last executing test programs: 10m57.984330474s ago: executing program 32 (id=2296): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000003010101"], 0x14}, 0x1, 0x0, 0x0, 0x4048051}, 0x440c0) recvmmsg(r2, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10000, 0x0) 10m45.125051063s ago: executing program 33 (id=2261): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, 0x0, 0x2) 10m40.023309694s ago: executing program 34 (id=2342): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") chdir(&(0x7f0000000400)='./file0\x00') fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0) 10m38.627951605s ago: executing program 35 (id=2352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @random="7b5b1bc410c8", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "c9b6b22ec41010519fb8aeca0513a6e9"}]}}}}}}}}, 0x0) 10m34.448779106s ago: executing program 5 (id=2509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) 10m34.402892958s ago: executing program 5 (id=2510): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r0) 10m34.326862201s ago: executing program 5 (id=2512): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000007680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000500)={0x20, 0x15, 0x2, "c04e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000340)={0x0, 0xc, 0x3, "ee3c14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m34.132821519s ago: executing program 3 (id=2518): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xec}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 10m34.054439513s ago: executing program 3 (id=2520): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000300)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) 10m34.024685984s ago: executing program 3 (id=2523): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/41) 10m33.965163787s ago: executing program 3 (id=2525): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) 10m33.928789938s ago: executing program 3 (id=2527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) 10m33.884522371s ago: executing program 3 (id=2529): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000002000000000000000000085000000360000009500"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r0, r1, 0x25, 0x0, @val=@tracing={0x0, 0x5}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) 10m33.810106083s ago: executing program 36 (id=2529): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000002000000000000000000085000000360000009500"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r0, r1, 0x25, 0x0, @val=@tracing={0x0, 0x5}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) 10m33.65781687s ago: executing program 5 (id=2538): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) 10m33.615400512s ago: executing program 5 (id=2540): r0 = socket(0x11, 0x3, 0x0) sendmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000002c00)="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", 0xfbe}], 0x2}}], 0x1, 0x24044015) 10m33.418135171s ago: executing program 5 (id=2542): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xec}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 10m33.404087362s ago: executing program 37 (id=2542): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xec}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 10m15.035315888s ago: executing program 9 (id=2804): syz_emit_ethernet(0xfe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) socket$inet6(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000200)="6a4049f89aa3ce4d3c806b9de9f944dc35085a45f098e15d6c12a0c4b0486efbb972bc234a9ded434287dba03f00ec7570c80d25e90684", 0x37}, 0x44048850) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='kmem_cache_free\x00', r2, 0x0, 0x400000}, 0x18) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc5ffb}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x101401, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = epoll_create1(0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') syz_usb_connect(0x0, 0x2a9, &(0x7f00000006c0)=ANY=[], 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 10m14.329413769s ago: executing program 6 (id=2811): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESHEX=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) creat(0x0, 0x182) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, r3, 0x2) r4 = socket(0x21, 0xa, 0x24d) fallocate(r4, 0x2, 0x1, 0x2000000000000) syz_open_procfs(0x0, &(0x7f00000003c0)='net/vlan/vlan0\x00') ioctl$TIOCMIWAIT(r3, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400000000000200"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 10m14.008116483s ago: executing program 9 (id=2816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f00000008c0), 0x0}, 0x20) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@usrquota}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRESOCT=r6, @ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="02002cbd7000ffdbdf256700000008000100750000000c009900e40500007f0000000800c40008000000"], 0x30}}, 0x24000880) sysinfo(&(0x7f0000000f80)=""/154) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_procfs$pagemap(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x41) 10m13.917642697s ago: executing program 9 (id=2819): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, 0x0, &(0x7f0000000880)=r6}, 0x20) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@usrquota}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRESOCT=r6, @ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="02002cbd7000ffdbdf256700000008000100750000000c009900e40500007f0000000800c40008000000"], 0x30}}, 0x24000880) sysinfo(&(0x7f0000000f80)=""/154) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_procfs$pagemap(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x41) 10m13.809871402s ago: executing program 9 (id=2823): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) umount2(0x0, 0x9) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_pidfd_open(r0, 0x0) setns(0xffffffffffffffff, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 10m13.762604084s ago: executing program 9 (id=2825): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) 10m13.556572463s ago: executing program 9 (id=2831): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)="5974568fd36d9525c827efe2667cd11628b43e0d7afe95840869", 0x1a}], 0x1}, 0x1) sendto$inet6(r1, &(0x7f0000000340)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) 10m13.541624423s ago: executing program 38 (id=2831): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)="5974568fd36d9525c827efe2667cd11628b43e0d7afe95840869", 0x1a}], 0x1}, 0x1) sendto$inet6(r1, &(0x7f0000000340)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) 10m13.462646127s ago: executing program 6 (id=2836): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@security={'security\x00', 0xe, 0x4, 0x5a0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x4d0, 0x4d0, 0x4d0, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0xfc, 0xa, 0x1, 0x1, @private2, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xff000000, 0x0, 0xff000000], [0xff, 0x0, 0xffffffff], 0x2, 0x4}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x34, 0x9, {0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff, 0x0, 0xff000000, 0xff], [0xffffffff, 0xff000000], 'pimreg\x00', 'team0\x00', {}, {}, 0x5e, 0xf8, 0x4, 0x41}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x15a4, 0xd6], 0x6, 0x32613970bd857fb1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @empty, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}], 0x6}}, @common=@dst={{0x48}, {0x8, 0x2, 0x1, [0x4, 0x0, 0x0, 0xfffd, 0x9, 0x7ff, 0x8, 0x7, 0x9, 0x7, 0x1, 0x7, 0x0, 0x6, 0xfffb, 0x3e82], 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 'virt_wifi0\x00', {0x2}}}}, {{@ipv6={@local, @empty, [0x0, 0xff, 0xffffffff, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'netdevsim0\x00', 'veth1_to_bond\x00', {}, {}, 0x3c, 0x6, 0x6, 0x20}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x0, 0xffff, 0x4, 0x80, 0xd3, 0xc0, 0x4]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_list_modules(0x0, &(0x7f0000000480), 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x7ff, 0x0) splice(r4, 0x0, r3, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 10m13.284915165s ago: executing program 6 (id=2839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffe6, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x0, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10m13.284476104s ago: executing program 8 (id=2840): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 10m13.228127137s ago: executing program 8 (id=2841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 10m13.227444477s ago: executing program 8 (id=2842): waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) r5 = gettid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x121002, 0x161) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r7, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) r8 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) r10 = getpid() syz_clone3(&(0x7f00000004c0)={0x400, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x34}, &(0x7f0000000140)=""/43, 0x2b, &(0x7f0000000740)=""/229, &(0x7f0000000380)=[r1, r2, r3, r4, r5, r8, r9, r10], 0x8}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x10, 0x8}, {0x4, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) 10m13.033511615s ago: executing program 6 (id=2847): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) umount2(0x0, 0x9) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 10m13.013577276s ago: executing program 6 (id=2848): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x300008c5}, 0x4004850) 10m12.980604758s ago: executing program 6 (id=2849): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@security={'security\x00', 0xe, 0x4, 0x5a0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x4d0, 0x4d0, 0x4d0, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0xfc, 0xa, 0x1, 0x1, @private2, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xff000000, 0x0, 0xff000000], [0xff, 0x0, 0xffffffff], 0x2, 0x4}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x34, 0x9, {0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff, 0x0, 0xff000000, 0xff], [0xffffffff, 0xff000000], 'pimreg\x00', 'team0\x00', {}, {}, 0x5e, 0xf8, 0x4, 0x41}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x15a4, 0xd6], 0x6, 0x32613970bd857fb1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @empty, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}], 0x6}}, @common=@dst={{0x48}, {0x8, 0x2, 0x1, [0x4, 0x0, 0x0, 0xfffd, 0x9, 0x7ff, 0x8, 0x7, 0x9, 0x7, 0x1, 0x7, 0x0, 0x6, 0xfffb, 0x3e82], 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 'virt_wifi0\x00', {0x2}}}}, {{@ipv6={@local, @empty, [0x0, 0xff, 0xffffffff, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'netdevsim0\x00', 'veth1_to_bond\x00', {}, {}, 0x3c, 0x6, 0x6, 0x20}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x0, 0xffff, 0x4, 0x80, 0xd3, 0xc0, 0x4]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_list_modules(0x0, &(0x7f0000000480), 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x7ff, 0x0) splice(r4, 0x0, r3, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 10m12.963061068s ago: executing program 39 (id=2849): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@security={'security\x00', 0xe, 0x4, 0x5a0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x4d0, 0x4d0, 0x4d0, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0xfc, 0xa, 0x1, 0x1, @private2, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xff000000, 0x0, 0xff000000], [0xff, 0x0, 0xffffffff], 0x2, 0x4}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x34, 0x9, {0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff, 0x0, 0xff000000, 0xff], [0xffffffff, 0xff000000], 'pimreg\x00', 'team0\x00', {}, {}, 0x5e, 0xf8, 0x4, 0x41}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x15a4, 0xd6], 0x6, 0x32613970bd857fb1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @empty, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}], 0x6}}, @common=@dst={{0x48}, {0x8, 0x2, 0x1, [0x4, 0x0, 0x0, 0xfffd, 0x9, 0x7ff, 0x8, 0x7, 0x9, 0x7, 0x1, 0x7, 0x0, 0x6, 0xfffb, 0x3e82], 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 'virt_wifi0\x00', {0x2}}}}, {{@ipv6={@local, @empty, [0x0, 0xff, 0xffffffff, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'netdevsim0\x00', 'veth1_to_bond\x00', {}, {}, 0x3c, 0x6, 0x6, 0x20}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x0, 0xffff, 0x4, 0x80, 0xd3, 0xc0, 0x4]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_list_modules(0x0, &(0x7f0000000480), 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x7ff, 0x0) splice(r4, 0x0, r3, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 10m12.329100016s ago: executing program 8 (id=2857): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) umount2(0x0, 0x9) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 10m12.294434467s ago: executing program 8 (id=2858): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x300008c5}, 0x4004850) 10m11.971319442s ago: executing program 8 (id=2861): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)='c!', 0x2}], 0x1}}], 0x1, 0x20000001) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/109, 0x6d}], 0x1}, 0x8}], 0x2, 0x100, 0x0) 10m11.915466124s ago: executing program 40 (id=2861): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)='c!', 0x2}], 0x1}}], 0x1, 0x20000001) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/109, 0x6d}], 0x1}, 0x8}], 0x2, 0x100, 0x0) 3.243307921s ago: executing program 4 (id=10420): r0 = socket$vsock_stream(0x28, 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r5}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = timerfd_create(0x1, 0x800) timerfd_settime(r6, 0x3, &(0x7f0000000440)={{}, {0x0, 0x989680}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) 2.383271518s ago: executing program 4 (id=10439): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 2.10310561s ago: executing program 4 (id=10449): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_clone3(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x1, 0x40, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "f3d57736"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7, 0xfe, 0x4}, {0x6, 0x24, 0x1a, 0x9cc3, 0x3d}, [@mdlm={0x15, 0x24, 0x12, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x3c, 0x6}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 1.905220568s ago: executing program 1 (id=10454): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_clone3(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xffffff00, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x23}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'dvmrp0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x228, 0x248, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@empty, [0xaaab4584fd44661c, 0xffffff00, 0x0, 0xffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], 0x4d4, 0x3506, 0xff, 0x1, 0x6, 0x9}, {@ipv4=@broadcast, [0xffffff00, 0x1fe, 0xffffff00, 0xff000000], @ipv4=@rand_addr=0x64010101, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d5, 0x3505, 0x32, 0x0, 0x4e8535f9bc1af85f, 0x10}, {@ipv6=@loopback, [0xff000000, 0x0, 0x0, 0xff000000], @ipv4=@private=0xa010102, [0xffffff00, 0xffffff00, 0xff, 0xff000000], 0x4d6, 0x0, 0x5c, 0x1, 0x12, 0x17}, {@ipv6=@remote, [0xff000000, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 0x4d6, 0x3500, 0x5e, 0x1, 0x0, 0xf}], 0x5, 0x4}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) open(0x0, 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x1, 0x40, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "f3d57736"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7, 0xfe, 0x4}, {0x6, 0x24, 0x1a, 0x9cc3, 0x3d}, [@mdlm={0x15, 0x24, 0x12, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x3c, 0x6}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 1.748761395s ago: executing program 0 (id=10463): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1e20, &(0x7f0000000400)={0x0, 0xd144, 0x0, 0xffffffff, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfdfffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r2, 0x3516, 0xddd6, 0x4, 0x0, 0x3ec0) 1.593601282s ago: executing program 0 (id=10464): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)=ANY=[]) r2 = syz_pidfd_open(r0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x5, 0x7ffc1ffb}]}) pidfd_send_signal(r2, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x68017, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xfa, 0x6}, 0x102400, 0x80010003, 0x7, 0x6, 0xb, 0x20007, 0x800b, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x190da) 1.544898484s ago: executing program 0 (id=10466): r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)={[{@auto_da_alloc}]}, 0x3, 0x554, &(0x7f0000000e40)="$eJzs3cFvHFcZAPBvxt7ESVy8BQ6lEqWiRUmBrOOatBaHAhICLpWAIk5Iwdhry8raG9nrNrYi6oorEhJCUIkLnLgg8QcgoV64I6RK5Y4AgVBJ4ABS20EzO0viza7jiN2dyv79pJeZN293vu+ts89vdsczAZxaT0bEpYiYiohnImKu3J6WJQ66JX/cndu3VvKSRJa99HYSSbmtt6+z5fJC+bSZiPj6lyO+k9wfd2dv//pyq9XcLuvznc3knSzbv7yxubzeXG9uLS4uPLf0/NLVpSsj6Wc9Il744l9+/INffOmF33z6lT9e+9ul7+Zp/SfLXo2+foxSt+u14rXomY6I7XEEq8h00cOuqxXnAgDA0fL5/gcj4uPF/H8uporZHAAAAHCSZJ+bjXeSiAwAAAA4sdKImI0kbZTn+86WZ6xeiIgPx/m01d7pfGqtvbu1mrdF1KOWrm20mldipjh3oB61JK8vlOfY9urP9tUXI+LRiPjR3Lmi3lhpt1ar/vADAAAATokLfcf//5pL00ajbDyoODkAAABgdOpVJwAAAACMneN/AAAAOPnq2YA7dN0vHX8mAAAAwBh89cUX85L17n+9+vLe7vX2y5dXmzvXG5u7K42V9vaNxnq7vV5cs2/zQftrtds3PhNbuzfnO82dzvzO3v61zfbuVufaxqFbYAMAAAAT9OjH3vhDEhEHnz1XlNyZsq0WkU3d++DpKjIExuWhzun58/jyACbv3t/v5yrMA5g8U3o4vWpVJwBU7kF/ADT05J3fjT4XAABgPC5+ZPj3/2+vVZoaMGbl9//JsS4AApwoU1UnAFSm+/3fe1lX1dkAk1Q7agbgoABOvHQ03/8/4FTCxIACAAAVmy1KkjbK44DZSNNGI+KR4raAtWRto9W8EhEfiIi35mpn8/pC8czEbB4AAAAAAAAAAAAAAAAAAAAAAAAAjinLksgAAACAEy0i/WvvzlwX556e7f984Ezy77liGRGv/PSln9xc7nS2F/Lt//jf9s7r5fZnq/gEAwAAAOjXO07vHccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCidi1srd7Isy27fWplk3L9/ISLqEXdu31rplW7LdMwk+XImahFx/p9JTN/zvLxpagTxD16LiMcGxU/ytKIeM0XtUPwzEWnxmo0ofjxk/OjGvzCC+HCavZGPP58f9P5L48liOfj9N12W/9fw8S8tI88U49yg8e+RYTutHa4+/uav5ofGfy3i8enB408vfpLvb0D8p47Zx29/Y39/WFv284iLg8a/5HCs+c7mjfmdvf3LG5vL68315tbi4sJzS88vXV26Mr+20WqW/w6M8cOP/vq9u7V37+v/+SPG36L/Q17/p4/Z/3ffvHn7Q93Vvp9M1OJnWXbpqcE//8fyxScHx8//T3yi/D2Qt+evYfr6NwfGf+KXv39iWG55/1eH9H+mr/9n+/p/6Zj9f+Zr3/vTMR8KAEzAzt7+9eVWq7lt5d6VqL8v0hi+MldxGvm8c3JBvzK4KYkk8pW3DjUtTzCxI1deLd9jy63eu21Ee/5teXA0zuQrGo8AAIDxuTvp729JqkkIAAAAAAAAAAAAAAAAAAAATqEHXgZsWFMaEXe3fOv7R1yNrD/mQTVdBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40n8DAAD//0GQ1DU=") socket$nl_generic(0x10, 0x3, 0x10) 1.318749514s ago: executing program 7 (id=10471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 1.292200694s ago: executing program 7 (id=10472): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x800000000006}, 0x18) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xd600, [0x4]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) 1.288695115s ago: executing program 7 (id=10474): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000180)="fc60a2f03a") syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf08000000000000f1010000f8ffffffb702000008000000b70300f2890f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffe5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) modify_ldt$write2(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)="4e11f4292922c904e664e411cdbabcd6ba6be9561ad1a7489e010e355671e020691f2bd2b71a8936ae2b27129db4219a2654cee490d63784e561be0c7b11f819451db0c5a5c0e6d921eab8fb774367daabd875977d1555d7023f0524283a265eeb12a909da8a161f946397e9f6c7e0efe3900b38cf03166296a0895fae22408895352eb0af0c276f40765bf30a853732495b3e3725c0cbb435ff849cde394f6b78fa765a4309cc550b20ed41697722cd1dca59baff7a76a10b", 0xb9) socket$nl_xfrm(0x10, 0x3, 0x6) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffc, 0x8000000}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 1.140180661s ago: executing program 1 (id=10476): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) unshare(0x20000000) r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000001000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) ftruncate(r0, 0x7000000) preadv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000380)=""/4090, 0xffa}], 0x2, 0xa, 0x203) r2 = open$dir(&(0x7f0000000300)='./file0\x00', 0x18f300, 0x80) execveat(r2, &(0x7f0000001480)='./file0\x00', &(0x7f0000001440)={[&(0x7f00000014c0), &(0x7f0000001500)='memory.events\x00', &(0x7f00000013c0)='\x82che\x19\x00\x00\x00\x00\xff\xff\x00\x00\x7f\x04\xca\x96\x04\xef\x01\x00\x00\x0060\xff\xfd\xe77\x85\xe4W\xd5\xea\x0ei\xa7\x17\x00\x00', &(0x7f0000000340)='+,]\xba2\xb0CCC\x91!\x84[\x7f\xef\xf7+!(\x00', &(0x7f0000001380)='^,@*\x00', &(0x7f0000001400)='memory.events\x00']}, &(0x7f0000001640)={[0x0]}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) syz_clone3(&(0x7f0000000a00)={0x4000000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x82, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.019765797s ago: executing program 4 (id=10478): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 999.024968ms ago: executing program 4 (id=10479): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="10f0f900188015000000000800000000"], 0x10}], 0x1}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x140, 0x3ff}, 0x0, 0x0, 0xffffffff, 0xc, 0x5, 0xc0e, 0x7, 0x4, 0x1, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000140)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) fstat(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) r8 = getgid() r9 = getegid() r10 = getgid() statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x4000, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getegid() r13 = geteuid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)={{0x0, r13, r12, r13, 0x0, 0x80, 0x8010}, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {}, [{0x2, 0x1, 0xee01}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x1, r4}, {0x2, 0x3, 0xee01}, {0x2, 0x5, r5}, {0x2, 0x2, r7}], {0x4, 0x1}, [{0x8, 0x2}, {0x8, 0x7, r8}, {0x8, 0x5, r9}, {0x8, 0x0, r10}, {0x8, 0x4, r11}, {0x8, 0x3, r12}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x3, r14}, {0x8, 0x2, r15}, {0x8, 0x0, r16}], {}, {0x20, 0x4}}, 0xac, 0x3) 984.239488ms ago: executing program 4 (id=10480): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x40488e0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r4, &(0x7f0000000e80)=ANY=[], 0x78) sendfile(r4, r4, &(0x7f0000000000)=0x9, 0xffffffff) 916.449531ms ago: executing program 1 (id=10482): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100736977"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 864.597403ms ago: executing program 1 (id=10483): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000180)="fc60a2f03a") syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf08000000000000f1010000f8ffffffb702000008000000b70300f2890f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffe5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) modify_ldt$write2(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)="4e11f4292922c904e664e411cdbabcd6ba6be9561ad1a7489e010e355671e020691f2bd2b71a8936ae2b27129db4219a2654cee490d63784e561be0c7b11f819451db0c5a5c0e6d921eab8fb774367daabd875977d1555d7023f0524283a265eeb12a909da8a161f946397e9f6c7e0efe3900b38cf03166296a0895fae22408895352eb0af0c276f40765bf30a853732495b3e3725c0cbb435ff849cde394f6b78fa765a4309cc550b20ed41697722cd1dca59baff7a76a10b", 0xb9) socket$nl_xfrm(0x10, 0x3, 0x6) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffc, 0x8000000}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 663.066792ms ago: executing program 0 (id=10487): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) nanosleep(&(0x7f0000000080), 0x0) 598.553835ms ago: executing program 0 (id=10489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 561.547646ms ago: executing program 2 (id=10490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000010900010073797a31000000002c00048028000180080001006e6174001c00028008000340000000100800024000f7ff0908000140000000010900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000) 528.996748ms ago: executing program 0 (id=10491): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r5}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = timerfd_create(0x1, 0x800) timerfd_settime(r6, 0x3, &(0x7f0000000440)={{}, {0x0, 0x989680}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) 528.126987ms ago: executing program 2 (id=10492): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) io_uring_enter(0xffffffffffffffff, 0x29ab, 0xd480, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0x10000001}, 0x18) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250200000008000800", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1008002, &(0x7f0000000540)={[{@noauto_da_alloc}, {@grpquota}, {@grpjquota}, {@barrier}, {@dioread_nolock}, {@nodiscard}, {@nomblk_io_submit}, {@nodiscard}, {@quota}, {@minixdf}, {@nogrpid}, {@user_xattr}]}, 0x81, 0x601, &(0x7f00000011c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x2, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xa, 0x7fffffffffffffff}, 0x101489, 0x1fffffffffffe, 0x10000000, 0x0, 0x0, 0x20, 0xfffd, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$can_j1939(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x1d, r1, 0x0, {0x8986a1037c473dcc, 0x1, 0x2}}, 0x18, &(0x7f0000000240)={&(0x7f0000000880)="9a983f52071ed21e525f6fea70dba04a16b521435bcf53eb0b71c160732b511bf44df8103a0f1f6d7f4d33a4c7d7708b9c2723fc9634930bccd18e734367e7649eb7e5043bcac71b47aebf8d22af40e0581db52c0f6600abf3118b91c892d1c2a78e20a422f7259ce23bcecc2d4c71b17763642dcdbf5877adb2930ac62dbc0f9848b75c04ca3d8a26a5eead46f5a7014227801227cb9ad9b6cf372fbf9324a3cc62db3a0f57f39ceee82680f82ecff3190129a47b4f603ad1d4af75226ee16f5e55ffb6dca3f1b38e3045987f7b8f1c5301c98c5d89b8389d465eef4138b48f703734a0b1084b03433d4b9d4583c134815f1bba96460ac6aa1b4130c9c4d525fbf04f19571806d2553792eaa71e94cc11e86ca2bce53a7727bbb53879a748fd5bcce7dd5cbb66a2d894913963438ee69243e79d3d58f22b99b60b33c460a8847d01b946573e6f9c0d60791bd36f4989807dedebbec308a6e88dd8ffc228d5dcb248e48976c9bbbb1e48b2ad7515938d31e3b49bc1770bb845aa736a7a2aee75aadcf9da57ea828d127e241e07a00e4b5a26394d94e217e80b97e4581b0c119a05a7db06c613d7c52301d72a7a66483db6760ba880b5f401208f912813ea669bc635b2d7c7000c8041d10c564fc8f1480e083d6c6e87413064f1e43792e37a405199f823291487f4240a5fe3b1f76b8e14dcae1b28801b93b288200989512bb72f784fe0f13a09d4ff1dc27f58a09a7218866da38417fac3fd10bf0dda6de2bf8cc705d521492af062b2d2fc10fe82c531aa1528549e9ead711e53aefbc2688917bb6d1ff86a0da5f59c12c94fc83975a96c9300bf1371fd513034a4e7409ae421bfcff50a90e15b06587748da6372eb92d48b4059c9b4c72de0a825d9c63087da29f4efabe0e58b05794f3b41ebb68a9ccdd98f0feaf54e5fa1f26885ee04ad023f2a75185cfe5f97cb2507085ced6ab8bad4ea6dc6becbd7af939fbc4b29efcbd61b2e9fa651d73dee5cbf75849bdeff2b627f962077b932d4dbd2840cd88a91c5644137ac1168d6529e2b2d3ae4bd68d2ab20efc4ed3dc45b391e77d59a37f0f016bd731c1c0a7cd8091837594444b9591ccb305174daa9ae92e5ed390ff9c8183c494676cb89f343a83f88698935c05653625fd981c836c0a11334c48df2fd664bc631a0a1e1eabdbc9932bcf7e9e9327504650331b7c036ccdb8d24ed3466f986eb19c5e6c635e31bdbc27c0dabcd8e628bda44080917bc90f0f02360ceb879b1e7fbc06c8d5bbe190c6968adc2cbc1c732479e0b7f4111ac149bea6f338c551430ce7e8602afd9bcc6d7cf78852af02ae9392102e6ec70cae82fdd399fb29c444ab32881dd148a5d08b54fd85bd38071dda6aa5e9782b058d7ea63f946bbf806b96a19ad8a3857f2e273935732b0ca13f9244e951dffbbaaba373fd5ea6443d97233c78a113f9b85b485bf1350aefc989772681d3c9a0d011c029ef50b7a6b31e4cb3cd2b6acb604e1addf811d010585abd088a72f7ad87b3b2203aadbcfb97a7d77e6cea5d295a4530aa052a2ceab8273474d33546a0ac645eb5e7427613813673e6ed830d582b6257c289706bad39c0b021488e3d7f5f0f549a43c9a73d26483d504346abbe9b8a1ee72e89278cda20686996dddabaf6d14ced1f1c57e39e0c09d5443011b54dafcdcd45f18a01f55d3443f7cd833e47da40671b39945f9e5347a1a7c093e63b9a54ba2c9cb743ddc9e1468efaebdbdb037cfe5d7b385c86f1dbd8b366410d2eb9ac2a0ed9614948815a45f680d2c2abf78d178405a71da3f2c5522ae2ce824c2b21625a98ea5392e4638f29361c1d23b4200afafde27ca2a383ec4405a2bf6cc76a19e7cf437ddebc70543f5058b878989ed866912e36647bc58e2f07d811903a97607c013ad7bd96a41642392010cb31b29a5d74392e569f5906457af2c7422fe9e30a32d807e0343b9b34982df6767a35e8b225f1ff71ce381cd9d7c278034795fd3dafdf0c735c35d56cc6b2a5dfded657c65e5f9c494d3a6277b589a6749a0d1c6badaf7f43d46c4cf0c0438e8306821ca08c611270a6f992a06b2bb4ec04021141d8028a785c079822494c5cf54a9c8ac7181452525d85f80f64b6dd7c9199f7da8a3754dfbb7bbc90b7776bde6878532d479eb28c556942b6217e6e9f0974749fd6a4a9cc4784d58089a9db30cf29050c45b2aea83e16fbacfa7eb1edbf192d90a825e98a7d1e39d5bc30b84ceb7da9ae538ed3d9755e0b3ce2e5c7e6afc1c45b819ddf6606b0bedffef392bd33be94cf2245787ed0d32cb76632e87c039db3cf686402b7ddc5eada1f2bd2e90259c933b1d99b163cf7f8b6af638e4481582e0a92465a5a3ed6b29fd1754a3bc577c0aaeaab66a44aca92bfc9f00ceb0088db81f34917b38dc20da7ce66361ad34fe45ed1b120b5b7cb59d00e186ee0dac91b9d0c399ae330d83220ddea7ac4409e55dae90538c2b5ac5aeece07d7d70431cb13fea4fe72bab72cd5da1fadbec98ea904226dc550d980bffca26cc51bac25ce54b759941fc0996100396fc648ef709fae3436430d03e93ca6147fe56585895591b38990789974a5f698d659b55abd66a8c904bceb6655c19016c95f71f9057c731facc76533bb449c0fa591cf63b755c9f2af41d23b68db91ae813fbdeea6092da975d85cd26ffc52d37366acac0e88b1b1d516a64bba09e08cce98aa431c4198873fa847968127590f67dc16d369cecf38c8bac62fbd05ba67e31584d325e3c1d5c2590d48611cdbefdabb4ead9ad65fcb219fa71c840788aa85a865f4c65a1736e9a164e142fff1fdf48ee916c38b319f0bbb691b5db209f355edc25a4dcc05a9e57894f88b19119173d7a6bd6bf819738aee3bad2d3ee25f809447bbd5ea46b391a199cd2671803020efcb9db8c65ab5d9ca4b096339dc2bfe5bca4af0b267b0beae9f049c0b85e261752ff210407db605ebfe0e81740aad7642eb4f4287e0d01dd4685722e6791782a7b7fa4c32b411c2392cce7671760a7e44ab33d8573c7e9c6b896710e9654b79b20ee6f3a25ee0582e1673de0cf6d1955115b5c9af30e7ab6f83b4759fb621451b7417eccaa5175b092d95a1be1a4ed75e7be897b5506d083eb176de9d04adfaa0493367e506175e3139d07528830ed856bedc616a4ec3cdd97d6cf76e16a47d7ebabfcdfa1bf0c20fde5cea09af557c39104144ce1d77e955fa3fdded838f4d91a33a1ae8b6b11099b35f9b4ad3119e6ee82f88fdeb528b4e6bfdbac4fd48959b7787a034cc07d457695516f67fa8af01ca94a955d29440bd0b134b8417b6a6b29c68a0dbab7ce981644b5f7ad98dca488951bd244f12a478a6b52b575e2a5b250c79f856aa5e957ebde9172f88e5dc9e43ddb8a0ea0db5e209c63f76bad5c0b7241bc3868b62b1a97f6293b6fde520df47883c8565e880d0b78b19c495cd2b4abbd32c7268359486d5d98605b68f70c70489946fda41eeb03ce8ea3dcdcfd096b2333e51a7ffaeda7a1a52704b85edb89eff4c958e8bffab1399dcc7fbf66574f2cd55131c13da74153776e7eae53d27b1c70166814ba909a66f8443190721931c8a0003f6e622bf75b74588556694c264d91decce790a1de2247c773abdcced1c8305e8b90cf2325af005336f82f0fb803de1c76ba5a94948bc5508e4742798288e1feae4de5fa9d858d545877da4691cda34a67580e57e89ff64711c5d5560f5e559d6a7da00e025c3f40db6dece92e0e2543f0a4c003f3bd46aa75fb9d5a82c0ca41356c3d7f0fb6cf01ba2b9219b0224de3b374a1150ae1b7e29a96f5a50d167c8aa3b6bc47edf390f24720c10169a0e5b1d528619fcedf8c00f1d392728b150bc4881ac7b1b8ea35a50483c047bca9a8a6ac0446b38418af3c7cbc547ec9f82a19b85e6ba061ef1a6c3a981578b3acc6c85fab7836e389ac72d093ff0a13fae91a68dec44c6af481d9e91e055ad7ba43f5060ff24e42654544a365016ee05dcce23f41cba43fe574cff8603048bb98ded44ac86e67faf425e1bd7ecf1abbb5e37fdb83da5879632b5f46e60bd47e97d5c2d62de3449e9a63658d4c50f479327c2eb57962aa8de153a3782aabc4d908ee3453923187cedd088f1565c6a362a81271046ee93798442daea400ecb903cd55276a7a770d30436f117d2496bcdf3a2f079a820cb75ac0d9647a763b7d3b29e9c17ccefe46b33fa905d4edd312c909255056bf7f4c7e6051848f4f9c77b0679f1a656379e84d1ce2a153618e328979e2105dd81edeaaad531f1acfca49f64dc08077406b7618138c64c90d4dc036e573ed4cb9f4e5947ce908dac79f6f52ac40e7bf86c9c81af8985db5e627717e0b9f5e7501fd99efe88d49fc02408a5ed42725cbfe3c7cdddcb2f38f5eb77f7590ea1096886fb0ba7163a38f10504b372bcb4b93961374be71a75cf0b9ff3c9c1f9714313858db9f12f3e9bcf69977420b104816461a40ccd5a9c64f55f87d8c096679c523b65636ce313e8844747fa640c4892c5e027ec25e95bbf5e77a6e42e4cc04754f751592bd98c789576a278a82859760a9daf4565007ea2950cd4bdc90c6533e1ddc01a2f2808573c0d60121ee4c16f517c2730ac40ac7802ca91f377aa8d586a2e2889e1d1d9ccce57a3e54d75c9584feed29bf6190eeb61074d75f73d764373388586aa905d3858b0eb7611b964816ad58c2c5207cdbdb6d3a2a845e71c902863782b2509e9de1752ee31b26b14c62bcb581b19f240a0651800a8288eddf83369e9e6bf848ec8ca4d76a2c3c5949bc0ebe523967e434378f1b64452146332957e37e69404a917af613d7f6e0159e2423879b41e557964ebd6579d50eee508ae1eb592640a4a127809eb4156addb141338ab04b5bb0eebc585e30358abfa00c06b77be1edbddba200bcf80617a7a232599414aff6232513d94ce35a06b13b10c35368d6aaf48015d514a653cac419e66fa5aadeab8295ea396439aa33605084df4e5bb83773aec86ce6acec8da21350feaf13cc0d2e9ac063a15a7983dff71891b547e999c60a65f18daf0048345432357a3c9813afdac1589dd7c0866ced0796fad72216a50b2a78e4ea912478d62c7b6e859f95f1f2fe6fa8b85cfd370e24819a5f2f05bf3ed9d09a775743096520eeacb7b2f75c12f9da650d509f29a502b0f352ce236fbffcd6fe6d11860805baf320fd77019d0077a26792e2963e8a9f22bc7684cf2e54988f48c34dfc33b94ec75ec836d8343300df001345ff7b7339b1e44422aeff40ff0da3955b00d55237207b75ed894aae94a13c58189d2bd8db8a353426a2dfe01cac518eee6b4fc7822b04203d7f7143d60e53a0afba448a3c9cc5db7810ea0ad95eb90a796fbc8daf875d10b94ef3689642db2891b8921863c51442d064d4b7f22b8a2bdcfe1b40a0f2850c97f183f05a323c6a40c79c72710f361d2f1898229a985abec60d9d6104ca09059c2dde2538d3971c653afaff790e040da2bd31bed778aefc8fb993bc0d12ab5ac1bff3754f4ea8f9eb2fa84099a8471760b7cbe19d0891c629e6e83f535b73b8734bfe4a2c360083cc82500b8cf276d24e169e7f76a68582b893e2a14755a36d16a8d934a51999ca4b3bdbb7f0ed65c9c17fc5c0d8d8492c509e493782f7031eab06e336cf1a71e9b7a234ffaa1a9ee4b5381ac5a4a87833392d3c50fb622676197d392d9d8126279dddbbdaa86d852a61e12098c374c2690b8d6b86bec64d113728fea762388eee94390fc8936603", 0x1000}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, 0x0, 0x0) r11 = accept$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x10006) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x2, {0x4}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@ipv6header={{0x28}, {0x15, 0x4}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x3, 0x5}, {0xffffffffffffffff, 0x6, 0x2}, {0x0, 0x3, 0x1}, 0x0, 0x80000001}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 281.957808ms ago: executing program 2 (id=10493): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000580)={0x2, 0x4e22, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 242.53223ms ago: executing program 2 (id=10494): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100736977001400"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 184.255712ms ago: executing program 1 (id=10495): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xd600, [0x4]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) 176.425363ms ago: executing program 2 (id=10496): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0xc, 0x8, 0x0, 0x1f, 0x4204, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000400), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close(0x3) 170.047833ms ago: executing program 7 (id=10497): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000580)={0x2, 0x4e22, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 138.109654ms ago: executing program 1 (id=10498): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) unshare(0x20000000) r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000001000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) ftruncate(r0, 0x7000000) preadv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000380)=""/4090, 0xffa}], 0x2, 0xa, 0x203) r2 = open$dir(&(0x7f0000000300)='./file0\x00', 0x18f300, 0x80) execveat(r2, &(0x7f0000001480)='./file0\x00', &(0x7f0000001440)={[&(0x7f00000014c0), &(0x7f0000001500)='memory.events\x00', &(0x7f00000013c0)='\x82che\x19\x00\x00\x00\x00\xff\xff\x00\x00\x7f\x04\xca\x96\x04\xef\x01\x00\x00\x0060\xff\xfd\xe77\x85\xe4W\xd5\xea\x0ei\xa7\x17\x00\x00', &(0x7f0000000340)='+,]\xba2\xb0CCC\x91!\x84[\x7f\xef\xf7+!(\x00', &(0x7f0000001380)='^,@*\x00', &(0x7f0000001400)='memory.events\x00']}, &(0x7f0000001640)={[0x0]}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) syz_clone3(&(0x7f0000000a00)={0x4000000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x82, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 110.722335ms ago: executing program 7 (id=10499): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) nanosleep(&(0x7f0000000080), 0x0) 61.012158ms ago: executing program 2 (id=10500): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="10f0f900188015000000000800000000"], 0x10}], 0x1}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x140, 0x3ff}, 0x0, 0x0, 0xffffffff, 0xc, 0x5, 0xc0e, 0x7, 0x4, 0x1, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000140)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) fstat(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) r8 = getgid() r9 = getegid() r10 = getgid() statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x4000, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getegid() r13 = geteuid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)={{0x0, r13, r12, r13, 0x0, 0x80, 0x8010}, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {}, [{0x2, 0x1, 0xee01}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x1, r4}, {0x2, 0x3, 0xee01}, {0x2, 0x5, r5}, {0x2, 0x2, r7}], {0x4, 0x1}, [{0x8, 0x2}, {0x8, 0x7, r8}, {0x8, 0x5, r9}, {0x8, 0x0, r10}, {0x8, 0x4, r11}, {0x8, 0x3, r12}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x3, r14}, {0x8, 0x2, r15}, {0x8, 0x0, r16}], {}, {0x20, 0x4}}, 0xac, 0x3) 0s ago: executing program 7 (id=10501): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000580)={0x2, 0x4e22, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x53f}], 0x1}}], 0x2, 0x0) kernel console output (not intermixed with test programs): 0] siw: device registration error -23 [ 977.730441][ T2503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9533'. [ 977.813057][ T2507] loop7: detected capacity change from 0 to 512 [ 977.842107][ T2507] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 977.850269][ T2507] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 977.858375][ T2507] System zones: 0-1, 15-15, 18-18, 34-34 [ 977.864593][ T2507] EXT4-fs (loop7): orphan cleanup on readonly fs [ 977.871124][ T2507] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 977.885662][ T2507] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 977.892963][ T2507] EXT4-fs (loop7): 1 truncate cleaned up [ 977.899706][ T2507] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 977.944265][ T2508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9533'. [ 978.106105][ T2515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9524'. [ 978.417477][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.454681][ T2521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 978.486095][ T2521] bond2 (unregistering): Released all slaves [ 978.524475][ T2526] netlink: 'syz.7.9537': attribute type 30 has an invalid length. [ 978.629630][ T2541] netlink: 'syz.2.9544': attribute type 30 has an invalid length. [ 978.814353][ T2558] netlink: 'syz.7.9554': attribute type 30 has an invalid length. [ 979.580239][ T2579] netlink: 'syz.0.9560': attribute type 30 has an invalid length. [ 979.697649][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 979.697667][ T29] audit: type=1326 audit(1765168324.873:75696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.0.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 979.766801][ T29] audit: type=1326 audit(1765168324.873:75697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.0.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 979.790473][ T29] audit: type=1326 audit(1765168324.903:75698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.0.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 979.813954][ T29] audit: type=1326 audit(1765168324.903:75699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.0.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 979.837428][ T29] audit: type=1326 audit(1765168324.903:75700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.0.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 979.860916][ T29] audit: type=1326 audit(1765168324.903:75701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.0.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 979.884383][ T29] audit: type=1326 audit(1765168324.903:75702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.0.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 979.907995][ T29] audit: type=1326 audit(1765168324.903:75703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.0.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 979.931477][ T29] audit: type=1326 audit(1765168324.903:75704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.0.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 979.955034][ T29] audit: type=1326 audit(1765168324.923:75705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2586 comm="syz.0.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 980.253791][ T2587] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 980.448654][ T2616] netlink: 'syz.7.9575': attribute type 30 has an invalid length. [ 980.582008][ T2632] netlink: 'syz.7.9578': attribute type 12 has an invalid length. [ 980.672724][ T2631] lo speed is unknown, defaulting to 1000 [ 980.673007][ T2631] lo speed is unknown, defaulting to 1000 [ 981.006343][ T2644] siw: device registration error -23 [ 981.144171][ T2659] __nla_validate_parse: 8 callbacks suppressed [ 981.144187][ T2659] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9588'. [ 981.224188][ T2668] loop2: detected capacity change from 0 to 512 [ 981.235358][ T2668] EXT4-fs: Ignoring removed bh option [ 981.264659][ T2668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.292129][ T2668] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 981.326683][ T2668] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 981.362646][ T2668] bridge_slave_0: left allmulticast mode [ 981.368415][ T2668] bridge_slave_0: left promiscuous mode [ 981.374264][ T2668] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.396779][ T2668] bridge_slave_1: left allmulticast mode [ 981.403160][ T2668] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.415971][ T2668] bond0: (slave bond_slave_0): Releasing backup interface [ 981.427924][ T2668] bond0: (slave bond_slave_1): Releasing backup interface [ 981.437506][ T2684] siw: device registration error -23 [ 981.447954][ T2686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9597'. [ 981.459426][ T2668] team0: Port device team_slave_0 removed [ 981.469161][ T2668] team0: Port device team_slave_1 removed [ 981.479356][ T2668] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 981.495777][T27529] lo speed is unknown, defaulting to 1000 [ 981.572027][ T2691] loop7: detected capacity change from 0 to 512 [ 981.584278][ T2691] EXT4-fs: Ignoring removed bh option [ 981.603988][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.635411][ T2691] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.659474][ T2691] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 981.678776][ T2691] bridge_slave_1: entered promiscuous mode [ 981.709643][ T2691] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 981.767409][ T2691] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 981.789239][ T2701] lo speed is unknown, defaulting to 1000 [ 981.815215][ T2701] lo speed is unknown, defaulting to 1000 [ 981.868064][ T2693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9600'. [ 981.952430][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.077507][ T2724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9610'. [ 983.147709][ T2731] loop1: detected capacity change from 0 to 512 [ 983.221250][ T2731] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 983.229159][ T2731] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 983.237179][ T2731] System zones: 0-1, 15-15, 18-18, 34-34 [ 983.242989][ T2731] EXT4-fs (loop1): orphan cleanup on readonly fs [ 983.249408][ T2731] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 983.263962][ T2731] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 983.278095][ T2731] EXT4-fs (loop1): 1 truncate cleaned up [ 983.284134][ T2731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 983.336516][ T2748] loop2: detected capacity change from 0 to 1024 [ 983.350058][ T2748] EXT4-fs: Ignoring removed oldalloc option [ 983.372942][ T2752] loop7: detected capacity change from 0 to 1024 [ 983.378408][ T2748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 983.387179][ T2752] EXT4-fs: Ignoring removed mblk_io_submit option [ 983.395638][ T2752] EXT4-fs: inline encryption not supported [ 983.401960][ T2748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.423556][ T2752] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 983.436655][ T2752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 983.462893][ T2752] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.9615: lblock 2 mapped to illegal pblock 2 (length 1) [ 983.477260][ T2752] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.9615: lblock 0 mapped to illegal pblock 48 (length 1) [ 983.491582][ T2752] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.9615: Failed to acquire dquot type 0 [ 983.503022][ T2752] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 983.515554][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.521181][ T2752] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.9615: mark_inode_dirty error [ 983.536276][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.536829][ T2760] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.552703][ T2752] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 983.572934][ T2752] EXT4-fs (loop7): 1 orphan inode deleted [ 983.579173][ T2752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.591778][ T55] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 983.610264][ T2768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9618'. [ 983.620256][ T55] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 983.653441][ T2760] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.686207][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.696074][T31531] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 983.719472][ T2777] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 983.725118][T31531] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 983.751172][ T2760] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.767822][T31531] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 983.819399][ T2783] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 983.864147][ T2781] FAULT_INJECTION: forcing a failure. [ 983.864147][ T2781] name failslab, interval 1, probability 0, space 0, times 0 [ 983.876809][ T2781] CPU: 0 UID: 0 PID: 2781 Comm: syz.2.9629 Not tainted syzkaller #0 PREEMPT(voluntary) [ 983.876868][ T2781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 983.876880][ T2781] Call Trace: [ 983.876886][ T2781] [ 983.876892][ T2781] __dump_stack+0x1d/0x30 [ 983.876992][ T2781] dump_stack_lvl+0xe8/0x140 [ 983.877011][ T2781] dump_stack+0x15/0x1b [ 983.877027][ T2781] should_fail_ex+0x265/0x280 [ 983.877050][ T2781] should_failslab+0x8c/0xb0 [ 983.877148][ T2781] __kmalloc_cache_noprof+0x65/0x4c0 [ 983.877174][ T2781] ? sctp_datamsg_from_user+0x57/0x950 [ 983.877241][ T2781] sctp_datamsg_from_user+0x57/0x950 [ 983.877306][ T2781] ? selinux_file_open+0x2dc/0x330 [ 983.877333][ T2781] sctp_sendmsg_to_asoc+0xa51/0xf20 [ 983.877365][ T2781] ? _raw_spin_lock_bh+0x56/0xb0 [ 983.877456][ T2781] ? _raw_spin_unlock_bh+0x36/0x40 [ 983.877478][ T2781] ? sctp_sendmsg_check_sflags+0x142/0x1e0 [ 983.877557][ T2781] sctp_sendmsg+0x1263/0x18d0 [ 983.877581][ T2781] ? selinux_socket_sendmsg+0x91/0x1b0 [ 983.877603][ T2781] ? __pfx_sctp_sendmsg+0x10/0x10 [ 983.877674][ T2781] inet_sendmsg+0xc5/0xd0 [ 983.877693][ T2781] __sock_sendmsg+0x102/0x180 [ 983.877753][ T2781] __sys_sendto+0x268/0x330 [ 983.877786][ T2781] __x64_sys_sendto+0x76/0x90 [ 983.877855][ T2781] x64_sys_call+0x29a7/0x3000 [ 983.877880][ T2781] do_syscall_64+0xd8/0x2a0 [ 983.877913][ T2781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.877978][ T2781] RIP: 0033:0x7f4a61bbf749 [ 983.878035][ T2781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.878050][ T2781] RSP: 002b:00007f4a60627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 983.878067][ T2781] RAX: ffffffffffffffda RBX: 00007f4a61e15fa0 RCX: 00007f4a61bbf749 [ 983.878078][ T2781] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 983.878090][ T2781] RBP: 00007f4a60627090 R08: 0000000000000000 R09: 0000000000000000 [ 983.878110][ T2781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.878124][ T2781] R13: 00007f4a61e16038 R14: 00007f4a61e15fa0 R15: 00007fff93e4e148 [ 983.878144][ T2781] [ 984.113724][ T2760] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.127190][ T2790] netlink: 'syz.1.9631': attribute type 30 has an invalid length. [ 984.497404][ T2803] netlink: 'syz.7.9635': attribute type 30 has an invalid length. [ 984.636178][ T55] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.657052][ T55] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.684776][ T55] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.693406][ T55] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.732655][ T2811] loop7: detected capacity change from 0 to 512 [ 984.748630][ T2811] EXT4-fs: Ignoring removed bh option [ 984.786469][ T2811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.803281][ T2811] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 984.819191][ T2811] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 984.832838][ T2825] netlink: 'syz.0.9644': attribute type 4 has an invalid length. [ 984.840771][ T2825] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9644'. [ 984.866923][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.871377][ T2825] .`: renamed from bond0 (while UP) [ 984.913743][ T2828] loop2: detected capacity change from 0 to 8192 [ 984.940305][ T2833] siw: device registration error -23 [ 984.946980][ T2830] loop7: detected capacity change from 0 to 1024 [ 984.961069][ T2830] EXT4-fs: Ignoring removed mblk_io_submit option [ 984.961928][ T2835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9648'. [ 984.967790][ T2830] EXT4-fs: inline encryption not supported [ 984.983032][ T2830] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 985.015002][ T2839] netlink: 'syz.2.9649': attribute type 30 has an invalid length. [ 985.023648][ T2830] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 985.040570][ T2830] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.9646: lblock 2 mapped to illegal pblock 2 (length 1) [ 985.047827][ T2835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9648'. [ 985.069712][ T2830] __quota_error: 433 callbacks suppressed [ 985.069731][ T2830] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 985.083955][ T2830] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.9646: lblock 0 mapped to illegal pblock 48 (length 1) [ 985.107955][ T2830] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 985.116799][ T2830] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.9646: Failed to acquire dquot type 0 [ 985.128690][ T2842] netlink: 'syz.2.9650': attribute type 30 has an invalid length. [ 985.149347][ T2830] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 985.165912][ T2830] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.9646: mark_inode_dirty error [ 985.182645][ T2846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9652'. [ 985.192079][ T2830] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 985.202734][ T2830] EXT4-fs (loop7): 1 orphan inode deleted [ 985.208793][ T2830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.223564][ T815] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 985.242585][ T2848] netlink: 'syz.0.9653': attribute type 3 has an invalid length. [ 985.251639][ T2851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9652'. [ 985.252393][ T815] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 985.260957][ T2848] netlink: 'syz.0.9653': attribute type 3 has an invalid length. [ 985.269124][ T815] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 985.298876][ T29] audit: type=1326 audit(1765168330.443:76135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2852 comm="syz.2.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 985.322667][ T29] audit: type=1326 audit(1765168330.443:76136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2852 comm="syz.2.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 985.346251][ T29] audit: type=1326 audit(1765168330.443:76137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2852 comm="syz.2.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 985.369773][ T29] audit: type=1326 audit(1765168330.443:76138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2852 comm="syz.2.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 985.393469][ T29] audit: type=1326 audit(1765168330.443:76139): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2852 comm="syz.2.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 985.417549][ T29] audit: type=1326 audit(1765168330.463:76140): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2852 comm="syz.2.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 985.441392][ T29] audit: type=1326 audit(1765168330.473:76141): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2852 comm="syz.2.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a61bbf783 code=0x7ffc0000 [ 985.535890][T31531] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 985.549009][T31531] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 985.558821][T31531] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 985.575689][ T2859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.614613][ T2859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.641372][ T2867] netlink: 'syz.7.9660': attribute type 30 has an invalid length. [ 985.647830][ T2869] loop1: detected capacity change from 0 to 512 [ 985.672458][ T2869] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 985.680514][ T2869] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 985.688782][ T2869] System zones: 0-1, 15-15, 18-18, 34-34 [ 985.689771][ T2859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.695905][ T2869] EXT4-fs (loop1): orphan cleanup on readonly fs [ 985.715182][ T2869] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 985.729862][ T2869] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 985.745200][ T2869] EXT4-fs (loop1): 1 truncate cleaned up [ 985.754964][ T2859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.796310][ T815] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.817341][ T815] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.850474][ T815] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.871662][ T815] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.931389][ T2887] lo speed is unknown, defaulting to 1000 [ 985.945271][ T2887] lo speed is unknown, defaulting to 1000 [ 986.060033][ T2892] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 986.097176][ T2892] bridge_slave_0: left allmulticast mode [ 986.103064][ T2892] bridge_slave_0: left promiscuous mode [ 986.108903][ T2892] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.127902][ T2892] bridge_slave_1: left allmulticast mode [ 986.133827][ T2892] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.159067][ T2892] .`: (slave bond_slave_0): Releasing backup interface [ 986.161282][ T2887] siw: device registration error -23 [ 986.177185][ T2892] .`: (slave bond_slave_1): Releasing backup interface [ 986.193158][ T2882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9664'. [ 986.194936][ T2892] team0: Port device team_slave_0 removed [ 986.215010][ T2892] team0: Port device team_slave_1 removed [ 986.235188][ T2892] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 986.322949][ T2910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9672'. [ 986.336334][ T2912] netlink: 'syz.7.9674': attribute type 30 has an invalid length. [ 986.415302][ T2922] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 986.492851][ T2923] lo speed is unknown, defaulting to 1000 [ 986.498898][ T2923] lo speed is unknown, defaulting to 1000 [ 986.580571][ T2937] lo speed is unknown, defaulting to 1000 [ 986.630427][ T2937] lo speed is unknown, defaulting to 1000 [ 986.744391][ T2949] loop2: detected capacity change from 0 to 1024 [ 986.770654][ T2949] EXT4-fs: Ignoring removed mblk_io_submit option [ 986.793581][ T2949] EXT4-fs: inline encryption not supported [ 986.836097][ T2949] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 986.873063][ T2949] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 986.890942][ T2941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9683'. [ 986.933030][ T2918] siw: device registration error -23 [ 986.943705][ T2949] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.9685: lblock 2 mapped to illegal pblock 2 (length 1) [ 987.046919][ T2949] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.9685: lblock 0 mapped to illegal pblock 48 (length 1) [ 987.075069][ T2960] lo speed is unknown, defaulting to 1000 [ 987.087212][ T2949] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.9685: Failed to acquire dquot type 0 [ 987.099302][ T2960] lo speed is unknown, defaulting to 1000 [ 987.149914][ T2949] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 987.161387][ T2949] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.9685: mark_inode_dirty error [ 987.168749][ T2969] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9689'. [ 987.175078][ T2964] netlink: 'syz.1.9688': attribute type 30 has an invalid length. [ 987.202050][ T2949] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 987.212501][ T2949] EXT4-fs (loop2): 1 orphan inode deleted [ 987.218827][ T2949] EXT4-fs mount: 3 callbacks suppressed [ 987.218894][ T2949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.237189][ T1462] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 987.256478][ T1462] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 987.302369][ T2969] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 987.310118][ T2969] SELinux: failed to load policy [ 987.315429][ T2969] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9689'. [ 987.369544][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.390223][ T2965] siw: device registration error -23 [ 987.395949][T31927] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 987.419130][T31927] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 987.430168][T31927] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 987.508396][ T2982] lo speed is unknown, defaulting to 1000 [ 987.514816][ T2982] lo speed is unknown, defaulting to 1000 [ 987.571630][ T2985] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 987.618084][ T2985] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 987.925719][ T2997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9697'. [ 987.942572][ T3009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9701'. [ 988.014457][ T3009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9701'. [ 988.109627][ T3019] lo speed is unknown, defaulting to 1000 [ 988.109911][ T3019] lo speed is unknown, defaulting to 1000 [ 988.355833][ T3038] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=3038 comm=syz.0.9710 [ 988.388221][ T3045] loop7: detected capacity change from 0 to 1024 [ 988.414668][ T3045] EXT4-fs: Ignoring removed mblk_io_submit option [ 988.422999][ T3045] EXT4-fs: inline encryption not supported [ 988.464476][ T3045] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 988.466561][ T3055] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9717'. [ 988.487521][ T3045] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 988.498746][ T3045] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.9712: lblock 2 mapped to illegal pblock 2 (length 1) [ 988.513025][ T3045] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.9712: lblock 0 mapped to illegal pblock 48 (length 1) [ 988.514060][ T3056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9716'. [ 988.539336][ T3045] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.9712: Failed to acquire dquot type 0 [ 988.553008][ T3045] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 988.553309][ T3056] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 988.562607][ T3045] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.9712: mark_inode_dirty error [ 988.570605][ T3056] SELinux: failed to load policy [ 988.603464][ T3045] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 988.614099][ T3045] EXT4-fs (loop7): 1 orphan inode deleted [ 988.620532][ T3045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.633410][ T31] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 988.653202][ T31] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 988.699145][ T3065] lo speed is unknown, defaulting to 1000 [ 988.701936][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.714476][T31531] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 988.718874][ T3065] lo speed is unknown, defaulting to 1000 [ 988.780051][T31531] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 988.810672][T31531] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 988.870388][ T3080] siw: device registration error -23 [ 990.136105][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 990.136121][ T29] audit: type=1400 audit(1765168335.313:76364): avc: denied { create } for pid=3122 comm="syz.7.9739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 990.194319][ T3125] lo speed is unknown, defaulting to 1000 [ 990.213627][ T3125] lo speed is unknown, defaulting to 1000 [ 990.232119][ T3129] loop7: detected capacity change from 0 to 512 [ 990.254072][ T3129] EXT4-fs: Ignoring removed bh option [ 990.315956][ T3129] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.368872][ T3129] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 990.409582][ T3129] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 990.439877][ T3129] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 990.458799][ T3139] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 990.504690][ T3153] loop1: detected capacity change from 0 to 1024 [ 990.505017][ T3139] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 990.511666][ T3153] EXT4-fs: Ignoring removed oldalloc option [ 990.557744][ T3153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 990.606645][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.633179][ T3153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.693469][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.847280][ T29] audit: type=1326 audit(1765168336.023:76365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3177 comm="syz.0.9758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 990.889622][ T3180] loop1: detected capacity change from 0 to 512 [ 990.891990][ T29] audit: type=1326 audit(1765168336.053:76366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3177 comm="syz.0.9758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 990.911550][ T3180] EXT4-fs: Ignoring removed bh option [ 991.021845][ T3180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.038795][ T3180] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 991.146463][ T3180] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 991.193253][ T3180] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 991.282591][ T3191] loop7: detected capacity change from 0 to 1024 [ 991.309683][ T3191] EXT4-fs: Ignoring removed oldalloc option [ 991.326829][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.351144][ T3191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 991.451174][ T3195] validate_nla: 3 callbacks suppressed [ 991.451189][ T3195] netlink: 'syz.2.9765': attribute type 30 has an invalid length. [ 991.492546][ T3191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 991.504745][ T29] audit: type=1326 audit(1765168336.603:76367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3177 comm="syz.0.9758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 991.528374][ T29] audit: type=1326 audit(1765168336.613:76368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3177 comm="syz.0.9758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 991.565448][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.650680][ T29] audit: type=1326 audit(1765168336.833:76369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3204 comm="syz.7.9769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 991.733100][ T29] audit: type=1326 audit(1765168336.853:76370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3204 comm="syz.7.9769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 991.756681][ T29] audit: type=1326 audit(1765168336.853:76371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3204 comm="syz.7.9769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 991.780165][ T29] audit: type=1326 audit(1765168336.853:76372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3204 comm="syz.7.9769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 991.788988][ T3217] __nla_validate_parse: 7 callbacks suppressed [ 991.789005][ T3217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9772'. [ 991.803628][ T29] audit: type=1326 audit(1765168336.853:76373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3204 comm="syz.7.9769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 991.950143][ T3205] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 991.974190][ T3205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.984938][ T3222] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 992.010282][ T3205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.029395][ T3222] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 992.046661][ T3227] netlink: 'syz.2.9777': attribute type 30 has an invalid length. [ 992.116042][ T3235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9781'. [ 992.132575][ T3237] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 992.297412][ T3254] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 992.329030][ T3254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 992.374327][ T3258] loop1: detected capacity change from 0 to 8192 [ 992.685582][ T3266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9793'. [ 992.779454][ T3270] netlink: 'syz.7.9795': attribute type 30 has an invalid length. [ 992.801201][ T3272] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 992.815654][ T3274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9797'. [ 992.845015][ T3279] netlink: 'syz.4.9799': attribute type 30 has an invalid length. [ 992.868942][ T3274] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 992.870165][ T3282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9800'. [ 992.876751][ T3274] SELinux: failed to load policy [ 992.934378][ T3274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9797'. [ 992.961585][ T3287] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9802'. [ 993.023888][ T3296] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 993.031681][ T3296] SELinux: failed to load policy [ 993.037122][ T3296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9802'. [ 993.129179][ T3292] siw: device registration error -23 [ 993.281618][ T3316] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 993.349554][ T3319] netlink: 'syz.1.9812': attribute type 30 has an invalid length. [ 993.425471][ T3326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9815'. [ 993.483259][ T3326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9815'. [ 993.538509][ T3336] netlink: 'syz.1.9819': attribute type 30 has an invalid length. [ 993.555446][ T3338] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.583111][ T3338] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.670349][ T3338] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.693748][ T3345] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 993.712005][ T3343] netlink: 'syz.1.9822': attribute type 30 has an invalid length. [ 993.774916][ T3338] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.838317][ T52] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.849653][ T52] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.861918][ T52] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.899698][ T52] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.983789][ T3371] loop2: detected capacity change from 0 to 1024 [ 993.991565][ T3371] EXT4-fs: Ignoring removed mblk_io_submit option [ 993.998340][ T3371] EXT4-fs: inline encryption not supported [ 994.025190][ T3373] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 994.042011][ T3371] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 994.081167][ T3371] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 994.107579][ T3371] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.9826: lblock 2 mapped to illegal pblock 2 (length 1) [ 994.110942][ T3373] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 994.137574][ T3371] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.9826: lblock 0 mapped to illegal pblock 48 (length 1) [ 994.199232][ T3371] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.9826: Failed to acquire dquot type 0 [ 994.199719][ T3381] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 994.229262][ T3371] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 994.238850][ T3371] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.9826: mark_inode_dirty error [ 994.252115][ T3371] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 994.264648][ T3371] EXT4-fs (loop2): 1 orphan inode deleted [ 994.280971][ T1649] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 994.300486][ T1649] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 994.313339][ T3371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.383349][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.397775][T31927] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 994.413307][T31927] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 994.425304][T31927] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 994.437540][ T3399] netlink: 'syz.4.9844': attribute type 30 has an invalid length. [ 994.469303][ T3407] lo speed is unknown, defaulting to 1000 [ 994.476236][ T3407] lo speed is unknown, defaulting to 1000 [ 994.732249][ T3417] loop7: detected capacity change from 0 to 512 [ 994.821092][ T3417] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 994.829030][ T3417] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 994.837149][ T3417] System zones: 0-1, 15-15, 18-18, 34-34 [ 994.842980][ T3417] EXT4-fs (loop7): orphan cleanup on readonly fs [ 994.849391][ T3417] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 994.863985][ T3417] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 994.871834][ T3417] EXT4-fs (loop7): 1 truncate cleaned up [ 994.878752][ T3417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 995.076674][ T3428] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 995.147710][ T3430] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 995.158146][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 995.158162][ T29] audit: type=1326 audit(1765168340.343:76534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3412 comm="syz.1.9849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5796ecf749 code=0x7ffc0000 [ 995.197854][ T3430] SELinux: failed to load policy [ 995.234533][ T29] audit: type=1326 audit(1765168340.343:76535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3412 comm="syz.1.9849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5796ecf749 code=0x7ffc0000 [ 995.261461][ T3436] netlink: 'syz.4.9857': attribute type 30 has an invalid length. [ 995.319215][ T3438] loop1: detected capacity change from 0 to 512 [ 995.332823][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.360592][ T3438] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 995.369432][ T3438] FAT-fs (loop1): Filesystem has been set read-only [ 995.376744][ T29] audit: type=1326 audit(1765168340.563:76536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 995.416964][ T3438] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 995.484683][ T29] audit: type=1326 audit(1765168340.583:76537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 995.508468][ T29] audit: type=1326 audit(1765168340.583:76538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 995.532026][ T29] audit: type=1326 audit(1765168340.583:76539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 995.555491][ T29] audit: type=1326 audit(1765168340.583:76540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 995.578963][ T29] audit: type=1326 audit(1765168340.583:76541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 995.602493][ T29] audit: type=1326 audit(1765168340.583:76542): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 995.626336][ T29] audit: type=1326 audit(1765168340.583:76543): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.4.9859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 995.649842][ T3438] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 995.787535][ T3455] lo speed is unknown, defaulting to 1000 [ 995.799102][ T3455] lo speed is unknown, defaulting to 1000 [ 995.852382][ T3462] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 995.854438][ T3438] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 995.860094][ T3462] SELinux: failed to load policy [ 996.071651][ T3438] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 996.238885][ T3450] siw: device registration error -23 [ 996.274862][ T3438] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 996.324016][ T3468] loop7: detected capacity change from 0 to 512 [ 996.396451][ T3479] loop1: detected capacity change from 0 to 1024 [ 996.417822][ T3479] EXT4-fs: Ignoring removed mblk_io_submit option [ 996.425342][ T3468] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 996.433405][ T3468] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 996.467791][ T3479] EXT4-fs: inline encryption not supported [ 996.486932][ T3468] System zones: 0-1, 15-15, 18-18, 34-34 [ 996.497467][ T3479] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 996.516955][ T3468] EXT4-fs (loop7): orphan cleanup on readonly fs [ 996.528429][ T3468] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 996.543169][ T3468] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 996.571477][ T3479] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 996.581206][ T3468] EXT4-fs (loop7): 1 truncate cleaned up [ 996.587328][ T3468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 996.602186][ T3479] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.9871: lblock 2 mapped to illegal pblock 2 (length 1) [ 996.616734][ T3479] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.9871: lblock 0 mapped to illegal pblock 48 (length 1) [ 996.643099][ T3479] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.9871: Failed to acquire dquot type 0 [ 996.673659][ T3479] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 996.685316][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.694532][ T3479] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.9871: mark_inode_dirty error [ 996.706778][ T3479] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 996.719073][ T3479] EXT4-fs (loop1): 1 orphan inode deleted [ 996.725584][ T3479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.740140][ T815] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 996.754544][ T815] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 996.841605][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.855291][ T1107] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 996.862603][ T3511] lo speed is unknown, defaulting to 1000 [ 996.870198][ T1107] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 996.874558][ T3511] lo speed is unknown, defaulting to 1000 [ 996.884305][ T1107] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 996.914021][ T3519] loop2: detected capacity change from 0 to 1024 [ 996.980409][ T3519] EXT4-fs: Ignoring removed mblk_io_submit option [ 997.007793][ T3519] EXT4-fs: inline encryption not supported [ 997.034814][ T3519] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 997.050851][ T3529] netlink: 'syz.1.9887': attribute type 30 has an invalid length. [ 997.060778][ T3519] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 997.101165][ T3519] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.9885: lblock 2 mapped to illegal pblock 2 (length 1) [ 997.150316][ T3519] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.9885: lblock 0 mapped to illegal pblock 48 (length 1) [ 997.276521][ T3532] loop1: detected capacity change from 0 to 4096 [ 997.297109][ T3532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 997.310077][ T3519] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.9885: Failed to acquire dquot type 0 [ 997.360163][ T3519] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 997.410871][ T3519] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.9885: mark_inode_dirty error [ 997.467008][ T3519] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 997.500227][ T3519] EXT4-fs (loop2): 1 orphan inode deleted [ 997.520843][ T3519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 997.533367][ T1462] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 997.580220][ T1462] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 997.628738][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.647472][T31927] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 997.674684][T31927] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 997.696741][T31927] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 997.731317][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.759149][ T3554] __nla_validate_parse: 13 callbacks suppressed [ 997.759166][ T3554] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9898'. [ 997.819911][ T3554] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 997.828326][ T3554] SELinux: failed to load policy [ 997.843581][ T3554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9898'. [ 997.899971][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9900'. [ 998.181827][ T3586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9912'. [ 998.244098][ T3586] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 998.260676][ T3586] SELinux: failed to load policy [ 998.280540][ T3586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9912'. [ 998.620622][ T3611] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 998.669016][ T3614] loop2: detected capacity change from 0 to 256 [ 998.860534][ T3624] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 998.973464][ T3633] netlink: 'syz.0.9930': attribute type 30 has an invalid length. [ 999.348028][ T3642] loop2: detected capacity change from 0 to 512 [ 1000.197095][ T3642] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1000.205122][ T3642] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1000.213226][ T3642] System zones: 0-1, 15-15, 18-18, 34-34 [ 1000.219027][ T3642] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1000.225475][ T3642] __quota_error: 218 callbacks suppressed [ 1000.225492][ T3642] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1000.240663][ T3642] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1000.255232][ T3642] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1000.264653][ T3642] EXT4-fs (loop2): 1 truncate cleaned up [ 1000.270726][ T3642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1000.386501][ T3658] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1000.406649][ T3660] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9936'. [ 1000.494361][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.514748][ T3669] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1000.557007][ T3658] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1000.659494][ T29] audit: type=1326 audit(1765168345.833:76755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.7.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1000.712401][ T29] audit: type=1326 audit(1765168345.863:76756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.7.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1000.735965][ T29] audit: type=1326 audit(1765168345.863:76757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.7.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1000.759446][ T29] audit: type=1326 audit(1765168345.863:76758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.7.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1000.782917][ T29] audit: type=1326 audit(1765168345.863:76759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.7.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1000.806388][ T29] audit: type=1326 audit(1765168345.863:76760): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.7.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1000.830522][ T29] audit: type=1326 audit(1765168345.863:76761): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.7.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1000.854321][ T29] audit: type=1326 audit(1765168345.873:76762): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.7.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1000.878388][ T29] audit: type=1326 audit(1765168345.873:76763): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.7.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0195c5f783 code=0x7ffc0000 [ 1000.952883][ T3684] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1000.979795][ T3684] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1000.999098][ T3688] netlink: 'syz.2.9948': attribute type 30 has an invalid length. [ 1001.078622][ T3695] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9950'. [ 1001.079925][ T3697] netlink: 'syz.4.9952': attribute type 30 has an invalid length. [ 1001.128483][ T3702] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1001.294651][ T3719] loop7: detected capacity change from 0 to 512 [ 1001.310469][ T3719] EXT4-fs: Ignoring removed bh option [ 1001.339242][ T3725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9963'. [ 1001.350746][ T3719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.363482][ T3719] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.388643][ T3719] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1001.447468][ T3719] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1001.476361][ T3731] netlink: 'syz.1.9966': attribute type 30 has an invalid length. [ 1001.658090][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.730343][ T3727] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1001.877477][ T3743] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 1001.885494][ T3743] SELinux: failed to load policy [ 1001.892460][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9969'. [ 1001.923817][ T3736] siw: device registration error -23 [ 1002.246198][ T3756] lo speed is unknown, defaulting to 1000 [ 1002.253257][ T3756] lo speed is unknown, defaulting to 1000 [ 1002.727532][ T3761] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1002.745824][ T3761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.761053][ T3761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.783097][ T3780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9973'. [ 1002.855260][ T3782] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1002.894791][ T3782] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1003.302450][ T3798] netlink: 'syz.7.9984': attribute type 30 has an invalid length. [ 1003.504683][ T3822] netlink: 'syz.2.9994': attribute type 30 has an invalid length. [ 1003.623681][ T3832] lo speed is unknown, defaulting to 1000 [ 1003.637984][ T3832] lo speed is unknown, defaulting to 1000 [ 1003.660773][ T3835] siw: device registration error -23 [ 1003.713797][ T3808] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9988'. [ 1003.993632][ T3831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9999'. [ 1004.302093][ T3870] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1004.363211][ T3874] lo speed is unknown, defaulting to 1000 [ 1004.363533][ T3874] lo speed is unknown, defaulting to 1000 [ 1004.367501][ T3879] loop7: detected capacity change from 0 to 1024 [ 1004.367857][ T3879] EXT4-fs: Ignoring removed mblk_io_submit option [ 1004.367888][ T3879] EXT4-fs: inline encryption not supported [ 1004.379818][ T3879] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1004.389347][ T3879] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1004.418570][ T3879] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.10012: lblock 2 mapped to illegal pblock 2 (length 1) [ 1004.434295][ T3879] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.10012: lblock 0 mapped to illegal pblock 48 (length 1) [ 1004.434421][ T3879] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.10012: Failed to acquire dquot type 0 [ 1004.434565][ T3879] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1004.434694][ T3879] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.10012: mark_inode_dirty error [ 1004.434760][ T3879] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 1004.491937][ T3879] EXT4-fs (loop7): 1 orphan inode deleted [ 1004.497975][ T3879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1004.510684][ T31] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1004.527824][ T31] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 1004.576777][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.600303][T31531] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1004.626951][ T3882] siw: device registration error -23 [ 1004.640177][T31531] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1004.668858][T31531] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 1004.864250][ T3900] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 1004.890168][ T3900] SELinux: failed to load policy [ 1004.911807][ T3900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10019'. [ 1006.086805][ T3925] loop1: detected capacity change from 0 to 512 [ 1006.102319][ T3926] loop2: detected capacity change from 0 to 512 [ 1006.158194][ T3925] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1006.166262][ T3925] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1006.174338][ T3925] System zones: 0-1, 15-15, 18-18, 34-34 [ 1006.180202][ T3925] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1006.186568][ T3925] __quota_error: 785 callbacks suppressed [ 1006.186583][ T3925] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1006.201673][ T3925] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1006.216251][ T3925] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1006.223462][ T3925] EXT4-fs (loop1): 1 truncate cleaned up [ 1006.229400][ T3925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1006.251749][ T3926] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1006.259707][ T3926] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1006.267863][ T3926] System zones: 0-1, 15-15, 18-18, 34-34 [ 1006.273767][ T3926] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1006.280199][ T3926] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1006.289712][ T3926] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1006.304651][ T3926] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1006.311743][ T3939] loop7: detected capacity change from 0 to 512 [ 1006.318197][ T3926] EXT4-fs (loop2): 1 truncate cleaned up [ 1006.324335][ T3926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1006.325816][ T3943] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1006.377726][ T3943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1006.422017][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.439785][ T3939] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1006.448588][ T3939] FAT-fs (loop7): Filesystem has been set read-only [ 1006.455470][ T3939] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 1006.480244][ T29] audit: type=1326 audit(1765168351.643:77546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.0.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1006.503910][ T29] audit: type=1326 audit(1765168351.643:77547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.0.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1006.527524][ T29] audit: type=1326 audit(1765168351.643:77548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.0.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1006.551240][ T29] audit: type=1326 audit(1765168351.643:77549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.0.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1006.574785][ T29] audit: type=1326 audit(1765168351.643:77550): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.0.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1006.598707][ T29] audit: type=1326 audit(1765168351.643:77551): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.0.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1006.622617][ T29] audit: type=1326 audit(1765168351.643:77552): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.0.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4d25dbf783 code=0x7ffc0000 [ 1006.646419][ T29] audit: type=1326 audit(1765168351.643:77553): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.0.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4d25dbf783 code=0x7ffc0000 [ 1006.649807][ T3939] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1006.800575][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.917067][ T3939] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1006.975318][ T3961] lo speed is unknown, defaulting to 1000 [ 1006.988178][ T3961] lo speed is unknown, defaulting to 1000 [ 1007.114242][ T3939] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1007.151540][ T3954] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1007.170342][ T3954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.185093][ T3971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10035'. [ 1007.194527][ T3954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.272255][ T3977] netlink: 'syz.7.10045': attribute type 30 has an invalid length. [ 1007.379453][ T3973] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1007.579449][ T3982] loop7: detected capacity change from 0 to 512 [ 1007.621424][ T3982] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1007.629394][ T3982] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1007.637493][ T3982] System zones: 0-1, 15-15, 18-18, 34-34 [ 1007.643400][ T3982] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1007.649763][ T3982] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1007.664452][ T3982] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 1007.671942][ T3982] EXT4-fs (loop7): 1 truncate cleaned up [ 1007.678449][ T3982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1007.859947][ T3988] loop1: detected capacity change from 0 to 512 [ 1007.866630][ T3988] EXT4-fs: Ignoring removed bh option [ 1007.891841][ T3988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1007.904659][ T3988] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1007.930066][ T3988] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1007.959050][ T3988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1007.991931][ T3995] netlink: 83992 bytes leftover after parsing attributes in process `LX[X'. [ 1008.000691][ T3995] netlink: zone id is out of range [ 1008.005867][ T3995] netlink: zone id is out of range [ 1008.016187][ T3995] netlink: zone id is out of range [ 1008.023546][ T3995] netlink: zone id is out of range [ 1008.031762][ T3995] netlink: zone id is out of range [ 1008.047031][ T3995] netlink: zone id is out of range [ 1008.069702][ T3995] netlink: zone id is out of range [ 1008.074991][ T3995] netlink: zone id is out of range [ 1008.127315][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.164301][ T4007] loop1: detected capacity change from 0 to 1024 [ 1008.175766][ T4007] EXT4-fs: Ignoring removed mblk_io_submit option [ 1008.197013][ T4007] EXT4-fs: inline encryption not supported [ 1008.206586][ T4007] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1008.218202][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.221393][ T4007] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1008.236625][ T4007] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.10053: lblock 2 mapped to illegal pblock 2 (length 1) [ 1008.253276][ T4007] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.10053: lblock 0 mapped to illegal pblock 48 (length 1) [ 1008.269641][ T4007] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.10053: Failed to acquire dquot type 0 [ 1008.281316][ T4007] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1008.291603][ T4007] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.10053: mark_inode_dirty error [ 1008.303435][ T4007] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 1008.313704][ T4007] EXT4-fs (loop1): 1 orphan inode deleted [ 1008.319860][ T4007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.332466][T11693] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 1008.370374][T11693] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 0 [ 1008.407933][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.420973][ T1107] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1008.434740][ T1107] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1008.452933][ T4016] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1008.508706][ T1107] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 1008.587705][ T4035] loop2: detected capacity change from 0 to 256 [ 1008.643617][ T4042] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1008.749345][ T4014] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1008.762895][ T4014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.771655][ T4014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.917577][ T4054] netlink: 'syz.2.10070': attribute type 30 has an invalid length. [ 1009.440733][ T4076] loop1: detected capacity change from 0 to 512 [ 1009.447573][ T4076] EXT4-fs: Ignoring removed bh option [ 1009.505345][ T4076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.520090][ T4076] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.535704][ T4076] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1009.608779][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.651563][ T4070] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1009.661338][ T4070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.675445][ T4070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.699843][ T4102] loop2: detected capacity change from 0 to 1024 [ 1009.700533][ T4101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1009.706922][ T4102] EXT4-fs: Ignoring removed oldalloc option [ 1009.727894][ T4102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1009.751551][ T4096] loop1: detected capacity change from 0 to 128 [ 1009.751754][ T4097] siw: device registration error -23 [ 1009.792593][ T4102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.829375][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.895579][ T4113] netlink: 'syz.2.10092': attribute type 30 has an invalid length. [ 1009.941552][ T4117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10095'. [ 1010.044334][ T4133] loop2: detected capacity change from 0 to 1024 [ 1010.070759][ T4133] EXT4-fs: Ignoring removed oldalloc option [ 1010.104670][ T4133] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1010.121733][ T4133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.148513][ T4136] lo speed is unknown, defaulting to 1000 [ 1010.158556][ T4136] lo speed is unknown, defaulting to 1000 [ 1010.164855][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.183459][ T4140] netlink: 'syz.2.10104': attribute type 30 has an invalid length. [ 1010.229506][ T4146] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10106'. [ 1010.272409][ T4153] loop2: detected capacity change from 0 to 512 [ 1010.288179][ T4150] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 1010.295959][ T4150] SELinux: failed to load policy [ 1010.301202][ T4150] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10108'. [ 1010.324465][ T4153] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1010.332420][ T4153] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1010.345482][ T4159] netlink: 'syz.7.10110': attribute type 30 has an invalid length. [ 1010.355764][ T4153] System zones: 0-1, 15-15, 18-18, 34-34 [ 1010.369730][ T4153] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1010.384727][ T4153] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1010.399399][ T4153] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1010.427504][ T4153] EXT4-fs (loop2): 1 truncate cleaned up [ 1010.435561][ T4153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1010.487878][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.514941][ T4169] lo speed is unknown, defaulting to 1000 [ 1010.523700][ T4169] lo speed is unknown, defaulting to 1000 [ 1010.589831][ T4181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10120'. [ 1010.640226][ T4188] netlink: 'syz.2.10123': attribute type 30 has an invalid length. [ 1010.874904][ T4178] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1010.978611][ T4214] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 1010.985083][ T4218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10133'. [ 1010.986682][ T4214] SELinux: failed to load policy [ 1010.995242][ T4218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10133'. [ 1010.999647][ T4220] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1011.003772][ T4214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10132'. [ 1011.094237][ T4230] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1011.104582][ T4231] netlink: 'syz.7.10138': attribute type 30 has an invalid length. [ 1011.154481][ T4238] siw: device registration error -23 [ 1011.193457][ T4233] siw: device registration error -23 [ 1011.210358][ T29] kauditd_printk_skb: 975 callbacks suppressed [ 1011.210374][ T29] audit: type=1326 audit(1765168356.393:78524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1011.265874][ T4252] lo speed is unknown, defaulting to 1000 [ 1011.274275][ T4200] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1011.281811][ T29] audit: type=1326 audit(1765168356.393:78525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1011.305382][ T29] audit: type=1326 audit(1765168356.393:78526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1011.328987][ T29] audit: type=1326 audit(1765168356.393:78527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1011.352593][ T29] audit: type=1326 audit(1765168356.393:78528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1011.376235][ T29] audit: type=1326 audit(1765168356.393:78529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1011.399857][ T29] audit: type=1326 audit(1765168356.393:78530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1011.403713][ T4252] lo speed is unknown, defaulting to 1000 [ 1011.423629][ T29] audit: type=1326 audit(1765168356.393:78531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1011.452759][ T29] audit: type=1326 audit(1765168356.393:78532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1011.476344][ T29] audit: type=1326 audit(1765168356.393:78533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1011.585682][ T4241] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1011.708350][ T4269] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 1011.716280][ T4269] SELinux: failed to load policy [ 1011.722389][ T4269] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10152'. [ 1011.760417][ T4274] loop2: detected capacity change from 0 to 512 [ 1011.795434][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10147'. [ 1011.797114][ T4274] EXT4-fs: Ignoring removed bh option [ 1011.901475][ T4274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.902677][ T4274] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.085992][ T4274] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1012.141361][ T4274] net_ratelimit: 402 callbacks suppressed [ 1012.141378][ T4274] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1012.206462][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.257538][ T4288] loop1: detected capacity change from 0 to 1024 [ 1012.274557][ T4288] EXT4-fs: Ignoring removed mblk_io_submit option [ 1012.286715][ T4288] EXT4-fs: inline encryption not supported [ 1012.295737][ T4288] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1012.330257][ T4288] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1012.351162][ T4288] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.10158: lblock 2 mapped to illegal pblock 2 (length 1) [ 1012.470152][ T4288] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.10158: lblock 0 mapped to illegal pblock 48 (length 1) [ 1012.492108][ T4300] lo speed is unknown, defaulting to 1000 [ 1012.498951][ T4300] lo speed is unknown, defaulting to 1000 [ 1012.560191][ T4288] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.10158: Failed to acquire dquot type 0 [ 1012.639726][ T4288] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1012.687505][ T4288] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.10158: mark_inode_dirty error [ 1012.699889][ T4288] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 1012.714268][ T4288] EXT4-fs (loop1): 1 orphan inode deleted [ 1012.729589][ T4288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1012.743717][ T7734] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 1012.762370][ T7734] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 1012.833782][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.853224][ T1107] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1012.869067][ T1107] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1012.888752][ T1107] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 1013.109663][ T4332] loop2: detected capacity change from 0 to 512 [ 1013.128855][ T4332] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1013.137608][ T4332] FAT-fs (loop2): Filesystem has been set read-only [ 1013.147908][ T4333] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4333 comm=syz.1.10173 [ 1013.165077][ T4332] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 1013.172928][ T4312] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1013.202862][ T4312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.230235][ T4312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.369888][ T4332] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1013.568161][ T4332] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1013.766690][ T4332] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1013.964331][ T4332] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1014.372185][ T4352] loop1: detected capacity change from 0 to 512 [ 1014.461331][ T4352] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1014.469266][ T4352] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1014.477299][ T4352] System zones: 0-1, 15-15, 18-18, 34-34 [ 1014.483231][ T4352] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1014.489769][ T4352] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1014.504358][ T4352] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1014.511597][ T4352] EXT4-fs (loop1): 1 truncate cleaned up [ 1014.518107][ T4352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1015.084078][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.159168][ T4365] bpf: Bad value for 'uid' [ 1015.253105][ T4372] loop2: detected capacity change from 0 to 512 [ 1015.308430][ T4372] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1015.317184][ T4372] FAT-fs (loop2): Filesystem has been set read-only [ 1015.327869][ T4379] netlink: 'syz.1.10193': attribute type 30 has an invalid length. [ 1015.357519][ T4372] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 1015.555262][ T4372] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1015.754766][ T4372] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1015.776667][ T4385] siw: device registration error -23 [ 1015.869434][ T4392] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1015.951019][ T4372] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1016.048002][ T4392] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1016.114494][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10200'. [ 1016.123605][ T4398] netlink: 'syz.7.10200': attribute type 30 has an invalid length. [ 1016.164362][ T4372] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1016.174900][ T802] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1016.190266][ T802] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1016.214559][ T802] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1016.237777][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 1016.237792][ T29] audit: type=1326 audit(1765168361.413:78911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.10204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1016.282186][ T802] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1016.291946][ T29] audit: type=1326 audit(1765168361.453:78912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.10204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1016.315672][ T29] audit: type=1326 audit(1765168361.453:78913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.10204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1016.339251][ T29] audit: type=1326 audit(1765168361.453:78914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.10204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1016.362818][ T29] audit: type=1326 audit(1765168361.463:78915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.10204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1016.386417][ T29] audit: type=1326 audit(1765168361.463:78916): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.10204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1016.410336][ T29] audit: type=1326 audit(1765168361.463:78917): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.10204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1016.413804][ T4413] netlink: 'syz.0.10206': attribute type 30 has an invalid length. [ 1016.455970][ T4415] lo speed is unknown, defaulting to 1000 [ 1016.471269][ T4415] lo speed is unknown, defaulting to 1000 [ 1016.519514][ T29] audit: type=1326 audit(1765168361.503:78918): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.10204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a61bbf783 code=0x7ffc0000 [ 1016.543330][ T29] audit: type=1326 audit(1765168361.503:78919): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.10204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a61bbf783 code=0x7ffc0000 [ 1016.567292][ T29] audit: type=1326 audit(1765168361.503:78920): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.10204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a61bbf749 code=0x7ffc0000 [ 1016.708356][ T4410] siw: device registration error -23 [ 1016.715186][ T4431] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1016.782028][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10214'. [ 1016.791037][ T4436] netlink: 'syz.7.10214': attribute type 30 has an invalid length. [ 1017.280951][ T4457] loop2: detected capacity change from 0 to 512 [ 1017.315110][ T4457] EXT4-fs: Ignoring removed bh option [ 1017.423916][ T4457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.515389][ T4457] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1017.596705][ T4457] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1017.599052][ T4468] siw: device registration error -23 [ 1017.672363][ T4480] loop7: detected capacity change from 0 to 1024 [ 1017.679191][ T4480] EXT4-fs: Ignoring removed mblk_io_submit option [ 1017.692025][ T4480] EXT4-fs: inline encryption not supported [ 1017.702423][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.712471][ T4480] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1017.723979][ T4480] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1017.728227][ T4482] loop1: detected capacity change from 0 to 1024 [ 1017.733687][ T4480] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.10229: lblock 2 mapped to illegal pblock 2 (length 1) [ 1017.748281][ T4482] EXT4-fs: Ignoring removed oldalloc option [ 1017.758506][ T4480] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.10229: lblock 0 mapped to illegal pblock 48 (length 1) [ 1017.773677][ T4482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1017.778286][ T4480] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.10229: Failed to acquire dquot type 0 [ 1017.791952][ T4480] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1017.801749][ T4480] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.10229: mark_inode_dirty error [ 1017.854174][ T4480] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 1017.865714][ T4482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1017.880119][ T4480] EXT4-fs (loop7): 1 orphan inode deleted [ 1017.886449][ T4480] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.905127][ T31] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1017.940451][ T31] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 1017.954587][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.979610][ T4494] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1017.998626][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.018010][T31531] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1018.063416][T31531] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1018.096163][T31531] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 1018.219313][ T4504] lo speed is unknown, defaulting to 1000 [ 1018.238405][ T4510] loop7: detected capacity change from 0 to 512 [ 1018.246194][ T4513] loop2: detected capacity change from 0 to 164 [ 1018.256062][ T4504] lo speed is unknown, defaulting to 1000 [ 1018.269333][ T4510] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1018.278157][ T4510] FAT-fs (loop7): Filesystem has been set read-only [ 1018.289364][ T4513] ISOFS: unable to read i-node block [ 1018.307406][ T4510] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 1018.315657][ T4513] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1018.335755][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10241'. [ 1018.344796][ T4513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10241'. [ 1018.515091][ T4510] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1018.715594][ T4510] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1018.718127][ T4545] IPVS: Unknown mcast interface: vcan0 [ 1018.887080][ T4551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10255'. [ 1018.896133][ T4551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10255'. [ 1018.910246][ T4510] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1018.925282][ T4556] tipc: Started in network mode [ 1018.930390][ T4556] tipc: Node identity 7f000001, cluster identity 4711 [ 1018.937761][ T4556] tipc: Enabled bearer , priority 10 [ 1019.141865][ T4510] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1019.416955][ T4594] loop1: detected capacity change from 0 to 512 [ 1019.531321][ T4594] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1019.539286][ T4594] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1019.547349][ T4594] System zones: 0-1, 15-15, 18-18, 34-34 [ 1019.553350][ T4594] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1019.559785][ T4594] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1019.574314][ T4594] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1019.581568][ T4594] EXT4-fs (loop1): 1 truncate cleaned up [ 1019.589019][ T4594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1019.940570][T15195] tipc: Node number set to 2130706433 [ 1020.041937][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.165791][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10274'. [ 1020.368048][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10277'. [ 1020.377087][ T4615] netlink: 'syz.4.10277': attribute type 30 has an invalid length. [ 1020.433960][T11693] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.450036][T11693] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.468383][T11693] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.480092][ T4621] loop1: detected capacity change from 0 to 512 [ 1020.480113][T11693] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.510308][ T4621] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1020.518363][ T4621] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1020.526618][ T4621] System zones: 0-1, 15-15, 18-18, 34-34 [ 1020.532568][ T4621] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1020.539006][ T4621] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1020.552679][ T4625] lo speed is unknown, defaulting to 1000 [ 1020.553596][ T4621] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1020.567435][ T4621] EXT4-fs (loop1): 1 truncate cleaned up [ 1020.573587][ T4621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1020.606773][ T4625] lo speed is unknown, defaulting to 1000 [ 1020.752555][ T4629] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1020.782823][ T4633] lo speed is unknown, defaulting to 1000 [ 1020.789374][ T4633] lo speed is unknown, defaulting to 1000 [ 1021.129623][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.261610][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 1021.261626][ T29] audit: type=1326 audit(1765168366.443:79267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.4.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 1021.292326][ T29] audit: type=1326 audit(1765168366.453:79268): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1021.316320][ T29] audit: type=1326 audit(1765168366.453:79269): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1021.340258][ T29] audit: type=1326 audit(1765168366.473:79270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.4.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 1021.364166][ T29] audit: type=1326 audit(1765168366.473:79271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.4.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 1021.397888][ T29] audit: type=1326 audit(1765168366.523:79272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.1.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5796ecf749 code=0x7ffc0000 [ 1021.421551][ T29] audit: type=1326 audit(1765168366.523:79273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.1.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5796ecf749 code=0x7ffc0000 [ 1021.445205][ T29] audit: type=1326 audit(1765168366.573:79274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.4.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 1021.474278][ T29] audit: type=1326 audit(1765168366.643:79275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.4.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 1021.497981][ T29] audit: type=1326 audit(1765168366.643:79276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.4.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95666bf749 code=0x7ffc0000 [ 1021.579468][ T4668] netlink: 'syz.7.10294': attribute type 30 has an invalid length. [ 1021.602050][ T4662] SELinux: failed to load policy [ 1021.645727][ T4672] loop1: detected capacity change from 0 to 512 [ 1021.702564][ T4672] EXT4-fs: Ignoring removed bh option [ 1021.747860][ T4672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.778342][ T4672] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.849078][ T4672] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1021.929234][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.968834][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10301'. [ 1021.977908][ T4691] netlink: 'syz.1.10301': attribute type 30 has an invalid length. [ 1022.024678][ T31] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.050686][ T31] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.059464][ T31] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.102755][ T31] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.170631][ T4700] siw: device registration error -23 [ 1022.195196][ T4705] loop1: detected capacity change from 0 to 1024 [ 1022.215786][ T4698] siw: device registration error -23 [ 1022.243557][ T4705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1022.281615][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.330525][ T4714] netlink: 'syz.1.10309': attribute type 30 has an invalid length. [ 1022.438197][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10313'. [ 1022.447321][ T4722] netlink: 'syz.1.10313': attribute type 30 has an invalid length. [ 1022.508739][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10318'. [ 1022.555123][ T4732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10314'. [ 1022.632224][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10300'. [ 1022.658521][ T4750] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10324'. [ 1022.826611][ T4750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10324'. [ 1022.854302][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10328'. [ 1022.854405][ T4761] netlink: 'syz.1.10328': attribute type 30 has an invalid length. [ 1022.873069][ T4763] loop1: detected capacity change from 0 to 512 [ 1022.896301][ T4763] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1022.896324][ T4763] FAT-fs (loop1): Filesystem has been set read-only [ 1022.919118][ T4763] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 1023.143219][ T4763] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1023.175280][ T4767] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10331'. [ 1023.339793][ T4763] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1023.531431][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10334'. [ 1023.542635][ T4763] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1023.695665][ T4789] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 1023.709480][ T4789] SELinux: failed to load policy [ 1023.780660][ T4763] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 1023.853105][ T4801] netlink: 'syz.0.10339': attribute type 30 has an invalid length. [ 1023.865075][ T55] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.887570][ T55] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.908274][ T55] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.927975][ T55] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.163221][ T4827] loop7: detected capacity change from 0 to 1024 [ 1024.170198][ T4827] EXT4-fs: Ignoring removed oldalloc option [ 1024.176206][ T4827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1024.362623][ T4833] netlink: 'syz.1.10349': attribute type 30 has an invalid length. [ 1024.591321][ T4841] loop1: detected capacity change from 0 to 164 [ 1024.602587][ T4841] ISOFS: unable to read i-node block [ 1024.607899][ T4841] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1024.632544][ T4827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.657959][ T4844] loop2: detected capacity change from 0 to 1024 [ 1024.680642][ T4844] EXT4-fs: Ignoring removed mblk_io_submit option [ 1024.680698][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.687314][ T4844] EXT4-fs: inline encryption not supported [ 1024.702837][ T4844] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1024.721749][ T4844] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1024.730853][ T4844] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.10354: lblock 2 mapped to illegal pblock 2 (length 1) [ 1024.731143][ T4852] loop7: detected capacity change from 0 to 512 [ 1024.745084][ T4844] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.10354: lblock 0 mapped to illegal pblock 48 (length 1) [ 1024.757215][ T4852] EXT4-fs: Ignoring removed bh option [ 1024.770481][ T4844] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.10354: Failed to acquire dquot type 0 [ 1024.782803][ T4844] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1024.792508][ T4844] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.10354: mark_inode_dirty error [ 1024.804191][ T4844] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 1024.814580][ T4844] EXT4-fs (loop2): 1 orphan inode deleted [ 1024.820934][ T4844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.833640][ T31] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1024.848009][ T31] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 1024.928273][ T4852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.954450][ T4859] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1024.973042][ T4852] ext4 filesystem being mounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.001700][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.025962][T31927] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1025.069267][T31927] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1025.070835][ T4852] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1025.089327][T31927] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 1025.207821][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.231013][ T4872] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1025.383739][ T4883] siw: device registration error -23 [ 1026.063519][ T4898] netlink: 'syz.7.10373': attribute type 30 has an invalid length. [ 1026.244180][ T4903] loop2: detected capacity change from 0 to 1024 [ 1026.278937][ T4903] EXT4-fs: Ignoring removed oldalloc option [ 1026.288714][ T4903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1026.381544][ T4903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.526057][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.676304][ T4930] loop1: detected capacity change from 0 to 512 [ 1026.751705][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 1026.751723][ T29] audit: type=1326 audit(1765168371.933:79506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.10385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1026.837696][ T4930] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1026.845761][ T4930] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1026.853843][ T4930] System zones: 0-1, 15-15, 18-18, 34-34 [ 1026.859723][ T4930] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1026.866141][ T4930] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1026.875485][ T4930] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1026.890107][ T4930] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1026.900029][ T4930] EXT4-fs (loop1): 1 truncate cleaned up [ 1026.906640][ T4930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1026.952160][ T29] audit: type=1326 audit(1765168371.963:79507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.10385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1026.975998][ T29] audit: type=1326 audit(1765168371.963:79508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.10385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1026.999608][ T29] audit: type=1326 audit(1765168371.963:79509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.10385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1027.023307][ T29] audit: type=1326 audit(1765168371.963:79510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.10385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1027.046874][ T29] audit: type=1326 audit(1765168371.963:79511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.10385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1027.070457][ T29] audit: type=1326 audit(1765168371.963:79512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.10385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1027.094176][ T29] audit: type=1326 audit(1765168371.963:79514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.10385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1027.117777][ T29] audit: type=1326 audit(1765168371.963:79513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.10385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d25dbf749 code=0x7ffc0000 [ 1027.267759][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.512531][ T4950] loop1: detected capacity change from 0 to 512 [ 1027.596920][ T4925] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1027.636389][ T4950] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1027.644341][ T4950] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1027.652430][ T4950] System zones: 0-1, 15-15, 18-18, 34-34 [ 1027.658401][ T4950] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1027.664830][ T4950] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1027.679548][ T4950] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1027.686722][ T4950] EXT4-fs (loop1): 1 truncate cleaned up [ 1027.693115][ T4950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1027.835429][ T4953] lo speed is unknown, defaulting to 1000 [ 1027.851016][ T4953] lo speed is unknown, defaulting to 1000 [ 1028.052491][ T4967] loop7: detected capacity change from 0 to 512 [ 1028.059013][ T4967] EXT4-fs: Ignoring removed bh option [ 1028.071867][ T4967] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.084522][ T4967] ext4 filesystem being mounted at /411/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.099547][ T4967] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1028.127798][ T4967] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1028.187237][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.214613][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.242384][ T4975] __nla_validate_parse: 8 callbacks suppressed [ 1028.242400][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10402'. [ 1028.558499][ T5002] loop1: detected capacity change from 0 to 512 [ 1028.565201][ T5002] EXT4-fs: Ignoring removed bh option [ 1028.584273][ T5002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.597286][ T5002] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.647021][ T5014] loop7: detected capacity change from 0 to 512 [ 1028.653715][ T5014] EXT4-fs: Ignoring removed bh option [ 1028.666653][ T5002] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1028.694155][ T5014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.706953][ T5016] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1028.723230][ T5014] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.758888][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.773984][ T5014] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1028.789944][ T5024] siw: device registration error -23 [ 1028.804935][ T5020] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 1028.812722][ T5020] SELinux: failed to load policy [ 1028.818062][ T5020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10417'. [ 1028.868701][ T5014] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1028.892970][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10418'. [ 1028.902005][ T5028] netlink: 'syz.1.10418': attribute type 30 has an invalid length. [ 1028.903290][ T5030] lo speed is unknown, defaulting to 1000 [ 1028.920222][ T5030] lo speed is unknown, defaulting to 1000 [ 1028.930179][T31531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.066308][ T5054] lo speed is unknown, defaulting to 1000 [ 1029.087253][ T5054] lo speed is unknown, defaulting to 1000 [ 1029.188022][ T3825] Bluetooth: hci0: sending frame failed (-49) [ 1029.194237][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1029.209055][ T5065] loop1: detected capacity change from 0 to 512 [ 1029.216051][ T5065] EXT4-fs: Ignoring removed bh option [ 1029.232609][ T5065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.248106][ T5065] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.261830][ T5071] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 1029.269766][ T5071] SELinux: failed to load policy [ 1029.277101][ T5071] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10431'. [ 1029.310898][ T5065] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1029.327015][ T5075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10432'. [ 1029.336072][ T5075] netlink: 'syz.7.10432': attribute type 30 has an invalid length. [ 1029.367628][ T5077] lo speed is unknown, defaulting to 1000 [ 1029.373772][ T5077] lo speed is unknown, defaulting to 1000 [ 1029.407968][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.425580][ T5081] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1029.457074][ T5081] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1029.486486][ T5086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10436'. [ 1029.498470][ T5086] loop1: detected capacity change from 0 to 512 [ 1029.505506][ T5086] EXT4-fs: Ignoring removed orlov option [ 1029.511207][ T5086] EXT4-fs: Ignoring removed i_version option [ 1029.517235][ T5086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1029.527007][ T5086] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1029.534982][ T5086] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1029.543621][ T5086] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1029.550297][ T5086] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1029.564824][ T5086] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1029.571941][ T5086] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10436: bg 0: block 40: padding at end of block bitmap is not set [ 1029.586478][ T5086] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1029.595823][ T5086] EXT4-fs (loop1): 1 truncate cleaned up [ 1029.602003][ T5086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1029.615968][ T5086] EXT4-fs (loop1): shut down requested (1) [ 1029.622163][ T5086] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 1029.631234][ T5086] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 1029.640629][ T5086] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 1029.651826][ T5086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10436'. [ 1029.668829][ T5086] lo speed is unknown, defaulting to 1000 [ 1029.674892][ T5086] lo speed is unknown, defaulting to 1000 [ 1029.756491][ T1107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.793119][ T5100] lo speed is unknown, defaulting to 1000 [ 1029.803777][ T5100] lo speed is unknown, defaulting to 1000 [ 1029.814181][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10443'. [ 1029.823253][ T5102] netlink: 'syz.0.10443': attribute type 30 has an invalid length. [ 1029.917418][ T5111] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1029.946241][ T5111] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1029.994862][ T5115] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1030.043604][ T5115] SELinux: failed to load policy [ 1030.123130][ T5113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.131755][ T5113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.358178][ T5126] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1030.368651][ T5126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.377166][ T5126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.968456][ T5179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10476'. [ 1030.995120][ T5179] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10476'. [ 1031.078492][ T5183] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1031.200571][ T5193] netlink: 'syz.2.10481': attribute type 30 has an invalid length. [ 1031.210232][ T2793] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.210270][ T2793] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.210298][ T2793] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.210376][ T2793] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.333050][ T5201] loop2: detected capacity change from 0 to 512 [ 1031.365123][ T5201] EXT4-fs: Ignoring removed bh option [ 1031.376931][ T5201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.377097][ T5201] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.404376][ T5201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1031.469746][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.518208][ T5208] 9pnet_fd: Insufficient options for proto=fd [ 1031.531666][ T5210] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1031.605950][ T5219] loop2: detected capacity change from 0 to 1024 [ 1031.607459][ T5219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1031.619731][ T5216] lo speed is unknown, defaulting to 1000 [ 1031.633680][ T5219] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1031.635827][ T5219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.671391][ T5216] lo speed is unknown, defaulting to 1000 [ 1031.760204][ T29] kauditd_printk_skb: 618 callbacks suppressed [ 1031.760260][ T29] audit: type=1326 audit(1765168376.933:80131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.1.10483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5796ecdf90 code=0x7ffc0000 [ 1031.791964][ T5219] netlink: 'syz.2.10492': attribute type 4 has an invalid length. [ 1031.805459][T27529] lo speed is unknown, defaulting to 1000 [ 1031.805489][T27529] syz2: Port: 1 Link DOWN [ 1031.806789][T31927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.846881][ T29] audit: type=1326 audit(1765168377.023:80132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.1.10483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5796ecf749 code=0x7ffc0000 [ 1031.918180][ T29] audit: type=1326 audit(1765168377.053:80133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.1.10483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5796ecf749 code=0x7ffc0000 [ 1031.994232][ T29] audit: type=1326 audit(1765168377.173:80134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.7.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1032.041359][ T29] audit: type=1326 audit(1765168377.173:80135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.7.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1032.065087][ T29] audit: type=1326 audit(1765168377.203:80136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.7.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1032.065184][ T5241] ================================================================== [ 1032.088948][ T29] audit: type=1326 audit(1765168377.203:80137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.7.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1032.096804][ T5241] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 1032.096842][ T5241] [ 1032.096848][ T5241] write to 0xffffffff86871050 of 8 bytes by task 29 on cpu 0: [ 1032.096863][ T5241] data_alloc+0x310/0x390 [ 1032.096887][ T5241] prb_reserve+0x964/0xb60 [ 1032.096913][ T5241] vprintk_store+0x56d/0x860 [ 1032.120589][ T29] audit: type=1326 audit(1765168377.203:80138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.7.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1032.127332][ T5241] vprintk_emit+0x15a/0x610 [ 1032.129649][ T29] audit: type=1326 audit(1765168377.203:80139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.7.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1032.137064][ T5241] vprintk_default+0x26/0x30 [ 1032.141480][ T29] audit: type=1326 audit(1765168377.203:80140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.7.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0195c5f749 code=0x7ffc0000 [ 1032.145771][ T5241] vprintk+0x1d/0x30 [ 1032.145792][ T5241] _printk+0x79/0xa0 [ 1032.145807][ T5241] kauditd_hold_skb+0x1b1/0x1c0 [ 1032.145829][ T5241] kauditd_send_queue+0x273/0x2c0 [ 1032.145852][ T5241] kauditd_thread+0x442/0x680 [ 1032.252252][ T5241] kthread+0x489/0x510 [ 1032.256317][ T5241] ret_from_fork+0x149/0x290 [ 1032.260897][ T5241] ret_from_fork_asm+0x1a/0x30 [ 1032.265654][ T5241] [ 1032.267970][ T5241] read to 0xffffffff86871050 of 16 bytes by task 5241 on cpu 1: [ 1032.275670][ T5241] _prb_read_valid+0x1bc/0x920 [ 1032.280428][ T5241] prb_read_valid+0x3c/0x60 [ 1032.284929][ T5241] console_unlock+0x164/0x2e0 [ 1032.289597][ T5241] con_install+0x2c3/0x310 [ 1032.294002][ T5241] tty_init_dev+0x7c/0x320 [ 1032.298407][ T5241] tty_open+0x6c7/0xaf0 [ 1032.302551][ T5241] chrdev_open+0x2eb/0x3a0 [ 1032.306960][ T5241] do_dentry_open+0x54b/0xa60 [ 1032.311635][ T5241] vfs_open+0x37/0x1e0 [ 1032.315747][ T5241] path_openat+0x1ddd/0x23b0 [ 1032.320333][ T5241] do_filp_open+0x109/0x230 [ 1032.324826][ T5241] do_sys_openat2+0xa6/0x150 [ 1032.329405][ T5241] __x64_sys_openat+0xf2/0x120 [ 1032.334156][ T5241] x64_sys_call+0x2b07/0x3000 [ 1032.338820][ T5241] do_syscall_64+0xd8/0x2a0 [ 1032.343315][ T5241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.349190][ T5241] [ 1032.351492][ T5241] Reported by Kernel Concurrency Sanitizer on: [ 1032.357627][ T5241] CPU: 1 UID: 0 PID: 5241 Comm: syz.2.10500 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1032.367418][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1032.377457][ T5241] ==================================================================