last executing test programs: 2m3.419468119s ago: executing program 2 (id=1242): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x25, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x8, 0x7}, @timestamp, @window={0x3, 0x0, 0x4}], 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4ddd, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/234, 0xea}, 0x3}], 0x1, 0x45833af92e4b38ff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x18, 0x32, 0x200, 0x2, 0x4000000}, 0xfffffffffffffcf1}, 0x1, 0x0, 0x0, 0x240000d2}, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x21, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000440)}, 0x6025, 0x4005, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\b', @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf2536000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x40800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x10010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000001300)=""/142, 0x8e}, {&(0x7f0000000480)=""/94, 0x5e}], 0x3}, 0x1}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000540)=""/198, 0xc6}, {&(0x7f0000000640)=""/200, 0xc8}, {&(0x7f0000000900)=""/224, 0xe0}, {&(0x7f0000001180)=""/158, 0x9e}], 0x4}, 0x6}, {{&(0x7f0000000740)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a00)=""/117, 0x75}, {&(0x7f0000000a80)=""/219, 0xdb}, {&(0x7f0000000b80)=""/94, 0x5e}, {&(0x7f0000000c00)=""/182, 0xb6}], 0x4, &(0x7f0000000d00)=""/1, 0x1}, 0x5c1c}, {{&(0x7f0000000d40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000dc0)=""/213, 0xd5}, {&(0x7f0000000ec0)=""/78, 0x4e}], 0x2, &(0x7f0000000f80)=""/202, 0xca}, 0x8}], 0x4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_open_dev$usbmon(0x0, 0x6, 0x200) unshare(0x64000680) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) 2m2.517302162s ago: executing program 2 (id=1254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) socket$kcm(0x21, 0x2, 0x2) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 2m1.501685109s ago: executing program 2 (id=1270): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) 2m1.456010511s ago: executing program 2 (id=1271): unshare(0x6a040000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3800204, &(0x7f0000003240)=ANY=[], 0x3, 0x33c, &(0x7f00000002c0)="$eJzs3M1LI2ccwPFfXk0imhxKSwvFh/bSXoaY9lwaikJpoKKmVAvCqJM2ZJpIJlhSStVTr6X3ngo9iEdvQus/4KW37mUve8tlYQ8ry7JZ5s28amI2blz9fmCZZ57n+c08T57J8pvBSePb338sFSytoNckGFMSEBE5F0lJUHwBbxt0ylFpty8fTz/5//2VtfWvsrncwrJSi9nVTzJKqdm5f376Je51O5mSs9RG43Hm0dnbZ+82Xqz+ULRU0VLlSk3parPysKZvmobaLlolTakl09AtQxXLllF12ytue8Gs7OzUlV7enknsVA3LUnq5rkpGXdUqqlatK/17vVhWmqapmYRgAHtBl/XsiNFbYx4Nbki1mtVDIhLvackfTmRAAABgorrz/6Cd0o+U/8usk//bnVv5/9EHp7Xpb45nT+zYjcZJtF/+/+kD91gd+X9MREbJ//+Ua+T/vRnR/ZI/XB49/8ftMBftqQp07Nn5f8L7/joOvjtKOwXyfwAAAAAAAAAAAAAAAAAAAAAA3gTnzWay2Wwm/a3/r/UKgbePO+my9Z8SkZi9+k3W/y5bWVuXmPPinr3G5m+7+d28u/U6nIqIKYakI85u84Jd9t88UraU/GvuOfHP7G3IackWpOjEz0tSUm58yIuyy4tf5hbmlcuLv3hNKdEen5GkvNV9fjc+0xlvj39vNx+Vjz5si9ckKf9tSUVM2XbO3Yr/dV6pL77OdcXH3ZMAAAAAAHAHaEoFvNvnVOf9r3uXrmlK9W93f2UkW3AeExmSlqQ8739/nu57fx5Ovhee9OwBAAAAALgfrPrPJd00jeoVhbgM7jN6ITxc52hXTeSqzqG2GQ47nqjzIEPkVef115CfakfB/0OKjqaYVznaePz5j2299ttrgjJEVLh78HN2hbrm2Q+8iVzU+I+Nopd8zrLUe5zgFVdCZGzX8zt//P10fF+Qz479K2Bw54NBB4xfciHFuq86pxC56f93AAAAALx+raTfr/m8vTkwkUEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDP3MhP+nUVJj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LZ4GQAA///hFPFh") open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mount(&(0x7f0000005440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 2m0.589970542s ago: executing program 2 (id=1286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12e7480000000000000000001256bc45523aec00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000140), 0x0}, 0x20) prctl$PR_SET_SECUREBITS(0x1c, 0x16) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x82, 0x100) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) io_setup(0x4fe, &(0x7f0000000240)=0x0) io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x8f, r1, &(0x7f00000001c0)="464294ade8dcf6", 0x7, 0x9, 0x0, 0x0, r1}]) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES64=r4, @ANYBLOB="00000000000000002c392522e20012800b000180677287aa90194f504c830209000000ff0000000000000000726b319f306a5c89f0cf8ab3d843e65d544e5ac10ef8b655778d0000000021b306f16c58154595b9e5907cb48051"], 0x4c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x4) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r10, &(0x7f0000000080)='./file0\x00') r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYRES16=r8], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000005c0)='timer_start\x00', r12}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100ffff000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='timer_start\x00', r13}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r14) readlinkat(r10, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 2m0.00148991s ago: executing program 2 (id=1291): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000e00000000000000fb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[]) 1m59.944478683s ago: executing program 32 (id=1291): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000e00000000000000fb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[]) 36.703430999s ago: executing program 1 (id=2774): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18000c0, &(0x7f0000000200)={[{@barrier}, {@nodioread_nolock}, {@nodioread_nolock}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5bd, &(0x7f0000001d80)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 36.577757995s ago: executing program 1 (id=2778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1499ffa5e39e6e2, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x20002, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20020005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x2, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0xffffffff, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x8, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x5, 0x0, 0xb97, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0xffff8000, 0x5, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x4cc, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800004, 0x40, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0xe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r7, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf08, 0x3, 0xf4, 0x7f}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000200", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf25410000000c00990007000000520000000800a000000000000800270000000000080022012b020000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x4000858}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2) 36.130986676s ago: executing program 1 (id=2792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x147542, 0x2) pwritev2(r1, &(0x7f0000000600)=[{&(0x7f0000000280)="a1", 0x1}], 0x1, 0x1ff, 0x5, 0x1a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x3c0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000440)='sched_switch\x00', r4}, 0x18) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x40000000000000) 35.992213402s ago: executing program 1 (id=2798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, @perf_config_ext={0x4, 0x7}, 0x13748, 0x10000, 0x0, 0x5, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x8000001}) r4 = syz_clone(0x80100000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x10084, 0x0) r7 = syz_open_procfs(r4, &(0x7f0000000080)='personality\x00') pread64(r7, &(0x7f0000000400)=""/15, 0xf, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)=')}\x00') sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f14010025bd7000fcdb9f25090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000ac0)={r11, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40) close(r3) 35.83283408s ago: executing program 1 (id=2804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x147542, 0x2) pwritev2(r1, &(0x7f0000000600)=[{&(0x7f0000000280)="a1", 0x1}], 0x1, 0x1ff, 0x5, 0x1a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x3c0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000440)='sched_switch\x00', r4}, 0x18) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x40000000000000) 35.061737336s ago: executing program 1 (id=2820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = socket(0x2, 0x80805, 0x0) mknod$loop(&(0x7f0000000380)='./file0\x00', 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000440)='`', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="6cb76def2c", 0x5}], 0x1}}], 0x2, 0x4040080) socketpair(0x26, 0x6, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @dev}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) 35.061315836s ago: executing program 33 (id=2820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = socket(0x2, 0x80805, 0x0) mknod$loop(&(0x7f0000000380)='./file0\x00', 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000440)='`', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="6cb76def2c", 0x5}], 0x1}}], 0x2, 0x4040080) socketpair(0x26, 0x6, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @dev}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) 2.899016693s ago: executing program 5 (id=3361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x0, 0x0, 'queue0\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) 2.840694416s ago: executing program 5 (id=3363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100060000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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") mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYRESDEC=r1, @ANYRES8, @ANYRESOCT, @ANYRES16=r2, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.628109293s ago: executing program 3 (id=3376): socket$nl_netfilter(0x10, 0x3, 0xc) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000010200"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000000000000000000000a00"/45], 0x3c}}, 0x4008044) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='thermal_power_devfreq_get_power\x00'}, 0x18) socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000005400e5010000008b000700000000000037b0c34c8b97e815a345c8ffbd7af9cb1766f46acab925b0e2a26f9b313d76497f7adb3ebab1db16463b3b301c65becd9bd6b5a7bb5714675bb1158d73c875433d833d47421ac77421b54b462cd276f6386e6c66f914487f0cc5de0d630b0bf58c2aa6a2160a18d0efb2e9e3726954f7f6e13bb5780c0aa345b727d0ca0a34140a93e1e575cf4760a8d4", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e20000010000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) syz_clone3(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x10820, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 1.494873769s ago: executing program 6 (id=3378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000440)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x40000000000000) 1.472212091s ago: executing program 5 (id=3379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d040000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080006"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.462371501s ago: executing program 6 (id=3380): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x100000000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) 1.426328853s ago: executing program 6 (id=3381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 1.396925894s ago: executing program 5 (id=3383): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}]}, &(0x7f0000000180)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x20, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800572f0095000000000000000000000227cc9a5b2106b43c1fe95731b0b9a61b1ea07573b556d9797bdc97a89f1fe6f92f1e03c2586327c4c2c7cc2b34638a9c5f1efa262e8f80812f2ba7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffce3, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19437d57d4c97042, 0xd, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000022000000000000181100000000000000", @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa20000000000000010b7040000000000eb8500", @ANYRESOCT=r6, @ANYRES32, @ANYRESOCT=r2], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000001000000000000000100000d000000000000000000000000020000000000000c0200000000"], 0x0, 0x4c, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r9, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="ffe22bbd7000fcdbdf251200000008000300", @ANYRES32=0x0, @ANYBLOB="0c80060001003ecb82c1b0decec81fba000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x4) 1.366307295s ago: executing program 3 (id=3384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.308802489s ago: executing program 3 (id=3387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 1.26334247s ago: executing program 5 (id=3389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100060000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$eJzs3E1sVEUcAPD/e/3kSyriBwhaRSPxo4XyIQcvGk08aGKiB4yn2haCFGpoTYQQrR7waEi8G48m3k086cWoB2PiVe+GhBguoKc1s/te2S67S0s/tri/X/K2M+9NM/PfebM7O7NtAF1rOD1kEVsj4o+I2F7LLi4wXPtx49rFiX+uXZzIolJ58++sWu76tYsTZdHy97bUMpVKxEBKDjSp99I7EePT01Pnivzo3Jn3R2fPX3ju1Jnxk1Mnp86OHTt2+NDe/qNjR1YUX178THFd3/3RzJ5dr759+fWJ45ff/fmbdH5rcb0+jjuSom0wXHt2Gz2aHp5cUWUbyq/pYVvdiay3deGRdWgQS9cTEam7+qrjf3v0xKaFa9vjlU872jhgTVUqlUqz9+fCfAX4H8ui0y0AOqN8o0+ff8tjnaYeG8LVF2sfgFLcN4qjdqV3Ye2gr+Hz7Woajojj8/9+mY5YjXUIAIDb+D7Nf55tNv/L44G6cvcUeyhDEXFvROyIiPsiYmdE3B9RLftgRDy0zPobd0hunf/kV+4osCVK878Xir2txfO/cvYXQz1Fbls1/r7sxKnpqQPFc7I/+gZS/mCbOn54+ffPy/Rgw7X6+V86Uv3lXLBox5XehgW6yfG58ZXGXbr6ScTu3mbxZ1Fu42QRsSsidt9hHaee/npPq2tN4h9cHH8bbfaZlqryVcRTtf6fj0Xx3+yqrOX+5MHnj44dGR2M6akDo+Vdcatffrv0Rqv6b9//ayv1/+am9//CLvBQNhgxe/7C6ep+7ezy67j052d1Y3rR7nKKP/82Ytn3f3/2VjXdX5z7cHxu7tzBiP7stVvPj9383TJflk/x79/XfPzvqGvxwxGRbuK9EfFIsYmb+u6xiHg8Iva1if+nl554r9W11v3fZlV+FaX4J2/X/1Hf/8tP9Jz+8bvlx19K/X+4mtpfNGopr39LbeAKnz4AAAC4K+TV78Bn+chCOs9HRmrf4d8Zm/Ppmdm5Z07MfHB2svZd+aHoy8uVrmI9OCvXP4fq1kfHGvKHinXjL3o2VfMjEzPTk50OHrrclhbjP/mrp9OtA9bcKuyjAXcp4x+6VGb8Qzcz/qF7Gf/QvZqN/4870A5g/Xn/h+5l/EP3Mv6hexn/0JVa/m18vqI/+e9wovzfCRulPR1KbFrLKiLvfIBdkehd69t4oOmlti8b8+vy4gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAK/gsAAP//gF3i6g==") mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYRESDEC=r1, @ANYRES8, @ANYRESOCT, @ANYRES16=r2, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.096139278s ago: executing program 3 (id=3390): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x5, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100004, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r4, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r1}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) 1.087220949s ago: executing program 6 (id=3391): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 797.321712ms ago: executing program 0 (id=3392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000440)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x40000000000000) 734.451925ms ago: executing program 3 (id=3393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1499ffa5e39e6e2, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x20002, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20020005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 669.470059ms ago: executing program 0 (id=3394): socket$nl_netfilter(0x10, 0x3, 0xc) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000010200"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000000000000000000000a00"/45], 0x3c}}, 0x4008044) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='thermal_power_devfreq_get_power\x00'}, 0x18) socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000005400e5010000008b000700000000000037b0c34c8b97e815a345c8ffbd7af9cb1766f46acab925b0e2a26f9b313d76497f7adb3ebab1db16463b3b301c65becd9bd6b5a7bb5714675bb1158d73c875433d833d47421ac77421b54b462cd276f6386e6c66f914487f0cc5de0d630b0bf58c2aa6a2160a18d0efb2e9e3726954f7f6e13bb5780c0aa345b727d0ca0a34140a93e1e575cf4760a8d4", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e20000010000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) syz_clone3(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x10820, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 509.430326ms ago: executing program 6 (id=3395): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) 476.572537ms ago: executing program 6 (id=3396): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000001", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250a0000000c00990001"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x81) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280003, 0x108) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x400, 0x110, 0x2}, 0x18) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x300, 0x70bd2a, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) r8 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r8, &(0x7f0000000000)=[{{&(0x7f0000000580)={0x2, 0x4e22, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) socket(0x2a, 0x2, 0x0) 416.04883ms ago: executing program 4 (id=3397): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d040000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080006"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 338.293504ms ago: executing program 4 (id=3398): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 262.948787ms ago: executing program 4 (id=3399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x0, 0x0, 'queue0\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) 262.442397ms ago: executing program 4 (id=3400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 180.931951ms ago: executing program 4 (id=3401): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') 164.107302ms ago: executing program 4 (id=3402): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x81) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280003, 0x108) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x400, 0x110, 0x2}, 0x18) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x300, 0x70bd2a, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) r8 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r8, &(0x7f0000000000)=[{{&(0x7f0000000580)={0x2, 0x4e22, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) socket(0x2a, 0x2, 0x0) 106.886565ms ago: executing program 0 (id=3403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x1f8, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbc9, 0x44}}}}, [@NL80211_ATTR_IE={0x1d3, 0x2a, [@random={0x5, 0xf0, "db482b191db804e8495fa9bd81c32956a68a6e4094275792ec05f0026761eadf850a2b1c986a8d912080e86e419dffc251c14ee865495a56c4ab24591520407c28d2e77542bf9e4f86c32082b5c858f702d4bf592571832b2c271d017801b2235ed1b850b56695d97718b69da5127735430b80a346c510e8061a6263c4ee0afc9070c6172e68afde87145139b4e92267e23382ad5cbd9f7059513724a99add0a09c0f8d1dfc6c69d4826b112adaeed4c9d19a5d5786eea40a90e9ae96824a5100a014108cfa6bb26ff267f1c43784d1110478fa0290aa68b8c96dfc88b802b350a587e8f8707056699ef331c544bbc95"}, @random_vendor={0xdd, 0x2d, "fcd146ea2edebcf32987d3a28e41b0efdf5ef6e303e76bb7e4f419d6a26be1f7db75172c7b923152da80af36ac"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x36, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x2, @device_a, 0x3, @value=@broadcast, 0x4, 0x1, 0x2, [{{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{}, @device_b, 0x7ff}]}}, @mesh_chsw={0x76, 0x6, {0x2, 0x8, 0x38, 0x1}}, @supported_rates={0x1, 0x2, [{0x48}, {0x16, 0x1}]}, @measure_req={0x26, 0x44, {0xc3, 0x4, 0x9, "0c82b225dc89ad7059a3cff1125dbe7ec144240a7aa86c5bb075ef30b9b79b98d45013b935be61c2f5ee7302fb7651698335845797fb62e3818ac38526608dd37c"}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x80}, 0xc000) 81.217536ms ago: executing program 0 (id=3404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x100000000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) 41.445378ms ago: executing program 0 (id=3405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x147542, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x3c0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000440)='sched_switch\x00', r3}, 0x18) r4 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r6 = dup(r5) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000040)={0x4, 0x8}, 0x10) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r7 = syz_open_pts(r5, 0x101840) dup3(r7, r5, 0x80000) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000000)={0x5, 0x0, 0x9, 0x64, 0x4, "ca88ec6d0fd188f5"}) read(r5, &(0x7f00000005c0)=""/228, 0xe4) r8 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x40000000000000) write$binfmt_elf64(r8, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) 40.345748ms ago: executing program 5 (id=3406): sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000001", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250a0000000c009900010000001b0000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) 19.316619ms ago: executing program 0 (id=3407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a310000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 3 (id=3408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 5][T11462] forcing mempool usage for bio_alloc_bioset+0x47c/0xaa0 [ 193.221405][T11464] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 193.239075][T11443] FAT-fs (loop4): error, clusters badly computed (3 != 1) [ 193.307905][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2505'. [ 193.325846][T11474] all: renamed from team_slave_0 [ 193.411275][T11481] syzkaller0: entered promiscuous mode [ 193.416949][T11481] syzkaller0: entered allmulticast mode [ 193.441236][T11489] FAULT_INJECTION: forcing a failure. [ 193.441236][T11489] name failslab, interval 1, probability 0, space 0, times 0 [ 193.453905][T11489] CPU: 1 UID: 0 PID: 11489 Comm: syz.1.2502 Not tainted syzkaller #0 PREEMPT(voluntary) [ 193.453939][T11489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.453951][T11489] Call Trace: [ 193.453982][T11489] [ 193.453990][T11489] __dump_stack+0x1d/0x30 [ 193.454017][T11489] dump_stack_lvl+0xe8/0x140 [ 193.454037][T11489] dump_stack+0x15/0x1b [ 193.454093][T11489] should_fail_ex+0x265/0x280 [ 193.454120][T11489] should_failslab+0x8c/0xb0 [ 193.454147][T11489] kmem_cache_alloc_noprof+0x69/0x4b0 [ 193.454189][T11489] ? __anon_vma_prepare+0xcd/0x2f0 [ 193.454216][T11489] __anon_vma_prepare+0xcd/0x2f0 [ 193.454249][T11489] handle_mm_fault+0x1d91/0x2c60 [ 193.454311][T11489] do_user_addr_fault+0x630/0x1080 [ 193.454335][T11489] ? ksys_mmap_pgoff+0xc2/0x310 [ 193.454358][T11489] ? __x64_sys_mmap+0x49/0x70 [ 193.454474][T11489] exc_page_fault+0x62/0xa0 [ 193.454506][T11489] asm_exc_page_fault+0x26/0x30 [ 193.454529][T11489] RIP: 0033:0x7ff286380943 [ 193.454563][T11489] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 193.454581][T11489] RSP: 002b:00007ff284ee44a0 EFLAGS: 00010206 [ 193.454678][T11489] RAX: 0000000000000000 RBX: 00007ff284ee4540 RCX: 00007ff27cac5000 [ 193.454693][T11489] RDX: 00007ff284ee46e0 RSI: 000000000000000b RDI: 00007ff284ee45e0 [ 193.454708][T11489] RBP: 000000000000013c R08: 000000000000000a R09: 0000000000000391 [ 193.454751][T11489] R10: 00000000000003be R11: 00007ff284ee4540 R12: 00007ff284ee4540 [ 193.454762][T11489] R13: 00007ff28655fc40 R14: 0000000000000060 R15: 00007ff284ee45e0 [ 193.454790][T11489] [ 193.454799][T11489] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 193.633620][T11489] loop1: detected capacity change from 0 to 256 [ 193.681774][T11489] FAT-fs (loop1): codepage cp869 not found [ 194.103720][T11531] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 194.149307][T11531] lo speed is unknown, defaulting to 1000 [ 194.156037][T11531] lo speed is unknown, defaulting to 1000 [ 194.628370][T11542] __nla_validate_parse: 6 callbacks suppressed [ 194.628384][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2533'. [ 194.709699][T11544] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2534'. [ 194.800481][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2537'. [ 194.815099][T11548] loop3: detected capacity change from 0 to 1024 [ 194.870000][T11548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.887221][T11548] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.921058][T11548] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2536: bg 0: block 112: padding at end of block bitmap is not set [ 194.953506][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 194.975543][T11562] bond0: option packets_per_slave: invalid value (18446744071562067968) [ 194.983971][T11562] bond0: option packets_per_slave: allowed values 0 - 65535 [ 194.995974][T11562] netlink: 'syz.3.2541': attribute type 6 has an invalid length. [ 195.013972][T11564] random: crng reseeded on system resumption [ 195.022908][T11564] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 195.059975][T11568] 9p: Bad value for 'wfdno' [ 195.069150][T11567] loop3: detected capacity change from 0 to 1024 [ 195.089458][T11567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 195.101746][T11567] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.115664][T11567] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2542: bg 0: block 112: padding at end of block bitmap is not set [ 195.145058][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.161382][T11574] siw: device registration error -23 [ 195.188106][T11577] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2546'. [ 195.331481][T11590] loop3: detected capacity change from 0 to 1024 [ 195.369934][T11590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 195.391006][T11590] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.402590][T11590] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2551: bg 0: block 112: padding at end of block bitmap is not set [ 195.429393][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.462189][T11596] bond0: option packets_per_slave: invalid value (18446744071562067968) [ 195.470674][T11596] bond0: option packets_per_slave: allowed values 0 - 65535 [ 195.482320][T11596] netlink: 'syz.3.2553': attribute type 6 has an invalid length. [ 195.525933][T11598] loop3: detected capacity change from 0 to 2048 [ 195.549185][T11598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 195.626299][T11598] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 195.649757][T11598] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1006 with error 28 [ 195.662324][T11598] EXT4-fs (loop3): This should not happen!! Data will be lost [ 195.662324][T11598] [ 195.671995][T11598] EXT4-fs (loop3): Total free blocks count 0 [ 195.678046][T11598] EXT4-fs (loop3): Free/Dirty block details [ 195.683944][T11598] EXT4-fs (loop3): free_blocks=2415919104 [ 195.689691][T11598] EXT4-fs (loop3): dirty_blocks=1008 [ 195.695057][T11598] EXT4-fs (loop3): Block reservation details [ 195.701059][T11598] EXT4-fs (loop3): i_reserved_data_blocks=63 [ 195.777972][T11598] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 195.904358][T11611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2558'. [ 195.913369][T11611] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2558'. [ 195.947574][T11613] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2559'. [ 195.957211][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2559'. [ 196.062301][T11619] loop5: detected capacity change from 0 to 128 [ 196.076281][T11619] FAT-fs (loop5): error, clusters badly computed (2 != 0) [ 196.083455][T11619] FAT-fs (loop5): Filesystem has been set read-only [ 196.177045][T11624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.196780][T11624] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.217388][T11624] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2564: bg 0: block 112: padding at end of block bitmap is not set [ 196.247048][ T7648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 196.291504][T11630] bond0: option packets_per_slave: invalid value (18446744071562067968) [ 196.299992][T11630] bond0: option packets_per_slave: allowed values 0 - 65535 [ 196.311137][T11630] netlink: 'syz.5.2565': attribute type 6 has an invalid length. [ 196.427898][T11632] netlink: 'syz.4.2563': attribute type 3 has an invalid length. [ 196.435657][T11632] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2563'. [ 196.445604][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2566'. [ 196.646276][T11643] FAT-fs (loop0): error, clusters badly computed (2 != 0) [ 196.653481][T11643] FAT-fs (loop0): Filesystem has been set read-only [ 196.675680][T11643] FAT-fs (loop0): error, clusters badly computed (3 != 1) [ 196.938299][T11653] siw: device registration error -23 [ 197.001329][T11651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 197.048941][T11657] syzkaller0: entered promiscuous mode [ 197.054446][T11657] syzkaller0: entered allmulticast mode [ 197.197948][T11651] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 197.223372][T11670] siw: device registration error -23 [ 197.272287][T11675] lo speed is unknown, defaulting to 1000 [ 197.278444][T11675] lo speed is unknown, defaulting to 1000 [ 197.306832][T11651] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 197.319332][T11651] EXT4-fs (loop5): This should not happen!! Data will be lost [ 197.319332][T11651] [ 197.329005][T11651] EXT4-fs (loop5): Total free blocks count 0 [ 197.335003][T11651] EXT4-fs (loop5): Free/Dirty block details [ 197.340923][T11651] EXT4-fs (loop5): free_blocks=2415919104 [ 197.346682][T11651] EXT4-fs (loop5): dirty_blocks=2768 [ 197.351966][T11651] EXT4-fs (loop5): Block reservation details [ 197.357970][T11651] EXT4-fs (loop5): i_reserved_data_blocks=173 [ 197.374438][T11674] FAT-fs (loop4): error, clusters badly computed (2 != 0) [ 197.381737][T11674] FAT-fs (loop4): Filesystem has been set read-only [ 197.636417][T11685] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 197.672553][T11685] EXT4-fs (loop1): invalid journal inode [ 197.688721][T11684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.733473][T11685] EXT4-fs (loop1): can't get journal size [ 197.740791][T11685] EXT4-fs (loop1): 1 truncate cleaned up [ 197.757197][T11685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.771586][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 197.771598][ T29] audit: type=1326 audit(1766127696.687:19720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.0.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 197.826609][ T29] audit: type=1326 audit(1766127696.717:19721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.0.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 197.850205][ T29] audit: type=1326 audit(1766127696.717:19722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.0.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 197.873791][ T29] audit: type=1326 audit(1766127696.717:19723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.0.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 197.897375][ T29] audit: type=1326 audit(1766127696.717:19724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.0.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 197.920947][ T29] audit: type=1326 audit(1766127696.717:19725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.0.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 197.944562][ T29] audit: type=1326 audit(1766127696.717:19726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.0.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 197.968305][ T29] audit: type=1326 audit(1766127696.717:19727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.0.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 197.992048][ T29] audit: type=1326 audit(1766127696.717:19728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.0.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 198.015632][ T29] audit: type=1326 audit(1766127696.717:19729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.0.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 198.130150][T11699] random: crng reseeded on system resumption [ 198.139275][T11699] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 198.174612][T11701] set_capacity_and_notify: 7 callbacks suppressed [ 198.174627][T11701] loop3: detected capacity change from 0 to 1024 [ 198.258888][T11704] netlink: 'syz.1.2579': attribute type 3 has an invalid length. [ 198.266929][T11704] netlink: 'syz.1.2579': attribute type 3 has an invalid length. [ 198.281104][T11701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.306662][T11701] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.317921][T11701] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2586: bg 0: block 112: padding at end of block bitmap is not set [ 198.321286][ T93] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2006 with error 28 [ 198.365346][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 198.530271][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.577109][T11717] loop5: detected capacity change from 0 to 2048 [ 198.600267][T11717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.973531][ T7559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.996827][T11734] netlink: 'syz.1.2597': attribute type 3 has an invalid length. [ 199.029801][T11736] loop1: detected capacity change from 0 to 1024 [ 199.047892][T11736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 199.060110][T11736] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.071329][T11736] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2598: bg 0: block 112: padding at end of block bitmap is not set [ 199.095547][ T7559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.152279][T11747] syzkaller1: entered promiscuous mode [ 199.157961][T11747] syzkaller1: entered allmulticast mode [ 199.265124][T11755] netlink: 'syz.1.2603': attribute type 21 has an invalid length. [ 199.385251][T11766] loop1: detected capacity change from 0 to 512 [ 199.443657][T11766] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 199.459223][T11766] EXT4-fs (loop1): invalid journal inode [ 199.466064][T11766] EXT4-fs (loop1): can't get journal size [ 199.501825][T11766] EXT4-fs (loop1): 1 truncate cleaned up [ 199.508465][T11766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.607552][ T7648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.691681][T11777] FAULT_INJECTION: forcing a failure. [ 199.691681][T11777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.704837][T11777] CPU: 0 UID: 0 PID: 11777 Comm: syz.0.2612 Not tainted syzkaller #0 PREEMPT(voluntary) [ 199.704899][T11777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.704911][T11777] Call Trace: [ 199.704918][T11777] [ 199.704924][T11777] __dump_stack+0x1d/0x30 [ 199.704953][T11777] dump_stack_lvl+0xe8/0x140 [ 199.705004][T11777] dump_stack+0x15/0x1b [ 199.705021][T11777] should_fail_ex+0x265/0x280 [ 199.705127][T11777] should_fail+0xb/0x20 [ 199.705147][T11777] should_fail_usercopy+0x1a/0x20 [ 199.705172][T11777] _copy_from_user+0x1c/0xb0 [ 199.705205][T11777] kstrtouint_from_user+0x69/0xf0 [ 199.705282][T11777] ? 0xffffffff81000000 [ 199.705296][T11777] ? selinux_file_permission+0x1e2/0x320 [ 199.705335][T11777] proc_fail_nth_write+0x50/0x160 [ 199.705361][T11777] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 199.705464][T11777] vfs_write+0x269/0x960 [ 199.705517][T11777] ? vfs_read+0x4e6/0x770 [ 199.705537][T11777] ? __rcu_read_unlock+0x4f/0x70 [ 199.705558][T11777] ? __fget_files+0x184/0x1c0 [ 199.705578][T11777] ? mutex_lock+0x58/0x90 [ 199.705675][T11777] ksys_write+0xda/0x1a0 [ 199.705698][T11777] __x64_sys_write+0x40/0x50 [ 199.705721][T11777] x64_sys_call+0x2847/0x3000 [ 199.705768][T11777] do_syscall_64+0xd8/0x2c0 [ 199.705835][T11777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.705893][T11777] RIP: 0033:0x7fa78fb6e1ff [ 199.705911][T11777] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 199.705932][T11777] RSP: 002b:00007fa78e5d7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 199.706030][T11777] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa78fb6e1ff [ 199.706046][T11777] RDX: 0000000000000001 RSI: 00007fa78e5d70a0 RDI: 0000000000000004 [ 199.706061][T11777] RBP: 00007fa78e5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 199.706138][T11777] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 199.706154][T11777] R13: 00007fa78fdc6038 R14: 00007fa78fdc5fa0 R15: 00007ffe21b03bc8 [ 199.706212][T11777] [ 200.022756][T11783] __nla_validate_parse: 7 callbacks suppressed [ 200.022770][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2615'. [ 200.067923][T11783] loop0: detected capacity change from 0 to 256 [ 200.074841][T11783] FAT-fs (loop0): bogus sectors per cluster 0 [ 200.080990][T11783] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 200.090168][T11783] FAT-fs (loop0): Can't find a valid FAT filesystem [ 200.209310][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2616'. [ 200.245129][T11789] FAULT_INJECTION: forcing a failure. [ 200.245129][T11789] name failslab, interval 1, probability 0, space 0, times 0 [ 200.257115][ C0] vcan0: j1939_session_tx_dat: 0xffff88810534cc00: queue data error: -100 [ 200.258962][T11789] CPU: 1 UID: 0 PID: 11789 Comm: syz.0.2616 Not tainted syzkaller #0 PREEMPT(voluntary) [ 200.258995][T11789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.259028][T11789] Call Trace: [ 200.259036][T11789] [ 200.259047][T11789] __dump_stack+0x1d/0x30 [ 200.259079][T11789] dump_stack_lvl+0xe8/0x140 [ 200.259178][T11789] dump_stack+0x15/0x1b [ 200.259204][T11789] should_fail_ex+0x265/0x280 [ 200.259235][T11789] should_failslab+0x8c/0xb0 [ 200.259264][T11789] __kmalloc_cache_noprof+0x65/0x4c0 [ 200.259297][T11789] ? nf_nat_masq_schedule+0x216/0x440 [ 200.259366][T11789] nf_nat_masq_schedule+0x216/0x440 [ 200.259406][T11789] ? __pfx_device_cmp+0x10/0x10 [ 200.259516][T11789] ? __pfx_masq_device_event+0x10/0x10 [ 200.259555][T11789] masq_device_event+0x72/0x90 [ 200.259592][T11789] raw_notifier_call_chain+0x6f/0x1b0 [ 200.259638][T11789] ? netif_close_many+0x1c2/0x2d0 [ 200.259700][T11789] netif_close_many+0x1d6/0x2d0 [ 200.259729][T11789] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 200.259774][T11789] unregister_netdevice_many_notify+0x4f4/0x16d0 [ 200.259829][T11789] ? __list_add_valid_or_report+0x38/0xe0 [ 200.259881][T11789] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 200.259982][T11789] rtnl_dellink+0x3e1/0x5c0 [ 200.260044][T11789] ? rtnetlink_rcv_msg+0x34a/0x6d0 [ 200.260072][T11789] ? __pfx_rtnl_dellink+0x10/0x10 [ 200.260099][T11789] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 200.260178][T11789] netlink_rcv_skb+0x123/0x220 [ 200.260221][T11789] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.260310][T11789] rtnetlink_rcv+0x1c/0x30 [ 200.260399][T11789] netlink_unicast+0x5c0/0x690 [ 200.260443][T11789] netlink_sendmsg+0x58b/0x6b0 [ 200.260513][T11789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.260587][T11789] __sock_sendmsg+0x145/0x180 [ 200.260611][T11789] ____sys_sendmsg+0x31e/0x4a0 [ 200.260649][T11789] ___sys_sendmsg+0x17b/0x1d0 [ 200.260740][T11789] __x64_sys_sendmsg+0xd4/0x160 [ 200.260826][T11789] x64_sys_call+0x17ba/0x3000 [ 200.260859][T11789] do_syscall_64+0xd8/0x2c0 [ 200.260927][T11789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.260953][T11789] RIP: 0033:0x7fa78fb6f749 [ 200.260970][T11789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.260992][T11789] RSP: 002b:00007fa78e5d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.261015][T11789] RAX: ffffffffffffffda RBX: 00007fa78fdc5fa0 RCX: 00007fa78fb6f749 [ 200.261078][T11789] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000003 [ 200.261093][T11789] RBP: 00007fa78e5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 200.261107][T11789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.261122][T11789] R13: 00007fa78fdc6038 R14: 00007fa78fdc5fa0 R15: 00007ffe21b03bc8 [ 200.261146][T11789] [ 200.554522][T11796] netlink: 'syz.4.2614': attribute type 3 has an invalid length. [ 200.562471][T11796] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2614'. [ 200.624795][T11761] netlink: 'syz.1.2607': attribute type 3 has an invalid length. [ 200.632762][T11761] netlink: 'syz.1.2607': attribute type 3 has an invalid length. [ 200.758248][ T7559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.804326][T11811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2623'. [ 200.813340][T11811] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2623'. [ 200.830524][T11813] loop5: detected capacity change from 0 to 256 [ 200.860897][T11816] loop3: detected capacity change from 0 to 512 [ 200.872049][T11813] FAT-fs (loop5): Directory bread(block 1285) failed [ 200.884017][T11813] FAT-fs (loop5): Directory bread(block 1285) failed [ 200.890856][T11813] FAT-fs (loop5): Directory bread(block 1285) failed [ 200.897914][T11813] FAT-fs (loop5): Directory bread(block 1285) failed [ 200.905446][T11816] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 200.917833][T11816] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 200.946571][T11816] System zones: 1-12 [ 200.952336][T11816] EXT4-fs (loop3): 1 truncate cleaned up [ 200.972178][T11819] loop1: detected capacity change from 0 to 2048 [ 200.991460][T11816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.133758][T11816] netlink: 'syz.3.2624': attribute type 1 has an invalid length. [ 201.168893][T11819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 201.214333][T11819] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 201.232230][T11819] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 201.244444][T11819] EXT4-fs (loop1): This should not happen!! Data will be lost [ 201.244444][T11819] [ 201.254129][T11819] EXT4-fs (loop1): Total free blocks count 0 [ 201.260161][T11819] EXT4-fs (loop1): Free/Dirty block details [ 201.266116][T11819] EXT4-fs (loop1): free_blocks=2415919104 [ 201.271906][T11819] EXT4-fs (loop1): dirty_blocks=16 [ 201.277087][T11819] EXT4-fs (loop1): Block reservation details [ 201.283097][T11819] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 201.300396][ T7559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 201.352716][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.367349][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2626'. [ 201.468556][T11833] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 201.524378][T11841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2633'. [ 201.530237][T11843] loop1: detected capacity change from 0 to 256 [ 201.594349][T11847] loop3: detected capacity change from 0 to 1024 [ 201.622363][T11847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 201.637304][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2638'. [ 201.676493][T11847] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.696311][T11847] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2635: bg 0: block 112: padding at end of block bitmap is not set [ 201.721306][T11855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 201.735030][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.754338][T11855] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.765924][T11855] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2637: bg 0: block 112: padding at end of block bitmap is not set [ 201.795614][ T7559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.846601][T11869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.848691][T11867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.984274][T11888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2649'. [ 202.653577][ T7648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.699288][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.710774][T11928] FAULT_INJECTION: forcing a failure. [ 202.710774][T11928] name failslab, interval 1, probability 0, space 0, times 0 [ 202.723455][T11928] CPU: 0 UID: 0 PID: 11928 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 202.723481][T11928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.723493][T11928] Call Trace: [ 202.723508][T11928] [ 202.723515][T11928] __dump_stack+0x1d/0x30 [ 202.723541][T11928] dump_stack_lvl+0xe8/0x140 [ 202.723641][T11928] dump_stack+0x15/0x1b [ 202.723660][T11928] should_fail_ex+0x265/0x280 [ 202.723684][T11928] should_failslab+0x8c/0xb0 [ 202.723759][T11928] __kmalloc_cache_noprof+0x65/0x4c0 [ 202.723784][T11928] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 202.723848][T11928] bpf_prog_alloc_no_stats+0xc4/0x390 [ 202.723869][T11928] bpf_prog_alloc+0x3c/0x150 [ 202.723887][T11928] bpf_prog_load+0x506/0x1140 [ 202.723916][T11928] ? security_bpf+0x2b/0x90 [ 202.723998][T11928] __sys_bpf+0x469/0x7c0 [ 202.724024][T11928] __x64_sys_bpf+0x41/0x50 [ 202.724061][T11928] x64_sys_call+0x28e1/0x3000 [ 202.724085][T11928] do_syscall_64+0xd8/0x2c0 [ 202.724119][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.724140][T11928] RIP: 0033:0x7f3d3d01f749 [ 202.724208][T11928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.724224][T11928] RSP: 002b:00007f3d3ba87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.724294][T11928] RAX: ffffffffffffffda RBX: 00007f3d3d275fa0 RCX: 00007f3d3d01f749 [ 202.724306][T11928] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 202.724333][T11928] RBP: 00007f3d3ba87090 R08: 0000000000000000 R09: 0000000000000000 [ 202.724343][T11928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.724354][T11928] R13: 00007f3d3d276038 R14: 00007f3d3d275fa0 R15: 00007ffe47c97a98 [ 202.724371][T11928] [ 202.913297][T11926] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 202.922464][T11926] EXT4-fs (loop4): invalid journal inode [ 202.940717][T11926] EXT4-fs (loop4): can't get journal size [ 202.947173][T11926] EXT4-fs (loop4): 1 truncate cleaned up [ 202.953366][T11926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.018647][ T29] kauditd_printk_skb: 1142 callbacks suppressed [ 203.018663][ T29] audit: type=1326 audit(1766127701.937:20872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c43bef749 code=0x7ffc0000 [ 203.060850][T11930] all: renamed from team_slave_0 (while UP) [ 203.066799][ T29] audit: type=1326 audit(1766127701.977:20873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c43bef749 code=0x7ffc0000 [ 203.066841][ T29] audit: type=1326 audit(1766127701.977:20874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c43bef749 code=0x7ffc0000 [ 203.066875][ T29] audit: type=1326 audit(1766127701.977:20875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3c43bef749 code=0x7ffc0000 [ 203.067900][T11935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 203.152279][ T29] audit: type=1326 audit(1766127702.067:20876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c43bef749 code=0x7ffc0000 [ 203.211779][T11935] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.222884][ T29] audit: type=1326 audit(1766127702.067:20877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c43bef749 code=0x7ffc0000 [ 203.291811][T11935] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2668: bg 0: block 112: padding at end of block bitmap is not set [ 203.373603][T11946] netlink: 'syz.4.2665': attribute type 3 has an invalid length. [ 203.381609][T11946] netlink: 'syz.4.2665': attribute type 3 has an invalid length. [ 203.459926][T11947] syzkaller0: entered promiscuous mode [ 203.465497][T11947] syzkaller0: entered allmulticast mode [ 203.624674][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.789825][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.895108][T11971] macvtap0: refused to change device tx_queue_len [ 203.925191][T11973] set_capacity_and_notify: 5 callbacks suppressed [ 203.925208][T11973] loop3: detected capacity change from 0 to 2048 [ 203.938315][T11970] macvtap0: refused to change device tx_queue_len [ 203.948687][ T29] audit: type=1326 audit(1766127702.857:20878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.1.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2864bf749 code=0x7ffc0000 [ 203.972383][ T29] audit: type=1326 audit(1766127702.857:20879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.1.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2864bf749 code=0x7ffc0000 [ 203.996035][ T29] audit: type=1326 audit(1766127702.857:20880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.1.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2864bf749 code=0x7ffc0000 [ 204.019656][ T29] audit: type=1326 audit(1766127702.867:20881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11967 comm="syz.0.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 204.064480][T11968] random: crng reseeded on system resumption [ 204.072224][T11968] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 204.306841][T11973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.326061][T11989] netlink: 'syz.0.2687': attribute type 3 has an invalid length. [ 204.374640][T11992] loop1: detected capacity change from 0 to 512 [ 204.379541][T11944] net_ratelimit: 10 callbacks suppressed [ 204.379632][T11944] Set syz1 is full, maxelem 65536 reached [ 204.386292][T11992] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 204.410825][T11992] EXT4-fs (loop1): invalid journal inode [ 204.416567][T11992] EXT4-fs (loop1): can't get journal size [ 204.432868][T11992] EXT4-fs (loop1): 1 truncate cleaned up [ 204.492824][T12001] loop0: detected capacity change from 0 to 2048 [ 204.589624][T12008] random: crng reseeded on system resumption [ 204.603597][T12009] siw: device registration error -23 [ 204.612502][T12001] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.632971][T12008] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 204.670199][T12001] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 520 with error 28 [ 204.682695][T12001] EXT4-fs (loop0): This should not happen!! Data will be lost [ 204.682695][T12001] [ 204.692405][T12001] EXT4-fs (loop0): Total free blocks count 0 [ 204.698524][T12001] EXT4-fs (loop0): Free/Dirty block details [ 204.704440][T12001] EXT4-fs (loop0): free_blocks=2415919104 [ 204.710231][T12001] EXT4-fs (loop0): dirty_blocks=528 [ 204.715438][T12001] EXT4-fs (loop0): Block reservation details [ 204.721464][T12001] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 204.740890][T12013] loop4: detected capacity change from 0 to 512 [ 204.748108][T12013] EXT4-fs: inline encryption not supported [ 204.854179][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 204.866416][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 204.866416][ T31] [ 205.328512][T11990] netlink: 'syz.1.2688': attribute type 3 has an invalid length. [ 205.336285][T11990] netlink: 'syz.1.2688': attribute type 3 has an invalid length. [ 205.371807][T12020] loop3: detected capacity change from 0 to 256 [ 205.381558][T12021] macvtap0: refused to change device tx_queue_len [ 205.393487][T12020] FAT-fs (loop3): Directory bread(block 1285) failed [ 205.572920][T12040] netlink: 'syz.1.2704': attribute type 6 has an invalid length. [ 205.588397][T12023] random: crng reseeded on system resumption [ 205.599872][T12023] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 205.627853][T12044] loop1: detected capacity change from 0 to 2048 [ 205.726376][T12055] __nla_validate_parse: 8 callbacks suppressed [ 205.726391][T12055] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 205.776886][T12063] syzkaller0: entered promiscuous mode [ 205.782394][T12063] syzkaller0: entered allmulticast mode [ 205.868556][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2716'. [ 206.026377][T12077] netlink: 'syz.5.2717': attribute type 3 has an invalid length. [ 206.034197][T12077] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2717'. [ 206.089676][T12080] random: crng reseeded on system resumption [ 206.098091][T12080] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 206.200533][T12103] loop5: detected capacity change from 0 to 1024 [ 206.221646][T12103] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.235881][T12103] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2727: bg 0: block 112: padding at end of block bitmap is not set [ 206.298099][T12109] syzkaller0: entered promiscuous mode [ 206.303593][T12109] syzkaller0: entered allmulticast mode [ 206.469888][T12123] loop3: detected capacity change from 0 to 1024 [ 206.488619][T12123] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.507537][T12123] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2735: bg 0: block 112: padding at end of block bitmap is not set [ 206.662281][T12138] bridge0: entered promiscuous mode [ 206.744034][T12141] netlink: 'syz.5.2732': attribute type 3 has an invalid length. [ 206.751889][T12141] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2732'. [ 206.789238][T12144] loop3: detected capacity change from 0 to 128 [ 206.838590][T12144] FAT-fs (loop3): error, clusters badly computed (2 != 0) [ 206.845829][T12144] FAT-fs (loop3): Filesystem has been set read-only [ 206.939720][T12157] netlink: 'syz.4.2748': attribute type 6 has an invalid length. [ 206.951030][T12149] syzkaller0: entered promiscuous mode [ 206.956548][T12149] syzkaller0: entered allmulticast mode [ 207.002340][T12160] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.141277][T12173] syzkaller0: entered promiscuous mode [ 207.146793][T12173] syzkaller0: entered allmulticast mode [ 207.155865][T12174] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 207.173729][T12171] random: crng reseeded on system resumption [ 207.194604][T12173] bond1 (unregistering): Released all slaves [ 207.420603][T12182] loop3: detected capacity change from 0 to 128 [ 207.431421][T12182] FAT-fs (loop3): error, clusters badly computed (2 != 0) [ 207.438701][T12182] FAT-fs (loop3): Filesystem has been set read-only [ 207.475234][T12186] siw: device registration error -23 [ 207.573165][T12190] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.578510][T12193] syzkaller0: entered promiscuous mode [ 207.589190][T12193] syzkaller0: entered allmulticast mode [ 207.607191][T12190] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2761: bg 0: block 112: padding at end of block bitmap is not set [ 207.634680][T12184] random: crng reseeded on system resumption [ 207.649656][T12184] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 207.702974][T12205] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.711031][T12205] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.718921][T12205] loop9: unable to read partition table [ 207.725078][T12205] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 207.725078][T12205] ) failed (rc=-5) [ 207.740258][ T4570] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.748384][ T4570] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.756292][ T4570] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.765382][ T4570] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.787043][ T4570] Buffer I/O error on dev loop9, logical block 0, async page read [ 207.823263][T12219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12219 comm=syz.1.2769 [ 207.877714][T12226] all: renamed from team_slave_0 (while UP) [ 207.959236][T12234] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.970964][T12234] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2774: bg 0: block 112: padding at end of block bitmap is not set [ 208.028259][ T29] kauditd_printk_skb: 810 callbacks suppressed [ 208.028329][ T29] audit: type=1326 audit(1766127706.947:21692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1319965e7 code=0x7ffc0000 [ 208.061341][ T29] audit: type=1326 audit(1766127706.977:21693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12232 comm="syz.5.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d3d0165e7 code=0x7ffc0000 [ 208.084979][ T29] audit: type=1326 audit(1766127706.977:21694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12232 comm="syz.5.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d3cfbb829 code=0x7ffc0000 [ 208.108740][ T29] audit: type=1326 audit(1766127706.977:21695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12232 comm="syz.5.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f3d3d01f749 code=0x7ffc0000 [ 208.132356][ T29] audit: type=1326 audit(1766127706.977:21696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa13193b829 code=0x7ffc0000 [ 208.156051][ T29] audit: type=1326 audit(1766127706.977:21697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1319965e7 code=0x7ffc0000 [ 208.179737][ T29] audit: type=1326 audit(1766127706.977:21698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa13193b829 code=0x7ffc0000 [ 208.203263][ T29] audit: type=1326 audit(1766127706.977:21699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa13199f749 code=0x7ffc0000 [ 208.228967][ T29] audit: type=1326 audit(1766127707.087:21700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1319965e7 code=0x7ffc0000 [ 208.250951][T12260] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2783'. [ 208.252536][ T29] audit: type=1326 audit(1766127707.087:21701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa13193b829 code=0x7ffc0000 [ 208.280979][T12261] random: crng reseeded on system resumption [ 208.305596][T12250] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 208.339290][T12267] all: renamed from team_slave_0 (while UP) [ 208.373019][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2788'. [ 208.384248][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2788'. [ 208.442887][T12273] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.458264][T12273] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2789: bg 0: block 112: padding at end of block bitmap is not set [ 208.544891][T12287] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2795'. [ 208.574577][T12287] 9p: Bad value for 'wfdno' [ 208.589810][T12293] random: crng reseeded on system resumption [ 208.604445][T12295] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 208.624101][T12295] EXT4-fs (loop1): 1 truncate cleaned up [ 208.645548][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2799'. [ 208.673256][T12298] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 208.718725][ T7559] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 208.726627][T12310] netlink: 'syz.0.2803': attribute type 6 has an invalid length. [ 208.758557][ T7559] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 208.783528][ T7559] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 208.801466][ T7559] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 208.834932][ T7559] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 208.856353][ T7559] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 208.871636][ T7559] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 208.892420][ T7559] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 208.911819][ T7559] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 208.923732][ T7559] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 208.944452][ T7559] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 208.963830][ T7559] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 208.964612][T12314] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.985908][ T7559] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 208.994702][T12314] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2805: bg 0: block 112: padding at end of block bitmap is not set [ 209.012024][ T7559] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 209.042007][ T7559] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 209.054079][ T7559] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 209.067352][ T7559] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 209.096008][T12325] set_capacity_and_notify: 9 callbacks suppressed [ 209.096026][T12325] loop5: detected capacity change from 0 to 128 [ 209.103204][ T7559] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 209.123328][ T7559] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 209.130556][T12325] FAT-fs (loop5): error, clusters badly computed (2 != 0) [ 209.135456][ T7559] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 209.141939][T12325] FAT-fs (loop5): Filesystem has been set read-only [ 209.454532][ T2334] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.464897][ T2334] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.591379][T12355] lo speed is unknown, defaulting to 1000 [ 209.597592][T12355] lo speed is unknown, defaulting to 1000 [ 209.726290][T12351] lo speed is unknown, defaulting to 1000 [ 209.735635][T12351] lo speed is unknown, defaulting to 1000 [ 209.814306][T12351] chnl_net:caif_netlink_parms(): no params data found [ 209.859593][T12351] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.866726][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.873924][T12351] bridge_slave_0: entered allmulticast mode [ 209.882836][T12351] bridge_slave_0: entered promiscuous mode [ 209.891887][T12351] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.899060][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.911399][T12351] bridge_slave_1: entered allmulticast mode [ 209.918100][T12351] bridge_slave_1: entered promiscuous mode [ 209.932907][ T2334] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.943288][ T2334] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.965200][T12351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.975872][T12351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.997616][ T2334] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.008007][ T2334] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.027589][T12351] team0: Port device team_slave_0 added [ 210.034578][T12351] team0: Port device team_slave_1 added [ 210.052795][T12351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.059869][T12351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.085830][T12351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.099492][ T2334] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.109807][ T2334] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.122375][T12351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.129562][T12351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.155581][T12351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.168420][T12373] loop4: detected capacity change from 0 to 128 [ 210.257165][T12372] FAT-fs (loop4): error, clusters badly computed (2 != 0) [ 210.264305][T12372] FAT-fs (loop4): Filesystem has been set read-only [ 210.277566][T12384] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.298164][T12351] hsr_slave_0: entered promiscuous mode [ 210.304423][T12351] hsr_slave_1: entered promiscuous mode [ 210.310484][T12351] debugfs: 'hsr0' already exists in 'hsr' [ 210.316246][T12351] Cannot create hsr debugfs directory [ 210.343946][ T2334] bridge_slave_1: left allmulticast mode [ 210.349700][ T2334] bridge_slave_1: left promiscuous mode [ 210.355397][ T2334] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.374028][ T2334] bridge_slave_0: left allmulticast mode [ 210.379833][ T2334] bridge_slave_0: left promiscuous mode [ 210.385544][ T2334] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.435571][T12396] loop5: detected capacity change from 0 to 2048 [ 210.465363][T12401] IPv4: Oversized IP packet from 127.202.26.0 [ 210.619040][ T2334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.629566][ T2334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.639810][ T2334] bond0 (unregistering): Released all slaves [ 210.692104][ T2334] hsr_slave_0: left promiscuous mode [ 210.697952][ T2334] hsr_slave_1: left promiscuous mode [ 210.703728][ T2334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.711225][ T2334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.723262][ T2334] veth1_macvtap: left promiscuous mode [ 210.729193][ T2334] veth0_macvtap: left promiscuous mode [ 210.734946][ T2334] veth1_vlan: left promiscuous mode [ 210.740794][ T2334] veth0_vlan: left promiscuous mode [ 210.817616][ T2334] team0 (unregistering): Port device team_slave_1 removed [ 210.827539][ T2334] team0 (unregistering): Port device team_slave_0 removed [ 210.870193][ T3487] lo speed is unknown, defaulting to 1000 [ 210.875974][ T3487] infiniband syz0: ib_query_port failed (-19) [ 210.913743][T12351] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.922627][T12351] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.931976][T12351] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 210.944097][T12351] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 210.991701][T12351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.007253][T12351] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.017862][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.024994][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.040749][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.047817][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.124873][T12351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.300927][T12351] veth0_vlan: entered promiscuous mode [ 211.309078][T12351] veth1_vlan: entered promiscuous mode [ 211.323561][T12351] veth0_macvtap: entered promiscuous mode [ 211.331466][T12351] veth1_macvtap: entered promiscuous mode [ 211.342395][T12351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.353799][T12351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.364597][ T1621] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.373395][ T1621] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.388547][ T1621] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.399539][ T1621] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.467676][T12512] FAULT_INJECTION: forcing a failure. [ 211.467676][T12512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.480777][T12512] CPU: 1 UID: 0 PID: 12512 Comm: syz.0.2845 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.480812][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.480826][T12512] Call Trace: [ 211.480833][T12512] [ 211.480840][T12512] __dump_stack+0x1d/0x30 [ 211.480892][T12512] dump_stack_lvl+0xe8/0x140 [ 211.480939][T12512] dump_stack+0x15/0x1b [ 211.480978][T12512] should_fail_ex+0x265/0x280 [ 211.481001][T12512] should_fail+0xb/0x20 [ 211.481026][T12512] should_fail_usercopy+0x1a/0x20 [ 211.481110][T12512] _copy_from_iter+0x21c/0xe70 [ 211.481137][T12512] ? __build_skb_around+0x164/0x1c0 [ 211.481161][T12512] copy_page_from_iter+0x178/0x2a0 [ 211.481331][T12512] skb_copy_datagram_from_iter+0x232/0x490 [ 211.481366][T12512] tun_get_user+0xafb/0x2670 [ 211.481394][T12512] ? ref_tracker_alloc+0x1f2/0x2f0 [ 211.481430][T12512] tun_chr_write_iter+0x15e/0x210 [ 211.481459][T12512] do_iter_readv_writev+0x4a1/0x540 [ 211.481490][T12512] vfs_writev+0x2df/0x8b0 [ 211.481524][T12512] do_writev+0xe7/0x210 [ 211.481556][T12512] __x64_sys_writev+0x45/0x50 [ 211.481628][T12512] x64_sys_call+0x1ba5/0x3000 [ 211.481723][T12512] do_syscall_64+0xd8/0x2c0 [ 211.481758][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.481779][T12512] RIP: 0033:0x7fa78fb6f749 [ 211.481794][T12512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.481824][T12512] RSP: 002b:00007fa78e5d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 211.481843][T12512] RAX: ffffffffffffffda RBX: 00007fa78fdc5fa0 RCX: 00007fa78fb6f749 [ 211.481855][T12512] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000003 [ 211.481868][T12512] RBP: 00007fa78e5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.481880][T12512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.481892][T12512] R13: 00007fa78fdc6038 R14: 00007fa78fdc5fa0 R15: 00007ffe21b03bc8 [ 211.481937][T12512] [ 211.482937][T12510] loop6: detected capacity change from 0 to 2048 [ 211.541938][T12506] __nla_validate_parse: 8 callbacks suppressed [ 211.541999][T12506] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 211.703417][T12516] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2846'. [ 211.770310][T12527] FAULT_INJECTION: forcing a failure. [ 211.770310][T12527] name failslab, interval 1, probability 0, space 0, times 0 [ 211.782976][T12527] CPU: 1 UID: 0 PID: 12527 Comm: syz.0.2849 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.783029][T12527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.783040][T12527] Call Trace: [ 211.783045][T12527] [ 211.783051][T12527] __dump_stack+0x1d/0x30 [ 211.783071][T12527] dump_stack_lvl+0xe8/0x140 [ 211.783089][T12527] dump_stack+0x15/0x1b [ 211.783155][T12527] should_fail_ex+0x265/0x280 [ 211.783175][T12527] should_failslab+0x8c/0xb0 [ 211.783255][T12527] kmem_cache_alloc_noprof+0x69/0x4b0 [ 211.783282][T12527] ? flock_lock_inode+0x135/0xf60 [ 211.783334][T12527] flock_lock_inode+0x135/0xf60 [ 211.783357][T12527] ? file_has_perm+0x359/0x3a0 [ 211.783383][T12527] locks_lock_inode_wait+0x6f/0x2a0 [ 211.783421][T12527] ? selinux_file_lock+0x38/0x50 [ 211.783468][T12527] __se_sys_flock+0x2f1/0x3b0 [ 211.783523][T12527] __x64_sys_flock+0x31/0x40 [ 211.783609][T12527] x64_sys_call+0x2155/0x3000 [ 211.783629][T12527] do_syscall_64+0xd8/0x2c0 [ 211.783658][T12527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.783693][T12527] RIP: 0033:0x7fa78fb6f749 [ 211.783715][T12527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.783730][T12527] RSP: 002b:00007fa78e5d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 211.783746][T12527] RAX: ffffffffffffffda RBX: 00007fa78fdc5fa0 RCX: 00007fa78fb6f749 [ 211.783757][T12527] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 211.783767][T12527] RBP: 00007fa78e5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.783840][T12527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.783851][T12527] R13: 00007fa78fdc6038 R14: 00007fa78fdc5fa0 R15: 00007ffe21b03bc8 [ 211.783867][T12527] [ 212.069751][T12529] random: crng reseeded on system resumption [ 212.078656][T12522] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 212.108149][T12539] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 212.162593][T12539] infiniband syz!: set active [ 212.167491][T12539] infiniband syz!: added team_slave_0 [ 212.190381][T12545] all: renamed from team_slave_0 [ 212.195960][T12539] RDS/IB: syz!: added [ 212.200097][T12539] smc: adding ib device syz! with port count 1 [ 212.209187][T12539] smc: ib device syz! port 1 has no pnetid [ 212.260877][T12555] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2858'. [ 212.283255][T12551] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 212.501382][T12563] loop5: detected capacity change from 0 to 1024 [ 212.523159][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2864'. [ 212.533287][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2864'. [ 212.549913][T12563] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.568666][T12563] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2861: bg 0: block 112: padding at end of block bitmap is not set [ 212.603006][T12573] lo speed is unknown, defaulting to 1000 [ 212.805566][T12573] bond0: entered promiscuous mode [ 212.810651][T12573] bond_slave_0: entered promiscuous mode [ 212.816365][T12573] bond_slave_1: entered promiscuous mode [ 212.824207][T12573] batadv0: entered promiscuous mode [ 212.830615][T12573] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 212.839435][T12573] bond0: left promiscuous mode [ 212.844284][T12573] bond_slave_0: left promiscuous mode [ 212.850081][T12573] bond_slave_1: left promiscuous mode [ 212.856303][T12573] batadv0: left promiscuous mode [ 213.080096][T12582] loop5: detected capacity change from 0 to 128 [ 213.143200][T12589] netlink: 'syz.5.2869': attribute type 6 has an invalid length. [ 213.366096][T12597] lo speed is unknown, defaulting to 1000 [ 213.604309][T12597] bond0: entered promiscuous mode [ 213.609426][T12597] bond_slave_0: entered promiscuous mode [ 213.615136][T12597] bond_slave_1: entered promiscuous mode [ 213.620950][T12597] dummy0: entered promiscuous mode [ 213.627126][T12597] batadv0: entered promiscuous mode [ 213.632642][T12597] debugfs: 'hsr0' already exists in 'hsr' [ 213.638404][T12597] Cannot create hsr debugfs directory [ 213.644191][T12597] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 213.653097][T12597] bond0: left promiscuous mode [ 213.657952][T12597] bond_slave_0: left promiscuous mode [ 213.663449][T12597] bond_slave_1: left promiscuous mode [ 213.668913][T12597] dummy0: left promiscuous mode [ 213.674539][T12597] batadv0: left promiscuous mode [ 213.983391][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2873'. [ 214.078319][T12611] lo speed is unknown, defaulting to 1000 [ 214.291023][T12622] random: crng reseeded on system resumption [ 214.306211][T12622] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 214.405449][T12626] random: crng reseeded on system resumption [ 214.413497][T12626] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 214.541307][T12629] loop6: detected capacity change from 0 to 1024 [ 214.559459][T12629] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.574177][T12629] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2880: bg 0: block 112: padding at end of block bitmap is not set [ 214.653936][T12640] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2883'. [ 214.675007][T12643] netlink: 'syz.3.2885': attribute type 3 has an invalid length. [ 214.782277][T12636] lo speed is unknown, defaulting to 1000 [ 214.784197][T12648] loop5: detected capacity change from 0 to 2048 [ 214.812262][ T29] kauditd_printk_skb: 1777 callbacks suppressed [ 214.812276][ T29] audit: type=1326 audit(1766127713.727:23479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.5.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3d01f749 code=0x7ffc0000 [ 214.846374][ T29] audit: type=1326 audit(1766127713.727:23480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172c90f749 code=0x7ffc0000 [ 214.853299][T12650] loop3: detected capacity change from 0 to 2048 [ 214.870134][ T29] audit: type=1326 audit(1766127713.727:23481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172c90f749 code=0x7ffc0000 [ 214.870175][ T29] audit: type=1326 audit(1766127713.767:23482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f172c90f749 code=0x7ffc0000 [ 214.870275][ T29] audit: type=1326 audit(1766127713.767:23483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172c90f749 code=0x7ffc0000 [ 214.870306][ T29] audit: type=1326 audit(1766127713.767:23484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f172c90f749 code=0x7ffc0000 [ 214.971023][ T29] audit: type=1326 audit(1766127713.767:23485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172c90f749 code=0x7ffc0000 [ 214.994832][ T29] audit: type=1326 audit(1766127713.767:23486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f172c90f749 code=0x7ffc0000 [ 215.018521][ T29] audit: type=1326 audit(1766127713.767:23487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172c90f749 code=0x7ffc0000 [ 215.042244][ T29] audit: type=1326 audit(1766127713.767:23488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.5.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3d01f749 code=0x7ffc0000 [ 215.127864][T12664] siw: device registration error -23 [ 215.445006][T12677] random: crng reseeded on system resumption [ 215.481526][T12673] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 215.727778][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2900'. [ 215.749935][T12694] lo speed is unknown, defaulting to 1000 [ 215.882979][T12698] siw: device registration error -23 [ 215.903227][T12693] lo speed is unknown, defaulting to 1000 [ 215.976323][T12700] loop3: detected capacity change from 0 to 2048 [ 216.130940][T12708] netlink: 'syz.0.2905': attribute type 6 has an invalid length. [ 216.205395][T12718] loop5: detected capacity change from 0 to 2048 [ 216.286821][T12718] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 216.302511][T12718] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 626 with error 28 [ 216.315089][T12718] EXT4-fs (loop5): This should not happen!! Data will be lost [ 216.315089][T12718] [ 216.324856][T12718] EXT4-fs (loop5): Total free blocks count 0 [ 216.330956][T12718] EXT4-fs (loop5): Free/Dirty block details [ 216.336919][T12718] EXT4-fs (loop5): free_blocks=2415919104 [ 216.342662][T12718] EXT4-fs (loop5): dirty_blocks=640 [ 216.347938][T12718] EXT4-fs (loop5): Block reservation details [ 216.353950][T12718] EXT4-fs (loop5): i_reserved_data_blocks=40 [ 216.462365][T12718] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 216.474685][T12718] EXT4-fs (loop5): This should not happen!! Data will be lost [ 216.474685][T12718] [ 216.604126][T12736] 9p: Bad value for 'rfdno' [ 216.658800][T12734] random: crng reseeded on system resumption [ 216.688688][T12734] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 216.703500][T12741] loop5: detected capacity change from 0 to 2048 [ 216.791383][T12752] __nla_validate_parse: 5 callbacks suppressed [ 216.791442][T12752] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 216.854602][T12752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.874240][T12756] netlink: 'syz.5.2919': attribute type 3 has an invalid length. [ 216.887052][T12752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.922166][T12737] lo speed is unknown, defaulting to 1000 [ 216.928356][T12754] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2920'. [ 217.044938][T12768] loop6: detected capacity change from 0 to 764 [ 217.077310][T12768] rock: directory entry would overflow storage [ 217.083491][T12768] rock: sig=0x4654, size=5, remaining=4 [ 217.129774][T12773] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2927'. [ 217.226962][T12780] netlink: 'syz.3.2929': attribute type 6 has an invalid length. [ 217.257118][T12784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2928'. [ 217.267615][T12784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2928'. [ 217.280756][T12770] random: crng reseeded on system resumption [ 217.859101][ T1828] bond0 (unregistering): Released all slaves [ 217.871512][ T3484] infiniband syb2: ib_query_port failed (-19) [ 217.877755][T12770] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 217.939123][T12737] chnl_net:caif_netlink_parms(): no params data found [ 218.035098][ T1828] hsr_slave_0: left promiscuous mode [ 218.043494][ T1828] hsr_slave_1: left promiscuous mode [ 218.063471][T12805] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 218.181011][T12817] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2935'. [ 218.292524][T12737] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.299976][T12737] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.337996][T12737] bridge_slave_0: entered allmulticast mode [ 218.346032][T12737] bridge_slave_0: entered promiscuous mode [ 218.358141][T12828] random: crng reseeded on system resumption [ 218.375192][T12828] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 218.383189][T12737] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.390284][T12737] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.400493][T12737] bridge_slave_1: entered allmulticast mode [ 218.409123][T12737] bridge_slave_1: entered promiscuous mode [ 218.434170][T12737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.450313][T12737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.473230][T12737] team0: Port device team_slave_0 added [ 218.481416][T12737] team0: Port device team_slave_1 added [ 218.505006][T12737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.512066][T12737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.538040][T12737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.552628][T12737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.559715][T12737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.585684][T12737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.596645][T12856] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 218.642199][T12737] hsr_slave_0: entered promiscuous mode [ 218.648374][T12737] hsr_slave_1: entered promiscuous mode [ 218.654256][T12737] debugfs: 'hsr0' already exists in 'hsr' [ 218.660054][T12737] Cannot create hsr debugfs directory [ 218.731939][T12874] loop6: detected capacity change from 0 to 2048 [ 219.057411][T12737] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.077629][T12909] netlink: 'syz.5.2949': attribute type 3 has an invalid length. [ 219.088813][T12737] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.108953][T12737] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.121727][T12737] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.145047][T12737] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.152198][T12737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.159732][T12737] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.166825][T12737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.180993][T12925] netlink: 'syz.3.2950': attribute type 3 has an invalid length. [ 219.188815][T12925] netlink: 'syz.3.2950': attribute type 1 has an invalid length. [ 219.196611][T12925] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2950'. [ 219.240321][T12737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.253406][ T1828] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.261692][ T1828] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.282891][T12737] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.303228][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.310376][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.351370][ T1828] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.358496][ T1828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.416447][T12737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.426908][T12737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.550283][T12954] lo speed is unknown, defaulting to 1000 [ 219.577775][T12737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.595936][T12351] EXT4-fs unmount: 46 callbacks suppressed [ 219.595966][T12351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.778966][T12969] random: crng reseeded on system resumption [ 219.798015][T12969] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 219.876250][T12737] veth0_vlan: entered promiscuous mode [ 219.896353][T12737] veth1_vlan: entered promiscuous mode [ 220.068586][T12737] veth0_macvtap: entered promiscuous mode [ 220.088874][T12737] veth1_macvtap: entered promiscuous mode [ 220.109909][T12737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.141283][T12991] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2963'. [ 220.187647][T12994] lo speed is unknown, defaulting to 1000 [ 220.274050][T12737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.286952][ T1892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.302837][ T1892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.334397][ T1892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.374564][ T1892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.559317][ T1828] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.569140][ T1828] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.602068][ T29] kauditd_printk_skb: 980 callbacks suppressed [ 220.602087][ T29] audit: type=1326 audit(1766127719.517:24469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 220.610022][T13009] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 220.658529][ T1828] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.666577][ T29] audit: type=1326 audit(1766127719.557:24470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 220.668775][ T1828] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.692250][ T29] audit: type=1326 audit(1766127719.557:24471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 220.692279][ T29] audit: type=1326 audit(1766127719.557:24472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 220.692305][ T29] audit: type=1326 audit(1766127719.557:24473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 220.739373][T13014] loop5: detected capacity change from 0 to 2048 [ 220.749233][ T29] audit: type=1326 audit(1766127719.557:24474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 220.802684][ T29] audit: type=1326 audit(1766127719.557:24475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 220.826344][ T29] audit: type=1326 audit(1766127719.557:24476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 220.849953][ T29] audit: type=1326 audit(1766127719.557:24477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 220.873740][ T29] audit: type=1326 audit(1766127719.557:24478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78fb6f749 code=0x7ffc0000 [ 220.885660][T13018] IPv4: Oversized IP packet from 127.202.26.0 [ 220.968300][T13014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.971404][T13027] netlink: 'syz.6.2973': attribute type 3 has an invalid length. [ 221.008210][ T1828] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.018093][ T1828] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.047971][T13033] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 221.069033][ T1828] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.078842][ T1828] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.094800][T13005] lo speed is unknown, defaulting to 1000 [ 221.189339][ T1828] bridge_slave_1: left allmulticast mode [ 221.195054][ T1828] bridge_slave_1: left promiscuous mode [ 221.200839][ T1828] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.216013][ T1828] bridge_slave_0: left allmulticast mode [ 221.221922][ T1828] bridge_slave_0: left promiscuous mode [ 221.228270][ T1828] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.577817][ T7648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.635223][T13069] netlink: 'syz.5.2983': attribute type 6 has an invalid length. [ 221.665530][T13071] netlink: 'syz.4.2984': attribute type 3 has an invalid length. [ 221.696110][T13073] loop4: detected capacity change from 0 to 2048 [ 221.709864][T13073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.949136][ T1828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.959653][ T1828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.969970][ T1828] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 221.979726][ T1828] bond0 (unregistering): Released all slaves [ 222.011109][T13043] lo speed is unknown, defaulting to 1000 [ 222.043228][T13078] IPv4: Oversized IP packet from 127.202.26.0 [ 222.111643][ T1828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.119104][ T1828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.158777][ T1828] team0 (unregistering): Port device team_slave_1 removed [ 222.168565][ T1828] team0 (unregistering): Port device team_slave_0 removed [ 222.176082][ T2881] smc: removing ib device syz! [ 222.212398][T13005] chnl_net:caif_netlink_parms(): no params data found [ 222.347347][T13088] random: crng reseeded on system resumption [ 222.386350][T13088] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 222.395537][T13005] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.402672][T13005] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.424704][T13005] bridge_slave_0: entered allmulticast mode [ 222.439525][T13005] bridge_slave_0: entered promiscuous mode [ 222.448115][T13005] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.455211][T13005] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.463763][T13005] bridge_slave_1: entered allmulticast mode [ 222.484186][T13005] bridge_slave_1: entered promiscuous mode [ 222.548378][T13005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.559826][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.571191][T13005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.639632][T13005] team0: Port device team_slave_0 added [ 222.660939][T13005] team0: Port device team_slave_1 added [ 222.699452][T13005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.706605][T13005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.732570][T13005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.747614][T13005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.754593][T13005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.780639][T13005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.821072][T13005] hsr_slave_0: entered promiscuous mode [ 222.830697][T13005] hsr_slave_1: entered promiscuous mode [ 222.836663][T13005] debugfs: 'hsr0' already exists in 'hsr' [ 222.842408][T13005] Cannot create hsr debugfs directory [ 222.903441][T13140] netlink: 'syz.0.2997': attribute type 6 has an invalid length. [ 223.172565][T13005] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.193442][T13173] loop5: detected capacity change from 0 to 512 [ 223.204074][T13005] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.217210][T13173] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 223.228852][T13005] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 223.326776][T13005] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 223.362215][T13184] lo speed is unknown, defaulting to 1000 [ 223.416959][T13184] bond0: entered promiscuous mode [ 223.422022][T13184] bond_slave_0: entered promiscuous mode [ 223.427785][T13184] bond_slave_1: entered promiscuous mode [ 223.435517][T13184] batadv0: entered promiscuous mode [ 223.441656][T13184] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 223.450956][T13184] bond0: left promiscuous mode [ 223.455852][T13184] bond_slave_0: left promiscuous mode [ 223.461456][T13184] bond_slave_1: left promiscuous mode [ 223.467682][T13184] batadv0: left promiscuous mode [ 223.601532][T13005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.654909][T13005] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.691163][T13173] EXT4-fs (loop5): invalid journal inode [ 223.694616][ T1892] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.703964][ T1892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.713739][T13173] EXT4-fs (loop5): can't get journal size [ 223.732449][ T1892] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.739577][ T1892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.821289][T13173] EXT4-fs (loop5): 1 truncate cleaned up [ 223.839775][T13173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.878339][T13217] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 224.000653][T13223] lo speed is unknown, defaulting to 1000 [ 224.275950][T13235] netlink: 'syz.5.3003': attribute type 3 has an invalid length. [ 224.283958][T13235] netlink: 'syz.5.3003': attribute type 3 has an invalid length. [ 224.307138][T13234] __nla_validate_parse: 1 callbacks suppressed [ 224.307152][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3006'. [ 224.338230][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3006'. [ 224.368108][T13005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.408693][T13247] netlink: 'syz.4.3008': attribute type 6 has an invalid length. [ 224.531821][T13005] veth0_vlan: entered promiscuous mode [ 224.562789][T13005] veth1_vlan: entered promiscuous mode [ 224.647993][T13005] veth0_macvtap: entered promiscuous mode [ 224.687124][T13005] veth1_macvtap: entered promiscuous mode [ 224.696072][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3012'. [ 224.735146][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3012'. [ 224.748963][T13005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.765100][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3012'. [ 224.775425][T13005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.808999][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.835649][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.846921][T13282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3014'. [ 224.862063][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.876927][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.887242][T13282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3014'. [ 224.924175][T13291] random: crng reseeded on system resumption [ 224.942573][T13275] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 225.049968][T13299] siw: device registration error -23 [ 225.082250][T13303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3018'. [ 225.173700][T13311] netlink: 'syz.4.3021': attribute type 3 has an invalid length. [ 225.300143][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3024'. [ 225.349222][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3024'. [ 225.508472][T13322] lo speed is unknown, defaulting to 1000 [ 225.554950][ T7648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.644691][T13322] chnl_net:caif_netlink_parms(): no params data found [ 225.721958][T13322] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.729227][T13322] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.760162][T13322] bridge_slave_0: entered allmulticast mode [ 225.767361][T13322] bridge_slave_0: entered promiscuous mode [ 225.775825][T13322] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.782977][T13322] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.799915][T13322] bridge_slave_1: entered allmulticast mode [ 225.806761][T13322] bridge_slave_1: entered promiscuous mode [ 225.824317][ T29] kauditd_printk_skb: 794 callbacks suppressed [ 225.824335][ T29] audit: type=1326 audit(1766127724.737:25273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13388 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 225.867279][ T29] audit: type=1326 audit(1766127724.737:25274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13388 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 225.890926][ T29] audit: type=1326 audit(1766127724.737:25275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13388 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 225.914853][ T29] audit: type=1326 audit(1766127724.737:25276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13388 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 225.938527][ T29] audit: type=1326 audit(1766127724.737:25277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13388 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 225.963377][T13389] all: renamed from team_slave_0 (while UP) [ 225.981491][T13322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.996700][ T29] audit: type=1326 audit(1766127724.907:25278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13388 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 226.006415][T13322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.020702][ T29] audit: type=1326 audit(1766127724.907:25279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13388 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 226.058929][T13400] loop5: detected capacity change from 0 to 2048 [ 226.089633][T13400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.119690][ T29] audit: type=1326 audit(1766127724.977:25280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13399 comm="syz.6.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172c90f749 code=0x7ffc0000 [ 226.143423][ T29] audit: type=1326 audit(1766127724.977:25281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13399 comm="syz.6.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172c90f749 code=0x7ffc0000 [ 226.167041][ T29] audit: type=1326 audit(1766127724.977:25282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13399 comm="syz.6.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f172c90f749 code=0x7ffc0000 [ 226.195630][T13322] team0: Port device team_slave_0 added [ 226.208153][T13322] team0: Port device team_slave_1 added [ 226.302986][T13425] loop4: detected capacity change from 0 to 256 [ 226.337911][T13322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.344928][T13322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.370979][T13322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.446816][T13429] siw: device registration error -23 [ 226.630665][T13428] lo speed is unknown, defaulting to 1000 [ 226.684116][T13434] bond0: entered promiscuous mode [ 226.689241][T13434] bond_slave_0: entered promiscuous mode [ 226.695098][T13434] bond_slave_1: entered promiscuous mode [ 226.701996][T13434] batadv0: entered promiscuous mode [ 226.708244][T13434] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 226.720457][T13434] bond0: left promiscuous mode [ 226.725271][T13434] bond_slave_0: left promiscuous mode [ 226.730782][T13434] bond_slave_1: left promiscuous mode [ 226.736997][T13434] batadv0: left promiscuous mode [ 226.759261][T13322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.766303][T13322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.792407][T13322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.818442][T13438] loop3: detected capacity change from 0 to 128 [ 226.842105][ T7648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.846284][T13438] FAT-fs (loop3): error, clusters badly computed (2 != 0) [ 226.858377][T13438] FAT-fs (loop3): Filesystem has been set read-only [ 226.871523][T13440] all: renamed from team_slave_0 (while UP) [ 226.888847][T13322] hsr_slave_0: entered promiscuous mode [ 226.895100][T13322] hsr_slave_1: entered promiscuous mode [ 226.917450][T13322] debugfs: 'hsr0' already exists in 'hsr' [ 226.923230][T13322] Cannot create hsr debugfs directory [ 227.031197][T13322] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.041065][T13322] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.145863][T13459] loop6: detected capacity change from 0 to 256 [ 227.159112][T13322] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.162812][T13457] netlink: 'syz.3.3048': attribute type 3 has an invalid length. [ 227.168921][T13322] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.239654][T13465] loop5: detected capacity change from 0 to 2048 [ 227.271589][T13465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.298556][T13322] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.308473][T13322] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.348650][T13322] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.358498][T13322] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.373937][T13478] netlink: 'syz.4.3060': attribute type 3 has an invalid length. [ 227.439241][T13482] syzkaller0: entered promiscuous mode [ 227.444754][T13482] syzkaller0: entered allmulticast mode [ 227.473717][T13322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.474714][T13486] loop6: detected capacity change from 0 to 256 [ 227.489309][T13322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.505130][T13322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.514491][T13322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.569649][T13322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.583791][T13322] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.594667][ T2049] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.601771][ T2049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.613638][T13498] netlink: 'syz.4.3067': attribute type 6 has an invalid length. [ 227.644044][ T2049] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.651240][ T2049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.758180][T13512] loop4: detected capacity change from 0 to 2048 [ 227.782109][T13512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.785492][T13322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.921288][T13322] veth0_vlan: entered promiscuous mode [ 227.930554][T13322] veth1_vlan: entered promiscuous mode [ 227.942554][T13536] netlink: 'syz.6.3079': attribute type 6 has an invalid length. [ 227.947174][T13322] veth0_macvtap: entered promiscuous mode [ 227.963018][T13322] veth1_macvtap: entered promiscuous mode [ 227.983825][T13322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.997801][T13322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.019572][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.031791][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.047223][T13543] IPv4: Oversized IP packet from 127.202.26.0 [ 228.062860][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.073011][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.090611][ T7648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.147245][T13550] loop6: detected capacity change from 0 to 128 [ 228.176482][T13550] FAT-fs (loop6): error, clusters badly computed (2 != 0) [ 228.183711][T13550] FAT-fs (loop6): Filesystem has been set read-only [ 228.310889][T13569] loop3: detected capacity change from 0 to 2048 [ 228.345374][T13569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.447226][T13579] lo speed is unknown, defaulting to 1000 [ 228.585402][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.679710][T13586] random: crng reseeded on system resumption [ 228.687822][T13586] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 228.779004][T13595] netlink: 'syz.4.3102': attribute type 3 has an invalid length. [ 228.871129][T13605] netlink: 'syz.6.3106': attribute type 6 has an invalid length. [ 228.905031][T13609] siw: device registration error -23 [ 228.950367][T13613] loop4: detected capacity change from 0 to 2048 [ 228.969307][T13613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.195972][T13005] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.228973][T13639] netlink: 'syz.3.3122': attribute type 6 has an invalid length. [ 229.243053][T13640] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 229.245457][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.272000][T13640] EXT4-fs (loop5): invalid journal inode [ 229.290559][T13640] EXT4-fs (loop5): can't get journal size [ 229.310194][T13640] EXT4-fs (loop5): 1 truncate cleaned up [ 229.347604][T13640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.367953][T13645] __nla_validate_parse: 27 callbacks suppressed [ 229.367967][T13645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3125'. [ 229.371194][T13647] siw: device registration error -23 [ 229.395232][T13645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3125'. [ 229.479789][T13632] netlink: 'syz.6.3115': attribute type 3 has an invalid length. [ 229.487686][T13632] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3115'. [ 229.527527][T13653] FAT-fs (loop4): error, clusters badly computed (2 != 0) [ 229.534693][T13653] FAT-fs (loop4): Filesystem has been set read-only [ 229.562594][T13656] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3129'. [ 229.601406][T13658] netlink: 'syz.0.3130': attribute type 3 has an invalid length. [ 229.995926][T13662] lo speed is unknown, defaulting to 1000 [ 230.093477][T13635] netlink: 'syz.5.3121': attribute type 3 has an invalid length. [ 230.397223][T13669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.564461][ T7648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.579461][T13681] siw: device registration error -23 [ 230.592950][T13675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.615604][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3139'. [ 230.637365][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3139'. [ 230.684044][T13696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3144'. [ 230.694794][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3143'. [ 230.705578][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3143'. [ 230.710650][T13692] syzkaller0: entered promiscuous mode [ 230.720234][T13692] syzkaller0: entered allmulticast mode [ 230.750515][T13005] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.907143][ T29] kauditd_printk_skb: 581 callbacks suppressed [ 230.907160][ T29] audit: type=1326 audit(1766127729.827:25864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13702 comm="syz.3.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 230.941041][ T29] audit: type=1326 audit(1766127729.827:25865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13702 comm="syz.3.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 230.964662][ T29] audit: type=1326 audit(1766127729.827:25866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13702 comm="syz.3.3146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 231.096175][T13706] lo speed is unknown, defaulting to 1000 [ 231.328304][T13707] lo speed is unknown, defaulting to 1000 [ 231.703352][ T29] audit: type=1326 audit(1766127730.587:25867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13668 comm="syz.4.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02da8ef749 code=0x7ffc0000 [ 231.735963][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.814383][T13715] siw: device registration error -23 [ 231.833347][T13719] set_capacity_and_notify: 5 callbacks suppressed [ 231.833368][T13719] loop4: detected capacity change from 0 to 128 [ 231.860522][T13719] FAT-fs (loop4): error, clusters badly computed (2 != 0) [ 231.867716][T13719] FAT-fs (loop4): Filesystem has been set read-only [ 231.877296][ T29] audit: type=1326 audit(1766127730.797:25868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3d01f749 code=0x7ffc0000 [ 231.927804][ T29] audit: type=1326 audit(1766127730.797:25869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3d3d01f749 code=0x7ffc0000 [ 231.950638][ T29] audit: type=1326 audit(1766127730.797:25870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3d01f749 code=0x7ffc0000 [ 231.973460][ T29] audit: type=1326 audit(1766127730.797:25871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f3d3d01f749 code=0x7ffc0000 [ 231.996355][ T29] audit: type=1326 audit(1766127730.797:25872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3d01f749 code=0x7ffc0000 [ 232.019152][ T29] audit: type=1326 audit(1766127730.797:25873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3d3d01f749 code=0x7ffc0000 [ 232.058373][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3157'. [ 232.118947][T13735] loop4: detected capacity change from 0 to 128 [ 232.137707][T13735] FAT-fs (loop4): error, clusters badly computed (2 != 0) [ 232.144842][T13735] FAT-fs (loop4): Filesystem has been set read-only [ 232.161029][T13727] lo speed is unknown, defaulting to 1000 [ 232.301759][T13747] loop6: detected capacity change from 0 to 2048 [ 232.322266][T13747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.393060][T13748] random: crng reseeded on system resumption [ 232.408952][T13748] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 232.421394][T13753] validate_nla: 3 callbacks suppressed [ 232.421409][T13753] netlink: 'syz.4.3162': attribute type 3 has an invalid length. [ 232.624969][T13764] siw: device registration error -23 [ 232.816656][T13768] random: crng reseeded on system resumption [ 232.824510][T13768] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 232.952965][T13776] netlink: 'syz.5.3175': attribute type 3 has an invalid length. [ 233.055194][T12351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.116182][T13788] netlink: 'syz.6.3180': attribute type 6 has an invalid length. [ 233.399287][T13809] netlink: 'syz.3.3187': attribute type 3 has an invalid length. [ 233.444831][T13826] random: crng reseeded on system resumption [ 233.465380][T13826] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 233.714109][T13845] netlink: 'syz.4.3201': attribute type 3 has an invalid length. [ 234.011622][T13857] all: renamed from team_slave_0 [ 234.059800][T13861] loop6: detected capacity change from 0 to 128 [ 234.067900][T13863] netlink: 'syz.5.3214': attribute type 6 has an invalid length. [ 234.082981][T13861] FAT-fs (loop6): error, clusters badly computed (2 != 0) [ 234.090172][T13861] FAT-fs (loop6): Filesystem has been set read-only [ 234.450349][T13881] lo speed is unknown, defaulting to 1000 [ 234.495815][T13882] lo speed is unknown, defaulting to 1000 [ 234.630840][T13890] IPv4: Oversized IP packet from 127.202.26.0 [ 234.817299][T13894] all: renamed from team_slave_0 (while UP) [ 235.006351][T13907] syzkaller0: entered promiscuous mode [ 235.011961][T13907] syzkaller0: entered allmulticast mode [ 235.151833][T13918] loop6: detected capacity change from 0 to 512 [ 235.162753][T13919] random: crng reseeded on system resumption [ 235.169146][T13918] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 235.180299][T13918] EXT4-fs (loop6): invalid journal inode [ 235.186280][T13918] EXT4-fs (loop6): can't get journal size [ 235.195010][T13918] EXT4-fs (loop6): 1 truncate cleaned up [ 235.200768][T13919] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 235.208695][T13918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.492567][T13937] random: crng reseeded on system resumption [ 235.543453][T13926] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 235.707144][T13914] netlink: 'syz.6.3234': attribute type 3 has an invalid length. [ 235.714944][T13914] netlink: 'syz.6.3234': attribute type 3 has an invalid length. [ 235.772744][T13950] netlink: 'syz.3.3244': attribute type 3 has an invalid length. [ 235.801865][T13952] siw: device registration error -23 [ 235.944492][T13969] all: renamed from team_slave_0 (while UP) [ 235.950477][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 235.950495][ T29] audit: type=1326 audit(1766127734.857:26046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676e59f749 code=0x7ffc0000 [ 235.980397][ T29] audit: type=1326 audit(1766127734.857:26047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f676e59f749 code=0x7ffc0000 [ 235.981780][T13966] loop3: detected capacity change from 0 to 2048 [ 236.003990][ T29] audit: type=1326 audit(1766127734.857:26048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676e59f749 code=0x7ffc0000 [ 236.004023][ T29] audit: type=1326 audit(1766127734.857:26049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f676e59f749 code=0x7ffc0000 [ 236.088513][T13966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.110918][ T29] audit: type=1326 audit(1766127734.987:26050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676e59f749 code=0x7ffc0000 [ 236.127280][T12351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.134650][ T29] audit: type=1326 audit(1766127734.987:26051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676e59f749 code=0x7ffc0000 [ 236.170042][ T29] audit: type=1326 audit(1766127735.087:26052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 236.195695][ T29] audit: type=1326 audit(1766127735.087:26053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 236.219413][ T29] audit: type=1326 audit(1766127735.087:26054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 236.242988][ T29] audit: type=1326 audit(1766127735.087:26055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 236.305370][T13979] netlink: 'syz.6.3257': attribute type 3 has an invalid length. [ 236.347467][T13985] loop6: detected capacity change from 0 to 128 [ 236.387343][T13985] FAT-fs (loop6): error, clusters badly computed (2 != 0) [ 236.394537][T13985] FAT-fs (loop6): Filesystem has been set read-only [ 236.407623][T13005] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.466256][T13994] loop3: detected capacity change from 0 to 2048 [ 236.478310][T13997] __nla_validate_parse: 5 callbacks suppressed [ 236.478324][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3273'. [ 236.502280][T13994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 236.548640][T14006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3266'. [ 236.557750][T14006] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3266'. [ 236.589651][T13994] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 236.605038][T13994] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 922 with error 28 [ 236.617528][T13994] EXT4-fs (loop3): This should not happen!! Data will be lost [ 236.617528][T13994] [ 236.627336][T13994] EXT4-fs (loop3): Total free blocks count 0 [ 236.633350][T13994] EXT4-fs (loop3): Free/Dirty block details [ 236.639319][T13994] EXT4-fs (loop3): free_blocks=2415919104 [ 236.645099][T13994] EXT4-fs (loop3): dirty_blocks=928 [ 236.650350][T13994] EXT4-fs (loop3): Block reservation details [ 236.656408][T13994] EXT4-fs (loop3): i_reserved_data_blocks=58 [ 236.886881][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3277'. [ 236.970127][T14032] random: crng reseeded on system resumption [ 236.974073][ T2049] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 922 with error 28 [ 236.987433][T14032] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 237.112193][T14046] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3276'. [ 237.199763][T14053] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 237.247864][T14053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.264814][T14053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.346594][T14062] lo speed is unknown, defaulting to 1000 [ 237.506151][T14065] loop4: detected capacity change from 0 to 2048 [ 237.618961][T14065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.728554][T14074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3293'. [ 237.791121][T14078] random: crng reseeded on system resumption [ 237.799523][T14078] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 238.040972][T14085] loop5: detected capacity change from 0 to 2048 [ 238.058755][T14086] validate_nla: 2 callbacks suppressed [ 238.058772][T14086] netlink: 'syz.3.3297': attribute type 3 has an invalid length. [ 238.059351][T14085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.064411][T14086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3297'. [ 238.170725][T14097] IPv4: Oversized IP packet from 127.202.26.0 [ 238.271321][T14102] loop6: detected capacity change from 0 to 512 [ 238.282144][T14102] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 238.309346][T14102] EXT4-fs (loop6): invalid journal inode [ 238.318337][T14102] EXT4-fs (loop6): can't get journal size [ 238.325633][T14102] EXT4-fs (loop6): 1 truncate cleaned up [ 238.326092][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.341786][T14102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.446621][T14107] all: renamed from team_slave_0 (while UP) [ 238.546723][T14110] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3305'. [ 238.729910][T14114] random: crng reseeded on system resumption [ 238.749540][T14114] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 238.810136][T14117] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 238.819416][T14117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.832897][T14117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.906429][ T7648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.940122][T14119] siw: device registration error -23 [ 238.977088][T14101] netlink: 'syz.6.3303': attribute type 3 has an invalid length. [ 238.984928][T14101] netlink: 'syz.6.3303': attribute type 3 has an invalid length. [ 239.147214][T14136] netlink: 'syz.3.3317': attribute type 3 has an invalid length. [ 239.160398][T12351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.190952][T14138] netlink: 'syz.4.3318': attribute type 6 has an invalid length. [ 239.278052][T14146] netlink: 'syz.5.3310': attribute type 3 has an invalid length. [ 239.336573][T14153] siw: device registration error -23 [ 239.516477][T14164] loop4: detected capacity change from 0 to 512 [ 239.545730][T14168] netlink: 'syz.3.3331': attribute type 3 has an invalid length. [ 239.564467][T14164] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 239.613801][T14164] EXT4-fs (loop4): invalid journal inode [ 239.634421][T14164] EXT4-fs (loop4): can't get journal size [ 239.685662][T14164] EXT4-fs (loop4): 1 truncate cleaned up [ 239.706482][T14164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.748413][T14179] netlink: 'syz.3.3335': attribute type 6 has an invalid length. [ 239.783941][T14181] IPv4: Oversized IP packet from 127.202.26.0 [ 239.964415][T14185] siw: device registration error -23 [ 240.225945][T14163] netlink: 'syz.4.3330': attribute type 3 has an invalid length. [ 240.233851][T14163] netlink: 'syz.4.3330': attribute type 3 has an invalid length. [ 240.418653][T14206] random: crng reseeded on system resumption [ 240.427474][T14206] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 240.485936][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.754556][T14223] lo speed is unknown, defaulting to 1000 [ 241.115577][T14226] lo speed is unknown, defaulting to 1000 [ 241.209464][T14228] bond0: entered promiscuous mode [ 241.214535][T14228] bond_slave_0: entered promiscuous mode [ 241.220314][T14228] bond_slave_1: entered promiscuous mode [ 241.227374][T14228] batadv0: entered promiscuous mode [ 241.233534][T14228] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 241.242627][T14228] bond0: left promiscuous mode [ 241.247505][T14228] bond_slave_0: left promiscuous mode [ 241.253005][T14228] bond_slave_1: left promiscuous mode [ 241.259099][T14228] batadv0: left promiscuous mode [ 241.609312][T14239] __nla_validate_parse: 3 callbacks suppressed [ 241.609326][T14239] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3358'. [ 241.634565][T14241] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 241.643328][T14239] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3358'. [ 241.652578][T14241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.697416][T14241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.708823][T14244] random: crng reseeded on system resumption [ 241.718915][T14248] siw: device registration error -23 [ 241.724675][T14244] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 241.822658][T14255] loop5: detected capacity change from 0 to 512 [ 241.849309][T14255] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 241.881806][T14255] EXT4-fs (loop5): invalid journal inode [ 241.896555][T14255] EXT4-fs (loop5): can't get journal size [ 241.905580][T14263] loop3: detected capacity change from 0 to 2048 [ 241.963134][T14259] syzkaller0: entered promiscuous mode [ 241.968691][T14259] syzkaller0: entered allmulticast mode [ 241.976306][T14255] EXT4-fs (loop5): 1 truncate cleaned up [ 241.984831][T14255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.998233][T14263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.020418][ T29] kauditd_printk_skb: 809 callbacks suppressed [ 242.020437][ T29] audit: type=1326 audit(1766127740.937:26865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.3.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 242.059317][ T29] audit: type=1326 audit(1766127740.967:26866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.3.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 242.082954][ T29] audit: type=1326 audit(1766127740.967:26867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.3.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 242.106627][ T29] audit: type=1326 audit(1766127740.967:26868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.3.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 242.130245][ T29] audit: type=1326 audit(1766127740.967:26869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.3.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 242.153859][ T29] audit: type=1326 audit(1766127740.967:26870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.3.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 242.177589][ T29] audit: type=1326 audit(1766127740.967:26871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.3.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 242.201169][ T29] audit: type=1326 audit(1766127740.967:26872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.3.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 242.224861][ T29] audit: type=1326 audit(1766127740.967:26873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.3.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 242.248497][ T29] audit: type=1326 audit(1766127740.967:26874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.3.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8b8f24f749 code=0x7ffc0000 [ 242.254023][T14271] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3369'. [ 242.362718][T14273] loop4: detected capacity change from 0 to 2048 [ 242.410625][T14273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.592015][T14285] random: crng reseeded on system resumption [ 242.646175][T14282] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 242.770688][T13005] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.910984][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3375'. [ 242.937783][T14287] random: crng reseeded on system resumption [ 243.020858][T14298] loop3: detected capacity change from 0 to 128 [ 243.037268][T14300] all: renamed from team_slave_0 (while UP) [ 243.048219][T14298] FAT-fs (loop3): error, clusters badly computed (2 != 0) [ 243.055368][T14298] FAT-fs (loop3): Filesystem has been set read-only [ 243.101262][ T7648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.125755][T14306] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3379'. [ 243.194652][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3383'. [ 243.208519][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.243516][T14308] syzkaller0: entered promiscuous mode [ 243.249085][T14308] syzkaller0: entered allmulticast mode [ 243.337179][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3387'. [ 243.406202][T14329] loop5: detected capacity change from 0 to 512 [ 243.420142][T14329] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 243.443586][T14329] EXT4-fs (loop5): invalid journal inode [ 243.449583][T14329] EXT4-fs (loop5): can't get journal size [ 243.450032][T14324] random: crng reseeded on system resumption [ 243.501320][T14329] EXT4-fs (loop5): 1 truncate cleaned up [ 243.508502][T14333] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 243.538963][T14334] lo speed is unknown, defaulting to 1000 [ 243.610652][T14334] bond0: entered promiscuous mode [ 243.615793][T14334] bond_slave_0: entered promiscuous mode [ 243.621531][T14334] bond_slave_1: entered promiscuous mode [ 243.628602][T14334] batadv0: entered promiscuous mode [ 243.634640][T14334] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 243.643747][T14334] bond0: left promiscuous mode [ 243.648584][T14334] bond_slave_0: left promiscuous mode [ 243.654087][T14334] bond_slave_1: left promiscuous mode [ 243.660244][T14334] batadv0: left promiscuous mode [ 243.715772][T14340] all: renamed from team_slave_0 (while UP) [ 243.739636][T14329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.021694][T14345] random: crng reseeded on system resumption [ 244.176865][T14356] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3397'. [ 244.195026][T14357] loop6: detected capacity change from 0 to 2048 [ 244.243741][T14357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.351098][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3400'. [ 244.360524][T14326] validate_nla: 3 callbacks suppressed [ 244.360537][T14326] netlink: 'syz.5.3389': attribute type 3 has an invalid length. [ 244.373870][T14326] netlink: 'syz.5.3389': attribute type 3 has an invalid length. [ 244.422313][T14374] loop4: detected capacity change from 0 to 2048 [ 244.438517][T14374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.472922][T14378] netlink: 'syz.0.3403': attribute type 3 has an invalid length. [ 244.533407][ T7648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.544761][ T7648] ================================================================== [ 244.553137][ T7648] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 244.560897][ T7648] [ 244.563238][ T7648] read-write to 0xffff888237c27550 of 8 bytes by task 14373 on cpu 0: [ 244.571396][ T7648] find_get_block_common+0x4f3/0x950 [ 244.576713][ T7648] bdev_getblk+0x4d/0x3f0 [ 244.581067][ T7648] __ext4_get_inode_loc+0x303/0x930 [ 244.586274][ T7648] ext4_reserve_inode_write+0xd7/0x250 [ 244.591748][ T7648] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 244.597133][ T7648] ext4_dirty_inode+0x92/0xc0 [ 244.601817][ T7648] __mark_inode_dirty+0x162/0x750 [ 244.606852][ T7648] file_update_time_flags+0x2e5/0x310 [ 244.612240][ T7648] file_update_time+0x17/0x20 [ 244.616929][ T7648] ext4_page_mkwrite+0x18c/0xb90 [ 244.621873][ T7648] handle_mm_fault+0x1601/0x2c60 [ 244.626822][ T7648] do_user_addr_fault+0x630/0x1080 [ 244.631948][ T7648] exc_page_fault+0x62/0xa0 [ 244.636465][ T7648] asm_exc_page_fault+0x26/0x30 [ 244.641321][ T7648] [ 244.643647][ T7648] read to 0xffff888237c27550 of 8 bytes by task 7648 on cpu 1: [ 244.651196][ T7648] has_bh_in_lru+0x35/0x1f0 [ 244.655710][ T7648] smp_call_function_many_cond+0x2a9/0xc60 [ 244.661521][ T7648] on_each_cpu_cond_mask+0x3c/0x80 [ 244.666635][ T7648] invalidate_bh_lrus+0x2a/0x30 [ 244.671498][ T7648] blkdev_flush_mapping+0x9a/0x1a0 [ 244.676616][ T7648] bdev_release+0x2bf/0x3d0 [ 244.681125][ T7648] blkdev_release+0x15/0x20 [ 244.685646][ T7648] __fput+0x29b/0x650 [ 244.689644][ T7648] ____fput+0x1c/0x30 [ 244.693640][ T7648] task_work_run+0x131/0x1a0 [ 244.698230][ T7648] exit_to_user_mode_loop+0x1fe/0x740 [ 244.703627][ T7648] do_syscall_64+0x1ef/0x2c0 [ 244.708258][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.714156][ T7648] [ 244.716564][ T7648] value changed: 0x0000000000000000 -> 0xffff88810653a068 [ 244.723684][ T7648] [ 244.726283][ T7648] Reported by Kernel Concurrency Sanitizer on: [ 244.732454][ T7648] CPU: 1 UID: 0 PID: 7648 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 244.742354][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.752421][ T7648] ================================================================== [ 244.793337][T14388] loop5: detected capacity change from 0 to 2048 [ 244.842036][T14388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.892383][T14391] syzkaller0: entered promiscuous mode [ 244.897904][T14391] syzkaller0: entered allmulticast mode [ 245.009553][T12351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.263946][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.618343][ T7648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.