763][ T3329] Cannot create hsr debugfs directory [ 31.626951][ T3325] hsr_slave_0: entered promiscuous mode [ 31.632988][ T3325] hsr_slave_1: entered promiscuous mode [ 31.639301][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 31.645094][ T3325] Cannot create hsr debugfs directory [ 31.652711][ T3327] hsr_slave_0: entered promiscuous mode [ 31.658940][ T3327] hsr_slave_1: entered promiscuous mode [ 31.664914][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 31.670641][ T3327] Cannot create hsr debugfs directory [ 31.859199][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.870838][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.879670][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.890921][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.912148][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.921021][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.931073][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.940304][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.981646][ T3329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.990322][ T3329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.002116][ T3329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.011124][ T3329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.042852][ T3327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.053489][ T3327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.066645][ T3327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.078677][ T3327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.104683][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.118059][ T3325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.127579][ T3325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.136835][ T3325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.146973][ T3325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.180407][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.198721][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.205902][ T1574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.222251][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.229354][ T1574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.240329][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.268653][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.288636][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.305752][ T1623] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.312831][ T1623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.321481][ T1623] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.328566][ T1623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.346248][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.359171][ T1623] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.366394][ T1623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.387059][ T2681] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.394164][ T2681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.414707][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.430566][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.439750][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.462514][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.473967][ T2681] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.481170][ T2681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.500491][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.507567][ T1574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.516838][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.523898][ T1574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.547722][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.554903][ T1574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.577958][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.669806][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.704246][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.746358][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.783656][ T3322] veth0_vlan: entered promiscuous mode [ 32.816101][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.834544][ T3322] veth1_vlan: entered promiscuous mode [ 32.874950][ T3321] veth0_vlan: entered promiscuous mode [ 32.914980][ T3322] veth0_macvtap: entered promiscuous mode [ 32.922873][ T3322] veth1_macvtap: entered promiscuous mode [ 32.935712][ T3321] veth1_vlan: entered promiscuous mode [ 32.973090][ T3321] veth0_macvtap: entered promiscuous mode [ 32.994443][ T3325] veth0_vlan: entered promiscuous mode [ 33.000775][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.009057][ T3327] veth0_vlan: entered promiscuous mode [ 33.018630][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.026561][ T3321] veth1_macvtap: entered promiscuous mode [ 33.047767][ T3329] veth0_vlan: entered promiscuous mode [ 33.053519][ T1574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.063598][ T3325] veth1_vlan: entered promiscuous mode [ 33.071592][ T3327] veth1_vlan: entered promiscuous mode [ 33.078919][ T1574] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.087924][ T1574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.098397][ T1574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.111790][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.123674][ T3329] veth1_vlan: entered promiscuous mode [ 33.131830][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.150903][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 33.150918][ T29] audit: type=1400 audit(1765103213.489:90): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.fRLkO0/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.156658][ T3327] veth0_macvtap: entered promiscuous mode [ 33.174939][ T29] audit: type=1400 audit(1765103213.489:91): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.208946][ T29] audit: type=1400 audit(1765103213.489:92): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.fRLkO0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.234214][ T29] audit: type=1400 audit(1765103213.489:93): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.256044][ T29] audit: type=1400 audit(1765103213.489:94): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.fRLkO0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.282821][ T29] audit: type=1400 audit(1765103213.519:95): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/root/syzkaller.fRLkO0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.310225][ T29] audit: type=1400 audit(1765103213.519:96): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.329983][ T29] audit: type=1400 audit(1765103213.629:97): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.352880][ T29] audit: type=1400 audit(1765103213.629:98): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="gadgetfs" ino=4067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.377871][ T1574] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.388143][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.398628][ T1574] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.417386][ T29] audit: type=1400 audit(1765103213.759:99): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.423616][ T3325] veth0_macvtap: entered promiscuous mode [ 33.468218][ T3327] veth1_macvtap: entered promiscuous mode [ 33.481214][ T1574] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.491626][ T1574] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.509260][ T3325] veth1_macvtap: entered promiscuous mode [ 33.534124][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.547069][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.563960][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.573190][ T3329] veth0_macvtap: entered promiscuous mode [ 33.583887][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.605279][ T922] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.620252][ T3329] veth1_macvtap: entered promiscuous mode [ 33.629100][ T922] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.642468][ T922] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.652489][ T922] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.668790][ T922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.687510][ T922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.698171][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.706523][ T3501] capability: warning: `syz.3.6' uses deprecated v2 capabilities in a way that may be insecure [ 33.720891][ T922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.734920][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.750293][ T922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.771410][ T922] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.800857][ T922] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.819761][ T922] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.853712][ T922] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.939743][ T3508] random: crng reseeded on system resumption [ 33.952338][ T3518] loop2: detected capacity change from 0 to 512 [ 33.981464][ T3518] ======================================================= [ 33.981464][ T3518] WARNING: The mand mount option has been deprecated and [ 33.981464][ T3518] and is ignored by this kernel. Remove the mand [ 33.981464][ T3518] option from the mount to silence this warning. [ 33.981464][ T3518] ======================================================= [ 34.022041][ T3520] loop0: detected capacity change from 0 to 512 [ 34.066722][ T3520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.096809][ T3520] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.122279][ T3518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.176465][ T3518] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.452204][ T3547] loop1: detected capacity change from 0 to 1024 [ 34.530067][ T3529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12'. [ 34.654543][ T3547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.680389][ T3547] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.829991][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.942601][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.124681][ T3547] syz.1.13 (3547) used greatest stack depth: 10192 bytes left [ 35.380514][ T3561] loop0: detected capacity change from 0 to 1024 [ 35.419278][ T3561] EXT4-fs (loop0): unsupported inode size: 143 [ 35.425680][ T3561] EXT4-fs (loop0): blocksize: 1024 [ 35.432197][ T3563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17'. [ 35.482458][ T3563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17'. [ 35.523414][ T3563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 35.620678][ T3567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 35.795968][ T3572] loop2: detected capacity change from 0 to 1024 [ 35.837375][ T3572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.902768][ T3572] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.933555][ T3576] loop4: detected capacity change from 0 to 2048 [ 35.952494][ T3572] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.014162][ T3572] netlink: 'gtp': attribute type 4 has an invalid length. [ 36.021364][ T3572] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 36.032304][ T3579] loop0: detected capacity change from 0 to 512 [ 36.060099][ T3579] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.100972][ T3579] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 36.110884][ T3579] EXT4-fs (loop0): group descriptors corrupted! [ 36.141372][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.431669][ T3602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.524783][ T3602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.563026][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.603453][ T3618] loop1: detected capacity change from 0 to 512 [ 36.634320][ T3403] IPVS: starting estimator thread 0... [ 36.642700][ T3619] loop0: detected capacity change from 0 to 2048 [ 36.654124][ T3602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.676626][ T3619] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.689785][ T3619] ext4: Unknown parameter 'bsdd0' [ 36.702627][ T3618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.724094][ T3579] IPVS: rr: FWM 3 0x00000003 - no destination available [ 36.724994][ T3620] IPVS: using max 2064 ests per chain, 103200 per kthread [ 36.731248][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 36.777576][ T3602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.808977][ T3618] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.877790][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.899404][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.919187][ T3627] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.930289][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.930337][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.930366][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.930847][ T3629] Zero length message leads to an empty skb [ 37.043245][ T3636] netlink: 'syz.1.30': attribute type 3 has an invalid length. [ 37.226686][ T3654] loop1: detected capacity change from 0 to 512 [ 37.248465][ T3654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.266710][ T3654] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.299242][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.354890][ T3662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.374343][ T3662] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.428006][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.501733][ C0] hrtimer: interrupt took 30243 ns [ 37.608302][ T3673] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.636808][ T3673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.654846][ T3677] lo speed is unknown, defaulting to 1000 [ 37.660655][ T3677] lo speed is unknown, defaulting to 1000 [ 37.693941][ T3678] syz.1.43: attempt to access beyond end of device [ 37.693941][ T3678] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 37.726509][ T3678] syz.1.43: attempt to access beyond end of device [ 37.726509][ T3678] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 37.746120][ T3677] lo speed is unknown, defaulting to 1000 [ 37.766910][ T3678] syz.1.43: attempt to access beyond end of device [ 37.766910][ T3678] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 37.767408][ T3677] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.780273][ T3678] syz.1.43: attempt to access beyond end of device [ 37.780273][ T3678] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 37.801357][ T3678] syz.1.43: attempt to access beyond end of device [ 37.801357][ T3678] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 37.815202][ T3678] syz.1.43: attempt to access beyond end of device [ 37.815202][ T3678] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 37.829018][ T3678] syz.1.43: attempt to access beyond end of device [ 37.829018][ T3678] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 37.842916][ T3677] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 37.864619][ T3677] lo speed is unknown, defaulting to 1000 [ 37.870788][ T3677] lo speed is unknown, defaulting to 1000 [ 37.877223][ T3678] syz.1.43: attempt to access beyond end of device [ 37.877223][ T3678] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 37.891457][ T3677] lo speed is unknown, defaulting to 1000 [ 37.897827][ T3677] lo speed is unknown, defaulting to 1000 [ 37.906870][ T3678] syz.1.43: attempt to access beyond end of device [ 37.906870][ T3678] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 37.906924][ T3678] syz.1.43: attempt to access beyond end of device [ 37.906924][ T3678] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 37.939927][ T3677] lo speed is unknown, defaulting to 1000 [ 38.035890][ T3692] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.108586][ T3695] EXT4-fs: Ignoring removed nobh option [ 38.114438][ T3695] EXT4-fs: Ignoring removed bh option [ 38.150766][ T3695] ext4: Unknown parameter 'smackfstransmute' [ 38.166576][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.190523][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 38.190541][ T29] audit: type=1400 audit(1765103218.529:424): avc: denied { bpf } for pid=3694 comm="syz.2.51" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.254985][ T29] audit: type=1400 audit(1765103218.529:425): avc: denied { perfmon } for pid=3694 comm="syz.2.51" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.255349][ T3698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.307325][ T3685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.47'. [ 38.335217][ T3703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.353285][ T29] audit: type=1400 audit(1765103218.699:426): avc: denied { getopt } for pid=3694 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.382169][ T3698] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.404631][ T3703] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.544340][ T29] audit: type=1400 audit(1765103218.889:427): avc: denied { create } for pid=3708 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 38.546028][ T3709] syz.3.56 uses obsolete (PF_INET,SOCK_PACKET) [ 38.575234][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.596677][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.668748][ T29] audit: type=1326 audit(1765103219.009:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 38.692135][ T29] audit: type=1326 audit(1765103219.009:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 38.715779][ T29] audit: type=1326 audit(1765103219.049:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 38.738976][ T29] audit: type=1326 audit(1765103219.049:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 38.762291][ T29] audit: type=1326 audit(1765103219.049:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 38.785511][ T29] audit: type=1326 audit(1765103219.049:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 38.827143][ T3722] netlink: 'syz.0.60': attribute type 3 has an invalid length. [ 38.853538][ T3722] netlink: 'syz.0.60': attribute type 3 has an invalid length. [ 38.925870][ T3732] 9pnet_fd: Insufficient options for proto=fd [ 38.938911][ T3732] bond1: option resend_igmp: invalid value (1024) [ 38.945458][ T3732] bond1: option resend_igmp: allowed values 0 - 255 [ 38.953609][ T3732] bond1 (unregistering): Released all slaves [ 39.009262][ T3718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.59'. [ 39.213986][ T3751] FAULT_INJECTION: forcing a failure. [ 39.213986][ T3751] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.227199][ T3751] CPU: 1 UID: 0 PID: 3751 Comm: syz.1.71 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.227274][ T3751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 39.227291][ T3751] Call Trace: [ 39.227301][ T3751] [ 39.227312][ T3751] __dump_stack+0x1d/0x30 [ 39.227342][ T3751] dump_stack_lvl+0xe8/0x140 [ 39.227371][ T3751] dump_stack+0x15/0x1b [ 39.227469][ T3751] should_fail_ex+0x265/0x280 [ 39.227492][ T3751] should_fail+0xb/0x20 [ 39.227510][ T3751] should_fail_usercopy+0x1a/0x20 [ 39.227539][ T3751] _copy_from_user+0x1c/0xb0 [ 39.227573][ T3751] ___sys_sendmsg+0xc1/0x1d0 [ 39.227623][ T3751] __x64_sys_sendmsg+0xd4/0x160 [ 39.227658][ T3751] x64_sys_call+0x17ba/0x3000 [ 39.227719][ T3751] do_syscall_64+0xd8/0x2a0 [ 39.227803][ T3751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.227831][ T3751] RIP: 0033:0x7faeb662f749 [ 39.227856][ T3751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.227878][ T3751] RSP: 002b:00007faeb5097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.227979][ T3751] RAX: ffffffffffffffda RBX: 00007faeb6885fa0 RCX: 00007faeb662f749 [ 39.227996][ T3751] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 39.228012][ T3751] RBP: 00007faeb5097090 R08: 0000000000000000 R09: 0000000000000000 [ 39.228053][ T3751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.228065][ T3751] R13: 00007faeb6886038 R14: 00007faeb6885fa0 R15: 00007ffd5b092768 [ 39.228089][ T3751] [ 39.438692][ T3754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'. [ 39.488097][ T3754] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 39.532044][ T3758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'. [ 39.768027][ T3762] netlink: 'syz.2.75': attribute type 3 has an invalid length. [ 39.842289][ T3762] netlink: 'syz.2.75': attribute type 3 has an invalid length. [ 39.952269][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 40.004814][ T3772] 9pnet_fd: Insufficient options for proto=fd [ 40.077592][ T3772] bond1: option resend_igmp: invalid value (1024) [ 40.084163][ T3772] bond1: option resend_igmp: allowed values 0 - 255 [ 40.103986][ T3772] bond1 (unregistering): Released all slaves [ 40.120018][ T3780] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 40.128562][ T3783] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 40.198826][ T3788] netlink: 'syz.0.83': attribute type 3 has an invalid length. [ 40.230795][ T3788] netlink: 'syz.0.83': attribute type 3 has an invalid length. [ 40.272295][ T3795] SELinux: policydb string S÷€E Li does not match my string SE Linux [ 40.281543][ T3795] SELinux: failed to load policy [ 40.359298][ T3804] pimreg: entered allmulticast mode [ 40.419217][ T3798] pimreg: left allmulticast mode [ 40.735276][ T3819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 41.056704][ T3818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.93'. [ 41.189104][ T3835] netlink: 'syz.0.97': attribute type 1 has an invalid length. [ 41.216546][ T3822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.94'. [ 41.294976][ T3840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 41.412311][ T3849] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 41.496327][ T3863] FAULT_INJECTION: forcing a failure. [ 41.496327][ T3863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.497787][ T3856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.106'. [ 41.509505][ T3863] CPU: 1 UID: 0 PID: 3863 Comm: syz.3.108 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.509581][ T3863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.509599][ T3863] Call Trace: [ 41.509608][ T3863] [ 41.509619][ T3863] __dump_stack+0x1d/0x30 [ 41.509654][ T3863] dump_stack_lvl+0xe8/0x140 [ 41.509729][ T3863] dump_stack+0x15/0x1b [ 41.509774][ T3863] should_fail_ex+0x265/0x280 [ 41.509806][ T3863] should_fail+0xb/0x20 [ 41.509902][ T3863] should_fail_usercopy+0x1a/0x20 [ 41.509994][ T3863] _copy_from_user+0x1c/0xb0 [ 41.510029][ T3863] __se_sys_openat2+0xcb/0x1f0 [ 41.510073][ T3863] __x64_sys_openat2+0x55/0x70 [ 41.510163][ T3863] x64_sys_call+0x2c04/0x3000 [ 41.510196][ T3863] do_syscall_64+0xd8/0x2a0 [ 41.510239][ T3863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.510268][ T3863] RIP: 0033:0x7f77d3def749 [ 41.510289][ T3863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.510382][ T3863] RSP: 002b:00007f77d2857038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 41.510407][ T3863] RAX: ffffffffffffffda RBX: 00007f77d4045fa0 RCX: 00007f77d3def749 [ 41.510423][ T3863] RDX: 0000200000000280 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 41.510441][ T3863] RBP: 00007f77d2857090 R08: 0000000000000000 R09: 0000000000000000 [ 41.510534][ T3863] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 41.510550][ T3863] R13: 00007f77d4046038 R14: 00007f77d4045fa0 R15: 00007ffe02310c28 [ 41.510578][ T3863] [ 41.669885][ T3867] pimreg: entered allmulticast mode [ 41.735244][ T3876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3876 comm=syz.3.110 [ 41.763370][ T3876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3876 comm=syz.3.110 [ 41.775912][ T3877] pimreg: left allmulticast mode [ 41.788911][ T3876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3876 comm=syz.3.110 [ 41.801601][ T3876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3876 comm=syz.3.110 [ 41.815665][ T3879] netlink: 'syz.4.111': attribute type 3 has an invalid length. [ 41.823788][ T3879] netlink: 'syz.4.111': attribute type 3 has an invalid length. [ 41.824930][ T3876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3876 comm=syz.3.110 [ 41.844643][ T3876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3876 comm=syz.3.110 [ 41.885345][ T3875] set_capacity_and_notify: 10 callbacks suppressed [ 41.885363][ T3875] loop3: detected capacity change from 0 to 512 [ 41.935005][ T3888] netlink: 'syz.4.113': attribute type 1 has an invalid length. [ 42.301470][ T3922] FAULT_INJECTION: forcing a failure. [ 42.301470][ T3922] name failslab, interval 1, probability 0, space 0, times 1 [ 42.314200][ T3922] CPU: 0 UID: 0 PID: 3922 Comm: syz.4.124 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.314266][ T3922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.314307][ T3922] Call Trace: [ 42.314316][ T3922] [ 42.314325][ T3922] __dump_stack+0x1d/0x30 [ 42.314351][ T3922] dump_stack_lvl+0xe8/0x140 [ 42.314396][ T3922] dump_stack+0x15/0x1b [ 42.314419][ T3922] should_fail_ex+0x265/0x280 [ 42.314441][ T3922] should_failslab+0x8c/0xb0 [ 42.314462][ T3922] __kmalloc_cache_noprof+0x65/0x4c0 [ 42.314510][ T3922] ? sg_read+0x3ce/0xcb0 [ 42.314618][ T3922] sg_read+0x3ce/0xcb0 [ 42.314659][ T3922] ? __pfx_autoremove_wake_function+0x10/0x10 [ 42.314699][ T3922] ? __pfx_sg_read+0x10/0x10 [ 42.314799][ T3922] vfs_readv+0x3fb/0x690 [ 42.314838][ T3922] do_readv+0xe7/0x210 [ 42.314870][ T3922] __x64_sys_readv+0x45/0x50 [ 42.314904][ T3922] x64_sys_call+0x2831/0x3000 [ 42.315066][ T3922] do_syscall_64+0xd8/0x2a0 [ 42.315123][ T3922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.315152][ T3922] RIP: 0033:0x7fe2892bf749 [ 42.315171][ T3922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.315191][ T3922] RSP: 002b:00007fe287d1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 42.315209][ T3922] RAX: ffffffffffffffda RBX: 00007fe289515fa0 RCX: 00007fe2892bf749 [ 42.315220][ T3922] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000006 [ 42.315236][ T3922] RBP: 00007fe287d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 42.315278][ T3922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.315293][ T3922] R13: 00007fe289516038 R14: 00007fe289515fa0 R15: 00007ffc20e289c8 [ 42.315317][ T3922] [ 42.392448][ T3923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.125'. [ 42.551307][ T3936] netlink: 'syz.4.130': attribute type 3 has an invalid length. [ 42.559226][ T3936] netlink: 'syz.4.130': attribute type 3 has an invalid length. [ 42.594454][ T3939] netlink: 'syz.3.132': attribute type 5 has an invalid length. [ 42.606042][ T3939] ip6erspan0: entered promiscuous mode [ 42.616174][ T3942] Invalid ELF header type: 2 != 1 [ 42.685745][ T3949] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 42.739897][ T3953] loop3: detected capacity change from 0 to 1024 [ 42.750070][ T3953] EXT4-fs: Ignoring removed orlov option [ 42.782067][ T3953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.802692][ T3953] openvswitch: netlink: Missing key (keys=40, expected=80) [ 42.886467][ T3963] loop1: detected capacity change from 0 to 164 [ 42.995949][ T3963] lo speed is unknown, defaulting to 1000 [ 43.118506][ T3959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.139'. [ 43.138887][ T3966] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 43.272240][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 43.272261][ T29] audit: type=1400 audit(1765103223.599:711): avc: denied { write open } for pid=3952 comm="syz.3.138" path="/23/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.395097][ T3979] netlink: 'syz.2.144': attribute type 3 has an invalid length. [ 43.423519][ T29] audit: type=1326 audit(1765103223.759:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 43.526403][ T29] audit: type=1326 audit(1765103223.799:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 43.549762][ T29] audit: type=1326 audit(1765103223.799:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 43.573128][ T29] audit: type=1326 audit(1765103223.799:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 43.596549][ T29] audit: type=1326 audit(1765103223.799:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 43.619914][ T29] audit: type=1326 audit(1765103223.799:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 43.643190][ T29] audit: type=1326 audit(1765103223.799:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 43.666535][ T29] audit: type=1326 audit(1765103223.799:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 43.689844][ T29] audit: type=1326 audit(1765103223.799:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 43.787599][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.855219][ T3986] SELinux: failed to load policy [ 43.884820][ T3996] pimreg: entered allmulticast mode [ 43.893286][ T4000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 43.937440][ T3988] pimreg: left allmulticast mode [ 44.237869][ T4032] netlink: 40 bytes leftover after parsing attributes in process `syz.4.164'. [ 44.575253][ T4054] program syz.3.173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.584848][ T4054] program syz.3.173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.783251][ T4057] pimreg: entered allmulticast mode [ 44.807660][ T4061] loop2: detected capacity change from 0 to 1024 [ 44.815611][ T4061] journal_path: Non-blockdev passed as './file0' [ 44.821993][ T4061] EXT4-fs: error: could not find journal device path [ 44.857665][ T4048] pimreg: left allmulticast mode [ 44.903357][ T4069] loop2: detected capacity change from 0 to 128 [ 44.953138][ T4069] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 44.961216][ T4069] FAT-fs (loop2): Filesystem has been set read-only [ 44.972543][ T4076] __nla_validate_parse: 4 callbacks suppressed [ 44.972562][ T4076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 44.985358][ T4069] bio_check_eod: 34 callbacks suppressed [ 44.985378][ T4069] syz.2.178: attempt to access beyond end of device [ 44.985378][ T4069] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 45.035444][ T4076] loop1: detected capacity change from 0 to 1024 [ 45.043347][ T4076] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.052883][ T4069] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 45.054419][ T4076] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.062192][ T4069] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 45.073455][ T4076] JBD2: no valid journal superblock found [ 45.085551][ T4076] EXT4-fs (loop1): Could not load journal inode [ 45.097820][ T4069] syz.2.178: attempt to access beyond end of device [ 45.097820][ T4069] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.111322][ T4069] syz.2.178: attempt to access beyond end of device [ 45.111322][ T4069] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.142746][ T4069] syz.2.178: attempt to access beyond end of device [ 45.142746][ T4069] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.143784][ T4076] syz.1.181 (4076) used greatest stack depth: 9688 bytes left [ 45.156710][ T4069] syz.2.178: attempt to access beyond end of device [ 45.156710][ T4069] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.185174][ T4069] syz.2.178: attempt to access beyond end of device [ 45.185174][ T4069] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.198744][ T4069] syz.2.178: attempt to access beyond end of device [ 45.198744][ T4069] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.219578][ T4069] syz.2.178: attempt to access beyond end of device [ 45.219578][ T4069] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.233434][ T4069] syz.2.178: attempt to access beyond end of device [ 45.233434][ T4069] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.274699][ T4069] syz.2.178: attempt to access beyond end of device [ 45.274699][ T4069] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.893431][ T4106] pimreg: entered allmulticast mode [ 45.895319][ T4106] pimreg: left allmulticast mode [ 46.229690][ T4113] bridge0: entered promiscuous mode [ 46.229894][ T4113] bridge0: left promiscuous mode [ 46.381758][ T4120] FAULT_INJECTION: forcing a failure. [ 46.381758][ T4120] name failslab, interval 1, probability 0, space 0, times 0 [ 46.381789][ T4120] CPU: 0 UID: 0 PID: 4120 Comm: syz.1.195 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.381894][ T4120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.381909][ T4120] Call Trace: [ 46.381918][ T4120] [ 46.381926][ T4120] __dump_stack+0x1d/0x30 [ 46.381952][ T4120] dump_stack_lvl+0xe8/0x140 [ 46.382043][ T4120] dump_stack+0x15/0x1b [ 46.382148][ T4120] should_fail_ex+0x265/0x280 [ 46.382179][ T4120] should_failslab+0x8c/0xb0 [ 46.382210][ T4120] kmem_cache_alloc_noprof+0x69/0x4b0 [ 46.382240][ T4120] ? audit_log_start+0x342/0x720 [ 46.382298][ T4120] audit_log_start+0x342/0x720 [ 46.382327][ T4120] ? kstrtouint+0x76/0xc0 [ 46.382427][ T4120] audit_seccomp+0x48/0x100 [ 46.382468][ T4120] ? __seccomp_filter+0x832/0x1260 [ 46.382506][ T4120] __seccomp_filter+0x843/0x1260 [ 46.382617][ T4120] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 46.382656][ T4120] ? vfs_write+0x7e8/0x960 [ 46.382751][ T4120] ? __cond_resched+0x4e/0x90 [ 46.382782][ T4120] __secure_computing+0x82/0x150 [ 46.382817][ T4120] syscall_trace_enter+0xcf/0x1e0 [ 46.382853][ T4120] do_syscall_64+0xb2/0x2a0 [ 46.382893][ T4120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.382958][ T4120] RIP: 0033:0x7faeb662f749 [ 46.382978][ T4120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.383001][ T4120] RSP: 002b:00007faeb5097038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 46.383028][ T4120] RAX: ffffffffffffffda RBX: 00007faeb6885fa0 RCX: 00007faeb662f749 [ 46.383045][ T4120] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000001 [ 46.383095][ T4120] RBP: 00007faeb5097090 R08: 0000000000000000 R09: 0000000000000000 [ 46.383111][ T4120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.383128][ T4120] R13: 00007faeb6886038 R14: 00007faeb6885fa0 R15: 00007ffd5b092768 [ 46.383196][ T4120] [ 46.651684][ T4126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 46.748320][ T4136] loop1: detected capacity change from 0 to 1024 [ 46.759495][ T4136] EXT4-fs: Ignoring removed bh option [ 46.779944][ T4136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.836547][ T3322] EXT4-fs error (device loop1): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /49/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 46.909024][ T3322] EXT4-fs error (device loop1): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /49/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 46.945944][ T4152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.205'. [ 46.972122][ T3322] EXT4-fs error (device loop1): empty_inline_dir:1770: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 47.010598][ T3322] EXT4-fs warning (device loop1): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.038164][ T4155] loop0: detected capacity change from 0 to 512 [ 47.059344][ T4155] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 47.059503][ T3322] EXT4-fs error (device loop1): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /49/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 47.124815][ T3322] EXT4-fs error (device loop1): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /49/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 47.148338][ T3322] EXT4-fs error (device loop1): empty_inline_dir:1770: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 47.171253][ T3322] EXT4-fs warning (device loop1): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.186329][ T3322] EXT4-fs error (device loop1): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /49/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 47.212564][ T3322] EXT4-fs error (device loop1): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /49/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 47.235556][ T4157] sit0: entered allmulticast mode [ 47.254874][ T3322] EXT4-fs error (device loop1): empty_inline_dir:1770: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 47.276689][ T3322] EXT4-fs warning (device loop1): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.291379][ T3322] EXT4-fs error (device loop1): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /49/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 47.314629][ T3322] EXT4-fs warning (device loop1): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.330235][ T3322] EXT4-fs warning (device loop1): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.345261][ T3322] EXT4-fs warning (device loop1): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.360506][ T3322] EXT4-fs warning (device loop1): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.375648][ T3322] EXT4-fs warning (device loop1): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.392278][ T3322] EXT4-fs warning (device loop1): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.426565][ T3322] EXT4-fs warning (device loop1): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.445063][ T4162] validate_nla: 9 callbacks suppressed [ 47.445080][ T4162] netlink: 'syz.3.210': attribute type 3 has an invalid length. [ 47.458957][ T4162] netlink: 'syz.3.210': attribute type 3 has an invalid length. [ 47.529373][ T4167] netlink: 'syz.2.212': attribute type 3 has an invalid length. [ 47.538006][ T4167] netlink: 'syz.2.212': attribute type 3 has an invalid length. [ 47.592021][ T4170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.214'. [ 47.601033][ T4170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'. [ 47.609953][ T4170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.214'. [ 47.643108][ T4170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'. [ 47.652136][ T4170] netlink: 44 bytes leftover after parsing attributes in process `syz.0.214'. [ 47.674142][ T4178] netlink: 'syz.4.217': attribute type 3 has an invalid length. [ 47.686599][ T4178] netlink: 'syz.4.217': attribute type 3 has an invalid length. [ 47.898102][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.912359][ T4185] pimreg: entered allmulticast mode [ 47.920987][ T4191] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 47.928856][ T4191] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 47.939081][ T4192] pimreg: left allmulticast mode [ 48.042713][ T4202] loop3: detected capacity change from 0 to 128 [ 48.056689][ T4201] FAULT_INJECTION: forcing a failure. [ 48.056689][ T4201] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 48.070059][ T4201] CPU: 0 UID: 0 PID: 4201 Comm: syz.4.226 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.070131][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.070147][ T4201] Call Trace: [ 48.070155][ T4201] [ 48.070164][ T4201] __dump_stack+0x1d/0x30 [ 48.070189][ T4201] dump_stack_lvl+0xe8/0x140 [ 48.070216][ T4201] dump_stack+0x15/0x1b [ 48.070262][ T4201] should_fail_ex+0x265/0x280 [ 48.070342][ T4201] should_fail_alloc_page+0xf2/0x100 [ 48.070368][ T4201] __alloc_frozen_pages_noprof+0x109/0x360 [ 48.070482][ T4201] alloc_pages_mpol+0xb3/0x260 [ 48.070515][ T4201] vma_alloc_folio_noprof+0x1aa/0x300 [ 48.070544][ T4201] handle_mm_fault+0xef5/0x2c60 [ 48.070593][ T4201] do_user_addr_fault+0x630/0x1080 [ 48.070642][ T4201] exc_page_fault+0x62/0xa0 [ 48.070665][ T4201] asm_exc_page_fault+0x26/0x30 [ 48.070686][ T4201] RIP: 0033:0x7fe28926cc5b [ 48.070706][ T4201] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 48.070725][ T4201] RSP: 002b:00007fe287d1ce10 EFLAGS: 00010246 [ 48.070740][ T4201] RAX: 00007fe287d1ef30 RBX: 00007fe2894ea640 RCX: 0000000000000000 [ 48.070753][ T4201] RDX: 00007fe287d1ef78 RSI: 00007fe289320df8 RDI: 00007fe287d1ce30 [ 48.070765][ T4201] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 48.070777][ T4201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.070789][ T4201] R13: 00007fe289516038 R14: 00007fe289515fa0 R15: 00007ffc20e289c8 [ 48.070901][ T4201] [ 48.070947][ T4201] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 48.085307][ T4204] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 48.270182][ T1623] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.370385][ T4214] netlink: 'syz.4.232': attribute type 3 has an invalid length. [ 48.378435][ T4214] netlink: 'syz.4.232': attribute type 3 has an invalid length. [ 48.402312][ T4209] netlink: 76 bytes leftover after parsing attributes in process `syz.3.230'. [ 48.420300][ T1623] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.437385][ T4220] lo speed is unknown, defaulting to 1000 [ 48.438004][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 48.438075][ T29] audit: type=1326 audit(1765103228.779:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 48.475441][ T29] audit: type=1326 audit(1765103228.819:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 48.498699][ T29] audit: type=1326 audit(1765103228.819:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 48.522045][ T29] audit: type=1326 audit(1765103228.819:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 48.547639][ T29] audit: type=1400 audit(1765103228.819:968): avc: denied { name_bind } for pid=4219 comm="syz.2.233" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 48.569235][ T29] audit: type=1326 audit(1765103228.839:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 48.592468][ T29] audit: type=1326 audit(1765103228.839:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 48.615744][ T29] audit: type=1326 audit(1765103228.839:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 48.642209][ T1623] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.686962][ T4196] lo speed is unknown, defaulting to 1000 [ 48.698276][ T1623] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.752502][ T4239] loop2: detected capacity change from 0 to 512 [ 48.769535][ T4241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.238'. [ 48.808724][ T1623] bridge_slave_1: left allmulticast mode [ 48.814481][ T1623] bridge_slave_1: left promiscuous mode [ 48.820307][ T1623] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.836825][ T1623] bridge_slave_0: left allmulticast mode [ 48.842821][ T1623] bridge_slave_0: left promiscuous mode [ 48.848621][ T1623] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.859268][ T29] audit: type=1326 audit(1765103229.199:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 48.882587][ T29] audit: type=1326 audit(1765103229.199:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 48.976636][ T1623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.986819][ T1623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.996749][ T1623] bond0 (unregistering): Released all slaves [ 49.046685][ T1623] hsr_slave_0: left promiscuous mode [ 49.066773][ T1623] hsr_slave_1: left promiscuous mode [ 49.072596][ T1623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.080121][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.099775][ T1623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.107253][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.133203][ T1623] veth1_macvtap: left promiscuous mode [ 49.140966][ T1623] veth0_macvtap: left promiscuous mode [ 49.147088][ T1623] veth1_vlan: left promiscuous mode [ 49.152518][ T1623] veth0_vlan: left promiscuous mode [ 49.606188][ T1623] team0 (unregistering): Port device team_slave_1 removed [ 49.613848][ T1623] team0 (unregistering): Port device team_slave_0 removed [ 49.704955][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 49.757772][ T4253] lo speed is unknown, defaulting to 1000 [ 49.782532][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.782575][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.783359][ T4196] bridge_slave_0: entered allmulticast mode [ 49.829946][ T4196] bridge_slave_0: entered promiscuous mode [ 49.846204][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.846251][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.847370][ T4196] bridge_slave_1: entered allmulticast mode [ 49.893790][ T4282] loop4: detected capacity change from 0 to 4096 [ 49.904906][ T4196] bridge_slave_1: entered promiscuous mode [ 49.947514][ T4282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.969282][ T4289] loop2: detected capacity change from 0 to 164 [ 50.024996][ T4289] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.040285][ T4282] bridge_slave_0: left allmulticast mode [ 50.046120][ T4282] bridge_slave_0: left promiscuous mode [ 50.051945][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.061911][ T4282] bridge_slave_1: left allmulticast mode [ 50.067653][ T4282] bridge_slave_1: left promiscuous mode [ 50.073341][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.104616][ T4282] bond0: (slave bond_slave_0): Releasing backup interface [ 50.137347][ T4282] bond0: (slave bond_slave_1): Releasing backup interface [ 50.150662][ T4282] team0: Port device team_slave_0 removed [ 50.165413][ T4282] team0: Port device team_slave_1 removed [ 50.177884][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.185619][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.196002][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.203421][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.211145][ T4314] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.219762][ T4314] rock: directory entry would overflow storage [ 50.225976][ T4282] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 50.227743][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.241939][ T4314] rock: sig=0x4f50, size=4, remaining=3 [ 50.241963][ T4314] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 50.268543][ T4298] team0: Mode changed to "loadbalance" [ 50.284086][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.309066][ T4289] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.319172][ T4289] Symlink component flag not implemented [ 50.324956][ T4289] Symlink component flag not implemented [ 50.334128][ T4289] Symlink component flag not implemented (7) [ 50.340185][ T4289] Symlink component flag not implemented (116) [ 50.354628][ T4196] team0: Port device team_slave_0 added [ 50.389698][ T4196] team0: Port device team_slave_1 added [ 50.478581][ T4328] __nla_validate_parse: 2 callbacks suppressed [ 50.478596][ T4328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'. [ 50.494699][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.501857][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.527909][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.542726][ T4330] loop2: detected capacity change from 0 to 512 [ 50.561179][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.568254][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.594345][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.606832][ T4330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.641329][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 50.651660][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 50.660675][ T4330] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.716187][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.753449][ T4196] hsr_slave_0: entered promiscuous mode [ 50.772833][ T4196] hsr_slave_1: entered promiscuous mode [ 50.962641][ T4369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.972763][ T4369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.997164][ T4196] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.024104][ T4196] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.047872][ T4196] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.068875][ T4196] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.143512][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.170326][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.188550][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.195702][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.223562][ T1623] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.230715][ T1623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.293344][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.367263][ T4399] loop4: detected capacity change from 0 to 512 [ 51.435130][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.558652][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.614722][ T4399] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 51.733315][ T4196] veth0_vlan: entered promiscuous mode [ 51.747369][ T4196] veth1_vlan: entered promiscuous mode [ 51.774468][ T4196] veth0_macvtap: entered promiscuous mode [ 51.782072][ T4196] veth1_macvtap: entered promiscuous mode [ 51.808539][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.819199][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.926111][ T2407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.980029][ T2407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.994317][ T4425] FAULT_INJECTION: forcing a failure. [ 51.994317][ T4425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.007527][ T4425] CPU: 1 UID: 0 PID: 4425 Comm: syz.3.266 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.007561][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.007574][ T4425] Call Trace: [ 52.007581][ T4425] [ 52.007597][ T4425] __dump_stack+0x1d/0x30 [ 52.007621][ T4425] dump_stack_lvl+0xe8/0x140 [ 52.007645][ T4425] dump_stack+0x15/0x1b [ 52.007669][ T4425] should_fail_ex+0x265/0x280 [ 52.007768][ T4425] should_fail+0xb/0x20 [ 52.007786][ T4425] should_fail_usercopy+0x1a/0x20 [ 52.007809][ T4425] _copy_to_user+0x20/0xa0 [ 52.007839][ T4425] simple_read_from_buffer+0xb5/0x130 [ 52.007865][ T4425] proc_fail_nth_read+0x10e/0x150 [ 52.007900][ T4425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.007931][ T4425] vfs_read+0x1a8/0x770 [ 52.007950][ T4425] ? __rcu_read_unlock+0x4f/0x70 [ 52.007970][ T4425] ? __fget_files+0x184/0x1c0 [ 52.008050][ T4425] ? mutex_lock+0x58/0x90 [ 52.008078][ T4425] ksys_read+0xda/0x1a0 [ 52.008115][ T4425] __x64_sys_read+0x40/0x50 [ 52.008133][ T4425] x64_sys_call+0x2889/0x3000 [ 52.008161][ T4425] do_syscall_64+0xd8/0x2a0 [ 52.008256][ T4425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.008277][ T4425] RIP: 0033:0x7f77d3dee15c [ 52.008295][ T4425] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.008316][ T4425] RSP: 002b:00007f77d2836030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.008340][ T4425] RAX: ffffffffffffffda RBX: 00007f77d4046090 RCX: 00007f77d3dee15c [ 52.008365][ T4425] RDX: 000000000000000f RSI: 00007f77d28360a0 RDI: 0000000000000008 [ 52.008378][ T4425] RBP: 00007f77d2836090 R08: 0000000000000000 R09: 0000000000000000 [ 52.008389][ T4425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.008473][ T4425] R13: 00007f77d4046128 R14: 00007f77d4046090 R15: 00007ffe02310c28 [ 52.008491][ T4425] [ 52.009900][ T2407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.285724][ T4439] lo speed is unknown, defaulting to 1000 [ 52.396888][ T2407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.425776][ T4437] mmap: syz.2.270 (4437) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.569689][ T4443] loop3: detected capacity change from 0 to 512 [ 52.692276][ T4447] pimreg: entered allmulticast mode [ 52.759571][ T4454] pimreg: left allmulticast mode [ 52.768424][ T4443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.791510][ T4443] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.820347][ T4443] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.271: corrupted xattr block 6: invalid header [ 52.862791][ T4443] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 52.872693][ T4443] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.271: corrupted xattr block 6: invalid header [ 52.886585][ T4443] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 52.896343][ T4443] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.271: corrupted xattr block 6: invalid header [ 52.914941][ T4443] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 52.925554][ T4443] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.271: corrupted xattr block 6: invalid header [ 52.961471][ T4443] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 52.970759][ T4443] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.271: corrupted xattr block 6: invalid header [ 52.984194][ T4443] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 52.995083][ T4443] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.271: corrupted xattr block 6: invalid header [ 53.433051][ T4472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'. [ 53.574487][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 53.574506][ T29] audit: type=1400 audit(1765103233.909:1043): avc: denied { write } for pid=4477 comm="syz.5.280" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.621849][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.675011][ T4484] loop5: detected capacity change from 0 to 256 [ 53.923219][ T4499] pimreg: entered allmulticast mode [ 53.929261][ T4499] pimreg: left allmulticast mode [ 54.019610][ T4495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.284'. [ 54.045466][ T4512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.291'. [ 54.054659][ T4512] bridge_slave_1: left allmulticast mode [ 54.060397][ T4512] bridge_slave_1: left promiscuous mode [ 54.066302][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.074935][ T4512] bridge_slave_0: left allmulticast mode [ 54.080609][ T4512] bridge_slave_0: left promiscuous mode [ 54.086585][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.087078][ T4510] Driver unsupported XDP return value 0 on prog (id 245) dev N/A, expect packet loss! [ 54.117515][ T29] audit: type=1400 audit(1765103234.459:1044): avc: denied { create } for pid=4511 comm="syz.5.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.139376][ T4513] loop5: detected capacity change from 0 to 512 [ 54.159770][ T4515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.292'. [ 54.172693][ T4513] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 54.182089][ T4513] EXT4-fs (loop5): invalid journal inode [ 54.188526][ T4513] EXT4-fs (loop5): can't get journal size [ 54.195783][ T4513] EXT4-fs (loop5): 1 truncate cleaned up [ 54.205060][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 54.224392][ T4513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.226072][ T29] audit: type=1400 audit(1765103234.569:1045): avc: denied { create } for pid=4523 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.284247][ T29] audit: type=1400 audit(1765103234.609:1046): avc: denied { write } for pid=4523 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.312101][ T29] audit: type=1326 audit(1765103234.649:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 54.364341][ T29] audit: type=1326 audit(1765103234.709:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 54.398262][ T29] audit: type=1326 audit(1765103234.729:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 54.421955][ T29] audit: type=1326 audit(1765103234.729:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 54.445328][ T29] audit: type=1326 audit(1765103234.739:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76527bb829 code=0x7ffc0000 [ 54.468692][ T29] audit: type=1326 audit(1765103234.739:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765281f749 code=0x7ffc0000 [ 55.079557][ T4555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.306'. [ 55.432151][ T4566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 55.774663][ T4585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.317'. [ 55.796260][ T4587] validate_nla: 6 callbacks suppressed [ 55.796274][ T4587] netlink: 'syz.4.318': attribute type 3 has an invalid length. [ 55.839181][ T4587] netlink: 'syz.4.318': attribute type 3 has an invalid length. [ 56.338716][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 56.592520][ T4626] netlink: 'syz.4.330': attribute type 1 has an invalid length. [ 56.796562][ T4636] netlink: 4236 bytes leftover after parsing attributes in process `syz.3.335'. [ 57.181218][ T4196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.244666][ T4661] lo speed is unknown, defaulting to 1000 [ 57.298240][ T4664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55580 sclass=netlink_route_socket pid=4664 comm=syz.5.341 [ 57.322130][ T4661] netlink: '+}[@': attribute type 13 has an invalid length. [ 57.361659][ T4667] loop5: detected capacity change from 0 to 512 [ 57.386118][ T4667] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.412783][ T4667] EXT4-fs (loop5): mount failed [ 57.466221][ T4667] netlink: 36 bytes leftover after parsing attributes in process `syz.5.344'. [ 57.470802][ T4672] loop4: detected capacity change from 0 to 512 [ 57.484214][ T4667] program syz.5.344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.498122][ T4672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.521085][ T4672] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.585520][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.638423][ T4683] loop4: detected capacity change from 0 to 1024 [ 57.677112][ T4683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.718543][ T4683] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.789844][ T4683] netlink: 'gtp': attribute type 4 has an invalid length. [ 57.797120][ T4683] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 57.982258][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.008727][ T4723] netlink: 'syz.5.355': attribute type 1 has an invalid length. [ 58.115843][ T4734] netlink: 'syz.0.357': attribute type 3 has an invalid length. [ 58.128047][ T4734] netlink: 'syz.0.357': attribute type 3 has an invalid length. [ 58.161127][ T4730] pimreg: entered allmulticast mode [ 58.174083][ T4730] pimreg: left allmulticast mode [ 58.210513][ T4743] pimreg: entered allmulticast mode [ 58.222333][ T4745] netlink: 'syz.2.362': attribute type 3 has an invalid length. [ 58.233582][ T4745] netlink: 'syz.2.362': attribute type 3 has an invalid length. [ 58.241547][ T4736] pimreg: left allmulticast mode [ 58.296136][ T4752] loop2: detected capacity change from 0 to 1024 [ 58.329024][ T4756] program syz.3.366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.339695][ T4752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.362169][ T4752] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.497569][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.828138][ T4819] program syz.2.378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.831308][ T4810] pimreg: entered allmulticast mode [ 58.847907][ T4810] pimreg: left allmulticast mode [ 59.658641][ T4850] program syz.3.390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.698482][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 59.698495][ T29] audit: type=1400 audit(1765103240.039:1230): avc: denied { setopt } for pid=4851 comm="syz.5.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.893929][ T29] audit: type=1326 audit(1765103240.229:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 59.940790][ T29] audit: type=1326 audit(1765103240.259:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 59.964792][ T29] audit: type=1326 audit(1765103240.259:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 59.988460][ T29] audit: type=1326 audit(1765103240.259:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 60.011835][ T29] audit: type=1326 audit(1765103240.259:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 60.035496][ T29] audit: type=1326 audit(1765103240.259:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 60.058936][ T29] audit: type=1326 audit(1765103240.269:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 60.082327][ T29] audit: type=1326 audit(1765103240.269:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 60.105702][ T29] audit: type=1326 audit(1765103240.269:1239): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 60.153346][ T4864] loop2: detected capacity change from 0 to 512 [ 60.181553][ T4864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.197977][ T4864] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.260960][ T4874] loop5: detected capacity change from 0 to 1024 [ 60.285747][ T4874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 60.306690][ T4874] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.331059][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.438997][ T4890] pimreg: entered allmulticast mode [ 60.472846][ T4890] pimreg: left allmulticast mode [ 60.579542][ T4196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 61.020049][ T4917] validate_nla: 8 callbacks suppressed [ 61.020064][ T4917] netlink: 'syz.3.410': attribute type 3 has an invalid length. [ 61.069600][ T4917] netlink: 'syz.3.410': attribute type 3 has an invalid length. [ 61.296960][ T4940] netlink: 'syz.5.416': attribute type 1 has an invalid length. [ 61.399294][ T4948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.417'. [ 61.479526][ T4960] netlink: 40 bytes leftover after parsing attributes in process `syz.4.420'. [ 61.506624][ T4962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.422'. [ 61.548013][ T4971] netlink: 'syz.3.425': attribute type 3 has an invalid length. [ 61.562333][ T4971] netlink: 'syz.3.425': attribute type 3 has an invalid length. [ 62.139815][ T5006] netlink: 'syz.3.432': attribute type 3 has an invalid length. [ 62.139894][ T5006] netlink: 'syz.3.432': attribute type 3 has an invalid length. [ 62.325747][ T5015] netlink: 'syz.3.435': attribute type 3 has an invalid length. [ 62.325780][ T5015] netlink: 'syz.3.435': attribute type 3 has an invalid length. [ 62.518472][ T5027] netlink: 'syz.5.438': attribute type 3 has an invalid length. [ 62.560107][ T5036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 62.574293][ T5031] loop4: detected capacity change from 0 to 2048 [ 62.600212][ T5029] pimreg: entered allmulticast mode [ 62.615956][ T5031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.628777][ T5031] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.642180][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 62.675260][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.718475][ T5029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 62.748591][ T5029] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.781225][ T5053] pimreg: entered allmulticast mode [ 62.787367][ T5053] pimreg: left allmulticast mode [ 62.806270][ T5029] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.870436][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 62.946419][ T5029] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.036168][ T5029] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.046362][ T5075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'. [ 63.092809][ T2681] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.106122][ T61] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.118597][ T61] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.143230][ T2681] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.158210][ T5028] pimreg: left allmulticast mode [ 63.282238][ T5099] loop2: detected capacity change from 0 to 1024 [ 63.298413][ T5099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 63.324264][ T5099] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.376499][ T5107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 63.383376][ T5099] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 63.388803][ T5107] bridge_slave_1: left allmulticast mode [ 63.399605][ T5107] bridge_slave_1: left promiscuous mode [ 63.405362][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.413927][ T5107] bridge_slave_0: left allmulticast mode [ 63.419782][ T5107] bridge_slave_0: left promiscuous mode [ 63.425543][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.544953][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 63.715090][ T5138] loop5: detected capacity change from 0 to 164 [ 63.722364][ T5138] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.834206][ T5152] program syz.5.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.885908][ T5157] loop2: detected capacity change from 0 to 512 [ 63.904681][ T5157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.920583][ T5157] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.989441][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.019270][ T5171] loop5: detected capacity change from 0 to 2048 [ 64.043759][ T5178] loop3: detected capacity change from 0 to 164 [ 64.054642][ T5178] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 64.065838][ T5171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.081331][ T5171] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.119743][ T4196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.988666][ T5241] pimreg: entered allmulticast mode [ 64.996433][ T5241] pimreg: left allmulticast mode [ 65.039535][ T5251] loop4: detected capacity change from 0 to 512 [ 65.048379][ T5253] bridge_slave_1: left allmulticast mode [ 65.054211][ T5253] bridge_slave_1: left promiscuous mode [ 65.060007][ T5253] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.079142][ T5251] __quota_error: 307 callbacks suppressed [ 65.079172][ T5251] Quota error (device loop4): v2_read_file_info: Block with free entry 4294966277 out of range (1, 6). [ 65.098561][ T5251] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.113744][ T5251] EXT4-fs (loop4): mount failed [ 65.128399][ T5253] bridge_slave_0: left allmulticast mode [ 65.134152][ T5253] bridge_slave_0: left promiscuous mode [ 65.139926][ T5253] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.166805][ T5251] program syz.4.508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.336659][ T5272] loop3: detected capacity change from 0 to 164 [ 65.350976][ T5272] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.407475][ T29] audit: type=1326 audit(1765103245.749:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 65.435961][ T29] audit: type=1326 audit(1765103245.749:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 65.459574][ T29] audit: type=1326 audit(1765103245.749:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 65.483185][ T29] audit: type=1326 audit(1765103245.749:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 65.506557][ T29] audit: type=1326 audit(1765103245.749:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 65.530006][ T29] audit: type=1326 audit(1765103245.749:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 65.553375][ T29] audit: type=1326 audit(1765103245.749:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 65.576804][ T29] audit: type=1326 audit(1765103245.749:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 65.600081][ T29] audit: type=1326 audit(1765103245.749:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77d3e22005 code=0x7ffc0000 [ 65.675184][ T5286] loop3: detected capacity change from 0 to 1024 [ 65.687573][ T5286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.720328][ T5286] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.845878][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 65.899216][ T5310] loop3: detected capacity change from 0 to 512 [ 65.943486][ T5310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.961591][ T5310] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.035685][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.212674][ T5348] loop5: detected capacity change from 0 to 1024 [ 66.226998][ T5348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 66.254592][ T5348] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.293265][ T5348] validate_nla: 22 callbacks suppressed [ 66.293287][ T5348] netlink: 'gtp': attribute type 4 has an invalid length. [ 66.379305][ T4196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.641149][ T5392] pimreg: entered allmulticast mode [ 66.647145][ T5392] pimreg: left allmulticast mode [ 66.850019][ T5400] netlink: 'syz.0.540': attribute type 3 has an invalid length. [ 66.858375][ T5400] netlink: 'syz.0.540': attribute type 3 has an invalid length. [ 67.143687][ T5420] __nla_validate_parse: 14 callbacks suppressed [ 67.143705][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.549'. [ 67.178262][ T5423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.190980][ T5423] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.600670][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 67.698004][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.853056][ T5441] pimreg: entered allmulticast mode [ 67.862227][ T5441] pimreg: left allmulticast mode [ 68.008321][ T5446] netlink: 'syz.3.558': attribute type 3 has an invalid length. [ 68.032585][ T5446] netlink: 'syz.3.558': attribute type 3 has an invalid length. [ 68.254475][ T5470] netlink: 'syz.0.566': attribute type 3 has an invalid length. [ 68.262197][ T5470] netlink: 'syz.0.566': attribute type 3 has an invalid length. [ 68.322668][ T5478] netlink: 'syz.4.570': attribute type 3 has an invalid length. [ 68.332765][ T5478] netlink: 'syz.4.570': attribute type 3 has an invalid length. [ 68.579269][ T5497] set_capacity_and_notify: 1 callbacks suppressed [ 68.579285][ T5497] loop3: detected capacity change from 0 to 2048 [ 68.699411][ T5497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.721826][ T5497] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.741816][ T5497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 68.831974][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.850448][ T5510] loop4: detected capacity change from 0 to 1024 [ 68.881020][ T5515] netlink: 'syz.3.581': attribute type 3 has an invalid length. [ 68.882439][ T5510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.903601][ T5510] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.943957][ T5510] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 69.047063][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.152287][ T5543] sit0: entered allmulticast mode [ 69.306214][ T5564] pimreg: entered allmulticast mode [ 69.348336][ T5564] pimreg: left allmulticast mode [ 69.399463][ T5574] loop5: detected capacity change from 0 to 2048 [ 69.431223][ T5574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.481740][ T5574] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.511328][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.593'. [ 69.548892][ T4196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.572274][ T5590] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 69.813267][ T5626] loop3: detected capacity change from 0 to 512 [ 69.844113][ T5626] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.860978][ T5626] EXT4-fs (loop3): mount failed [ 69.895350][ T5626] netlink: 36 bytes leftover after parsing attributes in process `syz.3.604'. [ 69.905405][ T5626] program syz.3.604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.160003][ T5645] loop3: detected capacity change from 0 to 164 [ 70.296996][ T5641] pimreg: entered allmulticast mode [ 70.333310][ T5644] pimreg: left allmulticast mode [ 70.838965][ T5659] loop2: detected capacity change from 0 to 164 [ 71.816735][ T5665] loop3: detected capacity change from 0 to 164 [ 71.819758][ T5665] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 72.030229][ T5676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.619'. [ 72.110618][ T5674] validate_nla: 5 callbacks suppressed [ 72.110634][ T5674] netlink: 'gtp': attribute type 4 has an invalid length. [ 72.123341][ T5674] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 72.234699][ T5700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.623'. [ 72.304732][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 72.304748][ T29] audit: type=1326 audit(1765103252.649:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979905f749 code=0x7ffc0000 [ 72.347578][ T29] audit: type=1326 audit(1765103252.679:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f979905f749 code=0x7ffc0000 [ 72.371046][ T29] audit: type=1326 audit(1765103252.679:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979905f749 code=0x7ffc0000 [ 72.373204][ T5716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'. [ 72.394515][ T29] audit: type=1326 audit(1765103252.679:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f979905f749 code=0x7ffc0000 [ 72.426607][ T29] audit: type=1326 audit(1765103252.679:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979905f749 code=0x7ffc0000 [ 72.449995][ T29] audit: type=1326 audit(1765103252.679:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f979905f749 code=0x7ffc0000 [ 72.473401][ T29] audit: type=1326 audit(1765103252.679:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979905f749 code=0x7ffc0000 [ 72.496743][ T29] audit: type=1326 audit(1765103252.679:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979905f749 code=0x7ffc0000 [ 72.520073][ T29] audit: type=1326 audit(1765103252.679:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f979905f749 code=0x7ffc0000 [ 72.543534][ T29] audit: type=1326 audit(1765103252.679:2069): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979905f749 code=0x7ffc0000 [ 72.725614][ T5735] loop4: detected capacity change from 0 to 164 [ 73.103658][ T5742] netlink: 'syz.5.632': attribute type 3 has an invalid length. [ 73.111705][ T5742] netlink: 'syz.5.632': attribute type 3 has an invalid length. [ 73.175025][ T5747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.634'. [ 73.274749][ T5751] netlink: 'syz.5.636': attribute type 3 has an invalid length. [ 73.274781][ T5751] netlink: 'syz.5.636': attribute type 3 has an invalid length. [ 73.357017][ T5755] loop5: detected capacity change from 0 to 164 [ 73.369912][ T5755] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 73.575230][ T5771] netlink: 'syz.0.644': attribute type 3 has an invalid length. [ 73.583117][ T5771] netlink: 'syz.0.644': attribute type 3 has an invalid length. [ 73.597726][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 73.620280][ T5768] loop2: detected capacity change from 0 to 512 [ 73.633375][ T5768] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 73.654225][ T5768] EXT4-fs (loop2): invalid journal inode [ 73.664481][ T5768] EXT4-fs (loop2): can't get journal size [ 73.703767][ T5768] EXT4-fs (loop2): 1 truncate cleaned up [ 73.731981][ T5768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.095515][ T5786] loop4: detected capacity change from 0 to 1024 [ 74.173294][ T5786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.250126][ T5786] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.445874][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.534514][ T5786] netlink: 'gtp': attribute type 4 has an invalid length. [ 74.541701][ T5786] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 74.701684][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.852060][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 74.908988][ T5851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.660'. [ 75.130230][ T5861] pimreg: entered allmulticast mode [ 75.137154][ T5861] pimreg: left allmulticast mode [ 75.237869][ T5873] netlink: 'syz.2.667': attribute type 3 has an invalid length. [ 75.245885][ T5873] netlink: 'syz.2.667': attribute type 3 has an invalid length. [ 75.466822][ T5881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.670'. [ 75.481764][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 75.539249][ T5888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.672'. [ 75.651924][ T5897] pimreg: entered allmulticast mode [ 75.665803][ T5897] pimreg: left allmulticast mode [ 76.352082][ T5938] loop3: detected capacity change from 0 to 1024 [ 76.368859][ T5938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.381224][ T5938] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.505499][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.887823][ T5995] loop3: detected capacity change from 0 to 512 [ 76.928618][ T5995] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.944942][ T5995] EXT4-fs (loop3): mount failed [ 77.022077][ T5995] program syz.3.703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.316018][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 77.316053][ T29] audit: type=1326 audit(1765103257.659:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 77.345644][ T29] audit: type=1326 audit(1765103257.659:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 77.397820][ T6043] __nla_validate_parse: 6 callbacks suppressed [ 77.397840][ T6043] netlink: 4236 bytes leftover after parsing attributes in process `syz.5.720'. [ 77.415631][ T29] audit: type=1326 audit(1765103257.659:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 77.439211][ T29] audit: type=1326 audit(1765103257.659:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 77.462574][ T29] audit: type=1326 audit(1765103257.659:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 77.486000][ T29] audit: type=1326 audit(1765103257.659:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 77.509352][ T29] audit: type=1326 audit(1765103257.659:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 77.532779][ T29] audit: type=1326 audit(1765103257.659:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 77.556216][ T29] audit: type=1326 audit(1765103257.659:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 77.579631][ T29] audit: type=1326 audit(1765103257.659:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d3def749 code=0x7ffc0000 [ 77.919369][ T6066] loop4: detected capacity change from 0 to 512 [ 77.956605][ T6066] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.005860][ T6066] EXT4-fs (loop4): mount failed [ 78.051356][ T6066] program syz.4.729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.095531][ T6078] loop4: detected capacity change from 0 to 1024 [ 78.110731][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 78.123046][ T6078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 78.127490][ T6077] loop2: detected capacity change from 0 to 512 [ 78.142107][ T6078] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.153127][ T6077] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 78.161596][ T6077] EXT4-fs (loop2): invalid journal inode [ 78.168778][ T6077] EXT4-fs (loop2): can't get journal size [ 78.183605][ T6077] EXT4-fs (loop2): 1 truncate cleaned up [ 78.194539][ T6077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.240329][ T6078] validate_nla: 3 callbacks suppressed [ 78.240347][ T6078] netlink: 'gtp': attribute type 4 has an invalid length. [ 78.253044][ T6078] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 78.335538][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.700951][ T6105] loop3: detected capacity change from 0 to 512 [ 78.748600][ T6105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.805966][ T6105] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.974927][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.070986][ T6114] pimreg: entered allmulticast mode [ 79.077103][ T6114] pimreg: left allmulticast mode [ 79.141504][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.460820][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.751'. [ 79.480958][ T6137] loop5: detected capacity change from 0 to 512 [ 79.490156][ T6137] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 79.502399][ T6137] EXT4-fs (loop5): invalid journal inode [ 79.508188][ T6137] EXT4-fs (loop5): can't get journal size [ 79.517644][ T6137] EXT4-fs (loop5): 1 truncate cleaned up [ 79.523881][ T6137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.534245][ T6143] loop2: detected capacity change from 0 to 1024 [ 79.609665][ T6143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.622161][ T6143] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.659210][ T6143] netlink: 'gtp': attribute type 4 has an invalid length. [ 79.666495][ T6143] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 79.761782][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.153668][ T6171] pimreg: entered allmulticast mode [ 80.188455][ T6171] pimreg: left allmulticast mode [ 80.222200][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 80.382640][ T6202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.762'. [ 80.403932][ T4196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.904447][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 81.161443][ T6237] netlink: 'syz.4.776': attribute type 3 has an invalid length. [ 81.187975][ T6237] netlink: 'syz.4.776': attribute type 3 has an invalid length. [ 81.198500][ T6239] loop3: detected capacity change from 0 to 1024 [ 81.219515][ T6239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.238285][ T6239] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.283318][ T6239] netlink: 'gtp': attribute type 4 has an invalid length. [ 81.290530][ T6239] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 81.390685][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.408809][ T6266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.792'. [ 81.869043][ T6298] loop3: detected capacity change from 0 to 1024 [ 81.976762][ T6298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 82.132899][ T6298] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.326406][ T6315] netlink: 'syz.3.789': attribute type 4 has an invalid length. [ 82.352972][ T6314] loop5: detected capacity change from 0 to 1024 [ 82.375431][ T6319] program syz.2.794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.400234][ T6314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 82.429845][ T6314] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.456327][ T6333] __nla_validate_parse: 2 callbacks suppressed [ 82.456343][ T6333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.795'. [ 82.484084][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.558689][ T6341] netlink: 'syz.5.793': attribute type 4 has an invalid length. [ 82.566627][ T6341] netlink: 17 bytes leftover after parsing attributes in process `syz.5.793'. [ 82.765222][ T6350] netlink: 'syz.0.799': attribute type 3 has an invalid length. [ 82.773102][ T6350] netlink: 'syz.0.799': attribute type 3 has an invalid length. [ 82.797202][ T4196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.848042][ T29] kauditd_printk_skb: 719 callbacks suppressed [ 82.848060][ T29] audit: type=1326 audit(1765103263.189:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.0.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 82.933177][ T29] audit: type=1326 audit(1765103263.189:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.0.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 82.956634][ T29] audit: type=1326 audit(1765103263.199:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.0.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 82.979973][ T29] audit: type=1326 audit(1765103263.199:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.0.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 83.003558][ T29] audit: type=1326 audit(1765103263.199:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.0.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 83.027005][ T29] audit: type=1326 audit(1765103263.199:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.0.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 83.050515][ T29] audit: type=1326 audit(1765103263.199:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.0.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 83.073935][ T29] audit: type=1326 audit(1765103263.199:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.0.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 83.097338][ T29] audit: type=1326 audit(1765103263.209:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.0.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 83.120728][ T29] audit: type=1326 audit(1765103263.219:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.0.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f00c57a2005 code=0x7ffc0000 [ 83.191956][ T6386] loop2: detected capacity change from 0 to 1024 [ 83.206377][ T6386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.220311][ T6386] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.229995][ T6391] netlink: 'syz.0.809': attribute type 3 has an invalid length. [ 83.271657][ T6386] validate_nla: 1 callbacks suppressed [ 83.271733][ T6386] netlink: 'gtp': attribute type 4 has an invalid length. [ 83.276426][ T6394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'. [ 83.277339][ T6386] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 83.417162][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 83.480460][ T6419] netlink: 'syz.5.815': attribute type 3 has an invalid length. [ 83.502528][ T6419] netlink: 'syz.5.815': attribute type 3 has an invalid length. [ 83.602020][ T6440] netlink: 'syz.2.820': attribute type 3 has an invalid length. [ 83.620051][ T6440] netlink: 'syz.2.820': attribute type 3 has an invalid length. [ 83.678214][ T6448] loop2: detected capacity change from 0 to 1024 [ 83.708293][ T6448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.743901][ T6448] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.759577][ T6454] loop5: detected capacity change from 0 to 1024 [ 83.789653][ T6454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.820733][ T6454] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.832491][ T6448] netlink: 'gtp': attribute type 4 has an invalid length. [ 83.839690][ T6448] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 83.915067][ T6454] netlink: 'gtp': attribute type 4 has an invalid length. [ 83.922259][ T6454] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 83.942420][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.030428][ T4196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.058881][ T6482] netlink: 'syz.2.829': attribute type 3 has an invalid length. [ 84.094061][ T6482] netlink: 'syz.2.829': attribute type 3 has an invalid length. [ 84.096730][ T6487] loop5: detected capacity change from 0 to 1024 [ 84.127305][ T6488] netlink: 'syz.0.830': attribute type 3 has an invalid length. [ 84.166919][ T6487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.194082][ T6487] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.243848][ T6487] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 84.325902][ T4196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.391998][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.836'. [ 84.471993][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.840'. [ 84.634305][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.850'. [ 85.143181][ T6611] loop5: detected capacity change from 0 to 1024 [ 85.167770][ T6611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 85.186325][ T6611] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.319432][ T4196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.338239][ T6632] loop3: detected capacity change from 0 to 512 [ 85.346433][ T6632] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.359583][ T6632] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.373190][ T6632] EXT4-fs (loop3): 1 truncate cleaned up [ 85.387260][ T6632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.104514][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.250312][ T6711] team0 (unregistering): Port device team_slave_0 removed [ 86.260295][ T6711] team0 (unregistering): Port device team_slave_1 removed [ 86.595555][ T6743] pimreg: entered allmulticast mode [ 86.601442][ T6742] pimreg: left allmulticast mode [ 86.760357][ T6761] program syz.3.915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.876098][ T6776] loop3: detected capacity change from 0 to 1024 [ 86.897520][ T6776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 86.910561][ T6776] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.035718][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 87.040886][ T6800] loop2: detected capacity change from 0 to 1024 [ 87.058892][ T6800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.071078][ T6800] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.149715][ T6814] program syz.5.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.160424][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 87.329328][ T6835] loop3: detected capacity change from 0 to 512 [ 87.339414][ T6835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.352572][ T6835] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.420694][ T6840] loop5: detected capacity change from 0 to 164 [ 87.779864][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.854243][ T29] kauditd_printk_skb: 799 callbacks suppressed [ 87.854266][ T29] audit: type=1326 audit(1765103268.199:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.0.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 87.910749][ T29] audit: type=1326 audit(1765103268.229:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.0.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c576f749 code=0x7ffc0000 [ 87.936013][ T6859] __nla_validate_parse: 10 callbacks suppressed [ 87.936030][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 87.987749][ T6862] program syz.4.942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.017642][ T29] audit: type=1400 audit(1765103268.359:3991): avc: denied { create } for pid=6863 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.021702][ T6864] loop3: detected capacity change from 0 to 512 [ 88.044161][ T6864] EXT4-fs: Ignoring removed oldalloc option [ 88.046582][ T6866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.943'. [ 88.086072][ T6864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.124626][ T6864] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.148451][ T29] audit: type=1400 audit(1765103268.359:3992): avc: denied { setopt } for pid=6863 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.167877][ T29] audit: type=1400 audit(1765103268.359:3993): avc: denied { connect } for pid=6863 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.199405][ T6864] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.941: bg 0: block 217: padding at end of block bitmap is not set [ 88.218773][ T6864] EXT4-fs (loop3): Remounting filesystem read-only [ 88.255279][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.270498][ T29] audit: type=1326 audit(1765103268.609:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 88.293927][ T29] audit: type=1326 audit(1765103268.609:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 88.317325][ T29] audit: type=1326 audit(1765103268.609:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 88.340679][ T29] audit: type=1326 audit(1765103268.609:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 88.364082][ T29] audit: type=1326 audit(1765103268.609:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2892bf749 code=0x7ffc0000 [ 88.401508][ T3321] ================================================================== [ 88.409655][ T3321] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 88.417414][ T3321] [ 88.419762][ T3321] read-write to 0xffff888237d27550 of 8 bytes by task 6887 on cpu 1: [ 88.427846][ T3321] find_get_block_common+0x4f3/0x950 [ 88.433158][ T3321] bdev_getblk+0x4d/0x3f0 [ 88.437508][ T3321] __ext4_get_inode_loc+0x303/0x930 [ 88.442759][ T3321] ext4_reserve_inode_write+0xd7/0x250 [ 88.448242][ T3321] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 88.453655][ T3321] ext4_dirty_inode+0x92/0xc0 [ 88.458358][ T3321] __mark_inode_dirty+0x162/0x750 [ 88.463424][ T3321] touch_atime+0x229/0x340 [ 88.467868][ T3321] ext4_file_mmap_prepare+0x13a/0x1a0 [ 88.473293][ T3321] mmap_region+0x8e6/0x1410 [ 88.477824][ T3321] do_mmap+0x9b3/0xbe0 [ 88.481913][ T3321] vm_mmap_pgoff+0x17a/0x2e0 [ 88.486528][ T3321] ksys_mmap_pgoff+0x268/0x310 [ 88.491317][ T3321] x64_sys_call+0x16bb/0x3000 [ 88.496011][ T3321] do_syscall_64+0xd8/0x2a0 [ 88.500533][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.506441][ T3321] [ 88.508776][ T3321] read to 0xffff888237d27550 of 8 bytes by task 3321 on cpu 0: [ 88.516324][ T3321] has_bh_in_lru+0x35/0x1f0 [ 88.520844][ T3321] smp_call_function_many_cond+0x2a9/0xc60 [ 88.526674][ T3321] on_each_cpu_cond_mask+0x3c/0x80 [ 88.531805][ T3321] invalidate_bh_lrus+0x2a/0x30 [ 88.536672][ T3321] invalidate_bdev+0x42/0x70 [ 88.541268][ T3321] ext4_put_super+0x624/0x7d0 [ 88.545955][ T3321] generic_shutdown_super+0xe6/0x210 [ 88.551267][ T3321] kill_block_super+0x2a/0x70 [ 88.555950][ T3321] ext4_kill_sb+0x42/0x80 [ 88.560293][ T3321] deactivate_locked_super+0x75/0x1c0 [ 88.565689][ T3321] deactivate_super+0x97/0xa0 [ 88.570384][ T3321] cleanup_mnt+0x2a9/0x320 [ 88.574822][ T3321] __cleanup_mnt+0x19/0x20 [ 88.579282][ T3321] task_work_run+0x131/0x1a0 [ 88.583879][ T3321] exit_to_user_mode_loop+0x1fe/0x740 [ 88.589259][ T3321] do_syscall_64+0x202/0x2a0 [ 88.593867][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.599769][ T3321] [ 88.602097][ T3321] value changed: 0xffff888100564208 -> 0xffff88810055f208 [ 88.609210][ T3321] [ 88.611536][ T3321] Reported by Kernel Concurrency Sanitizer on: [ 88.617791][ T3321] CPU: 0 UID: 0 PID: 3321 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.627690][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.637755][ T3321] ================================================================== [ 88.677413][ T6894] loop3: detected capacity change from 0 to 1024 [ 88.697574][ T6894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.732811][ T6894] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.789254][ T6894] validate_nla: 15 callbacks suppressed [ 88.789274][ T6894] netlink: 'gtp': attribute type 4 has an invalid length. [ 88.802043][ T6894] netlink: 17 bytes leftover after parsing attributes in process `gtp'. [ 88.868697][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.