last executing test programs: 9.384360273s ago: executing program 1 (id=1140): socket$kcm(0x10, 0x2, 0x4) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c00078008"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) 7.155861934s ago: executing program 1 (id=1149): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000c780)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xffe0, 0x8}, {0x10, 0x1}}, [@f_rsvp6={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @local}, {0x306, @broadcast}, 0x0, {0x2, 0x4e20, @broadcast}, 'veth0_to_bond\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) io_setup(0x5, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 6.071580819s ago: executing program 1 (id=1153): sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc1400", 0x8, 0x4, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 5.005579195s ago: executing program 1 (id=1162): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f00000002c0)=""/242, 0xf2, 0x0, &(0x7f0000000540)=""/209, 0xd1}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002264aaeacac07cb84e38844c97dfbd99df837fd9b7e945fa073065be36c22915d72fbd31456af845fb450df4cbd4cbf7d75a82770dff4dba7a0b7d8377d71fadf7e105ae14c258dab3ca027acd1fe868b80098d63850e12450e33179ad443a072826ea6a8bf79daa9f0142e8c451d0519972dac9eddbc891f5ca68a0e4b839c79ef754cfff57823d7cb5c5dc1e138bf8d8bf0c4c2a0349f4769da13d5b167252aa167f0d4c2196433ab1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000090000000000000007020000f8ffffffb7070000000000000004000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRES8, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x3d) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000100000005"], 0x1c}}, 0x0) 4.098500239s ago: executing program 1 (id=1166): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f00000002c0)=""/242, 0xf2, 0x0, &(0x7f0000000540)=""/209, 0xd1}}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x3d) unshare(0x62040200) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000100000005"], 0x1c}}, 0x0) 3.509452922s ago: executing program 3 (id=1170): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 3.395679832s ago: executing program 3 (id=1173): socket$kcm(0x10, 0x2, 0x4) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32343b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d326d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x190da) 3.311378003s ago: executing program 2 (id=1175): pread64(0xffffffffffffffff, 0x0, 0x0, 0x77) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323", 0xad) sendto$inet(r3, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unlink(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.208974944s ago: executing program 4 (id=1176): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 3.183071554s ago: executing program 0 (id=1177): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x26, 0x40, 0x7, 0x0, 0x0, 0xa005a, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x1}, 0x100987, 0x2, 0xb, 0x4, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare(0x26040600) 3.166592524s ago: executing program 1 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) creat(0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f00000001c0)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/115, 0xfffffe6b}], 0x1, 0x0) 2.794202696s ago: executing program 2 (id=1179): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f00000002c0)=""/242, 0xf2, 0x0, &(0x7f0000000540)=""/209, 0xd1}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002264aaeacac07cb84e38844c97dfbd99df837fd9b7e945fa073065be36c22915d72fbd31456af845fb450df4cbd4cbf7d75a82770dff4dba7a0b7d8377d71fadf7e105ae14c258dab3ca027acd1fe868b80098d63850e12450e33179ad443a072826ea6a8bf79daa9f0142e8c451d0519972dac9eddbc891f5ca68a0e4b839c79ef754cfff57823d7cb5c5dc1e138bf8d8bf0c4c2a0349f4769da13d5b167252aa167f0d4c2196433ab1c66c31c13df0", @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000090000000000000007020000f8ffffffb7070000000000000004000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x3d) unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) 2.686608916s ago: executing program 0 (id=1180): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f00000002c0)=""/242, 0xf2, 0x0, &(0x7f0000000540)=""/209, 0xd1}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x3d) unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) 2.372763608s ago: executing program 4 (id=1181): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) io_setup(0x5, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x2400, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1.771276311s ago: executing program 2 (id=1182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="00000012a7"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x15}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x66002) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0xc0a81, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pread64(r1, &(0x7f0000000580)=""/217, 0xd9, 0x8000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x80, 0x4) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$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") 1.574164032s ago: executing program 3 (id=1183): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 1.499461212s ago: executing program 0 (id=1184): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x26, 0x40, 0x7, 0x0, 0x0, 0xa005a, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x1}, 0x100987, 0x2, 0xb, 0x4, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare(0x26040600) 1.373068473s ago: executing program 4 (id=1185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, 0x0, &(0x7f0000000480)=0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0c000000000000001c0012000c000100626f6e64000000000c0002000800010006df7a4deb1d92b6bdbaee16f3172b"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e00000040000081002000860000000000000000000001ff02800000000000000000000000000187009078ff020000000000000000000000000001"], 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000680)=""/247, 0xf7, 0x0, &(0x7f0000000380)=""/4, 0x4}}, 0x10) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 1.339860743s ago: executing program 0 (id=1186): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xa, 0xc9f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x202}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20420, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0}, 0x0, 0x40000000000, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x10, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x200) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x4b44, 0x10000000000013) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000480)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000600)={0x10, "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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000", @ANYRES16=r1, @ANYRES8=r3], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000040)={0x8000, 0x18, [0xa86, 0x4, 0x4, 0x5], &(0x7f0000000000)=[0x0, 0x0, 0x0]}) 1.333155983s ago: executing program 3 (id=1187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000007d000000950400000000000042460a0afc17ec72d8ddaf4efb56f205105e5325a7f2c70de8cd46c2a5a7b4824cc3d592755d49be6abd09027c335b8d11a37358f262bfc5c9bde99680804c95475ca773f7d87022dc1f22763d66d83aab929b506e7349e9be8dd5463f1ffd776beed74fdb2131c5f77448f192d61890d5f3e538f991d6b50e41d6e2c23afa5eea4f970cc0fc5ae71ada51cfda92b8406b1967df1b64b700830c79dda17c57de878c7f7b8be1387e"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x14, 0x0, &(0x7f0000000100)="c1dfa780cd21d308098a000008007e227f3ad7a9", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='fsi_slave_invalid_cfam\x00', r4, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRES64, @ANYRES16], 0x24c}, 0x1, 0x0, 0x0, 0x1}, 0xc880) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 1.222174704s ago: executing program 0 (id=1188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x4000, 0x0, 0x44000}, 0x0) 1.147839004s ago: executing program 4 (id=1189): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x80805, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 1.082477094s ago: executing program 4 (id=1190): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f00000002c0)=""/242, 0xf2, 0x0, &(0x7f0000000540)=""/209, 0xd1}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002264aaeacac07cb84e38844c97dfbd99df837fd9b7e945fa073065be36c22915d72fbd31456af845fb450df4cbd4cbf7d75a82770dff4dba7a0b7d8377d71fadf7e105ae14c258dab3ca027acd1fe868b80098d63850e12450e33179ad443a072826ea6a8bf79daa9f0142e8c451d0519972dac9eddbc891f5ca68a0e4b839c79ef754cfff57823d7cb5c5dc1e138bf8d8bf0c4c2a0349f4769da13d5b167252aa167f0d4c2196433ab1c66c31c13df0", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000090000000000000007020000f8ffffffb707000000000000000400000000000085000000030000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRES8, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x3d) unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) 511.381997ms ago: executing program 0 (id=1191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) creat(0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f00000001c0)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/115, 0xfffffe6b}], 0x1, 0x0) 451.090408ms ago: executing program 3 (id=1192): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 330.379708ms ago: executing program 2 (id=1193): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xa, 0xc9f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x202}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20420, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000300)}, 0x0, 0x40000000000, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x10, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x200) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x4b44, 0x10000000000013) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000480)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = epoll_create1(0x80000) epoll_pwait2(r6, &(0x7f0000000080)=[{}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000600)={0x10, "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"}) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000040)={0x8000, 0x18, [0xa86, 0x4, 0x4, 0x5], &(0x7f0000000000)=[0x0, 0x0, 0x0]}) 304.243378ms ago: executing program 3 (id=1194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="00000012a7"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x15}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x66002) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0xc0a81, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pread64(r2, &(0x7f0000000580)=""/217, 0xd9, 0x8000) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x80, 0x4) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$eJzs3c1rHG8dAPDvTHaTNPnp5ldE7cUGRFrQJk3aShHBFq+l1JebF2OTltq0KU1EUwsmUC+KePEgePJg/S9swasHrx68eBApBJEerFSzMpvd7Ft2s0l2d9Lk84Fp5pnZmeeZ3X73mXn2eWYCOLWms3/SiHMR8SSJKDWsK0R15fTO697+6/ndbEqiXP7WP5N4/pNko3FfSfXvZHXj/5Ui+XMacXakPd/V9WcPF5aXl55W07Nrj57Mrq4/u/Tg0cL9pftLj+e/PH/92tVr1+cuH+n4ylXZ/K0X3/9h6We3v/O737xP5n7/19tJ3Ijtatmy42rdduxIOWfv2XQt/3f1pWnl3+tH3Pdx8e9S5aNuequSQn7l4WDuVeO8GBGfiVKMRP3DK8VPv5Fr4YCBKif1OhI4bZL947/Yvmh8MIUBhqh2HlC7tt/rOrhdOuCzEmAYtm7uNADsxH4xImrxX9hpG4zxStvAxNskGpt1kog4WsvcjiyPP/3x9otsig7tcMBgbGzWmm5b6/+kEptTMV5JTbxNs/h/VdsubZiy74Vvtu641Fv+0y1p8Q/Ds7EZEZ+t1v+jsV/872qN/+8dMn/xDwAAAAAAAP3z+mZEfGmv/n/pbv+f0Zb+P0l1jN+NPuQ/3TI2sPn3vyzn9E1DtkAfbd2M+Gpb/9//NvYOnhqp/s7/iUp/gGJ678Hy0uWI+GREXIziWJaea95tUwfhS784++tO+Tf2/8umLP9aX8Dqrt4UWgbiLi6sLfTn6OF029qMeFfp/3u+uqS5/09W/ydt/X9//vUswJ/0mMfZL7y807Tg7/Wvh/3jHxiU8m8jLuw5/qd+up10vz/HbOV8YLZ2VtDucz/+5R865S/+IT9Z/T/RPf7Hksb79awebP/ZFfyV9UK50/rDnv+PJt8eqe0/86OFtbWncxGjya325fPN2xcPdghwYtTioRYvWfxf/HyX9r8kqZ//N8ThmYjY6DHPT29P/m030dKKp/6H/GTxv9i9/p9qrv8POjMe8y+nXnWqdu/0VP9frdTpF6tLtP9Bo/b7cfQaoLkUFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+cGlEfBRJOrM7n6YzMxGTEfGpmEiXV1bXvnhv5QePF7N1zc//L+2kk9rz/6ca0vMt6SsR8XFE/GrkTCU9c3dleTHvgwcAAAAAAAAAAAAAAAAAAIBjYrIy5r881jr+P/OPkbxLBwxcofpXvMPpUzj0luWxvhYEGLrDxz/woes9/osDLQcwfJ3j/937csVQiwMM0W78fzffcgDDd8jrfz8XwAmg/Q9Oqx7b9MYHXQ4gDz3X/1uDLQcAAAAAANAXH59//ZckIja+cqYyZUar63T2h5MtzbsAQG726cM7OqxyAMNXWMm7BEBeXOMDye7cf/Yc7L9H7//tnfsCJAMtFwAAAAAAAAAAAABQd+Fc8/j/Qm/j/z8aVvmAwUkjujzCW99+OMm6jP/fK/g98gtOkM6P/uil7k96O0Pw6CA4loz/B+r1+Oae6ztX4UmX9gMAAAAAAAAAAAAAoK/Gnz1cWF5eerq6ns/MWEQcdvOv7fea2tPN8zzA1pmNhaFmGhsRA89re7/X1D6Ig+25eIT/G8d5JonsU+n2btRuwdGHTIuH3DyfryMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDd/wMAAP//0VIyIg==") 123.860089ms ago: executing program 4 (id=1195): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f00000002c0)=""/242, 0xf2, 0x0, &(0x7f0000000540)=""/209, 0xd1}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002264aaeacac07cb84e38844c97dfbd99df837fd9b7e945fa073065be36c22915d72fbd31456af845fb450df4cbd4cbf7d75a82770dff4dba7a0b7d8377d71fadf7e105ae14c258dab3ca027acd1fe868b80098d63850e12450e33179ad443a072826ea6a8bf79daa9f0142e8c451d0519972dac9eddbc891f5ca68a0e4b839c79ef754cfff57823d7cb5c5dc1e138bf8d8bf0c4c2a0349f4769da13d5b167252aa167f0d4c2196433ab1c66c31", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000090000000000000007020000f8ffffffb7070000000000000004000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x3d) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000100000005"], 0x1c}}, 0x0) 122.364429ms ago: executing program 2 (id=1196): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x26, 0x40, 0x7, 0x0, 0x0, 0xa005a, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x1}, 0x100987, 0x2, 0xb, 0x4, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare(0x26040600) 0s ago: executing program 2 (id=1197): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) kernel console output (not intermixed with test programs): rom 0 to 512 [ 101.207193][ T5516] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 101.221710][ T5528] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 101.238122][ T5525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 101.252970][ T5527] EXT4-fs (loop0): orphan cleanup on readonly fs [ 101.269130][ T5527] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.516: bad orphan inode 13 [ 101.283939][ T5527] ext4_test_bit(bit=12, block=18) = 1 [ 101.289342][ T5527] is_bad_inode(inode)=0 [ 101.293480][ T5527] NEXT_ORPHAN(inode)=2130706432 [ 101.298317][ T5527] max_ino=32 [ 101.301539][ T5527] i_nlink=1 [ 101.308192][ T5527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.320999][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.353491][ T5537] loop3: detected capacity change from 0 to 512 [ 101.373850][ T5527] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 101.397397][ T5537] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.404617][ T5537] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.518: bad orphan inode 13 [ 101.415238][ T5527] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 101.424058][ T5537] ext4_test_bit(bit=12, block=18) = 1 [ 101.429524][ T5537] is_bad_inode(inode)=0 [ 101.433670][ T5537] NEXT_ORPHAN(inode)=2130706432 [ 101.438517][ T5537] max_ino=32 [ 101.441868][ T5537] i_nlink=1 [ 101.447132][ T5537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.474521][ T5537] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 101.486521][ T5549] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 101.500320][ T5537] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 101.525253][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.532287][ T5537] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 101.581305][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.627672][ T5565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.525'. [ 101.697575][ T5563] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 101.707671][ T5563] SELinux: failed to load policy [ 101.721550][ T5572] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 101.743719][ T5572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'. [ 101.883004][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 101.883021][ T29] audit: type=1326 audit(1762316373.744:22102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 101.912724][ T29] audit: type=1326 audit(1762316373.744:22103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 101.936510][ T29] audit: type=1326 audit(1762316373.794:22104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 101.959850][ T29] audit: type=1326 audit(1762316373.794:22105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 101.983272][ T29] audit: type=1326 audit(1762316373.794:22106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 102.006803][ T29] audit: type=1326 audit(1762316373.864:22107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 102.042889][ T5587] loop3: detected capacity change from 0 to 256 [ 102.421537][ T5587] FAT-fs (loop3): Directory bread(block 64) failed [ 102.428116][ T5587] FAT-fs (loop3): Directory bread(block 65) failed [ 102.434754][ T5587] FAT-fs (loop3): Directory bread(block 66) failed [ 102.441403][ T5587] FAT-fs (loop3): Directory bread(block 67) failed [ 102.447977][ T5587] FAT-fs (loop3): Directory bread(block 68) failed [ 102.454581][ T5587] FAT-fs (loop3): Directory bread(block 69) failed [ 102.461184][ T5587] FAT-fs (loop3): Directory bread(block 70) failed [ 102.467691][ T5587] FAT-fs (loop3): Directory bread(block 71) failed [ 102.474280][ T5587] FAT-fs (loop3): Directory bread(block 72) failed [ 102.480866][ T5587] FAT-fs (loop3): Directory bread(block 73) failed [ 102.523744][ T5587] wg1 speed is unknown, defaulting to 1000 [ 102.641055][ T5595] loop0: detected capacity change from 0 to 1024 [ 102.671740][ T5595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.738377][ T29] audit: type=1326 audit(1762316374.584:22108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 102.792574][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.808213][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 102.856017][ T29] audit: type=1400 audit(1762316374.714:22109): avc: denied { create } for pid=5608 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.875667][ T29] audit: type=1400 audit(1762316374.714:22110): avc: denied { getopt } for pid=5608 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.925246][ T5613] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 102.943007][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 102.991221][ T29] audit: type=1326 audit(1762316374.854:22111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 103.035913][ T5619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.053013][ T5625] netlink: 190864 bytes leftover after parsing attributes in process `syz.1.546'. [ 103.132411][ T5636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5636 comm=syz.2.550 [ 103.177471][ T5644] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 103.193991][ T5644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.553'. [ 103.242696][ T5654] netlink: 72 bytes leftover after parsing attributes in process `syz.4.558'. [ 103.260918][ T5654] netlink: 76 bytes leftover after parsing attributes in process `syz.4.558'. [ 103.363409][ T5660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.775355][ T5686] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 103.877620][ T5692] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5692 comm=syz.3.571 [ 104.025814][ T5702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.958401][ T5749] loop0: detected capacity change from 0 to 256 [ 104.973675][ T5749] FAT-fs (loop0): Directory bread(block 64) failed [ 104.980291][ T5749] FAT-fs (loop0): Directory bread(block 65) failed [ 104.986799][ T5749] FAT-fs (loop0): Directory bread(block 66) failed [ 104.993404][ T5749] FAT-fs (loop0): Directory bread(block 67) failed [ 104.999945][ T5749] FAT-fs (loop0): Directory bread(block 68) failed [ 105.006528][ T5749] FAT-fs (loop0): Directory bread(block 69) failed [ 105.013045][ T5749] FAT-fs (loop0): Directory bread(block 70) failed [ 105.019563][ T5749] FAT-fs (loop0): Directory bread(block 71) failed [ 105.026199][ T5749] FAT-fs (loop0): Directory bread(block 72) failed [ 105.032805][ T5749] FAT-fs (loop0): Directory bread(block 73) failed [ 105.065845][ T5749] wg1 speed is unknown, defaulting to 1000 [ 105.392954][ T5754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.463290][ T5760] loop4: detected capacity change from 0 to 256 [ 105.784999][ T5760] FAT-fs (loop4): Directory bread(block 64) failed [ 105.791586][ T5760] FAT-fs (loop4): Directory bread(block 65) failed [ 105.798173][ T5760] FAT-fs (loop4): Directory bread(block 66) failed [ 105.804734][ T5760] FAT-fs (loop4): Directory bread(block 67) failed [ 105.811497][ T5760] FAT-fs (loop4): Directory bread(block 68) failed [ 105.818004][ T5760] FAT-fs (loop4): Directory bread(block 69) failed [ 105.824581][ T5760] FAT-fs (loop4): Directory bread(block 70) failed [ 105.831255][ T5760] FAT-fs (loop4): Directory bread(block 71) failed [ 105.837866][ T5760] FAT-fs (loop4): Directory bread(block 72) failed [ 105.844568][ T5760] FAT-fs (loop4): Directory bread(block 73) failed [ 105.929639][ T5756] wg1 speed is unknown, defaulting to 1000 [ 106.222884][ T5787] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 106.328931][ T5790] __nla_validate_parse: 1 callbacks suppressed [ 106.328946][ T5790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.602'. [ 106.362851][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 106.371519][ T5788] bond1: (slave batadv9): making interface the new active one [ 106.380317][ T5788] bond1: (slave batadv9): Enslaving as an active interface with an up link [ 106.473647][ T5793] SELinux: failed to load policy [ 106.503367][ T5798] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.935799][ T5823] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 106.975346][ T5825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 107.039520][ T5828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'. [ 107.207950][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 107.276783][ T5826] bond1: (slave batadv8): making interface the new active one [ 107.293937][ T5826] bond1: (slave batadv8): Enslaving as an active interface with an up link [ 107.308851][ T5828] bond1 (unregistering): (slave batadv8): Releasing active interface [ 107.330219][ T5828] bond1 (unregistering): Released all slaves [ 107.603903][ T5853] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 107.617056][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.626'. [ 107.847957][ T5864] SELinux: failed to load policy [ 107.949453][ T5871] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 107.957700][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 107.957713][ T29] audit: type=1326 audit(1762316379.814:22397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 107.987350][ T29] audit: type=1326 audit(1762316379.814:22398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 108.039048][ T29] audit: type=1326 audit(1762316379.874:22399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 108.062513][ T29] audit: type=1326 audit(1762316379.874:22400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 108.085937][ T29] audit: type=1326 audit(1762316379.874:22401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 108.109532][ T29] audit: type=1326 audit(1762316379.874:22402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 108.132962][ T29] audit: type=1326 audit(1762316379.874:22403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e32701f85 code=0x7ffc0000 [ 108.133403][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 108.156563][ T29] audit: type=1326 audit(1762316379.884:22404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 108.188641][ T29] audit: type=1326 audit(1762316379.884:22405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 108.212211][ T29] audit: type=1326 audit(1762316379.884:22406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e3266b779 code=0x7ffc0000 [ 108.245901][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 108.254808][ T5874] bond1: (slave batadv8): making interface the new active one [ 108.332981][ T5874] bond1: (slave batadv8): Enslaving as an active interface with an up link [ 108.367440][ T5879] bond1 (unregistering): (slave batadv8): Releasing active interface [ 108.381297][ T5879] bond1 (unregistering): Released all slaves [ 108.420933][ T5855] syz.1.628 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 108.435056][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz.1.628 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.435083][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.435102][ T5855] Call Trace: [ 108.435110][ T5855] [ 108.435120][ T5855] __dump_stack+0x1d/0x30 [ 108.435142][ T5855] dump_stack_lvl+0xe8/0x140 [ 108.435165][ T5855] dump_stack+0x15/0x1b [ 108.435239][ T5855] dump_header+0x81/0x220 [ 108.435257][ T5855] oom_kill_process+0x342/0x400 [ 108.435293][ T5855] out_of_memory+0x979/0xb80 [ 108.435393][ T5855] try_charge_memcg+0x610/0xa10 [ 108.435452][ T5855] obj_cgroup_charge_pages+0xa6/0x150 [ 108.435474][ T5855] __memcg_kmem_charge_page+0x9f/0x170 [ 108.435500][ T5855] __alloc_frozen_pages_noprof+0x188/0x360 [ 108.435584][ T5855] alloc_pages_mpol+0xb3/0x260 [ 108.435641][ T5855] alloc_pages_noprof+0x90/0x130 [ 108.435661][ T5855] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 108.435779][ T5855] __kvmalloc_node_noprof+0x483/0x670 [ 108.435809][ T5855] ? ip_set_alloc+0x24/0x30 [ 108.435842][ T5855] ? ip_set_alloc+0x24/0x30 [ 108.435946][ T5855] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 108.436044][ T5855] ip_set_alloc+0x24/0x30 [ 108.436073][ T5855] hash_netiface_create+0x282/0x740 [ 108.436155][ T5855] ? __pfx_hash_netiface_create+0x10/0x10 [ 108.436188][ T5855] ip_set_create+0x3cc/0x970 [ 108.436225][ T5855] ? __nla_parse+0x40/0x60 [ 108.436280][ T5855] nfnetlink_rcv_msg+0x4c6/0x590 [ 108.436339][ T5855] netlink_rcv_skb+0x123/0x220 [ 108.436375][ T5855] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 108.436529][ T5855] nfnetlink_rcv+0x167/0x16c0 [ 108.436555][ T5855] ? kmem_cache_free+0xe4/0x3d0 [ 108.436655][ T5855] ? __kfree_skb+0x109/0x150 [ 108.436683][ T5855] ? nlmon_xmit+0x4f/0x60 [ 108.436706][ T5855] ? consume_skb+0x49/0x150 [ 108.436738][ T5855] ? nlmon_xmit+0x4f/0x60 [ 108.436765][ T5855] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 108.436865][ T5855] ? __dev_queue_xmit+0x1200/0x2000 [ 108.436902][ T5855] ? __dev_queue_xmit+0x182/0x2000 [ 108.436987][ T5855] ? ref_tracker_free+0x37d/0x3e0 [ 108.437031][ T5855] ? __netlink_deliver_tap+0x4dc/0x500 [ 108.437075][ T5855] netlink_unicast+0x5c0/0x690 [ 108.437125][ T5855] netlink_sendmsg+0x58b/0x6b0 [ 108.437179][ T5855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.437198][ T5855] __sock_sendmsg+0x145/0x180 [ 108.437225][ T5855] ____sys_sendmsg+0x31e/0x4e0 [ 108.437271][ T5855] ___sys_sendmsg+0x17b/0x1d0 [ 108.437312][ T5855] __x64_sys_sendmsg+0xd4/0x160 [ 108.437334][ T5855] x64_sys_call+0x191e/0x3000 [ 108.437410][ T5855] do_syscall_64+0xd2/0x200 [ 108.437431][ T5855] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 108.437509][ T5855] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 108.437539][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.437560][ T5855] RIP: 0033:0x7f825159f6c9 [ 108.437578][ T5855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.437636][ T5855] RSP: 002b:00007f824ffff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.437655][ T5855] RAX: ffffffffffffffda RBX: 00007f82517f5fa0 RCX: 00007f825159f6c9 [ 108.437667][ T5855] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000009 [ 108.437679][ T5855] RBP: 00007f8251621f91 R08: 0000000000000000 R09: 0000000000000000 [ 108.437691][ T5855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.437777][ T5855] R13: 00007f82517f6038 R14: 00007f82517f5fa0 R15: 00007ffd38f07298 [ 108.437797][ T5855] [ 108.437803][ T5855] memory: usage 307200kB, limit 307200kB, failcnt 1193 [ 108.782642][ T5855] memory+swap: usage 311052kB, limit 9007199254740988kB, failcnt 0 [ 108.790609][ T5855] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 108.797883][ T5855] Memory cgroup stats for /syz1: [ 108.804758][ T5855] cache 0 [ 108.812628][ T5855] rss 0 [ 108.815449][ T5855] shmem 0 [ 108.818388][ T5855] mapped_file 0 [ 108.821953][ T5855] dirty 0 [ 108.824882][ T5855] writeback 0 [ 108.828245][ T5855] workingset_refault_anon 307 [ 108.832946][ T5855] workingset_refault_file 1867 [ 108.837778][ T5855] swap 3944448 [ 108.841213][ T5855] swapcached 0 [ 108.844581][ T5855] pgpgin 89712 [ 108.848021][ T5855] pgpgout 89710 [ 108.851475][ T5855] pgfault 92767 [ 108.854926][ T5855] pgmajfault 203 [ 108.858461][ T5855] inactive_anon 0 [ 108.862122][ T5855] active_anon 0 [ 108.865584][ T5855] inactive_file 0 [ 108.869232][ T5855] active_file 8192 [ 108.872945][ T5855] unevictable 0 [ 108.876386][ T5855] hierarchical_memory_limit 314572800 [ 108.881767][ T5855] hierarchical_memsw_limit 9223372036854771712 [ 108.887931][ T5855] total_cache 0 [ 108.891459][ T5855] total_rss 0 [ 108.894812][ T5855] total_shmem 0 [ 108.898261][ T5855] total_mapped_file 0 [ 108.902330][ T5855] total_dirty 0 [ 108.905780][ T5855] total_writeback 0 [ 108.909599][ T5855] total_workingset_refault_anon 307 [ 108.914782][ T5855] total_workingset_refault_file 1867 [ 108.920090][ T5855] total_swap 3944448 [ 108.923980][ T5855] total_swapcached 0 [ 108.927877][ T5855] total_pgpgin 89712 [ 108.931797][ T5855] total_pgpgout 89710 [ 108.935772][ T5855] total_pgfault 92767 [ 108.939780][ T5855] total_pgmajfault 203 [ 108.943849][ T5855] total_inactive_anon 0 [ 108.943873][ T5855] total_active_anon 0 [ 108.943879][ T5855] total_inactive_file 0 [ 108.943886][ T5855] total_active_file 8192 [ 108.943893][ T5855] total_unevictable 0 [ 108.943900][ T5855] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1 [ 108.950778][ T5902] loop0: detected capacity change from 0 to 1024 [ 108.952056][ T5855] ,task_memcg= [ 108.980801][ T5902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.981086][ T5855] /syz1,task=syz.1.628,pid=5854,uid=0 [ 109.001813][ T5855] Memory cgroup out of memory: Killed process 5854 (syz.1.628) total-vm:93956kB, anon-rss:1132kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 109.045896][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.073494][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 109.085546][ T5910] vlan2: entered promiscuous mode [ 109.090720][ T5910] gretap0: entered promiscuous mode [ 109.157411][ T5913] loop0: detected capacity change from 0 to 512 [ 109.237819][ T5913] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.244630][ T5913] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.646: bad orphan inode 13 [ 109.255005][ T5913] ext4_test_bit(bit=12, block=18) = 1 [ 109.260430][ T5913] is_bad_inode(inode)=0 [ 109.264653][ T5913] NEXT_ORPHAN(inode)=2130706432 [ 109.269584][ T5913] max_ino=32 [ 109.272897][ T5913] i_nlink=1 [ 109.276655][ T5913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.291560][ T5913] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 109.311641][ T5913] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 109.323958][ T5913] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 109.366652][ T5923] loop2: detected capacity change from 0 to 512 [ 109.382088][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.396161][ T5924] loop4: detected capacity change from 0 to 256 [ 109.416681][ T5924] FAT-fs (loop4): Directory bread(block 64) failed [ 109.423285][ T5924] FAT-fs (loop4): Directory bread(block 65) failed [ 109.429870][ T5924] FAT-fs (loop4): Directory bread(block 66) failed [ 109.436451][ T5924] FAT-fs (loop4): Directory bread(block 67) failed [ 109.443001][ T5924] FAT-fs (loop4): Directory bread(block 68) failed [ 109.449547][ T5924] FAT-fs (loop4): Directory bread(block 69) failed [ 109.456139][ T5924] FAT-fs (loop4): Directory bread(block 70) failed [ 109.462705][ T5924] FAT-fs (loop4): Directory bread(block 71) failed [ 109.469272][ T5924] FAT-fs (loop4): Directory bread(block 72) failed [ 109.475779][ T5924] FAT-fs (loop4): Directory bread(block 73) failed [ 109.505216][ T5924] wg1 speed is unknown, defaulting to 1000 [ 109.586204][ T5923] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.662072][ T5923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.679813][ T5923] ext4 filesystem being mounted at /140/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.702633][ T5923] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.651: corrupted xattr block 32: bad e_name length [ 109.742313][ T5923] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 109.752637][ T5923] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.651: corrupted xattr block 32: bad e_name length [ 109.767045][ T5923] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 109.777497][ T5923] EXT4-fs error (device loop2): __ext4_new_inode:1279: comm syz.2.651: failed to insert inode 16: doubly allocated? [ 109.805385][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.117097][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 110.160949][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 110.255961][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'. [ 110.265016][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'. [ 110.280849][ T5951] bond0: entered promiscuous mode [ 110.285942][ T5951] bond_slave_0: entered promiscuous mode [ 110.291721][ T5951] bond_slave_1: entered promiscuous mode [ 110.301125][ T5951] bond0: left promiscuous mode [ 110.305941][ T5951] bond_slave_0: left promiscuous mode [ 110.311384][ T5951] bond_slave_1: left promiscuous mode [ 110.638017][ T5957] loop0: detected capacity change from 0 to 512 [ 110.658060][ T5957] EXT4-fs (loop0): orphan cleanup on readonly fs [ 110.677583][ T5957] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.663: bad orphan inode 13 [ 110.717171][ T5957] ext4_test_bit(bit=12, block=18) = 1 [ 110.722618][ T5957] is_bad_inode(inode)=0 [ 110.726761][ T5957] NEXT_ORPHAN(inode)=2130706432 [ 110.731650][ T5957] max_ino=32 [ 110.734832][ T5957] i_nlink=1 [ 110.768208][ T5957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.806463][ T5968] loop1: detected capacity change from 0 to 128 [ 110.828328][ T5957] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 110.922561][ T5957] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 110.947719][ T5980] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 110.958106][ T5979] loop1: detected capacity change from 0 to 1024 [ 111.061635][ T5979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.089639][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.348215][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.669884][ T6005] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 111.726265][ T6005] SELinux: failed to load policy [ 111.842504][ T6007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.272233][ T6000] syz.1.677 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 112.286351][ T6000] CPU: 1 UID: 0 PID: 6000 Comm: syz.1.677 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.286382][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.286393][ T6000] Call Trace: [ 112.286399][ T6000] [ 112.286406][ T6000] __dump_stack+0x1d/0x30 [ 112.286433][ T6000] dump_stack_lvl+0xe8/0x140 [ 112.286514][ T6000] dump_stack+0x15/0x1b [ 112.286531][ T6000] dump_header+0x81/0x220 [ 112.286548][ T6000] oom_kill_process+0x342/0x400 [ 112.286581][ T6000] out_of_memory+0x979/0xb80 [ 112.286692][ T6000] try_charge_memcg+0x610/0xa10 [ 112.286729][ T6000] obj_cgroup_charge_pages+0xa6/0x150 [ 112.286794][ T6000] __memcg_kmem_charge_page+0x9f/0x170 [ 112.286820][ T6000] __alloc_frozen_pages_noprof+0x188/0x360 [ 112.286919][ T6000] alloc_pages_mpol+0xb3/0x260 [ 112.286941][ T6000] alloc_pages_noprof+0x90/0x130 [ 112.286972][ T6000] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 112.287028][ T6000] __kvmalloc_node_noprof+0x483/0x670 [ 112.287103][ T6000] ? ip_set_alloc+0x24/0x30 [ 112.287134][ T6000] ? ip_set_alloc+0x24/0x30 [ 112.287162][ T6000] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 112.287232][ T6000] ip_set_alloc+0x24/0x30 [ 112.287266][ T6000] hash_netiface_create+0x282/0x740 [ 112.287306][ T6000] ? __pfx_hash_netiface_create+0x10/0x10 [ 112.287427][ T6000] ip_set_create+0x3cc/0x970 [ 112.287494][ T6000] ? __nla_parse+0x40/0x60 [ 112.287522][ T6000] nfnetlink_rcv_msg+0x4c6/0x590 [ 112.287655][ T6000] netlink_rcv_skb+0x123/0x220 [ 112.287728][ T6000] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 112.287763][ T6000] nfnetlink_rcv+0x167/0x16c0 [ 112.287793][ T6000] ? kmem_cache_free+0xe4/0x3d0 [ 112.287867][ T6000] ? __kfree_skb+0x109/0x150 [ 112.287901][ T6000] ? nlmon_xmit+0x4f/0x60 [ 112.287929][ T6000] ? consume_skb+0x49/0x150 [ 112.288012][ T6000] ? nlmon_xmit+0x4f/0x60 [ 112.288039][ T6000] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 112.288148][ T6000] ? __dev_queue_xmit+0x1200/0x2000 [ 112.288181][ T6000] ? __dev_queue_xmit+0x182/0x2000 [ 112.288310][ T6000] ? ref_tracker_free+0x37d/0x3e0 [ 112.288353][ T6000] ? __netlink_deliver_tap+0x4dc/0x500 [ 112.288397][ T6000] netlink_unicast+0x5c0/0x690 [ 112.288493][ T6000] netlink_sendmsg+0x58b/0x6b0 [ 112.288514][ T6000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.288572][ T6000] __sock_sendmsg+0x145/0x180 [ 112.288655][ T6000] ____sys_sendmsg+0x31e/0x4e0 [ 112.288735][ T6000] ___sys_sendmsg+0x17b/0x1d0 [ 112.288774][ T6000] __x64_sys_sendmsg+0xd4/0x160 [ 112.288798][ T6000] x64_sys_call+0x191e/0x3000 [ 112.288822][ T6000] do_syscall_64+0xd2/0x200 [ 112.288842][ T6000] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 112.288876][ T6000] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 112.289079][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.289101][ T6000] RIP: 0033:0x7f825159f6c9 [ 112.289115][ T6000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.289208][ T6000] RSP: 002b:00007f824ffff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.289230][ T6000] RAX: ffffffffffffffda RBX: 00007f82517f5fa0 RCX: 00007f825159f6c9 [ 112.289245][ T6000] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000009 [ 112.289259][ T6000] RBP: 00007f8251621f91 R08: 0000000000000000 R09: 0000000000000000 [ 112.289271][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.289283][ T6000] R13: 00007f82517f6038 R14: 00007f82517f5fa0 R15: 00007ffd38f07298 [ 112.289359][ T6000] [ 112.626353][ T6000] memory: usage 307200kB, limit 307200kB, failcnt 1495 [ 112.633244][ T6000] memory+swap: usage 311072kB, limit 9007199254740988kB, failcnt 0 [ 112.641169][ T6000] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 112.648534][ T6000] Memory cgroup stats for /syz1: [ 112.652718][ T6000] cache 0 [ 112.660613][ T6000] rss 0 [ 112.663365][ T6000] shmem 0 [ 112.666286][ T6000] mapped_file 0 [ 112.669772][ T6000] dirty 0 [ 112.672772][ T6000] writeback 0 [ 112.676111][ T6000] workingset_refault_anon 326 [ 112.680857][ T6000] workingset_refault_file 2272 [ 112.685605][ T6000] swap 3964928 [ 112.688981][ T6000] swapcached 0 [ 112.692338][ T6000] pgpgin 93642 [ 112.695765][ T6000] pgpgout 93640 [ 112.699273][ T6000] pgfault 97121 [ 112.702714][ T6000] pgmajfault 225 [ 112.706240][ T6000] inactive_anon 0 [ 112.709871][ T6000] active_anon 0 [ 112.713325][ T6000] inactive_file 0 [ 112.717007][ T6000] active_file 8192 [ 112.720721][ T6000] unevictable 0 [ 112.724179][ T6000] hierarchical_memory_limit 314572800 [ 112.729548][ T6000] hierarchical_memsw_limit 9223372036854771712 [ 112.735731][ T6000] total_cache 0 [ 112.739285][ T6000] total_rss 0 [ 112.742559][ T6000] total_shmem 0 [ 112.746003][ T6000] total_mapped_file 0 [ 112.749994][ T6000] total_dirty 0 [ 112.753440][ T6000] total_writeback 0 [ 112.757315][ T6000] total_workingset_refault_anon 326 [ 112.762586][ T6000] total_workingset_refault_file 2272 [ 112.767852][ T6000] total_swap 3964928 [ 112.771747][ T6000] total_swapcached 0 [ 112.775671][ T6000] total_pgpgin 93642 [ 112.779562][ T6000] total_pgpgout 93640 [ 112.783528][ T6000] total_pgfault 97121 [ 112.787492][ T6000] total_pgmajfault 225 [ 112.791600][ T6000] total_inactive_anon 0 [ 112.795736][ T6000] total_active_anon 0 [ 112.799709][ T6000] total_inactive_file 0 [ 112.803856][ T6000] total_active_file 8192 [ 112.808088][ T6000] total_unevictable 0 [ 112.812081][ T6000] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.677,pid=5999,uid=0 [ 112.826576][ T6000] Memory cgroup out of memory: Killed process 5999 (syz.1.677) total-vm:94088kB, anon-rss:1264kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 113.214805][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 113.214879][ T29] audit: type=1400 audit(1762316385.074:22743): avc: denied { create } for pid=6059 comm="syz.3.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.283829][ T6060] syz_tun: entered allmulticast mode [ 113.323253][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.701'. [ 113.332188][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.701'. [ 113.431407][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.702'. [ 113.545779][ T29] audit: type=1326 audit(1762316385.404:22744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 113.584568][ T29] audit: type=1326 audit(1762316385.414:22745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 113.608079][ T29] audit: type=1326 audit(1762316385.414:22746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 113.631584][ T29] audit: type=1326 audit(1762316385.414:22747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 113.655031][ T29] audit: type=1326 audit(1762316385.414:22748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 113.678346][ T29] audit: type=1326 audit(1762316385.434:22749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 113.701849][ T29] audit: type=1326 audit(1762316385.434:22750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 113.725774][ T29] audit: type=1326 audit(1762316385.444:22751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7c85d61f85 code=0x7ffc0000 [ 113.751974][ T29] audit: type=1326 audit(1762316385.444:22752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 113.912006][ T6090] loop2: detected capacity change from 0 to 128 [ 113.985653][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 114.016927][ T6098] team0: Device is already in use. [ 114.023852][ T6100] netlink: 'syz.1.716': attribute type 1 has an invalid length. [ 114.075900][ T6100] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 114.091286][ T6100] bond2: (slave batadv11): making interface the new active one [ 114.118208][ T6100] bond2: (slave batadv11): Enslaving as an active interface with an up link [ 114.157992][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 114.168334][ T6107] bond2 (unregistering): (slave batadv11): Releasing active interface [ 114.192471][ T6107] bond2 (unregistering): Released all slaves [ 114.650013][ T6127] loop1: detected capacity change from 0 to 128 [ 114.675079][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.728'. [ 114.684112][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.728'. [ 114.823157][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'. [ 114.832338][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'. [ 114.841940][ T6139] ip6gretap0: entered promiscuous mode [ 114.881612][ T6143] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 114.891326][ T6139] ip6gretap0: left promiscuous mode [ 114.954410][ T6146] syz_tun: entered allmulticast mode [ 114.987012][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.733'. [ 115.036257][ T6143] bond1 (unregistering): Released all slaves [ 115.073134][ T6161] loop0: detected capacity change from 0 to 2048 [ 115.134232][ T6161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.159858][ T6161] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.741: bg 0: block 234: padding at end of block bitmap is not set [ 115.212103][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.429155][ T6204] loop2: detected capacity change from 0 to 2048 [ 115.447579][ T6208] bond0: entered promiscuous mode [ 115.452719][ T6208] bond_slave_0: entered promiscuous mode [ 115.458662][ T6208] bond_slave_1: entered promiscuous mode [ 115.470028][ T6210] netlink: 'syz.1.760': attribute type 1 has an invalid length. [ 115.473934][ T6204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.477853][ T6208] bond0: left promiscuous mode [ 115.494504][ T6208] bond_slave_0: left promiscuous mode [ 115.496953][ T6204] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.758: bg 0: block 234: padding at end of block bitmap is not set [ 115.500013][ T6208] bond_slave_1: left promiscuous mode [ 115.530583][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.535338][ T6213] 8021q: adding VLAN 0 to HW filter on device batadv13 [ 115.556612][ T6213] bond2: (slave batadv13): making interface the new active one [ 115.603584][ T6213] bond2: (slave batadv13): Enslaving as an active interface with an up link [ 115.614042][ T6210] bond2 (unregistering): (slave batadv13): Releasing active interface [ 115.623922][ T6210] bond2 (unregistering): Released all slaves [ 115.986695][ T6240] loop2: detected capacity change from 0 to 164 [ 116.310503][ T6257] loop1: detected capacity change from 0 to 512 [ 116.381552][ T6262] loop4: detected capacity change from 0 to 256 [ 116.502134][ T6257] EXT4-fs (loop1): orphan cleanup on readonly fs [ 116.519634][ T6262] FAT-fs (loop4): Directory bread(block 64) failed [ 116.526208][ T6262] FAT-fs (loop4): Directory bread(block 65) failed [ 116.532777][ T6262] FAT-fs (loop4): Directory bread(block 66) failed [ 116.539308][ T6262] FAT-fs (loop4): Directory bread(block 67) failed [ 116.545879][ T6262] FAT-fs (loop4): Directory bread(block 68) failed [ 116.552415][ T6262] FAT-fs (loop4): Directory bread(block 69) failed [ 116.559034][ T6262] FAT-fs (loop4): Directory bread(block 70) failed [ 116.565540][ T6262] FAT-fs (loop4): Directory bread(block 71) failed [ 116.572093][ T6262] FAT-fs (loop4): Directory bread(block 72) failed [ 116.578666][ T6262] FAT-fs (loop4): Directory bread(block 73) failed [ 116.606262][ T6262] wg1 speed is unknown, defaulting to 1000 [ 116.677631][ T6257] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.778: bad orphan inode 13 [ 116.716681][ T6257] ext4_test_bit(bit=12, block=18) = 1 [ 116.722190][ T6257] is_bad_inode(inode)=0 [ 116.726413][ T6257] NEXT_ORPHAN(inode)=2130706432 [ 116.731329][ T6257] max_ino=32 [ 116.734665][ T6257] i_nlink=1 [ 116.786148][ T6257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.871751][ T6257] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 116.899321][ T6257] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 116.911711][ T6257] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 116.952209][ T6270] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 117.068410][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.139069][ T6285] netlink: 'syz.4.788': attribute type 27 has an invalid length. [ 117.146960][ T6285] netlink: 'syz.4.788': attribute type 4 has an invalid length. [ 117.333229][ T6275] loop2: detected capacity change from 0 to 1024 [ 117.359156][ T6275] EXT4-fs: Ignoring removed nobh option [ 117.364773][ T6275] EXT4-fs: Ignoring removed nobh option [ 117.393754][ T6275] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 117.403604][ T6275] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.783: inode #4294967295: comm syz.2.783: iget: illegal inode # [ 117.442215][ T6275] EXT4-fs (loop2): no journal found [ 117.447465][ T6275] EXT4-fs (loop2): can't get journal size [ 117.454130][ T6275] EXT4-fs (loop2): failed to initialize system zone (-22) [ 117.461634][ T6275] EXT4-fs (loop2): mount failed [ 117.614583][ T6314] loop4: detected capacity change from 0 to 256 [ 117.751735][ T6314] FAT-fs (loop4): Directory bread(block 64) failed [ 117.758321][ T6314] FAT-fs (loop4): Directory bread(block 65) failed [ 117.764887][ T6314] FAT-fs (loop4): Directory bread(block 66) failed [ 117.771478][ T6314] FAT-fs (loop4): Directory bread(block 67) failed [ 117.778022][ T6314] FAT-fs (loop4): Directory bread(block 68) failed [ 117.784588][ T6314] FAT-fs (loop4): Directory bread(block 69) failed [ 117.791213][ T6314] FAT-fs (loop4): Directory bread(block 70) failed [ 117.797718][ T6314] FAT-fs (loop4): Directory bread(block 71) failed [ 117.804253][ T6314] FAT-fs (loop4): Directory bread(block 72) failed [ 117.810795][ T6314] FAT-fs (loop4): Directory bread(block 73) failed [ 117.865182][ T6314] wg1 speed is unknown, defaulting to 1000 [ 118.249033][ T6316] cgroup: fork rejected by pids controller in /syz2 [ 118.349424][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 118.349490][ T29] audit: type=1326 audit(1762316390.134:23195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 118.513245][ T29] audit: type=1326 audit(1762316390.314:23196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 118.536711][ T29] audit: type=1326 audit(1762316390.314:23197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 118.560142][ T29] audit: type=1326 audit(1762316390.314:23198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 118.583631][ T29] audit: type=1326 audit(1762316390.324:23199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 118.607120][ T29] audit: type=1326 audit(1762316390.324:23200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 118.630688][ T29] audit: type=1326 audit(1762316390.324:23201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 118.654077][ T29] audit: type=1326 audit(1762316390.324:23202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 118.677548][ T29] audit: type=1326 audit(1762316390.324:23203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 118.700893][ T29] audit: type=1326 audit(1762316390.324:23204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 118.738066][ T6429] loop0: detected capacity change from 0 to 164 [ 119.191725][ T6468] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 119.210947][ T6468] 8021q: adding VLAN 0 to HW filter on device batadv15 [ 119.219380][ T6468] bond2: (slave batadv15): making interface the new active one [ 119.228135][ T6468] bond2: (slave batadv15): Enslaving as an active interface with an up link [ 119.240925][ T6468] __nla_validate_parse: 9 callbacks suppressed [ 119.240938][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.817'. [ 119.257933][ T6468] bond2 (unregistering): (slave batadv15): Releasing active interface [ 119.267512][ T6468] bond2 (unregistering): Released all slaves [ 119.794692][ T6483] loop2: detected capacity change from 0 to 512 [ 119.807277][ T6483] EXT4-fs (loop2): orphan cleanup on readonly fs [ 119.816881][ T6483] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.821: bad orphan inode 13 [ 119.827196][ T6483] ext4_test_bit(bit=12, block=18) = 1 [ 119.832633][ T6483] is_bad_inode(inode)=0 [ 119.836787][ T6483] NEXT_ORPHAN(inode)=2130706432 [ 119.841744][ T6483] max_ino=32 [ 119.844933][ T6483] i_nlink=1 [ 119.848704][ T6483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.862357][ T6483] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 119.879425][ T6483] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 119.888547][ T6483] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 119.974886][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.996902][ T6500] loop1: detected capacity change from 0 to 1024 [ 120.062984][ T6500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.101288][ T6501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.141962][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.067323][ T6663] SELinux: failed to load policy [ 121.491181][ T6758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.568076][ T6755] loop0: detected capacity change from 0 to 1024 [ 121.591975][ T6755] EXT4-fs: Ignoring removed nobh option [ 121.597581][ T6755] EXT4-fs: Ignoring removed nobh option [ 121.618671][ T6755] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 121.669000][ T6755] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: comm syz.0.842: inode #4294967295: comm syz.0.842: iget: illegal inode # [ 121.688193][ T6763] loop1: detected capacity change from 0 to 1024 [ 121.725555][ T6755] EXT4-fs (loop0): no journal found [ 121.730848][ T6755] EXT4-fs (loop0): can't get journal size [ 121.732079][ T6763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.779317][ T6755] EXT4-fs (loop0): failed to initialize system zone (-22) [ 121.786648][ T6755] EXT4-fs (loop0): mount failed [ 121.797292][ T6770] netlink: 'syz.2.846': attribute type 1 has an invalid length. [ 121.875239][ T6643] syz.4.838 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 121.877738][ T6770] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 121.889344][ T6643] CPU: 1 UID: 0 PID: 6643 Comm: syz.4.838 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.889370][ T6643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.889383][ T6643] Call Trace: [ 121.889390][ T6643] [ 121.889398][ T6643] __dump_stack+0x1d/0x30 [ 121.889430][ T6643] dump_stack_lvl+0xe8/0x140 [ 121.889560][ T6643] dump_stack+0x15/0x1b [ 121.889579][ T6643] dump_header+0x81/0x220 [ 121.889599][ T6643] oom_kill_process+0x342/0x400 [ 121.889635][ T6643] out_of_memory+0x979/0xb80 [ 121.889671][ T6643] try_charge_memcg+0x610/0xa10 [ 121.889729][ T6643] obj_cgroup_charge_pages+0xa6/0x150 [ 121.889753][ T6643] __memcg_kmem_charge_page+0x9f/0x170 [ 121.889777][ T6643] __alloc_frozen_pages_noprof+0x188/0x360 [ 121.889867][ T6643] alloc_pages_mpol+0xb3/0x260 [ 121.889892][ T6643] alloc_pages_noprof+0x90/0x130 [ 121.889914][ T6643] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 121.889987][ T6643] __kvmalloc_node_noprof+0x483/0x670 [ 121.890022][ T6643] ? ip_set_alloc+0x24/0x30 [ 121.890055][ T6643] ? ip_set_alloc+0x24/0x30 [ 121.890131][ T6643] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 121.890207][ T6643] ip_set_alloc+0x24/0x30 [ 121.890239][ T6643] hash_netiface_create+0x282/0x740 [ 121.890277][ T6643] ? __pfx_hash_netiface_create+0x10/0x10 [ 121.890369][ T6643] ip_set_create+0x3cc/0x970 [ 121.890402][ T6643] ? __nla_parse+0x40/0x60 [ 121.890429][ T6643] nfnetlink_rcv_msg+0x4c6/0x590 [ 121.890513][ T6643] netlink_rcv_skb+0x123/0x220 [ 121.890547][ T6643] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 121.890585][ T6643] nfnetlink_rcv+0x167/0x16c0 [ 121.890663][ T6643] ? kmem_cache_free+0xe4/0x3d0 [ 121.890704][ T6643] ? __kfree_skb+0x109/0x150 [ 121.890736][ T6643] ? nlmon_xmit+0x4f/0x60 [ 121.890761][ T6643] ? consume_skb+0x49/0x150 [ 121.890841][ T6643] ? nlmon_xmit+0x4f/0x60 [ 121.890867][ T6643] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 121.890906][ T6643] ? __dev_queue_xmit+0x1200/0x2000 [ 121.890981][ T6643] ? __dev_queue_xmit+0x182/0x2000 [ 121.891020][ T6643] ? ref_tracker_free+0x37d/0x3e0 [ 121.891123][ T6643] ? __netlink_deliver_tap+0x4dc/0x500 [ 121.891204][ T6643] netlink_unicast+0x5c0/0x690 [ 121.891240][ T6643] netlink_sendmsg+0x58b/0x6b0 [ 121.891269][ T6643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.891290][ T6643] __sock_sendmsg+0x145/0x180 [ 121.891318][ T6643] ____sys_sendmsg+0x31e/0x4e0 [ 121.891395][ T6643] ___sys_sendmsg+0x17b/0x1d0 [ 121.891452][ T6643] __x64_sys_sendmsg+0xd4/0x160 [ 121.891478][ T6643] x64_sys_call+0x191e/0x3000 [ 121.891502][ T6643] do_syscall_64+0xd2/0x200 [ 121.891539][ T6643] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.891569][ T6643] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 121.891604][ T6643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.891626][ T6643] RIP: 0033:0x7f7c85d2f6c9 [ 121.891647][ T6643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.891727][ T6643] RSP: 002b:00007f7c84797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.891751][ T6643] RAX: ffffffffffffffda RBX: 00007f7c85f85fa0 RCX: 00007f7c85d2f6c9 [ 121.891764][ T6643] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000009 [ 121.891779][ T6643] RBP: 00007f7c85db1f91 R08: 0000000000000000 R09: 0000000000000000 [ 121.891792][ T6643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.891805][ T6643] R13: 00007f7c85f86038 R14: 00007f7c85f85fa0 R15: 00007ffc5150e038 [ 121.891904][ T6643] [ 121.891911][ T6643] memory: usage 307200kB, limit 307200kB, failcnt 360 [ 121.909657][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 121.915926][ T6643] memory+swap: usage 310844kB, limit 9007199254740988kB, failcnt 0 [ 121.920177][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'. [ 121.922132][ T6643] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 121.934387][ T6770] bond1: (slave batadv11): making interface the new active one [ 121.935199][ T6643] Memory cgroup stats for [ 121.941240][ T6770] bond1: (slave batadv11): Enslaving as an active interface with an up link [ 121.944356][ T6643] /syz4 [ 122.012213][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'. [ 122.015189][ T6643] : [ 122.024943][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.026074][ T6643] cache 4096 [ 122.320808][ T6643] rss 28672 [ 122.324008][ T6643] shmem 0 [ 122.326936][ T6643] mapped_file 4096 [ 122.330681][ T6643] dirty 0 [ 122.333610][ T6643] writeback 0 [ 122.336883][ T6643] workingset_refault_anon 132 [ 122.341588][ T6643] workingset_refault_file 1032 [ 122.346339][ T6643] swap 3776512 [ 122.349751][ T6643] swapcached 28672 [ 122.353535][ T6643] pgpgin 115364 [ 122.356982][ T6643] pgpgout 115355 [ 122.360566][ T6643] pgfault 103786 [ 122.364127][ T6643] pgmajfault 87 [ 122.367611][ T6643] inactive_anon 0 [ 122.371300][ T6643] active_anon 24576 [ 122.375090][ T6643] inactive_file 0 [ 122.378694][ T6643] active_file 4096 [ 122.382435][ T6643] unevictable 0 [ 122.385885][ T6643] hierarchical_memory_limit 314572800 [ 122.391264][ T6643] hierarchical_memsw_limit 9223372036854771712 [ 122.397410][ T6643] total_cache 4096 [ 122.401167][ T6643] total_rss 28672 [ 122.404814][ T6643] total_shmem 0 [ 122.408265][ T6643] total_mapped_file 4096 [ 122.412557][ T6643] total_dirty 0 [ 122.416038][ T6643] total_writeback 0 [ 122.419856][ T6643] total_workingset_refault_anon 132 [ 122.425038][ T6643] total_workingset_refault_file 1032 [ 122.430352][ T6643] total_swap 3776512 [ 122.434313][ T6643] total_swapcached 28672 [ 122.438545][ T6643] total_pgpgin 115364 [ 122.442568][ T6643] total_pgpgout 115355 [ 122.446625][ T6643] total_pgfault 103786 [ 122.450707][ T6643] total_pgmajfault 87 [ 122.454782][ T6643] total_inactive_anon 0 [ 122.458948][ T6643] total_active_anon 24576 [ 122.463295][ T6643] total_inactive_file 0 [ 122.467515][ T6643] total_active_file 4096 [ 122.471770][ T6643] total_unevictable 0 [ 122.475806][ T6643] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.838,pid=6642,uid=0 [ 122.490321][ T6643] Memory cgroup out of memory: Killed process 6642 (syz.4.838) total-vm:94088kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 122.509593][ T6774] bond1 (unregistering): (slave batadv11): Releasing active interface [ 122.529445][ T6774] bond1 (unregistering): Released all slaves [ 122.612505][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'. [ 122.633094][ T6787] ipvlan2: entered promiscuous mode [ 122.640389][ T6787] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 122.658884][ T6787] team0: Device ipvlan2 is already an upper device of the team interface [ 122.937669][ T6812] syz_tun: entered allmulticast mode [ 123.153424][ T6820] loop4: detected capacity change from 0 to 256 [ 123.177326][ T6820] FAT-fs (loop4): Directory bread(block 64) failed [ 123.183965][ T6820] FAT-fs (loop4): Directory bread(block 65) failed [ 123.190520][ T6820] FAT-fs (loop4): Directory bread(block 66) failed [ 123.197033][ T6820] FAT-fs (loop4): Directory bread(block 67) failed [ 123.203558][ T6820] FAT-fs (loop4): Directory bread(block 68) failed [ 123.210119][ T6820] FAT-fs (loop4): Directory bread(block 69) failed [ 123.216682][ T6820] FAT-fs (loop4): Directory bread(block 70) failed [ 123.223321][ T6820] FAT-fs (loop4): Directory bread(block 71) failed [ 123.229998][ T6820] FAT-fs (loop4): Directory bread(block 72) failed [ 123.236521][ T6820] FAT-fs (loop4): Directory bread(block 73) failed [ 123.268326][ T6820] wg1 speed is unknown, defaulting to 1000 [ 123.662594][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'. [ 123.671547][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'. [ 123.887823][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 123.887839][ T29] audit: type=1400 audit(1762316395.744:23328): avc: denied { connect } for pid=6855 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.891915][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 123.972715][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 124.039426][ T6870] loop1: detected capacity change from 0 to 1024 [ 124.101844][ T29] audit: type=1326 audit(1762316395.964:23329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 124.229422][ T6870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.241882][ T29] audit: type=1326 audit(1762316395.984:23330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 124.265376][ T29] audit: type=1326 audit(1762316395.984:23331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 124.288993][ T29] audit: type=1326 audit(1762316395.984:23332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 124.312485][ T29] audit: type=1326 audit(1762316395.984:23333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 124.335967][ T29] audit: type=1326 audit(1762316395.984:23334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 124.359447][ T29] audit: type=1326 audit(1762316395.984:23335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 124.382874][ T29] audit: type=1326 audit(1762316395.984:23336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 124.386087][ T6988] loop4: detected capacity change from 0 to 512 [ 124.406346][ T29] audit: type=1326 audit(1762316395.984:23337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 124.532270][ T6988] EXT4-fs (loop4): orphan cleanup on readonly fs [ 124.559095][ T6988] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.883: bad orphan inode 13 [ 124.616025][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.632432][ T6988] ext4_test_bit(bit=12, block=18) = 1 [ 124.637823][ T6988] is_bad_inode(inode)=0 [ 124.641998][ T6988] NEXT_ORPHAN(inode)=2130706432 [ 124.646835][ T6988] max_ino=32 [ 124.650096][ T6988] i_nlink=1 [ 124.685191][ T6988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.748589][ T6988] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 124.810205][ T6988] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 124.844585][ T7006] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 124.877008][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'. [ 124.923838][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.338465][ T7029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.639274][ T7033] loop3: detected capacity change from 0 to 256 [ 125.655843][ T7033] FAT-fs (loop3): Directory bread(block 64) failed [ 125.662447][ T7033] FAT-fs (loop3): Directory bread(block 65) failed [ 125.669097][ T7033] FAT-fs (loop3): Directory bread(block 66) failed [ 125.675702][ T7033] FAT-fs (loop3): Directory bread(block 67) failed [ 125.682293][ T7033] FAT-fs (loop3): Directory bread(block 68) failed [ 125.688837][ T7033] FAT-fs (loop3): Directory bread(block 69) failed [ 125.695401][ T7033] FAT-fs (loop3): Directory bread(block 70) failed [ 125.701923][ T7033] FAT-fs (loop3): Directory bread(block 71) failed [ 125.708544][ T7033] FAT-fs (loop3): Directory bread(block 72) failed [ 125.715094][ T7033] FAT-fs (loop3): Directory bread(block 73) failed [ 125.760242][ T7033] wg1 speed is unknown, defaulting to 1000 [ 126.051156][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.899'. [ 126.193991][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 126.547690][ T7155] syz_tun: entered allmulticast mode [ 126.855988][ T7023] syz.0.893 (7023) used greatest stack depth: 6136 bytes left [ 126.958997][ T7266] netlink: 'syz.0.908': attribute type 1 has an invalid length. [ 127.022056][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 127.793571][ T7279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.453002][ T7341] loop3: detected capacity change from 0 to 512 [ 128.512658][ T7341] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 128.521536][ T7341] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16 [ 128.628470][ T7392] wg1 speed is unknown, defaulting to 1000 [ 130.004131][ T7422] loop2: detected capacity change from 0 to 1024 [ 130.059279][ T7422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.173244][ T7436] netlink: 'syz.1.932': attribute type 1 has an invalid length. [ 130.181496][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.222913][ T7423] SELinux: failed to load policy [ 130.266853][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv16 [ 130.275691][ T7440] bond2: (slave batadv16): making interface the new active one [ 130.333636][ T7440] bond2: (slave batadv16): Enslaving as an active interface with an up link [ 130.388857][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 130.412325][ T7436] bond2 (unregistering): (slave batadv16): Releasing active interface [ 130.427120][ T7449] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 130.444620][ T7436] bond2 (unregistering): Released all slaves [ 130.475541][ T7449] SELinux: failed to load policy [ 130.595156][ T7453] wg1 speed is unknown, defaulting to 1000 [ 130.670109][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 130.670124][ T29] audit: type=1326 audit(1762316402.534:23430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7452 comm="syz.1.935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x0 [ 130.793859][ T7459] wg1 speed is unknown, defaulting to 1000 [ 130.833331][ T29] audit: type=1326 audit(1762316402.694:23431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.2.937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x0 [ 130.976711][ T7463] wg1 speed is unknown, defaulting to 1000 [ 131.009016][ T29] audit: type=1326 audit(1762316402.874:23432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.0.938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e326cf6c9 code=0x0 [ 131.433310][ T7471] wg1 speed is unknown, defaulting to 1000 [ 131.464394][ T29] audit: type=1326 audit(1762316403.324:23433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7470 comm="syz.1.941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x0 [ 131.551885][ T29] audit: type=1326 audit(1762316403.414:23434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.4.942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x0 [ 131.662918][ T7477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.818194][ T7485] loop0: detected capacity change from 0 to 1024 [ 131.830123][ T7485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.729135][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.778502][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 132.789211][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 132.944082][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 133.053016][ T29] audit: type=1326 audit(1762316404.904:23435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 133.076578][ T29] audit: type=1326 audit(1762316404.904:23436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 133.100023][ T29] audit: type=1326 audit(1762316404.914:23437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 133.111382][ T7519] loop2: detected capacity change from 0 to 1024 [ 133.123435][ T29] audit: type=1326 audit(1762316404.914:23438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 133.123463][ T29] audit: type=1326 audit(1762316404.914:23439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 133.177631][ T7519] EXT4-fs: Ignoring removed nobh option [ 133.183284][ T7519] EXT4-fs: Ignoring removed nobh option [ 133.201256][ T7555] wg1 speed is unknown, defaulting to 1000 [ 133.227971][ T7519] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 133.243060][ T7519] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.955: inode #4294967295: comm syz.2.955: iget: illegal inode # [ 133.270888][ T7519] EXT4-fs (loop2): no journal found [ 133.276158][ T7519] EXT4-fs (loop2): can't get journal size [ 133.295160][ T7519] EXT4-fs (loop2): failed to initialize system zone (-22) [ 133.307019][ T7519] EXT4-fs (loop2): mount failed [ 133.308220][ T7566] wg1 speed is unknown, defaulting to 1000 [ 133.350311][ T7568] netlink: 112 bytes leftover after parsing attributes in process `syz.4.967'. [ 133.398287][ T7569] loop1: detected capacity change from 0 to 256 [ 133.686138][ T7569] FAT-fs (loop1): Directory bread(block 64) failed [ 133.692786][ T7569] FAT-fs (loop1): Directory bread(block 65) failed [ 133.699377][ T7569] FAT-fs (loop1): Directory bread(block 66) failed [ 133.705927][ T7569] FAT-fs (loop1): Directory bread(block 67) failed [ 133.712461][ T7569] FAT-fs (loop1): Directory bread(block 68) failed [ 133.718989][ T7569] FAT-fs (loop1): Directory bread(block 69) failed [ 133.725583][ T7569] FAT-fs (loop1): Directory bread(block 70) failed [ 133.732135][ T7569] FAT-fs (loop1): Directory bread(block 71) failed [ 133.738654][ T7569] FAT-fs (loop1): Directory bread(block 72) failed [ 133.745268][ T7569] FAT-fs (loop1): Directory bread(block 73) failed [ 133.812834][ T7577] loop4: detected capacity change from 0 to 256 [ 133.830326][ T7577] FAT-fs (loop4): Directory bread(block 64) failed [ 133.836928][ T7577] FAT-fs (loop4): Directory bread(block 65) failed [ 133.843532][ T7577] FAT-fs (loop4): Directory bread(block 66) failed [ 133.850081][ T7577] FAT-fs (loop4): Directory bread(block 67) failed [ 133.856765][ T7577] FAT-fs (loop4): Directory bread(block 68) failed [ 133.863302][ T7577] FAT-fs (loop4): Directory bread(block 69) failed [ 133.869959][ T7577] FAT-fs (loop4): Directory bread(block 70) failed [ 133.876497][ T7577] FAT-fs (loop4): Directory bread(block 71) failed [ 133.883049][ T7577] FAT-fs (loop4): Directory bread(block 72) failed [ 133.889609][ T7577] FAT-fs (loop4): Directory bread(block 73) failed [ 133.945444][ T7577] wg1 speed is unknown, defaulting to 1000 [ 134.106281][ T7563] wg1 speed is unknown, defaulting to 1000 [ 134.254311][ T7587] loop0: detected capacity change from 0 to 128 [ 134.263336][ T7589] netlink: 164 bytes leftover after parsing attributes in process `syz.3.973'. [ 134.375075][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 135.000893][ T7722] loop0: detected capacity change from 0 to 512 [ 135.013648][ T7722] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 135.022410][ T7722] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16 [ 135.146122][ T7735] loop4: detected capacity change from 0 to 128 [ 135.281068][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'. [ 135.310368][ T7743] loop4: detected capacity change from 0 to 1024 [ 135.317044][ T7743] EXT4-fs: Ignoring removed nobh option [ 135.322657][ T7743] EXT4-fs: Ignoring removed nobh option [ 135.329205][ T7743] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 135.338999][ T7743] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.993: inode #4294967295: comm syz.4.993: iget: illegal inode # [ 135.353021][ T7743] EXT4-fs (loop4): no journal found [ 135.358284][ T7743] EXT4-fs (loop4): can't get journal size [ 135.372039][ T7743] EXT4-fs (loop4): failed to initialize system zone (-22) [ 135.379273][ T7743] EXT4-fs (loop4): mount failed [ 135.471286][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'. [ 135.473935][ T7756] netlink: 'syz.4.998': attribute type 27 has an invalid length. [ 135.480231][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'. [ 135.487914][ T7756] netlink: 164 bytes leftover after parsing attributes in process `syz.4.998'. [ 135.538735][ T7765] loop0: detected capacity change from 0 to 1024 [ 135.550584][ T7765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.568160][ T7763] loop4: detected capacity change from 0 to 1024 [ 135.585463][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.590085][ T7763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.644875][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.692795][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 135.692811][ T29] audit: type=1326 audit(1762316407.554:23596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.0.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 135.722615][ T29] audit: type=1326 audit(1762316407.554:23597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.0.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 135.778903][ T29] audit: type=1326 audit(1762316407.634:23598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.0.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 135.802330][ T29] audit: type=1326 audit(1762316407.634:23599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.0.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 135.825804][ T29] audit: type=1326 audit(1762316407.634:23600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.0.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 135.849325][ T29] audit: type=1326 audit(1762316407.634:23601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.0.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6e326cf6c9 code=0x7ffc0000 [ 135.885015][ T7781] loop0: detected capacity change from 0 to 256 [ 135.961200][ T7781] FAT-fs (loop0): Directory bread(block 64) failed [ 135.967743][ T7781] FAT-fs (loop0): Directory bread(block 65) failed [ 135.974290][ T7781] FAT-fs (loop0): Directory bread(block 66) failed [ 135.980860][ T7781] FAT-fs (loop0): Directory bread(block 67) failed [ 135.987453][ T7781] FAT-fs (loop0): Directory bread(block 68) failed [ 135.994092][ T7781] FAT-fs (loop0): Directory bread(block 69) failed [ 136.000798][ T7781] FAT-fs (loop0): Directory bread(block 70) failed [ 136.007299][ T7781] FAT-fs (loop0): Directory bread(block 71) failed [ 136.013850][ T7781] FAT-fs (loop0): Directory bread(block 72) failed [ 136.020426][ T7781] FAT-fs (loop0): Directory bread(block 73) failed [ 136.090197][ T7781] wg1 speed is unknown, defaulting to 1000 [ 136.276573][ T7788] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 136.289299][ T29] audit: type=1326 audit(1762316408.154:23602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 136.312865][ T29] audit: type=1326 audit(1762316408.154:23603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 136.321360][ T7788] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 136.336370][ T29] audit: type=1326 audit(1762316408.154:23604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 136.347032][ T7788] bond1: (slave batadv12): making interface the new active one [ 136.366710][ T29] audit: type=1326 audit(1762316408.154:23605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 136.402008][ T7788] bond1: (slave batadv12): Enslaving as an active interface with an up link [ 136.431950][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 136.436623][ T7795] loop1: detected capacity change from 0 to 512 [ 136.449686][ T7788] bond1 (unregistering): (slave batadv12): Releasing active interface [ 136.459085][ T7788] bond1 (unregistering): Released all slaves [ 136.482452][ T7795] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.489379][ T7795] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1007: bad orphan inode 13 [ 136.500365][ T7795] ext4_test_bit(bit=12, block=18) = 1 [ 136.505745][ T7795] is_bad_inode(inode)=0 [ 136.509982][ T7795] NEXT_ORPHAN(inode)=2130706432 [ 136.514842][ T7795] max_ino=32 [ 136.518031][ T7795] i_nlink=1 [ 136.524702][ T7795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.546980][ T7795] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 136.592603][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1011'. [ 136.601644][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1011'. [ 136.611779][ T7805] loop2: detected capacity change from 0 to 1024 [ 136.614809][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.645916][ T7805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.679207][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.693960][ T7812] netlink: 'syz.4.1013': attribute type 27 has an invalid length. [ 136.701828][ T7812] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1013'. [ 137.099735][ T7833] loop1: detected capacity change from 0 to 256 [ 137.116400][ T7833] FAT-fs (loop1): Directory bread(block 64) failed [ 137.122953][ T7833] FAT-fs (loop1): Directory bread(block 65) failed [ 137.129515][ T7833] FAT-fs (loop1): Directory bread(block 66) failed [ 137.136018][ T7833] FAT-fs (loop1): Directory bread(block 67) failed [ 137.142596][ T7833] FAT-fs (loop1): Directory bread(block 68) failed [ 137.149140][ T7833] FAT-fs (loop1): Directory bread(block 69) failed [ 137.155661][ T7833] FAT-fs (loop1): Directory bread(block 70) failed [ 137.162185][ T7833] FAT-fs (loop1): Directory bread(block 71) failed [ 137.168702][ T7833] FAT-fs (loop1): Directory bread(block 72) failed [ 137.175288][ T7833] FAT-fs (loop1): Directory bread(block 73) failed [ 137.217544][ T7833] wg1 speed is unknown, defaulting to 1000 [ 137.346404][ T7835] netlink: 'syz.3.1020': attribute type 1 has an invalid length. [ 137.367631][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'. [ 137.644975][ T7841] loop0: detected capacity change from 0 to 256 [ 137.665107][ T7841] FAT-fs (loop0): Directory bread(block 64) failed [ 137.671697][ T7841] FAT-fs (loop0): Directory bread(block 65) failed [ 137.678295][ T7841] FAT-fs (loop0): Directory bread(block 66) failed [ 137.684859][ T7841] FAT-fs (loop0): Directory bread(block 67) failed [ 137.691392][ T7841] FAT-fs (loop0): Directory bread(block 68) failed [ 137.697960][ T7841] FAT-fs (loop0): Directory bread(block 69) failed [ 137.704481][ T7841] FAT-fs (loop0): Directory bread(block 70) failed [ 137.710997][ T7841] FAT-fs (loop0): Directory bread(block 71) failed [ 137.717522][ T7841] FAT-fs (loop0): Directory bread(block 72) failed [ 137.724084][ T7841] FAT-fs (loop0): Directory bread(block 73) failed [ 137.926197][ T7841] wg1 speed is unknown, defaulting to 1000 [ 137.979954][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'. [ 137.988961][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'. [ 138.088621][ T7854] netlink: 'syz.3.1027': attribute type 27 has an invalid length. [ 138.412738][ T7970] loop3: detected capacity change from 0 to 256 [ 138.440023][ T7970] FAT-fs (loop3): Directory bread(block 64) failed [ 138.446621][ T7970] FAT-fs (loop3): Directory bread(block 65) failed [ 138.453170][ T7970] FAT-fs (loop3): Directory bread(block 66) failed [ 138.459790][ T7970] FAT-fs (loop3): Directory bread(block 67) failed [ 138.466441][ T7970] FAT-fs (loop3): Directory bread(block 68) failed [ 138.473043][ T7970] FAT-fs (loop3): Directory bread(block 69) failed [ 138.479631][ T7970] FAT-fs (loop3): Directory bread(block 70) failed [ 138.486396][ T7970] FAT-fs (loop3): Directory bread(block 71) failed [ 138.493014][ T7970] FAT-fs (loop3): Directory bread(block 72) failed [ 138.499723][ T7970] FAT-fs (loop3): Directory bread(block 73) failed [ 139.002442][ T7972] loop1: detected capacity change from 0 to 256 [ 139.362016][ T7968] wg1 speed is unknown, defaulting to 1000 [ 139.432515][ T7972] FAT-fs (loop1): Directory bread(block 64) failed [ 139.439057][ T7972] FAT-fs (loop1): Directory bread(block 65) failed [ 139.445595][ T7972] FAT-fs (loop1): Directory bread(block 66) failed [ 139.452116][ T7972] FAT-fs (loop1): Directory bread(block 67) failed [ 139.458637][ T7972] FAT-fs (loop1): Directory bread(block 68) failed [ 139.465149][ T7972] FAT-fs (loop1): Directory bread(block 69) failed [ 139.471781][ T7972] FAT-fs (loop1): Directory bread(block 70) failed [ 139.478268][ T7972] FAT-fs (loop1): Directory bread(block 71) failed [ 139.484843][ T7972] FAT-fs (loop1): Directory bread(block 72) failed [ 139.491363][ T7972] FAT-fs (loop1): Directory bread(block 73) failed [ 139.548905][ T7971] wg1 speed is unknown, defaulting to 1000 [ 139.854999][ T8092] netlink: 'syz.3.1039': attribute type 1 has an invalid length. [ 139.922946][ T8092] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 139.974119][ T8092] bond1: (slave batadv11): making interface the new active one [ 140.024537][ T8092] bond1: (slave batadv11): Enslaving as an active interface with an up link [ 140.061985][ T8098] bond1 (unregistering): (slave batadv11): Releasing active interface [ 140.145452][ T8206] netlink: 'syz.1.1040': attribute type 27 has an invalid length. [ 140.153700][ T8098] bond1 (unregistering): Released all slaves [ 140.265201][ T8211] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 140.351162][ T8216] loop3: detected capacity change from 0 to 1024 [ 140.466599][ T8216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.490678][ T8223] netlink: 'syz.4.1048': attribute type 1 has an invalid length. [ 140.606211][ T8231] __nla_validate_parse: 6 callbacks suppressed [ 140.606225][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1048'. [ 140.629939][ T8231] bond1 (unregistering): Released all slaves [ 140.669823][ T8212] loop2: detected capacity change from 0 to 1024 [ 140.711993][ T8233] loop1: detected capacity change from 0 to 256 [ 140.762591][ T8212] EXT4-fs: Ignoring removed nobh option [ 140.768264][ T8212] EXT4-fs: Ignoring removed nobh option [ 140.809602][ T8233] FAT-fs (loop1): Directory bread(block 64) failed [ 140.816396][ T8233] FAT-fs (loop1): Directory bread(block 65) failed [ 140.823028][ T8233] FAT-fs (loop1): Directory bread(block 66) failed [ 140.829582][ T8233] FAT-fs (loop1): Directory bread(block 67) failed [ 140.836106][ T8233] FAT-fs (loop1): Directory bread(block 68) failed [ 140.842699][ T8233] FAT-fs (loop1): Directory bread(block 69) failed [ 140.849249][ T8233] FAT-fs (loop1): Directory bread(block 70) failed [ 140.855807][ T8233] FAT-fs (loop1): Directory bread(block 71) failed [ 140.862349][ T8233] FAT-fs (loop1): Directory bread(block 72) failed [ 140.868867][ T8233] FAT-fs (loop1): Directory bread(block 73) failed [ 140.935271][ T8233] wg1 speed is unknown, defaulting to 1000 [ 141.014995][ T8212] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 141.036567][ T8212] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.1044: inode #4294967295: comm syz.2.1044: iget: illegal inode # [ 141.051238][ T8212] EXT4-fs (loop2): no journal found [ 141.056459][ T8212] EXT4-fs (loop2): can't get journal size [ 141.063114][ T8212] EXT4-fs (loop2): failed to initialize system zone (-22) [ 141.090894][ T8212] EXT4-fs (loop2): mount failed [ 141.127900][ T8236] loop0: detected capacity change from 0 to 1024 [ 141.203482][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.223242][ T8236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.252287][ T8240] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1052'. [ 141.305524][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1053'. [ 141.377120][ T8240] SELinux: failed to load policy [ 141.405802][ T8249] loop3: detected capacity change from 0 to 1024 [ 141.407090][ T8247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1054'. [ 141.451904][ T8252] netlink: 'syz.1.1056': attribute type 1 has an invalid length. [ 141.477278][ T8249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.492602][ T8256] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 141.502517][ T8256] SELinux: failed to load policy [ 141.513322][ T8259] 8021q: adding VLAN 0 to HW filter on device batadv18 [ 141.522061][ T8259] bond2: (slave batadv18): making interface the new active one [ 141.566301][ T8259] bond2: (slave batadv18): Enslaving as an active interface with an up link [ 141.580326][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1057'. [ 141.597458][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1056'. [ 141.626836][ T8252] bond2 (unregistering): (slave batadv18): Releasing active interface [ 141.636280][ T8252] bond2 (unregistering): Released all slaves [ 141.744294][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1059'. [ 141.760438][ T996] failed while handling packet from 1:16385 [ 141.789211][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 141.789228][ T29] audit: type=1326 audit(1762316413.654:24020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 141.825282][ T29] audit: type=1326 audit(1762316413.654:24021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 141.848713][ T29] audit: type=1326 audit(1762316413.654:24022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 141.872236][ T29] audit: type=1326 audit(1762316413.654:24023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8269 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82515d1f85 code=0x7ffc0000 [ 141.895728][ T29] audit: type=1326 audit(1762316413.654:24024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 141.919218][ T29] audit: type=1326 audit(1762316413.654:24025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 141.942702][ T29] audit: type=1326 audit(1762316413.654:24026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 141.966167][ T29] audit: type=1326 audit(1762316413.654:24027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f825153b779 code=0x7ffc0000 [ 141.989687][ T29] audit: type=1326 audit(1762316413.654:24028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 142.013167][ T29] audit: type=1326 audit(1762316413.654:24029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 142.079414][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.239523][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.404797][ T8389] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 142.477709][ T8392] loop0: detected capacity change from 0 to 256 [ 142.565100][ T8392] FAT-fs (loop0): Directory bread(block 64) failed [ 142.571706][ T8392] FAT-fs (loop0): Directory bread(block 65) failed [ 142.578229][ T8392] FAT-fs (loop0): Directory bread(block 66) failed [ 142.584771][ T8392] FAT-fs (loop0): Directory bread(block 67) failed [ 142.591386][ T8392] FAT-fs (loop0): Directory bread(block 68) failed [ 142.597906][ T8392] FAT-fs (loop0): Directory bread(block 69) failed [ 142.604451][ T8392] FAT-fs (loop0): Directory bread(block 70) failed [ 142.610977][ T8392] FAT-fs (loop0): Directory bread(block 71) failed [ 142.617533][ T8392] FAT-fs (loop0): Directory bread(block 72) failed [ 142.624049][ T8392] FAT-fs (loop0): Directory bread(block 73) failed [ 142.670510][ T8392] wg1 speed is unknown, defaulting to 1000 [ 142.879680][ T8395] loop1: detected capacity change from 0 to 512 [ 142.967129][ T8395] EXT4-fs (loop1): orphan cleanup on readonly fs [ 142.999886][ T8395] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1068: bad orphan inode 13 [ 143.051835][ T8381] loop2: detected capacity change from 0 to 1024 [ 143.099141][ T8381] EXT4-fs: Ignoring removed nobh option [ 143.104834][ T8381] EXT4-fs: Ignoring removed nobh option [ 143.113809][ T8395] ext4_test_bit(bit=12, block=18) = 1 [ 143.119273][ T8395] is_bad_inode(inode)=0 [ 143.123425][ T8395] NEXT_ORPHAN(inode)=2130706432 [ 143.128251][ T8395] max_ino=32 [ 143.131471][ T8395] i_nlink=1 [ 143.176754][ T8381] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 143.189139][ T8395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.199742][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1071'. [ 143.210984][ T8381] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.1064: inode #4294967295: comm syz.2.1064: iget: illegal inode # [ 143.238127][ T8395] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 143.249305][ T8381] EXT4-fs (loop2): no journal found [ 143.254516][ T8381] EXT4-fs (loop2): can't get journal size [ 143.262575][ T8386] loop4: detected capacity change from 0 to 1024 [ 143.269196][ T8386] EXT4-fs: Ignoring removed nobh option [ 143.274900][ T8386] EXT4-fs: Ignoring removed nobh option [ 143.289625][ T8381] EXT4-fs (loop2): failed to initialize system zone (-22) [ 143.304451][ T8381] EXT4-fs (loop2): mount failed [ 143.315266][ T8395] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 143.324985][ T8386] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 143.326646][ T8406] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 143.336242][ T8386] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.1067: inode #4294967295: comm syz.4.1067: iget: illegal inode # [ 143.471740][ T8386] EXT4-fs (loop4): no journal found [ 143.476964][ T8386] EXT4-fs (loop4): can't get journal size [ 143.502174][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.520735][ T8386] EXT4-fs (loop4): failed to initialize system zone (-22) [ 143.527991][ T8386] EXT4-fs (loop4): mount failed [ 143.926532][ T8414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1073'. [ 143.987042][ T8414] SELinux: failed to load policy [ 145.158528][ T8552] loop2: detected capacity change from 0 to 512 [ 145.174120][ T8552] EXT4-fs (loop2): orphan cleanup on readonly fs [ 145.180915][ T8552] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1085: bad orphan inode 13 [ 145.209299][ T8552] ext4_test_bit(bit=12, block=18) = 1 [ 145.214709][ T8552] is_bad_inode(inode)=0 [ 145.218903][ T8552] NEXT_ORPHAN(inode)=2130706432 [ 145.223826][ T8552] max_ino=32 [ 145.227009][ T8552] i_nlink=1 [ 145.296747][ T8552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.369212][ T8561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.398678][ T8552] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 145.446600][ T8552] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 145.502393][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.103148][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'. [ 146.116164][ T8886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.201079][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 146.415473][ T8897] loop0: detected capacity change from 0 to 1024 [ 146.437191][ T8897] EXT4-fs: Ignoring removed nobh option [ 146.442834][ T8897] EXT4-fs: Ignoring removed nobh option [ 146.449469][ T8897] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 146.547230][ T8897] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: comm syz.0.1098: inode #4294967295: comm syz.0.1098: iget: illegal inode # [ 146.562353][ T8897] EXT4-fs (loop0): no journal found [ 146.567569][ T8897] EXT4-fs (loop0): can't get journal size [ 146.575559][ T8897] EXT4-fs (loop0): failed to initialize system zone (-22) [ 146.583259][ T8897] EXT4-fs (loop0): mount failed [ 147.095153][ T8923] loop3: detected capacity change from 0 to 256 [ 147.239321][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 147.239340][ T29] audit: type=1326 audit(1762316418.284:24328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 147.268955][ T29] audit: type=1326 audit(1762316418.364:24329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 147.292599][ T29] audit: type=1326 audit(1762316418.364:24330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 147.307664][ T8923] FAT-fs (loop3): Directory bread(block 64) failed [ 147.316107][ T29] audit: type=1326 audit(1762316418.394:24331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 147.322558][ T8923] FAT-fs (loop3): Directory bread(block 65) failed [ 147.322611][ T8923] FAT-fs (loop3): Directory bread(block 66) failed [ 147.322627][ T8923] FAT-fs (loop3): Directory bread(block 67) failed [ 147.322647][ T8923] FAT-fs (loop3): Directory bread(block 68) failed [ 147.322664][ T8923] FAT-fs (loop3): Directory bread(block 69) failed [ 147.322686][ T8923] FAT-fs (loop3): Directory bread(block 70) failed [ 147.346053][ T29] audit: type=1326 audit(1762316418.394:24332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 147.352566][ T8923] FAT-fs (loop3): Directory bread(block 71) failed [ 147.359055][ T29] audit: type=1326 audit(1762316418.394:24333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 147.365534][ T8923] FAT-fs (loop3): Directory bread(block 72) failed [ 147.372009][ T29] audit: type=1326 audit(1762316418.394:24334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 147.378486][ T8923] FAT-fs (loop3): Directory bread(block 73) failed [ 147.475214][ T29] audit: type=1326 audit(1762316418.394:24335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 147.499058][ T29] audit: type=1326 audit(1762316418.394:24336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 147.523080][ T29] audit: type=1326 audit(1762316418.394:24337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7feb7d24f6c9 code=0x7ffc0000 [ 147.541381][ T8928] netlink: 'syz.2.1103': attribute type 1 has an invalid length. [ 147.607349][ T8922] wg1 speed is unknown, defaulting to 1000 [ 147.769303][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'. [ 148.560814][ T8936] loop4: detected capacity change from 0 to 256 [ 148.570021][ T8937] loop1: detected capacity change from 0 to 256 [ 148.996928][ T8937] FAT-fs (loop1): Directory bread(block 64) failed [ 149.003550][ T8937] FAT-fs (loop1): Directory bread(block 65) failed [ 149.010165][ T8937] FAT-fs (loop1): Directory bread(block 66) failed [ 149.016671][ T8937] FAT-fs (loop1): Directory bread(block 67) failed [ 149.023237][ T8937] FAT-fs (loop1): Directory bread(block 68) failed [ 149.029761][ T8937] FAT-fs (loop1): Directory bread(block 69) failed [ 149.036286][ T8937] FAT-fs (loop1): Directory bread(block 70) failed [ 149.042865][ T8937] FAT-fs (loop1): Directory bread(block 71) failed [ 149.049438][ T8937] FAT-fs (loop1): Directory bread(block 72) failed [ 149.055988][ T8937] FAT-fs (loop1): Directory bread(block 73) failed [ 149.069163][ T8936] FAT-fs (loop4): Directory bread(block 64) failed [ 149.075755][ T8936] FAT-fs (loop4): Directory bread(block 65) failed [ 149.082460][ T8936] FAT-fs (loop4): Directory bread(block 66) failed [ 149.089037][ T8936] FAT-fs (loop4): Directory bread(block 67) failed [ 149.095583][ T8936] FAT-fs (loop4): Directory bread(block 68) failed [ 149.102137][ T8936] FAT-fs (loop4): Directory bread(block 69) failed [ 149.108692][ T8936] FAT-fs (loop4): Directory bread(block 70) failed [ 149.115218][ T8936] FAT-fs (loop4): Directory bread(block 71) failed [ 149.121420][ T8935] wg1 speed is unknown, defaulting to 1000 [ 149.121765][ T8936] FAT-fs (loop4): Directory bread(block 72) failed [ 149.134024][ T8936] FAT-fs (loop4): Directory bread(block 73) failed [ 149.194630][ T8934] wg1 speed is unknown, defaulting to 1000 [ 149.465544][ T8946] loop3: detected capacity change from 0 to 256 [ 149.482488][ T8946] FAT-fs (loop3): Directory bread(block 64) failed [ 149.489166][ T8946] FAT-fs (loop3): Directory bread(block 65) failed [ 149.495730][ T8946] FAT-fs (loop3): Directory bread(block 66) failed [ 149.502329][ T8946] FAT-fs (loop3): Directory bread(block 67) failed [ 149.508930][ T8946] FAT-fs (loop3): Directory bread(block 68) failed [ 149.515433][ T8946] FAT-fs (loop3): Directory bread(block 69) failed [ 149.522071][ T8946] FAT-fs (loop3): Directory bread(block 70) failed [ 149.528592][ T8946] FAT-fs (loop3): Directory bread(block 71) failed [ 149.535135][ T8946] FAT-fs (loop3): Directory bread(block 72) failed [ 149.541724][ T8946] FAT-fs (loop3): Directory bread(block 73) failed [ 149.614346][ T8946] wg1 speed is unknown, defaulting to 1000 [ 149.743160][ T8944] loop4: detected capacity change from 0 to 1024 [ 149.821379][ T8944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.852279][ T8953] wg1 speed is unknown, defaulting to 1000 [ 149.887149][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.966529][ T8958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1112'. [ 150.014597][ T8963] netlink: 'syz.0.1114': attribute type 1 has an invalid length. [ 150.040151][ T8963] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 150.083206][ T8963] bond1: (slave batadv12): making interface the new active one [ 150.093922][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 150.188044][ T8968] loop4: detected capacity change from 0 to 256 [ 150.211116][ T8968] FAT-fs (loop4): Directory bread(block 64) failed [ 150.217758][ T8968] FAT-fs (loop4): Directory bread(block 65) failed [ 150.224360][ T8968] FAT-fs (loop4): Directory bread(block 66) failed [ 150.230873][ T8968] FAT-fs (loop4): Directory bread(block 67) failed [ 150.237381][ T8968] FAT-fs (loop4): Directory bread(block 68) failed [ 150.243916][ T8968] FAT-fs (loop4): Directory bread(block 69) failed [ 150.250505][ T8968] FAT-fs (loop4): Directory bread(block 70) failed [ 150.257018][ T8968] FAT-fs (loop4): Directory bread(block 71) failed [ 150.263567][ T8968] FAT-fs (loop4): Directory bread(block 72) failed [ 150.270096][ T8968] FAT-fs (loop4): Directory bread(block 73) failed [ 150.312190][ T8963] bond1: (slave batadv12): Enslaving as an active interface with an up link [ 150.499639][ T8958] SELinux: failed to load policy [ 150.529826][ T8962] bond1 (unregistering): (slave batadv12): Releasing active interface [ 150.550832][ T8962] bond1 (unregistering): Released all slaves [ 150.590966][ T8968] wg1 speed is unknown, defaulting to 1000 [ 150.654777][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 150.684694][ T8985] loop0: detected capacity change from 0 to 1024 [ 150.730628][ T8985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.747437][ T8988] SELinux: failed to load policy [ 150.764685][ T8987] wg1 speed is unknown, defaulting to 1000 [ 150.888362][ T8997] loop2: detected capacity change from 0 to 1024 [ 150.895761][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.973729][ T8997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.029248][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.064453][ T9004] loop0: detected capacity change from 0 to 1024 [ 151.114751][ T9004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.246551][ T8996] loop4: detected capacity change from 0 to 1024 [ 151.286776][ T8996] EXT4-fs: Ignoring removed nobh option [ 151.292428][ T8996] EXT4-fs: Ignoring removed nobh option [ 151.305715][ T8996] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 151.323273][ T8996] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.1121: inode #4294967295: comm syz.4.1121: iget: illegal inode # [ 151.390184][ T9016] loop1: detected capacity change from 0 to 256 [ 151.478976][ T8996] EXT4-fs (loop4): no journal found [ 151.484227][ T8996] EXT4-fs (loop4): can't get journal size [ 151.579955][ T9016] FAT-fs (loop1): Directory bread(block 64) failed [ 151.586500][ T9016] FAT-fs (loop1): Directory bread(block 65) failed [ 151.593112][ T9016] FAT-fs (loop1): Directory bread(block 66) failed [ 151.599644][ T9016] FAT-fs (loop1): Directory bread(block 67) failed [ 151.606165][ T9016] FAT-fs (loop1): Directory bread(block 68) failed [ 151.612705][ T9016] FAT-fs (loop1): Directory bread(block 69) failed [ 151.619310][ T9016] FAT-fs (loop1): Directory bread(block 70) failed [ 151.625851][ T9016] FAT-fs (loop1): Directory bread(block 71) failed [ 151.632487][ T9016] FAT-fs (loop1): Directory bread(block 72) failed [ 151.639017][ T9016] FAT-fs (loop1): Directory bread(block 73) failed [ 151.682259][ T8996] EXT4-fs (loop4): failed to initialize system zone (-22) [ 151.689466][ T8996] EXT4-fs (loop4): mount failed [ 151.720499][ T9011] wg1 speed is unknown, defaulting to 1000 [ 152.446325][ T9124] loop3: detected capacity change from 0 to 256 [ 152.480871][ T9124] FAT-fs (loop3): Directory bread(block 64) failed [ 152.487427][ T9124] FAT-fs (loop3): Directory bread(block 65) failed [ 152.493991][ T9124] FAT-fs (loop3): Directory bread(block 66) failed [ 152.500508][ T9124] FAT-fs (loop3): Directory bread(block 67) failed [ 152.507051][ T9124] FAT-fs (loop3): Directory bread(block 68) failed [ 152.513612][ T9124] FAT-fs (loop3): Directory bread(block 69) failed [ 152.520128][ T9124] FAT-fs (loop3): Directory bread(block 70) failed [ 152.526657][ T9124] FAT-fs (loop3): Directory bread(block 71) failed [ 152.533178][ T9124] FAT-fs (loop3): Directory bread(block 72) failed [ 152.539696][ T9124] FAT-fs (loop3): Directory bread(block 73) failed [ 152.567490][ T9123] wg1 speed is unknown, defaulting to 1000 [ 152.606031][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.623988][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 152.624001][ T29] audit: type=1326 audit(1762316424.484:24528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 152.660662][ T29] audit: type=1326 audit(1762316424.524:24529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 152.699441][ T29] audit: type=1326 audit(1762316424.554:24530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 152.722966][ T29] audit: type=1326 audit(1762316424.554:24531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 152.746498][ T29] audit: type=1326 audit(1762316424.554:24532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 152.770175][ T29] audit: type=1326 audit(1762316424.554:24533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 152.794675][ T29] audit: type=1326 audit(1762316424.554:24534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 152.818335][ T29] audit: type=1326 audit(1762316424.554:24535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 152.841825][ T29] audit: type=1326 audit(1762316424.554:24536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 152.865364][ T29] audit: type=1326 audit(1762316424.554:24537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825159f6c9 code=0x7ffc0000 [ 152.929092][ T9129] loop0: detected capacity change from 0 to 1024 [ 153.101299][ T9133] loop1: detected capacity change from 0 to 256 [ 153.146103][ T9135] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 153.772781][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1134'. [ 153.826433][ T9133] FAT-fs (loop1): Directory bread(block 64) failed [ 153.833034][ T9133] FAT-fs (loop1): Directory bread(block 65) failed [ 153.839593][ T9133] FAT-fs (loop1): Directory bread(block 66) failed [ 153.846101][ T9133] FAT-fs (loop1): Directory bread(block 67) failed [ 153.852710][ T9133] FAT-fs (loop1): Directory bread(block 68) failed [ 153.859260][ T9133] FAT-fs (loop1): Directory bread(block 69) failed [ 153.865840][ T9133] FAT-fs (loop1): Directory bread(block 70) failed [ 153.872450][ T9133] FAT-fs (loop1): Directory bread(block 71) failed [ 153.879042][ T9133] FAT-fs (loop1): Directory bread(block 72) failed [ 153.885557][ T9133] FAT-fs (loop1): Directory bread(block 73) failed [ 153.912371][ T9132] wg1 speed is unknown, defaulting to 1000 [ 154.036139][ T9129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.303640][ T9347] SELinux: failed to load policy [ 154.417681][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1139'. [ 154.478144][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.483781][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'. [ 154.707516][ T9362] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 155.472771][ T9362] SELinux: failed to load policy [ 156.725536][ T9587] loop4: detected capacity change from 0 to 1024 [ 156.742933][ T9589] loop1: detected capacity change from 0 to 1024 [ 156.775900][ T9592] loop0: detected capacity change from 0 to 256 [ 156.953237][ T9592] FAT-fs (loop0): Directory bread(block 64) failed [ 156.959803][ T9592] FAT-fs (loop0): Directory bread(block 65) failed [ 156.966355][ T9592] FAT-fs (loop0): Directory bread(block 66) failed [ 156.972897][ T9592] FAT-fs (loop0): Directory bread(block 67) failed [ 156.979484][ T9592] FAT-fs (loop0): Directory bread(block 68) failed [ 156.986056][ T9592] FAT-fs (loop0): Directory bread(block 69) failed [ 156.992605][ T9592] FAT-fs (loop0): Directory bread(block 70) failed [ 156.999338][ T9592] FAT-fs (loop0): Directory bread(block 71) failed [ 157.005852][ T9592] FAT-fs (loop0): Directory bread(block 72) failed [ 157.012499][ T9592] FAT-fs (loop0): Directory bread(block 73) failed [ 157.421869][ T9589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.521111][ T9587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.751631][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1152'. [ 157.778549][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.849137][ T9583] wg1 speed is unknown, defaulting to 1000 [ 157.920164][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.978281][ T9711] netlink: 'syz.4.1154': attribute type 1 has an invalid length. [ 158.001621][ T9709] loop3: detected capacity change from 0 to 1024 [ 158.093867][ T9709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.095409][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 158.095423][ T29] audit: type=1326 audit(1762316429.954:24717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 158.135639][ T29] audit: type=1326 audit(1762316429.954:24718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 158.159197][ T29] audit: type=1326 audit(1762316429.954:24719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 158.215963][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1154'. [ 158.242486][ T9714] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 158.261102][ T9714] bond1: (slave batadv12): making interface the new active one [ 158.270000][ T29] audit: type=1326 audit(1762316430.044:24720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 158.293617][ T29] audit: type=1326 audit(1762316430.044:24721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 158.317117][ T29] audit: type=1326 audit(1762316430.044:24722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 158.340601][ T29] audit: type=1326 audit(1762316430.044:24723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 158.348200][ T9714] bond1: (slave batadv12): Enslaving as an active interface with an up link [ 158.364168][ T29] audit: type=1326 audit(1762316430.044:24724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 158.364198][ T29] audit: type=1326 audit(1762316430.044:24725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 158.419890][ T29] audit: type=1326 audit(1762316430.044:24726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ab56f6c9 code=0x7ffc0000 [ 158.486536][ T9711] bond1 (unregistering): (slave batadv12): Releasing active interface [ 158.511161][ T9711] bond1 (unregistering): Released all slaves [ 158.534830][ T9829] loop2: detected capacity change from 0 to 1024 [ 158.562398][ T9829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.647448][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.721503][ T9839] loop2: detected capacity change from 0 to 1024 [ 158.741162][ T9840] SELinux: failed to load policy [ 158.801130][ T9839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.857355][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.070406][ T9847] loop1: detected capacity change from 0 to 256 [ 159.153892][ T9847] FAT-fs (loop1): Directory bread(block 64) failed [ 159.160561][ T9847] FAT-fs (loop1): Directory bread(block 65) failed [ 159.167128][ T9847] FAT-fs (loop1): Directory bread(block 66) failed [ 159.173651][ T9847] FAT-fs (loop1): Directory bread(block 67) failed [ 159.180265][ T9847] FAT-fs (loop1): Directory bread(block 68) failed [ 159.186787][ T9847] FAT-fs (loop1): Directory bread(block 69) failed [ 159.193346][ T9847] FAT-fs (loop1): Directory bread(block 70) failed [ 159.199901][ T9847] FAT-fs (loop1): Directory bread(block 71) failed [ 159.206419][ T9847] FAT-fs (loop1): Directory bread(block 72) failed [ 159.212940][ T9847] FAT-fs (loop1): Directory bread(block 73) failed [ 159.245989][ T9847] wg1 speed is unknown, defaulting to 1000 [ 159.353262][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.525977][ T9855] loop3: detected capacity change from 0 to 256 [ 159.538710][ T9855] FAT-fs (loop3): Directory bread(block 64) failed [ 159.545259][ T9855] FAT-fs (loop3): Directory bread(block 65) failed [ 159.551782][ T9855] FAT-fs (loop3): Directory bread(block 66) failed [ 159.558285][ T9855] FAT-fs (loop3): Directory bread(block 67) failed [ 159.564896][ T9855] FAT-fs (loop3): Directory bread(block 68) failed [ 159.571402][ T9855] FAT-fs (loop3): Directory bread(block 69) failed [ 159.577907][ T9855] FAT-fs (loop3): Directory bread(block 70) failed [ 159.584424][ T9855] FAT-fs (loop3): Directory bread(block 71) failed [ 159.590947][ T9855] FAT-fs (loop3): Directory bread(block 72) failed [ 159.597521][ T9855] FAT-fs (loop3): Directory bread(block 73) failed [ 159.618041][ T9855] wg1 speed is unknown, defaulting to 1000 [ 159.819222][ T9861] loop4: detected capacity change from 0 to 1024 [ 159.910472][ T9861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.954274][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.013523][ T9868] loop1: detected capacity change from 0 to 256 [ 160.029503][ T9868] FAT-fs (loop1): Directory bread(block 64) failed [ 160.036128][ T9868] FAT-fs (loop1): Directory bread(block 65) failed [ 160.042672][ T9868] FAT-fs (loop1): Directory bread(block 66) failed [ 160.049229][ T9868] FAT-fs (loop1): Directory bread(block 67) failed [ 160.055783][ T9868] FAT-fs (loop1): Directory bread(block 68) failed [ 160.062346][ T9868] FAT-fs (loop1): Directory bread(block 69) failed [ 160.069043][ T9868] FAT-fs (loop1): Directory bread(block 70) failed [ 160.075553][ T9868] FAT-fs (loop1): Directory bread(block 71) failed [ 160.082106][ T9868] FAT-fs (loop1): Directory bread(block 72) failed [ 160.088611][ T9868] FAT-fs (loop1): Directory bread(block 73) failed [ 160.133162][ T9868] wg1 speed is unknown, defaulting to 1000 [ 160.368713][ T9973] loop0: detected capacity change from 0 to 512 [ 160.381796][ T9972] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 160.397764][ T9973] EXT4-fs (loop0): orphan cleanup on readonly fs [ 160.412845][ T9973] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1171: bad orphan inode 13 [ 160.413999][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1169'. [ 160.432709][ T9973] ext4_test_bit(bit=12, block=18) = 1 [ 160.438090][ T9973] is_bad_inode(inode)=0 [ 160.442285][ T9973] NEXT_ORPHAN(inode)=2130706432 [ 160.447139][ T9973] max_ino=32 [ 160.450380][ T9973] i_nlink=1 [ 160.454176][ T9973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.499219][ T9973] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 160.529228][ T9973] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 160.668088][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.964128][T10212] loop0: detected capacity change from 0 to 256 [ 162.007880][T10212] FAT-fs (loop0): Directory bread(block 64) failed [ 162.014540][T10212] FAT-fs (loop0): Directory bread(block 65) failed [ 162.021150][T10212] FAT-fs (loop0): Directory bread(block 66) failed [ 162.027696][T10212] FAT-fs (loop0): Directory bread(block 67) failed [ 162.034250][T10212] FAT-fs (loop0): Directory bread(block 68) failed [ 162.040776][T10212] FAT-fs (loop0): Directory bread(block 69) failed [ 162.047304][T10212] FAT-fs (loop0): Directory bread(block 70) failed [ 162.053827][T10212] FAT-fs (loop0): Directory bread(block 71) failed [ 162.060365][T10212] FAT-fs (loop0): Directory bread(block 72) failed [ 162.066929][T10212] FAT-fs (loop0): Directory bread(block 73) failed [ 162.133000][T10211] wg1 speed is unknown, defaulting to 1000 [ 162.145528][T10214] loop4: detected capacity change from 0 to 1024 [ 162.229853][T10214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.444904][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.542372][T10216] loop2: detected capacity change from 0 to 1024 [ 162.595778][T10238] netlink: 'syz.4.1185': attribute type 1 has an invalid length. [ 162.615382][T10216] EXT4-fs: Ignoring removed nobh option [ 162.621055][T10216] EXT4-fs: Ignoring removed nobh option [ 162.624769][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1185'. [ 162.633924][T10241] loop0: detected capacity change from 0 to 512 [ 162.683519][T10216] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 162.709091][T10241] EXT4-fs (loop0): orphan cleanup on readonly fs [ 162.716059][T10241] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1188: bad orphan inode 13 [ 162.749008][T10216] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.1182: inode #4294967295: comm syz.2.1182: iget: illegal inode # [ 162.768124][T10216] EXT4-fs (loop2): no journal found [ 162.773390][T10216] EXT4-fs (loop2): can't get journal size [ 162.773476][T10241] ext4_test_bit(bit=12, block=18) = 1 [ 162.784510][T10241] is_bad_inode(inode)=0 [ 162.788659][T10241] NEXT_ORPHAN(inode)=2130706432 [ 162.793568][T10241] max_ino=32 [ 162.796763][T10241] i_nlink=1 [ 162.800578][T10241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.827631][T10241] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 162.865565][T10216] EXT4-fs (loop2): failed to initialize system zone (-22) [ 162.893113][T10216] EXT4-fs (loop2): mount failed [ 162.934267][T10241] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 162.971026][T10248] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 163.035347][T10252] loop4: detected capacity change from 0 to 256 [ 163.087901][T10252] FAT-fs (loop4): Directory bread(block 64) failed [ 163.094481][T10252] FAT-fs (loop4): Directory bread(block 65) failed [ 163.101063][T10252] FAT-fs (loop4): Directory bread(block 66) failed [ 163.107564][T10252] FAT-fs (loop4): Directory bread(block 67) failed [ 163.114150][T10252] FAT-fs (loop4): Directory bread(block 68) failed [ 163.120726][T10252] FAT-fs (loop4): Directory bread(block 69) failed [ 163.127237][T10252] FAT-fs (loop4): Directory bread(block 70) failed [ 163.133789][T10252] FAT-fs (loop4): Directory bread(block 71) failed [ 163.140313][T10252] FAT-fs (loop4): Directory bread(block 72) failed [ 163.146806][T10252] FAT-fs (loop4): Directory bread(block 73) failed [ 163.200645][T10252] wg1 speed is unknown, defaulting to 1000 [ 163.373023][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.650777][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 163.650791][ T29] audit: type=1326 audit(1762316435.514:24931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10245 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 163.680643][ T29] audit: type=1326 audit(1762316435.514:24932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10245 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 163.860491][ T29] audit: type=1326 audit(1762316435.604:24933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 163.884138][ T29] audit: type=1326 audit(1762316435.604:24934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 163.907793][ T29] audit: type=1326 audit(1762316435.604:24935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 163.931536][ T29] audit: type=1326 audit(1762316435.604:24936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 163.955150][ T29] audit: type=1326 audit(1762316435.604:24937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 163.955253][T10378] loop4: detected capacity change from 0 to 256 [ 163.978866][ T29] audit: type=1326 audit(1762316435.604:24938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 164.008632][ T29] audit: type=1326 audit(1762316435.604:24939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 164.032263][ T29] audit: type=1326 audit(1762316435.604:24940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7c85d2f6c9 code=0x7ffc0000 [ 164.076014][T10378] FAT-fs (loop4): Directory bread(block 64) failed [ 164.082585][T10378] FAT-fs (loop4): Directory bread(block 65) failed [ 164.089164][T10378] FAT-fs (loop4): Directory bread(block 66) failed [ 164.095731][T10378] FAT-fs (loop4): Directory bread(block 67) failed [ 164.102417][T10378] FAT-fs (loop4): Directory bread(block 68) failed [ 164.102462][T10381] loop3: detected capacity change from 0 to 1024 [ 164.102564][T10378] ================================================================== [ 164.102591][T10378] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 164.102622][T10378] [ 164.102629][T10378] write to 0xffffffff88e67db0 of 4 bytes by task 10381 on cpu 0: [ 164.102646][T10378] vsnprintf+0x2ce/0x890 [ 164.102671][T10378] vscnprintf+0x41/0x90 [ 164.102695][T10378] printk_sprint+0x30/0x2d0 [ 164.102717][T10378] vprintk_store+0x599/0x860 [ 164.102737][T10378] vprintk_emit+0x10d/0x580 [ 164.102762][T10381] EXT4-fs: Ignoring removed nobh option [ 164.102758][T10378] vprintk_default+0x26/0x30 [ 164.102788][T10381] EXT4-fs: Ignoring removed nobh option [ 164.102784][T10378] vprintk+0x1d/0x30 [ 164.102814][T10378] _printk+0x79/0xa0 [ 164.102841][T10378] set_capacity_and_notify+0x14c/0x1f0 [ 164.102863][T10378] loop_set_size+0x2e/0x70 [ 164.102890][T10378] loop_configure+0x828/0x9c0 [ 164.102917][T10378] lo_ioctl+0x1e1/0x12b0 [ 164.102954][T10378] blkdev_ioctl+0x356/0x440 [ 164.102972][T10378] __se_sys_ioctl+0xce/0x140 [ 164.102992][T10378] __x64_sys_ioctl+0x43/0x50 [ 164.103010][T10378] x64_sys_call+0x1816/0x3000 [ 164.103032][T10378] do_syscall_64+0xd2/0x200 [ 164.103049][T10378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.103069][T10378] [ 164.103075][T10378] read to 0xffffffff88e67db0 of 8 bytes by task 10378 on cpu 1: [ 164.103091][T10378] data_push_tail+0xfd/0x420 [ 164.103111][T10378] data_alloc+0xfb/0x2e0 [ 164.103127][T10378] prb_reserve+0x807/0xaf0 [ 164.103145][T10378] vprintk_store+0x56d/0x860 [ 164.103165][T10378] vprintk_emit+0x10d/0x580 [ 164.103185][T10378] vprintk_default+0x26/0x30 [ 164.103206][T10378] vprintk+0x1d/0x30 [ 164.103232][T10378] _printk+0x79/0xa0 [ 164.103259][T10378] _fat_msg+0xa4/0xd0 [ 164.103279][T10378] fat_get_entry+0x52b/0x5d0 [ 164.103295][T10378] fat_subdirs+0xf6/0x190 [ 164.103312][T10378] fat_read_root+0x316/0x360 [ 164.103343][T10378] fat_fill_super+0x15bf/0x1ce0 [ 164.103372][T10378] vfat_fill_super+0x24/0x30 [ 164.103407][T10378] get_tree_bdev_flags+0x291/0x300 [ 164.103436][T10378] get_tree_bdev+0x1f/0x30 [ 164.103462][T10378] vfat_get_tree+0x1c/0x30 [ 164.103496][T10378] vfs_get_tree+0x57/0x1d0 [ 164.103524][T10378] do_new_mount+0x24d/0x660 [ 164.103548][T10378] path_mount+0x4a5/0xb70 [ 164.103574][T10378] __se_sys_mount+0x28c/0x2e0 [ 164.103602][T10378] __x64_sys_mount+0x67/0x80 [ 164.103629][T10378] x64_sys_call+0x2b51/0x3000 [ 164.103656][T10378] do_syscall_64+0xd2/0x200 [ 164.103674][T10378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.103694][T10378] [ 164.103699][T10378] value changed: 0x00000000ffffe65d -> 0x343234323031206f [ 164.103714][T10378] [ 164.103720][T10378] Reported by Kernel Concurrency Sanitizer on: [ 164.103734][T10378] CPU: 1 UID: 0 PID: 10378 Comm: syz.4.1195 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.103766][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.103781][T10378] ================================================================== [ 164.160143][T10381] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 164.163738][T10378] FAT-fs (loop4): Directory bread(block 69) failed [ 164.193598][T10381] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: comm syz.3.1194: inode #4294967295: comm syz.3.1194: iget: illegal inode # [ 164.197128][T10378] FAT-fs (loop4): Directory bread(block 70) failed [ 164.252009][T10381] EXT4-fs (loop3): no journal found [ 164.253712][T10378] FAT-fs (loop4): Directory bread(block 71) failed [ 164.258124][T10381] EXT4-fs (loop3): can't get journal size [ 164.262734][T10378] FAT-fs (loop4): Directory bread(block 72) failed [ 164.382763][T10381] EXT4-fs (loop3): failed to initialize system zone (-22) [ 164.386447][T10378] FAT-fs (loop4): Directory bread(block 73) failed [ 164.453320][T10381] EXT4-fs (loop3): mount failed [ 164.502043][T10277] wg1 speed is unknown, defaulting to 1000