last executing test programs: 6.077634295s ago: executing program 1 (id=449): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0, 0x49}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000380)=""/171, 0xab}], 0x1, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) fcntl$setlease(r4, 0x400, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x14, 0x1d, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x92b, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x49dd}}, @call={0x85, 0x0, 0x0, 0x60}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @alu={0x7, 0x0, 0xa, 0x7, 0x7, 0x10, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x1000, &(0x7f00000009c0)=""/4096, 0x40f00, 0x8, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x3, 0x0, 0x65}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000004c0)=[0xffffffffffffffff, r4, 0x1, 0x1, r4, 0x1, 0x1, r4, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x3, 0xf, 0xb}, {0x0, 0x2, 0xa, 0x2}, {0x5, 0x1, 0x7, 0x3}, {0x1, 0x1, 0x4, 0xb}, {0x3, 0x4, 0x10, 0xc}], 0x10, 0x3}, 0x94) chmod(&(0x7f0000000180)='./file0\x00', 0x355) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) flistxattr(r8, &(0x7f0000000080)=""/13, 0xd) 5.213176881s ago: executing program 0 (id=459): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, 0x0, &(0x7f0000002ec0)=""/4096}, 0x20) 5.211092542s ago: executing program 0 (id=461): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000041c0)=""/4100, &(0x7f0000000100)=0x1004) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r3 = getpid() io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYRES64=r0, @ANYRESOCT=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, r8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0xc1) 5.150314058s ago: executing program 1 (id=462): syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbd31, 0x0, 0x0, 0x0, 0xc}, [@jmp={0x5, 0x0, 0x8, 0x5, 0x16, 0x30, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0x4, 0x3, 0x3, 0x25e, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query, @alu={0x7, 0x0, 0x4, 0xa, 0x3}, @jmp={0x5, 0x1, 0x6, 0x3, 0x7, 0x2, 0x8}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0xa5, &(0x7f0000000a40)=""/165, 0x41100, 0x50, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0x10, 0x3fe, 0x7f}, 0x10, 0x11e7f, 0xffffffffffffffff, 0x3, &(0x7f0000000c40)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000c80)=[{0x5, 0x1, 0x6, 0x9}, {0x4, 0x3, 0x10, 0xb}, {0x0, 0x2, 0x5, 0x6}], 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7}, 0x18) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000640), 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu~=0||!') r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r6 = socket(0xa, 0x5, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x40000000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000580)={{0x2, 0xffff, @private=0xa010104}, {0x6, @multicast}, 0x68, {0x2, 0x0, @broadcast}, 'vlan0\x00'}) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r11, 0x89f9, &(0x7f0000000900)={'sit0\x00', &(0x7f00000008c0)={@local, @empty, 0x1b, 0x1c}}) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="0207000502"], 0x10}}, 0x4040014) 2.158464015s ago: executing program 4 (id=476): chdir(0x0) creat(0x0, 0x7) open$dir(0x0, 0x0, 0xf8c2392b1b6f138c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa4, r3, 0x20, 0x70bd25, 0x2, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x914}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) pipe(&(0x7f0000000200)) 2.10678064s ago: executing program 0 (id=477): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, 0x0, &(0x7f0000002ec0)=""/4096}, 0x20) 1.982532703s ago: executing program 0 (id=479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}}, 0x0) 1.982126953s ago: executing program 0 (id=480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='svcrdma_send_pullup\x00', r0, 0x0, 0x20001}, 0xfffffd4e) r1 = socket(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000040), 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000004a0001002bbd7000770000000a0080004b1ebbe5351a5620b6e063ef8f1c30e380b5767acca577212a686e02e99540ff066159f9ce3282da454d5242880afd347253e1c4743726a10baa70f245ec346de4777c5cee5794159fe4987f169f499bd713a5daad4b4f6e77a04c47d20becd7c668d86a665332ce2f", @ANYRES32=0x0, @ANYBLOB="070000001400010000000000000000000000ffff64010100"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 1.946138626s ago: executing program 1 (id=481): setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000340)={[{@init_itable_val}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0xf8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB='\x00\x00\x00'], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 1.276401803s ago: executing program 4 (id=487): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0xff7f, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x5}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xb, 0x37, 0x4, 0x537d, 0x0, 0xfffffffd, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x8, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x3, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0x80, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0x818a, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x3fd, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e2, 0x86b9, 0xff, 0x1, 0x0, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x80, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1065, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0xec, 0x35bc0, 0x9, 0xfffffffa, 0x790, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xfffffffe, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x100, 0xffe, 0x3, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 1.191645111s ago: executing program 3 (id=490): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, 0x0, &(0x7f0000002ec0)=""/4096}, 0x20) 1.178202302s ago: executing program 0 (id=491): syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbd31, 0x0, 0x0, 0x0, 0xc}, [@jmp={0x5, 0x0, 0x8, 0x5, 0x16, 0x30, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0x4, 0x3, 0x3, 0x25e, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query, @alu={0x7, 0x0, 0x4, 0xa, 0x3}, @jmp={0x5, 0x1, 0x6, 0x3, 0x7, 0x2, 0x8}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0xa5, &(0x7f0000000a40)=""/165, 0x41100, 0x50, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0x10, 0x3fe, 0x7f}, 0x10, 0x11e7f, 0xffffffffffffffff, 0x3, &(0x7f0000000c40)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000c80)=[{0x5, 0x1, 0x6, 0x9}, {0x4, 0x3, 0x10, 0xb}, {0x0, 0x2, 0x5, 0x6}], 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7}, 0x18) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000640), 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu~=0||!') r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r6 = socket(0xa, 0x5, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x40000000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000580)={{0x2, 0xffff, @private=0xa010104}, {0x6, @multicast}, 0x68, {0x2, 0x0, @broadcast}, 'vlan0\x00'}) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r11, 0x89f9, &(0x7f0000000900)={'sit0\x00', &(0x7f00000008c0)={@local, @empty, 0x1b, 0x1c}}) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="0207000502"], 0x10}}, 0x4040014) 1.121296158s ago: executing program 4 (id=493): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r2, 0xa, 0x200, 0x5}) r4 = socket$inet(0x2, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6b, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x2}, 0x18) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x0, 0x9, 0x7ff, 0x8b34, 0x0, 0x8, 0x7}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e24, 0x3, @private2, 0x8}}, 0x8, 0x667a, 0xd24d, 0x6, 0x10, 0x4, 0x80}, 0x9c) setfsgid(0xffffffffffffffff) 1.117692409s ago: executing program 3 (id=494): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440), 0x0, 0xdc, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000bc0), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0xfff}, 0xffffffde) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setreuid(0xee01, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRESHEX=r3, @ANYBLOB="2c7766060000ca", @ANYRESHEX=r4, @ANYBLOB="2c756e616d653dd0aedec1aacddeacfbace45365033a71976ec620ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b6543010300b3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092"]) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r3}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62c42) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[]) 1.014721169s ago: executing program 4 (id=495): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 966.393064ms ago: executing program 1 (id=496): creat(&(0x7f00000000c0)='./file0\x00', 0x248) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000200)=0x2, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f37e9140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r5, 0x201, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=@newtfilter={0x390, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10}, {0xf}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x324, 0x2, [@TCA_FLOWER_ACT={0x320, 0x3, [@m_skbmod={0x124, 0x15, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="def264dcc762"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x9, 0x4, 0x3, 0x1ff}, 0x2}}]}, {0xc5, 0x6, "788ca2c9a80686768f634c88578aaeb321a15b2624d60f0ed40b2f8d1e2a73a80adc3b46ca06026d21e739a39817c7d7d4b94b589fb1b69347e2d2cb7ff2269c87e13028b340df2fcd1eaa2340aa1606ead16709878c2f4e6ca75105234855de038ed5a4e8486c151cfb85057cbc06c1265fb72f60c0c2006dc0d4214bf1119fdd37cd32568f68dd4855bb76be2df772cd050234498703dea49fa43684c26aa9e3b796134ed482b98c6b6d2c6ae2e47e97f19880bb0e8481d7e5889a4550d23ee3"}, {0xc, 0x7, {0x221c38c4f42489a6, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x1f8, 0x15, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7f, 0x7, 0x4, 0x5}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x40, 0x6, 0x10, 0x10000}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x2, 0x0, 0x6, 0x9396}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x11, 0x0, 0xc, 0x8001}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0xd4, 0x20000000, 0x2, 0x3}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x3ff, 0x2, 0x6, 0x87}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x95, 0x7f, 0x6, 0xe, 0x5}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6e, 0x0, 0x80000000, 0xfff}, 0x4, r8}}]}, {0xcc, 0x6, "c70d15517ae31a892bacc4fe353fbf02fbdf5c4fbc27b0ef0408c32cbb729b05727c83fc3c5508c90b6b7a699209a84f9133eed53fd3537b8f25f446fcde06eb0538d432067cd60c714942c2abe5f603cb5852699299f9ff0fb07b65266e84b0da8a5b374e85360b60641b7bb6cec3e01b4dae55d3cea999c3e8ba0f5fd2eb94390057b8030ab20fb4ec9532283bbe53b0aae329153e4ce3113ee0ef10d9dc790315566ee3e173002f63a2608485c39a253e742c285af48924c8a2f951cee117a616af7fca8ddab1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x6}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x8934}]}, 0x390}, 0x1, 0xf0ffffffffffff, 0x0, 0x8050}, 0x4000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') pread64(r10, &(0x7f0000033240)=""/102400, 0x19000, 0x41e) (async) pread64(r10, &(0x7f0000033240)=""/102400, 0x19000, 0x41e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00'}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r12}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r12}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x8000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") 882.109642ms ago: executing program 4 (id=498): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x20060400) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) pidfd_send_signal(r6, 0x3b, &(0x7f0000000140)={0x13, 0xc739, 0x4}, 0x0) (async) pidfd_send_signal(r6, 0x3b, &(0x7f0000000140)={0x13, 0xc739, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000200)={r10, 0x1}, &(0x7f0000000880)=0x8) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) close(r0) (async) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r13 = socket$packet(0x11, 0x2, 0x300) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r15, 0x400448c8, &(0x7f00000001c0)={r14, r13, 0x8, 0x0, 0x0, 0x7f, 0x6, 0x6, 0x5, 0x7, 0x3, 0x9, 'syz0\x00'}) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r16, r12, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r16}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r11, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 745.946535ms ago: executing program 2 (id=499): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x3f) 745.191616ms ago: executing program 2 (id=500): mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x62f, &(0x7f0000000700)="$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") fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x62f, &(0x7f0000000700)="$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") (async) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a, 0x0) (async) 698.36921ms ago: executing program 1 (id=501): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 678.385192ms ago: executing program 3 (id=502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='svcrdma_send_pullup\x00', r0, 0x0, 0x20001}, 0xfffffd4e) r1 = socket(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000040), 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000004a0001002bbd7000770000000a0080004b1ebbe5351a5620b6e063ef8f1c30e380b5767acca577212a686e02e99540ff066159f9ce3282da454d5242880afd347253e1c4743726a10baa70f245ec346de4777c5cee5794159fe4987f169f499bd713a5daad4b4f6e77a04c47d20becd7c668d86a665332ce2f", @ANYRES32=0x0, @ANYBLOB="070000001400010000000000000000000000ffff64010100"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 527.344867ms ago: executing program 1 (id=503): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c55, &(0x7f0000000180)={[{@shortname_winnt}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@rodir}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@utf8}, {@shortname_lower}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@rodir}, {@shortname_winnt}, {@utf8no}]}, 0xf5, 0x2e5, &(0x7f0000000540)="$eJzs3U1rE0Ecx/F/kqZJWmt6EBFRGCqIIl2agDcPFmlBDChtI1hB2NqthmyTkg2FiNgeBK+ePfTgUQQRvHkR8dqLr8CnWy+9WbC4stndNE3WNa32yX4/h3a6M7+dyc6kD9N2s3Lp6WxxxtJ+2HVx8fRLVGJeeVHOf1j6fHr8/RH3Y6VGhycyWaWiInL74cuBd9Xem2+Ovk3Icv+dldXst+VTEyI/J+5LVBUsVbJtpaupcrkaccLTBauoKXXDNHTLUIWSZVSqXr0+ZRpqxizPzdWUXpru65mrGJal9FJNFY2aqpZVtVJT+j29UFKapqm+HkF9snzRtrpIWDD/Ys22ZdWZ+cSi2LYd0HrRL/hrI/F3g8V+0jL/oW3bFkdsJ0eG3bBmd3U8//j/uM//L8+Y/8Np/NbkteFcbmRMqaTI7JP5/Hzefe/Wf+qVgphiyNLYhcl1EbtBIs7b0au5kSFV1y9nZxe8/MJ83v3iMDzj5TOSdr5PacqLn8+4ebU5H5ee5nxW0nIsOJ/18xJtynfLuTNNeU3S8vGulMWUaXGyG/lHGaWuXM+19J+qtwMAAAAAAAAA4CDSVMPG/n2k8avelKYl6n/x0ahPOYeddm6Dxv76kKRlPXh/fihwf79LTnbt4QMHAAAAAOAQsWoPirppGpWdKcSep0K6iIuIUxB5POAMJvSEx70Rd9Z7t4i0V8XCu9hUSF10+3s15g1MdvJC/aOC/88aRd187VelJKhxdEsLYLA78Mond/UBSieNJbm9hZ3oeGm1FiLr/pETgW3syJ/PY+tm3D0iGzMYmrq8pafDbwvJ1gs1+NU9rxnySeN7Y4sPAAAAwAHS9IMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI9u6eZh/3/7NVeK9RHz7LdlaXyee+/4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Id+BQAA//+FlLca") write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00"], 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000010000000000000000000000180100002020692400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000069bf0000850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3}, 0x3c) syz_emit_ethernet(0xeff, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}}}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) 402.602069ms ago: executing program 2 (id=504): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0xff7f, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 356.228714ms ago: executing program 2 (id=505): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x106) 337.263176ms ago: executing program 2 (id=506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0xa4ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x5a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0xf) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', r6, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x40) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xf, &(0x7f0000000640)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000600055090100000000009500000000000000bf91000000000000b7020000010000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x75, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$RTC_WKALM_SET(r11, 0x4028700f, &(0x7f0000000240)={0x0, 0x0, {0x16, 0x2d, 0x13, 0x1a, 0xa, 0xc, 0x1, 0x152, 0xcdedd218b3c3b691}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x200000000000026e, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x77}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x8a}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) 267.845253ms ago: executing program 2 (id=507): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) 143.728046ms ago: executing program 3 (id=508): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYRES32=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES16=r3, @ANYRESDEC], 0x104}}, 0x40000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="07f7352d32ca7e35886f2dce7e00000000000000000500000018000180145fd68e74756e000000000000"], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000007ae68c5c5baaa5ab8a8ab3c7875e2336abaa073265c5c066a242affd2c3ef14911695e7dbf", @ANYRES16=r6, @ANYBLOB="000425bd7000fedbdf2514000000080014000600000005001900000000000800110050330000050019000100000008000a0004000000"], 0x3c}}, 0x0) r7 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x800}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x2000000000000005, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4e04, 0x0, 0x0, 0x1, {0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x77f}}}, 0x32) getpgrp(0x0) r12 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0xffffffff, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 50.383374ms ago: executing program 3 (id=509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000480), &(0x7f0000000280)=@udp=r4, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r3, &(0x7f0000000380), 0x0}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6, r1}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0) 45.072785ms ago: executing program 3 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130, 0x0, {0xffffff7f00000000}}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 0s ago: executing program 4 (id=511): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000100)={[], [{@seclabel}]}, 0x3, 0x50b, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSrsbIVbdFdRONuw24tAWCcGpElDuISROFMWJo9hpm6hCqTgjJIQAlQucuCDxByCh/gkIqRLcK4RAFbTlwKFgNPY4DcZOUtWO0+TzkV7nzZsf3+9z67HfzNQTwLk1FRHXImIoIj6IiImsPZeV2GuWdL0nj+8spiWJev3G35NIsrbWvpJs+nq22WhEfOvrEd9NkmbDAdWd3bWFcrm0lc0Xa+ubxerO7qXV9YWV0kppY3Z25uO5y3MfzU33rK9XvvqXn/zwV1+78rsv3no4/7f3v5fmO54tO9iPXmq+JvnGa9EyHBFb/Qg2AENZf/LHWTnpfz4AABwu/Y7/qYj4XEQ8vTfobAAAAIB+qF8dj2dJRB0AAAA4s3KNe2CTXCG7F2A8crlCoXkP72fiapQr1doXlivbG0vNe2UnI59bXi2XprN7hScjn6TzM4368/kP2+ZnI+KNiPjxxFhjvrBYKS8N+uQHAAAAnBPpOH8816ynk39ONMf/AAAAwBkzOegEAAAAgL4z/gcAAICz7//H/1PNSTJ88skAAAAAvfaN69fTUm89/3rp5s72WuXmpaVSda2wvr1YWKxsbRZWKpWVxm/2rR+1v3Klsvml2Ni+XayVqrVidWd3fr2yvVGbbzzXe750rOdEAwAAAD31xrv3/5RExN6XxxolNZItM1aHsy33Yqsn/coDOHlDg04AGBg3+ML55f0PHDWwHz2hPAAAgP65+Nn96/9jceD6/4WHrv/DWfeC1/+BM8T1fzi/2q7//eJYGz2r9ycZ4EQZ4wNHnQfoev3/973PBQAA6I/xRklyhWwMMB65XKEQcaHxWIB8srxaLk1HxCcj4o8T+U+k8zODThoAAAAAAAAAAAAAAAAAAAAAAAAAXjH1ehJ1AAAA4EyLyP01iYgkRiMmPj/efn5gJPnXRGMaEbd+fuOntxdqta2ZtP0f++21n2XtHw7iDAYAAADQrjVOb43jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXnjy+s9gqB5rf63fcR1+JiMlO8YdjtDEdjXxEvPY0ieED2yURMdSD+Ht3I+LNTvGTNK2YzLJoj5+LiLEBx3+9B/HhPLufHn+udXr/5WKqMe38/hvOyst6NNXt+JfbP/4NdTn+XThi3yPZ9K0Hvyl2jX834q3hzsefVvyRlzz+fufbu7vdltV/GXGx4+dP8j+xirX1zWJ1Z/fS6vrCSmmltDE7O/Px3OW5j+ami8ur5VL2Z8cYP3r7t/85rP+vdYk/mfU/ae9/0sypXu+8z3fb5v/94PbjT3daMYl49IOs3uHv/81u8bPX/r3scyBdfrFV32vWD3rn139457D+L3Xp/+gh8dO297vttM0H3/z+n5u1/DG3AAD6qbqzu7ZQLpe2qsORVfZbXqlK2plTkEYPK1OnI41TV3n7XvOfbo922BpFDbxfp6wywIMSAADQF8+/9A86EwAAAAAAAAAAAAAAAAAAADi/Wv//v/Vbzv34ObGD8UZblSQ58b4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzmvwEAAP//30rMYg==") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r4}, 0x18) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000000), &(0x7f0000000180)=r6}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) r7 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) kernel console output (not intermixed with test programs): 4.452601][ T3496] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.463722][ T3497] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 34.481512][ T3488] syzkaller0: entered promiscuous mode [ 34.487075][ T3488] syzkaller0: entered allmulticast mode [ 34.494371][ T3496] EXT4-fs (loop2): 1 truncate cleaned up [ 34.501611][ T3496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.523094][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.539739][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.609625][ T3503] netlink: 'syz.1.8': attribute type 4 has an invalid length. [ 34.628990][ T3503] netlink: 'syz.1.8': attribute type 4 has an invalid length. [ 34.635398][ T3505] loop4: detected capacity change from 0 to 512 [ 34.799013][ T3512] loop3: detected capacity change from 0 to 512 [ 34.843007][ T3512] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.888759][ T3514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 34.930719][ T3512] EXT4-fs (loop3): 1 truncate cleaned up [ 34.955912][ T3512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.992309][ T3482] Set syz1 is full, maxelem 65536 reached [ 35.022701][ T3518] loop1: detected capacity change from 0 to 512 [ 35.051644][ T3518] ======================================================= [ 35.051644][ T3518] WARNING: The mand mount option has been deprecated and [ 35.051644][ T3518] and is ignored by this kernel. Remove the mand [ 35.051644][ T3518] option from the mount to silence this warning. [ 35.051644][ T3518] ======================================================= [ 35.120014][ T3518] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.127054][ T3518] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.139470][ T3518] EXT4-fs (loop1): 1 truncate cleaned up [ 35.145680][ T3518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.162986][ T3518] EXT4-fs (loop1): shut down requested (2) [ 35.169408][ T3518] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 35.178661][ T3518] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 35.218476][ T3506] Set syz1 is full, maxelem 65536 reached [ 35.252687][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.297453][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.376653][ T3526] futex_wake_op: syz.1.13 tries to shift op by 144; fix this program [ 35.390444][ T3523] futex_wake_op: syz.4.14 tries to shift op by 144; fix this program [ 35.426637][ T3529] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.449917][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.482835][ T3530] pim6reg: entered allmulticast mode [ 35.495683][ T3530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'. [ 35.527603][ T3530] pim6reg: left allmulticast mode [ 35.643007][ T3512] Set syz1 is full, maxelem 65536 reached [ 35.734208][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.800898][ T3539] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.801171][ T3537] loop3: detected capacity change from 0 to 1024 [ 35.821547][ T3537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.839316][ T3537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.998770][ T3549] pim6reg: entered allmulticast mode [ 36.010531][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.029477][ T3549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19'. [ 36.160828][ T3552] serio: Serial port ptm0 [ 36.886202][ T3555] syzkaller0: entered promiscuous mode [ 36.891743][ T3555] syzkaller0: entered allmulticast mode [ 36.902899][ T3529] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.228984][ T3529] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.317752][ T3529] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.444466][ T3562] loop3: detected capacity change from 0 to 1024 [ 37.453847][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.480825][ T3539] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.509056][ T3562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.538393][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.578100][ T3562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.604061][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.621340][ T3539] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.658595][ T3568] loop0: detected capacity change from 0 to 512 [ 37.664972][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.680260][ T3568] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.701678][ T3539] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.715666][ T3568] EXT4-fs (loop0): 1 truncate cleaned up [ 37.721943][ T3568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.797559][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.835373][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.881162][ T3576] Zero length message leads to an empty skb [ 38.024356][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.110799][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.207483][ T3573] bridge_slave_0: left allmulticast mode [ 38.213190][ T3573] bridge_slave_0: left promiscuous mode [ 38.219167][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.394677][ T3573] bridge_slave_1: left allmulticast mode [ 38.400474][ T3573] bridge_slave_1: left promiscuous mode [ 38.406250][ T3573] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.429238][ T3573] bond0: (slave bond_slave_0): Releasing backup interface [ 38.446386][ T3573] bond0: (slave bond_slave_1): Releasing backup interface [ 38.462225][ T3588] netlink: 'syz.0.27': attribute type 4 has an invalid length. [ 38.490194][ T3573] team0: Port device team_slave_0 removed [ 38.515618][ T3589] netlink: 'syz.0.27': attribute type 4 has an invalid length. [ 38.578906][ T3573] team0: Port device team_slave_1 removed [ 38.786429][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.793857][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.815712][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 38.815730][ T29] audit: type=1400 audit(1760099361.915:222): avc: denied { connect } for pid=3593 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 38.841589][ T29] audit: type=1400 audit(1760099361.915:223): avc: denied { write } for pid=3593 comm="syz.4.31" path="socket:[5268]" dev="sockfs" ino=5268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 38.947919][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.955477][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.972978][ T3573] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 39.041455][ T29] audit: type=1400 audit(1760099361.985:224): avc: denied { read } for pid=3593 comm="syz.4.31" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 39.064414][ T29] audit: type=1400 audit(1760099361.985:225): avc: denied { open } for pid=3593 comm="syz.4.31" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 39.108558][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.135377][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.889174][ T29] audit: type=1400 audit(1760099362.945:226): avc: denied { write } for pid=3602 comm="syz.3.33" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.203736][ T29] audit: type=1400 audit(1760099363.025:227): avc: denied { read write } for pid=3605 comm="syz.1.34" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.227083][ T29] audit: type=1400 audit(1760099363.025:228): avc: denied { open } for pid=3605 comm="syz.1.34" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.250431][ T29] audit: type=1400 audit(1760099363.025:229): avc: denied { connect } for pid=3602 comm="syz.3.33" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.303384][ T3612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 40.431691][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.439243][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.447480][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.454913][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.470243][ T29] audit: type=1400 audit(1760099363.405:230): avc: denied { bind } for pid=3611 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.489577][ T29] audit: type=1400 audit(1760099363.405:231): avc: denied { name_bind } for pid=3611 comm="syz.0.35" src=19988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 40.549778][ T312] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.563255][ T312] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.592516][ T312] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.613094][ T312] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.768251][ T3616] futex_wake_op: syz.1.37 tries to shift op by 144; fix this program [ 40.865181][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 41.039423][ T3636] loop2: detected capacity change from 0 to 1024 [ 41.062099][ T3636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.117103][ T3636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.276898][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 41.294398][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.448785][ T3675] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 41.819024][ T3737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 41.828481][ T3737] netlink: 32 bytes leftover after parsing attributes in process `syz.1.48'. [ 41.870477][ T3745] loop1: detected capacity change from 0 to 512 [ 41.879448][ T3745] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.893440][ T3745] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.905274][ T3745] EXT4-fs (loop1): 1 truncate cleaned up [ 41.911454][ T3745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.925282][ T3745] EXT4-fs (loop1): shut down requested (2) [ 41.931364][ T3745] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 41.940745][ T3745] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 41.961902][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.134724][ T3788] netlink: '+}[@': attribute type 10 has an invalid length. [ 42.147752][ T3788] team0: Port device dummy0 added [ 42.258221][ T3788] +}[@ (3788) used greatest stack depth: 10312 bytes left [ 42.304484][ T3813] loop4: detected capacity change from 0 to 512 [ 42.349236][ T3817] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 42.349236][ T3817] program syz.1.57 not setting count and/or reply_len properly [ 42.391048][ T3821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.58'. [ 42.435906][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 42.489404][ T3827] loop1: detected capacity change from 0 to 1024 [ 42.496334][ T3827] EXT4-fs: inline encryption not supported [ 42.502406][ T3827] EXT4-fs: Ignoring removed nobh option [ 42.508027][ T3827] EXT4-fs: Ignoring removed bh option [ 42.537553][ T3827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.554453][ T3827] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.62: Allocating blocks 497-513 which overlap fs metadata [ 42.578284][ T3827] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.62: Allocating blocks 497-513 which overlap fs metadata [ 42.593549][ T3827] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.62: Allocating blocks 497-513 which overlap fs metadata [ 42.630945][ T3827] syz.1.62 (3827) used greatest stack depth: 10280 bytes left [ 42.749918][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.839969][ T3844] loop4: detected capacity change from 0 to 512 [ 42.850375][ T3844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.978122][ T3844] EXT4-fs (loop4): 1 truncate cleaned up [ 43.004125][ T3844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.554731][ T3844] Set syz1 is full, maxelem 65536 reached [ 43.606606][ T3859] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 43.628495][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.190360][ T3870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 44.199619][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 44.199683][ T29] audit: type=1400 audit(1760099367.275:353): avc: denied { create } for pid=3868 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.275263][ T29] audit: type=1400 audit(1760099367.375:354): avc: denied { ioctl } for pid=3868 comm="syz.3.72" path="socket:[5528]" dev="sockfs" ino=5528 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.312109][ T29] audit: type=1326 audit(1760099367.405:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 44.335399][ T29] audit: type=1326 audit(1760099367.405:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 44.358602][ T29] audit: type=1326 audit(1760099367.405:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 44.362786][ T3878] loop2: detected capacity change from 0 to 7 [ 44.381724][ T29] audit: type=1326 audit(1760099367.405:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 44.381761][ T29] audit: type=1326 audit(1760099367.405:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 44.381790][ T29] audit: type=1326 audit(1760099367.405:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 44.381879][ T29] audit: type=1326 audit(1760099367.405:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 44.636072][ T29] audit: type=1326 audit(1760099367.735:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 44.676104][ T3889] loop1: detected capacity change from 0 to 1024 [ 44.685959][ T3888] netlink: 'syz.2.76': attribute type 4 has an invalid length. [ 44.694286][ T3889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.753826][ T3888] netlink: 'syz.2.76': attribute type 4 has an invalid length. [ 44.869209][ T3889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.883260][ T3893] futex_wake_op: syz.4.79 tries to shift op by 144; fix this program [ 45.127868][ T3904] loop0: detected capacity change from 0 to 1024 [ 45.136562][ T3904] EXT4-fs: quotafile must be on filesystem root [ 45.149088][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.188689][ T3909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 45.375790][ T3909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.383237][ T3909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.399967][ T3909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.407462][ T3909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.574703][ T3915] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.581995][ T3915] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.698028][ T3921] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 45.707109][ T3923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.88'. [ 45.715935][ T3923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.88'. [ 45.788120][ T3929] FAULT_INJECTION: forcing a failure. [ 45.788120][ T3929] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.801372][ T3929] CPU: 1 UID: 0 PID: 3929 Comm: syz.2.89 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.801405][ T3929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 45.801418][ T3929] Call Trace: [ 45.801425][ T3929] [ 45.801433][ T3929] __dump_stack+0x1d/0x30 [ 45.801507][ T3929] dump_stack_lvl+0xe8/0x140 [ 45.801533][ T3929] dump_stack+0x15/0x1b [ 45.801550][ T3929] should_fail_ex+0x265/0x280 [ 45.801636][ T3929] should_fail+0xb/0x20 [ 45.801676][ T3929] should_fail_usercopy+0x1a/0x20 [ 45.801758][ T3929] _copy_from_user+0x1c/0xb0 [ 45.801786][ T3929] simple_transaction_get+0xe2/0x130 [ 45.801828][ T3929] selinux_transaction_write+0x9d/0x110 [ 45.801880][ T3929] ? __pfx_selinux_transaction_write+0x10/0x10 [ 45.801990][ T3929] vfs_write+0x266/0x960 [ 45.802015][ T3929] ? __cond_resched+0x4e/0x90 [ 45.802130][ T3929] ksys_write+0xda/0x1a0 [ 45.802162][ T3929] __x64_sys_write+0x40/0x50 [ 45.802301][ T3929] x64_sys_call+0x2802/0x3000 [ 45.802323][ T3929] do_syscall_64+0xd2/0x200 [ 45.802382][ T3929] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.802493][ T3929] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 45.802523][ T3929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.802572][ T3929] RIP: 0033:0x7f23ee6aeec9 [ 45.802591][ T3929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.802615][ T3929] RSP: 002b:00007f23ed117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.802651][ T3929] RAX: ffffffffffffffda RBX: 00007f23ee905fa0 RCX: 00007f23ee6aeec9 [ 45.802669][ T3929] RDX: 0000000000000ff7 RSI: 0000200000000580 RDI: 0000000000000003 [ 45.802684][ T3929] RBP: 00007f23ed117090 R08: 0000000000000000 R09: 0000000000000000 [ 45.802697][ T3929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.802708][ T3929] R13: 00007f23ee906038 R14: 00007f23ee905fa0 R15: 00007ffc83b41628 [ 45.802727][ T3929] [ 46.084921][ T3933] loop2: detected capacity change from 0 to 512 [ 46.092124][ T3933] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.099320][ T3933] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.110873][ T3933] EXT4-fs (loop2): 1 truncate cleaned up [ 46.117359][ T3933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.150180][ T31] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.169582][ T3933] EXT4-fs (loop2): shut down requested (2) [ 46.196691][ T3939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 46.215736][ T3933] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 46.224705][ T3933] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 46.280204][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.289550][ T3942] loop1: detected capacity change from 0 to 1024 [ 46.305648][ T31] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.468939][ T3942] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.492873][ T31] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.565305][ T3949] loop3: detected capacity change from 0 to 1024 [ 46.941481][ T3949] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.976616][ T31] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.990831][ T3952] loop0: detected capacity change from 0 to 512 [ 47.010995][ T3953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 47.020199][ T3953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.94'. [ 47.111776][ T3952] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 47.123381][ T3952] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 47.129315][ T3949] EXT4-fs error (device loop3): ext4_quota_enable:7136: comm syz.3.96: inode #3584: comm syz.3.96: iget: illegal inode # [ 47.133508][ T3952] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.97: Corrupt directory, running e2fsck is recommended [ 47.147264][ T3949] EXT4-fs error (device loop3): ext4_quota_enable:7139: comm syz.3.96: Bad quota inode: 3584, type: 2 [ 47.160030][ T3952] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 47.172612][ T3949] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=3584). Please run e2fsck to fix. [ 47.195529][ T3949] EXT4-fs (loop3): mount failed [ 47.200764][ T3952] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.97: corrupted in-inode xattr: invalid ea_ino [ 47.202380][ T3942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.218096][ T3952] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.97: couldn't read orphan inode 15 (err -117) [ 47.283360][ T3959] netlink: 'syz.4.99': attribute type 4 has an invalid length. [ 47.289519][ T3952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.317477][ T3959] netlink: 'syz.4.99': attribute type 4 has an invalid length. [ 47.335198][ T3952] EXT4-fs: Ignoring sb option on remount [ 47.341940][ T3952] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 47.352311][ T3952] EXT4-fs error (device loop0): __ext4_remount:6748: comm syz.0.97: Abort forced by user [ 47.362407][ T3952] EXT4-fs (loop0): Remounting filesystem read-only [ 47.368990][ T3952] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 47.379501][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.417290][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.488291][ T3973] loop1: detected capacity change from 0 to 512 [ 47.498684][ T3973] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.508442][ T3973] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.518795][ T3976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 47.538896][ T3973] EXT4-fs (loop1): 1 truncate cleaned up [ 47.548334][ T3973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.562454][ T3973] EXT4-fs (loop1): shut down requested (2) [ 47.569164][ T3973] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 47.585000][ T3973] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 47.618218][ T3982] loop4: detected capacity change from 0 to 512 [ 47.626460][ T3982] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 47.638353][ T3982] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 47.648547][ T3982] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.108: Corrupt directory, running e2fsck is recommended [ 47.662031][ T3982] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 47.670479][ T3982] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.108: corrupted in-inode xattr: invalid ea_ino [ 47.684491][ T3982] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.108: couldn't read orphan inode 15 (err -117) [ 47.697107][ T3982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.713616][ T3982] EXT4-fs error (device loop4): __ext4_remount:6748: comm syz.4.108: Abort forced by user [ 47.724326][ T3982] EXT4-fs (loop4): Remounting filesystem read-only [ 47.730990][ T3982] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 47.762043][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.772395][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.016301][ T4000] netlink: 'syz.1.114': attribute type 4 has an invalid length. [ 48.051149][ T3985] loop2: detected capacity change from 0 to 512 [ 48.107255][ T4003] netlink: 'syz.1.114': attribute type 4 has an invalid length. [ 48.117393][ T3985] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.152471][ T3985] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 48.203504][ T4008] netlink: 'syz.1.116': attribute type 4 has an invalid length. [ 48.212245][ T3985] EXT4-fs (loop2): 1 truncate cleaned up [ 48.223508][ T4008] netlink: 'syz.1.116': attribute type 4 has an invalid length. [ 48.240009][ T3985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.371507][ T4012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 48.472750][ T4012] loop0: detected capacity change from 0 to 164 [ 48.540495][ T4012] process 'syz.0.118' launched '/dev/fd/10' with NULL argv: empty string added [ 48.556379][ T4015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 48.624202][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.684360][ T4022] loop0: detected capacity change from 0 to 1024 [ 48.699002][ T4022] EXT4-fs: inline encryption not supported [ 48.709869][ T4024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 48.718956][ T4022] EXT4-fs: Ignoring removed nobh option [ 48.724583][ T4022] EXT4-fs: Ignoring removed bh option [ 48.747124][ T4022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.794919][ T4022] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.122: Allocating blocks 497-513 which overlap fs metadata [ 48.816841][ T4033] loop1: detected capacity change from 0 to 512 [ 48.844603][ T4033] ------------[ cut here ]------------ [ 48.850154][ T4033] EA inode 11 i_nlink=2 [ 48.850440][ T4033] WARNING: CPU: 1 PID: 4033 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 48.864741][ T4033] Modules linked in: [ 48.868684][ T4033] CPU: 1 UID: 0 PID: 4033 Comm: syz.1.124 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.878398][ T4033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 48.888533][ T4033] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 48.895195][ T4033] Code: 90 49 8d 7e 40 e8 e6 02 b9 ff 4d 8b 6e 40 4c 89 e7 e8 fa fd b8 ff 41 8b 56 48 48 c7 c7 5b 4e 55 86 4c 89 ee e8 c7 09 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 78 b0 03 0f 1f 84 00 00 00 00 00 [ 48.914912][ T4033] RSP: 0018:ffffc900013a75a0 EFLAGS: 00010246 [ 48.921021][ T4033] RAX: 0ab55f83d0a4ba00 RBX: ffff888119c36010 RCX: 0000000000080000 [ 48.929017][ T4033] RDX: ffffc90002302000 RSI: 0000000000003c13 RDI: 0000000000003c14 [ 48.937118][ T4033] RBP: 0000000000000002 R08: 0001c900013a7427 R09: 0000000000000000 [ 48.945188][ T4033] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119c35fc0 [ 48.953185][ T4033] R13: 000000000000000b R14: ffff888119c35f78 R15: 0000000000000001 [ 48.961195][ T4033] FS: 00007f68f9d5f6c0(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 48.970148][ T4033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.976778][ T4033] CR2: 00007f23ee8d12f8 CR3: 000000011a786000 CR4: 00000000003506f0 [ 48.984777][ T4033] Call Trace: [ 48.988093][ T4033] [ 48.991042][ T4033] ext4_xattr_set_entry+0x77f/0x1020 [ 48.996415][ T4033] ext4_xattr_ibody_set+0x184/0x3c0 [ 49.001676][ T4033] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 49.007539][ T4033] __ext4_expand_extra_isize+0x246/0x280 [ 49.013247][ T4033] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 49.018831][ T4033] ext4_evict_inode+0x80e/0xd90 [ 49.023811][ T4033] ? __pfx_ext4_evict_inode+0x10/0x10 [ 49.029229][ T4033] evict+0x2e3/0x550 [ 49.033244][ T4033] ? __dquot_initialize+0x146/0x7c0 [ 49.038513][ T4033] iput+0x4ed/0x650 [ 49.042348][ T4033] ext4_process_orphan+0x1a9/0x1c0 [ 49.047568][ T4033] ext4_orphan_cleanup+0x6a8/0xa00 [ 49.052764][ T4033] ext4_fill_super+0x3483/0x3810 [ 49.057861][ T4033] ? snprintf+0x86/0xb0 [ 49.062065][ T4033] ? set_blocksize+0x1a8/0x310 [ 49.066978][ T4033] ? sb_set_blocksize+0xe3/0x100 [ 49.071933][ T4033] ? setup_bdev_super+0x30e/0x370 [ 49.077011][ T4033] ? __pfx_ext4_fill_super+0x10/0x10 [ 49.082333][ T4033] get_tree_bdev_flags+0x291/0x300 [ 49.087508][ T4033] ? __pfx_ext4_fill_super+0x10/0x10 [ 49.092853][ T4033] get_tree_bdev+0x1f/0x30 [ 49.097336][ T4033] ext4_get_tree+0x1c/0x30 [ 49.101817][ T4033] vfs_get_tree+0x54/0x1d0 [ 49.106269][ T4033] do_new_mount+0x24d/0x660 [ 49.110969][ T4033] path_mount+0x4a5/0xb70 [ 49.115440][ T4033] ? user_path_at+0x109/0x130 [ 49.120157][ T4033] __se_sys_mount+0x28c/0x2e0 [ 49.124888][ T4033] __x64_sys_mount+0x67/0x80 [ 49.129560][ T4033] x64_sys_call+0x2b51/0x3000 [ 49.134271][ T4033] do_syscall_64+0xd2/0x200 [ 49.138893][ T4033] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.144984][ T4033] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 49.150904][ T4033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.156924][ T4033] RIP: 0033:0x7f68fb30066a [ 49.161354][ T4033] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.181081][ T4033] RSP: 002b:00007f68f9d5ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.189643][ T4033] RAX: ffffffffffffffda RBX: 00007f68f9d5eef0 RCX: 00007f68fb30066a [ 49.197647][ T4033] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f68f9d5eeb0 [ 49.205641][ T4033] RBP: 0000200000000180 R08: 00007f68f9d5eef0 R09: 0000000001800700 [ 49.213649][ T4033] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 49.221663][ T4033] R13: 00007f68f9d5eeb0 R14: 000000000000047c R15: 00002000000004c0 [ 49.229674][ T4033] [ 49.232700][ T4033] ---[ end trace 0000000000000000 ]--- [ 49.287253][ T4039] netlink: 'syz.4.126': attribute type 4 has an invalid length. [ 49.297530][ T4037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 49.298336][ T4033] EXT4-fs (loop1): 1 orphan inode deleted [ 49.321500][ T4039] netlink: 'syz.4.126': attribute type 4 has an invalid length. [ 49.337355][ T4033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.387377][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 49.387431][ T29] audit: type=1326 audit(1760099372.495:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 49.419574][ T4041] netlink: 'syz.2.127': attribute type 4 has an invalid length. [ 49.458932][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.470373][ T4042] netlink: 'syz.2.127': attribute type 4 has an invalid length. [ 49.511172][ T29] audit: type=1326 audit(1760099372.525:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 49.534614][ T29] audit: type=1326 audit(1760099372.525:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 49.557941][ T29] audit: type=1326 audit(1760099372.525:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 49.581443][ T29] audit: type=1326 audit(1760099372.525:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 49.604707][ T29] audit: type=1326 audit(1760099372.525:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 49.627949][ T29] audit: type=1326 audit(1760099372.525:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 49.651221][ T29] audit: type=1326 audit(1760099372.525:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 49.674510][ T29] audit: type=1326 audit(1760099372.525:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 49.697859][ T29] audit: type=1326 audit(1760099372.525:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 49.744023][ T4044] geneve2: entered promiscuous mode [ 49.749309][ T4044] geneve2: entered allmulticast mode [ 49.772119][ T3927] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 49.781205][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.795523][ T3927] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 49.822955][ T4048] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.854048][ T3927] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 49.870976][ T4055] pim6reg: entered allmulticast mode [ 49.886179][ T3927] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 49.894939][ T4058] loop4: detected capacity change from 0 to 512 [ 49.898019][ T4055] pim6reg: left allmulticast mode [ 49.919174][ T4058] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.947336][ T4061] loop0: detected capacity change from 0 to 1024 [ 49.954553][ T4061] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.970418][ T4058] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.989004][ T4048] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.991922][ T4058] EXT4-fs (loop4): 1 truncate cleaned up [ 50.005659][ T4058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.006361][ T4061] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm : Invalid block bitmap block 0 in block_group 0 [ 50.018030][ T4062] loop1: detected capacity change from 0 to 4096 [ 50.039117][ T4058] EXT4-fs (loop4): shut down requested (2) [ 50.045365][ T4061] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm : Failed to acquire dquot type 0 [ 50.081584][ T4061] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm : Freeing blocks not in datazone - block = 0, count = 4096 [ 50.087878][ T4068] futex_wake_op: syz.3.138 tries to shift op by 144; fix this program [ 50.095268][ T4058] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 50.113960][ T4048] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.127566][ T4062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.165607][ T4058] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 50.185339][ T4061] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm : Invalid inode bitmap blk 0 in block_group 0 [ 50.199929][ T4048] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.205339][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 50.258678][ T4061] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 50.274092][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.286333][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.316153][ T4061] EXT4-fs (loop0): 1 orphan inode deleted [ 50.322449][ T4061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.335335][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.343552][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.369766][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.397383][ T4075] loop4: detected capacity change from 0 to 1024 [ 50.435637][ T4075] EXT4-fs: inline encryption not supported [ 50.445517][ T4075] EXT4-fs: Ignoring removed nobh option [ 50.451124][ T4075] EXT4-fs: Ignoring removed bh option [ 50.461355][ T4061] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm : iget: bad extra_isize 65535 (inode size 256) [ 50.504451][ T4061] (4061) used greatest stack depth: 9680 bytes left [ 50.513494][ T4075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.535837][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.572530][ T4075] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.139: Allocating blocks 497-513 which overlap fs metadata [ 50.655822][ T4093] loop3: detected capacity change from 0 to 512 [ 50.666320][ T4093] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.676898][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.692496][ T4093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.726109][ T4093] EXT4-fs (loop3): 1 truncate cleaned up [ 50.762284][ T4093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.787788][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.837865][ T4093] EXT4-fs (loop3): shut down requested (2) [ 50.870664][ T4093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 50.895485][ T4093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 50.921501][ T4104] loop0: detected capacity change from 0 to 512 [ 50.944865][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.970512][ T4106] loop4: detected capacity change from 0 to 1024 [ 50.999664][ T4106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.036270][ T4106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.100735][ T4116] __nla_validate_parse: 4 callbacks suppressed [ 51.100751][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 51.116312][ T4116] netlink: 32 bytes leftover after parsing attributes in process `syz.3.155'. [ 51.175549][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.266997][ T4123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.156'. [ 51.326881][ T4128] loop2: detected capacity change from 0 to 512 [ 51.368250][ T4128] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.439662][ T4129] mmap: syz.4.160 (4129): VmData 29339648 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 51.455932][ T4128] EXT4-fs (loop2): 1 truncate cleaned up [ 51.466017][ T3386] IPVS: starting estimator thread 0... [ 51.480167][ T4135] 9pnet: Could not find request transport: tys/fs/binfmt_misc/register [ 51.491349][ T4128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.555341][ T4138] IPVS: using max 2448 ests per chain, 122400 per kthread [ 51.567929][ T4142] loop4: detected capacity change from 0 to 512 [ 51.620528][ T4142] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.162: corrupted inode contents [ 51.633094][ T4142] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #16: comm syz.4.162: mark_inode_dirty error [ 51.644711][ T4142] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.162: corrupted inode contents [ 51.658726][ T4142] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.162: mark_inode_dirty error [ 51.687594][ T4142] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.162: corrupted inode contents [ 51.699949][ T4142] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 51.720603][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.729889][ T4142] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.162: corrupted inode contents [ 51.748121][ T4142] EXT4-fs error (device loop4): ext4_truncate:4637: inode #16: comm syz.4.162: mark_inode_dirty error [ 51.773677][ T4149] loop2: detected capacity change from 0 to 512 [ 51.781972][ T4149] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 51.793823][ T4149] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 51.803955][ T4149] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.164: Corrupt directory, running e2fsck is recommended [ 51.817155][ T4149] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 51.825785][ T4149] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.164: corrupted in-inode xattr: invalid ea_ino [ 51.839825][ T4149] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.164: couldn't read orphan inode 15 (err -117) [ 51.853082][ T4149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.865421][ T4142] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 51.871282][ T4149] EXT4-fs: Ignoring sb option on remount [ 51.874945][ T4142] EXT4-fs (loop4): 1 truncate cleaned up [ 51.886058][ T4149] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 51.886120][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 51.896747][ T4142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.919409][ T4149] EXT4-fs error (device loop2): __ext4_remount:6748: comm syz.2.164: Abort forced by user [ 51.925930][ T4142] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.940475][ T4149] EXT4-fs (loop2): Remounting filesystem read-only [ 51.947054][ T4149] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 51.967452][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.977162][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.001111][ T4154] loop1: detected capacity change from 0 to 1024 [ 52.014823][ T4154] EXT4-fs: inline encryption not supported [ 52.032709][ T4154] EXT4-fs: Ignoring removed nobh option [ 52.038406][ T4154] EXT4-fs: Ignoring removed bh option [ 52.051532][ T4158] loop4: detected capacity change from 0 to 512 [ 52.052867][ T4154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.058775][ T4158] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.077834][ T4158] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.090917][ T4158] EXT4-fs (loop4): 1 truncate cleaned up [ 52.098328][ T4158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.115338][ T4158] EXT4-fs (loop4): shut down requested (2) [ 52.121605][ T4158] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 52.131560][ T4158] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 52.152034][ T4164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'. [ 52.161017][ T4164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'. [ 52.186220][ T4154] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.167: Allocating blocks 497-513 which overlap fs metadata [ 52.187661][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.252696][ T4175] loop0: detected capacity change from 0 to 512 [ 52.269358][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.343207][ T4186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 52.508200][ T4207] xt_TCPMSS: Only works on TCP SYN packets [ 52.552820][ T4207] syz.1.176 (4207) used greatest stack depth: 9112 bytes left [ 52.775193][ T4229] loop1: detected capacity change from 0 to 512 [ 52.795714][ T4229] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.850948][ T4229] EXT4-fs (loop1): 1 truncate cleaned up [ 52.868109][ T4229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.164139][ T4249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'. [ 53.173192][ T4249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'. [ 53.558115][ T4271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 53.674046][ T4229] Set syz1 is full, maxelem 65536 reached [ 53.721849][ T4279] loop2: detected capacity change from 0 to 512 [ 53.755607][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.857720][ T4289] loop1: detected capacity change from 0 to 512 [ 53.874674][ T3003] udevd[3003]: worker [3304] terminated by signal 33 (Unknown signal 33) [ 53.895506][ T4289] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.189: error while reading EA inode 32 err=-116 [ 53.956556][ T4289] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.189: error while reading EA inode 32 err=-116 [ 53.986794][ T4289] EXT4-fs (loop1): 1 orphan inode deleted [ 54.002187][ T4289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.128727][ T4342] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.189: unexpected EA_INODE flag [ 54.221679][ T4350] loop4: detected capacity change from 0 to 512 [ 54.382458][ T4350] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 54.394098][ T4350] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 54.404191][ T4350] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.186: Corrupt directory, running e2fsck is recommended [ 54.419424][ T4350] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 54.427734][ T4350] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.186: corrupted in-inode xattr: invalid ea_ino [ 54.441666][ T4350] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.186: couldn't read orphan inode 15 (err -117) [ 54.456511][ T4350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.474536][ T4350] EXT4-fs: Ignoring sb option on remount [ 54.480369][ T4350] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 54.485224][ T29] kauditd_printk_skb: 1926 callbacks suppressed [ 54.485257][ T29] audit: type=1326 audit(1760099377.485:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68fb2f5d67 code=0x7ffc0000 [ 54.489990][ T4350] EXT4-fs error (device loop4): __ext4_remount:6748: comm syz.4.186: Abort forced by user [ 54.496066][ T29] audit: type=1326 audit(1760099377.485:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68fb29af79 code=0x7ffc0000 [ 54.520071][ T4350] EXT4-fs (loop4): Remounting filesystem read-only [ 54.529179][ T29] audit: type=1326 audit(1760099377.485:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68fb2f5d67 code=0x7ffc0000 [ 54.529211][ T29] audit: type=1326 audit(1760099377.485:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68fb29af79 code=0x7ffc0000 [ 54.529237][ T29] audit: type=1326 audit(1760099377.485:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68fb2f5d67 code=0x7ffc0000 [ 54.552465][ T4350] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 54.559057][ T29] audit: type=1326 audit(1760099377.485:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68fb29af79 code=0x7ffc0000 [ 54.661056][ T29] audit: type=1326 audit(1760099377.485:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68fb2f5d67 code=0x7ffc0000 [ 54.684422][ T29] audit: type=1326 audit(1760099377.485:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68fb29af79 code=0x7ffc0000 [ 54.707977][ T29] audit: type=1326 audit(1760099377.485:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68fb2f5d67 code=0x7ffc0000 [ 54.731223][ T29] audit: type=1326 audit(1760099377.485:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68fb29af79 code=0x7ffc0000 [ 54.767663][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.777440][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.800226][ T4369] SELinux: Context system_u:object_r:ldconfig_exec_t:s0 is not valid (left unmapped). [ 54.811278][ T4367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'. [ 54.841726][ T4375] loop1: detected capacity change from 0 to 512 [ 54.848645][ T4375] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.856819][ T4375] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.872578][ T4375] EXT4-fs (loop1): 1 truncate cleaned up [ 54.885561][ T4375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.908240][ T4375] EXT4-fs (loop1): shut down requested (2) [ 54.914378][ T4375] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 54.923536][ T4375] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 54.954443][ T4386] validate_nla: 4 callbacks suppressed [ 54.954462][ T4386] netlink: '+}[@': attribute type 10 has an invalid length. [ 54.973097][ T4386] team0: Port device dummy0 added [ 54.990904][ T4392] loop0: detected capacity change from 0 to 1024 [ 55.000616][ T4392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.006008][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.042994][ T4392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.078668][ T4406] netlink: 'syz.2.211': attribute type 1 has an invalid length. [ 55.122192][ T4403] syzkaller0: entered promiscuous mode [ 55.127758][ T4403] syzkaller0: entered allmulticast mode [ 55.133477][ T4406] loop2: detected capacity change from 0 to 2048 [ 55.154679][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.169691][ T4411] loop4: detected capacity change from 0 to 512 [ 55.176828][ T4411] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.189810][ T4411] EXT4-fs (loop4): 1 truncate cleaned up [ 55.196030][ T4411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.216917][ T4406] loop2: unable to read partition table [ 55.222757][ T4406] loop2: partition table beyond EOD, truncated [ 55.229095][ T4406] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 55.278566][ T4421] loop1: detected capacity change from 0 to 512 [ 55.294562][ T4421] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.307602][ T4421] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.308594][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.354720][ T4421] EXT4-fs (loop1): 1 truncate cleaned up [ 55.360947][ T4421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.379190][ T4433] FAULT_INJECTION: forcing a failure. [ 55.379190][ T4433] name failslab, interval 1, probability 0, space 0, times 0 [ 55.391939][ T4433] CPU: 0 UID: 0 PID: 4433 Comm: syz.4.221 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.392034][ T4433] Tainted: [W]=WARN [ 55.392043][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 55.392074][ T4433] Call Trace: [ 55.392081][ T4433] [ 55.392087][ T4433] __dump_stack+0x1d/0x30 [ 55.392108][ T4433] dump_stack_lvl+0xe8/0x140 [ 55.392129][ T4433] dump_stack+0x15/0x1b [ 55.392145][ T4433] should_fail_ex+0x265/0x280 [ 55.392259][ T4433] should_failslab+0x8c/0xb0 [ 55.392291][ T4433] kmem_cache_alloc_noprof+0x50/0x480 [ 55.392404][ T4433] ? audit_log_start+0x342/0x720 [ 55.392424][ T4433] audit_log_start+0x342/0x720 [ 55.392451][ T4433] audit_seccomp+0x48/0x100 [ 55.392490][ T4433] ? __seccomp_filter+0x82d/0x1250 [ 55.392583][ T4433] __seccomp_filter+0x83e/0x1250 [ 55.392635][ T4433] ? save_fpregs_to_fpstate+0x100/0x160 [ 55.392675][ T4433] ? _raw_spin_unlock+0x26/0x50 [ 55.392737][ T4433] __secure_computing+0x82/0x150 [ 55.392771][ T4433] syscall_trace_enter+0xcf/0x1e0 [ 55.392802][ T4433] do_syscall_64+0xac/0x200 [ 55.392836][ T4433] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.392925][ T4433] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.392953][ T4433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.392976][ T4433] RIP: 0033:0x7f5de90daf79 [ 55.392991][ T4433] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 55.393063][ T4433] RSP: 002b:00007f5de7ba6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 55.393088][ T4433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5de90daf79 [ 55.393104][ T4433] RDX: 00007f5de7ba6a80 RSI: 00007f5de7ba6bb0 RDI: 0000000000000021 [ 55.393120][ T4433] RBP: 00007f5de7ba7090 R08: 0000000000000000 R09: 00007f5de7ba6df7 [ 55.393223][ T4433] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 55.393239][ T4433] R13: 00007f5de9396038 R14: 00007f5de9395fa0 R15: 00007fffb86c2eb8 [ 55.393329][ T4433] [ 55.628704][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.632413][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.636166][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.653233][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.660703][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.864062][ T4435] program syz.2.225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.921810][ T4452] netlink: '+}[@': attribute type 10 has an invalid length. [ 55.969985][ T4452] team0: Port device dummy0 added [ 56.002249][ T4435] loop2: detected capacity change from 0 to 512 [ 56.038404][ T4435] ext2: Unknown parameter 'mask' [ 56.051417][ T4459] loop1: detected capacity change from 0 to 512 [ 56.078537][ T4459] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.121731][ T4459] EXT4-fs (loop1): 1 truncate cleaned up [ 56.138119][ T4459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.182330][ T4467] loop0: detected capacity change from 0 to 512 [ 56.210387][ T4467] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.237: error while reading EA inode 32 err=-116 [ 56.223312][ T4467] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.237: error while reading EA inode 32 err=-116 [ 56.236327][ T4467] EXT4-fs (loop0): 1 orphan inode deleted [ 56.242583][ T4467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.261679][ T4472] FAULT_INJECTION: forcing a failure. [ 56.261679][ T4472] name failslab, interval 1, probability 0, space 0, times 0 [ 56.274459][ T4472] CPU: 0 UID: 0 PID: 4472 Comm: syz.2.239 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 56.274499][ T4472] Tainted: [W]=WARN [ 56.274508][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 56.274524][ T4472] Call Trace: [ 56.274532][ T4472] [ 56.274539][ T4472] __dump_stack+0x1d/0x30 [ 56.274627][ T4472] dump_stack_lvl+0xe8/0x140 [ 56.274685][ T4472] dump_stack+0x15/0x1b [ 56.274701][ T4472] should_fail_ex+0x265/0x280 [ 56.274847][ T4472] ? __pfx_resume_store+0x10/0x10 [ 56.274878][ T4472] should_failslab+0x8c/0xb0 [ 56.274905][ T4472] kmem_cache_alloc_noprof+0x50/0x480 [ 56.274934][ T4472] ? getname_kernel+0x3c/0x1f0 [ 56.274972][ T4472] ? __pfx_resume_store+0x10/0x10 [ 56.275051][ T4472] getname_kernel+0x3c/0x1f0 [ 56.275088][ T4472] kern_path+0x23/0x130 [ 56.275205][ T4472] ? __pfx_resume_store+0x10/0x10 [ 56.275232][ T4472] lookup_bdev+0x66/0x150 [ 56.275256][ T4472] resume_store+0x10b/0x3d0 [ 56.275282][ T4472] ? should_fail_ex+0xdb/0x280 [ 56.275316][ T4472] ? __pfx_resume_store+0x10/0x10 [ 56.275412][ T4472] kobj_attr_store+0x4a/0x70 [ 56.275455][ T4472] ? __pfx_kobj_attr_store+0x10/0x10 [ 56.275505][ T4472] sysfs_kf_write+0xfb/0x120 [ 56.275528][ T4472] ? __pfx_sysfs_kf_write+0x10/0x10 [ 56.275549][ T4472] kernfs_fop_write_iter+0x1e8/0x300 [ 56.275585][ T4472] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 56.275675][ T4472] vfs_write+0x527/0x960 [ 56.275705][ T4472] ksys_write+0xda/0x1a0 [ 56.275736][ T4472] __x64_sys_write+0x40/0x50 [ 56.275761][ T4472] x64_sys_call+0x2802/0x3000 [ 56.275797][ T4472] do_syscall_64+0xd2/0x200 [ 56.275821][ T4472] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.275850][ T4472] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.275907][ T4472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.275929][ T4472] RIP: 0033:0x7f23ee6aeec9 [ 56.275945][ T4472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.275964][ T4472] RSP: 002b:00007f23ed117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.276023][ T4472] RAX: ffffffffffffffda RBX: 00007f23ee905fa0 RCX: 00007f23ee6aeec9 [ 56.276036][ T4472] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 56.276049][ T4472] RBP: 00007f23ed117090 R08: 0000000000000000 R09: 0000000000000000 [ 56.276061][ T4472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.276143][ T4472] R13: 00007f23ee906038 R14: 00007f23ee905fa0 R15: 00007ffc83b41628 [ 56.276162][ T4472] [ 56.529521][ T4467] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.237: unexpected EA_INODE flag [ 56.613462][ T4480] loop1: detected capacity change from 0 to 1024 [ 56.621594][ T4480] EXT4-fs: inline encryption not supported [ 56.633407][ T4480] EXT4-fs: Ignoring removed nobh option [ 56.639172][ T4480] EXT4-fs: Ignoring removed bh option [ 56.680967][ T4480] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.243: Allocating blocks 497-513 which overlap fs metadata [ 56.707780][ T4486] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 56.714391][ T4486] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.722085][ T4486] vhci_hcd vhci_hcd.0: Device attached [ 56.763981][ T4489] pimreg: entered allmulticast mode [ 56.782721][ T4482] pimreg: left allmulticast mode [ 56.796262][ T4492] futex_wake_op: syz.1.246 tries to shift op by 144; fix this program [ 56.916355][ T4502] netlink: 'syz.0.249': attribute type 4 has an invalid length. [ 56.935455][ T4502] netlink: 'syz.0.249': attribute type 4 has an invalid length. [ 56.964451][ T4450] loop4: detected capacity change from 0 to 128 [ 56.971720][ T4450] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.975239][ T3556] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 56.984118][ T4450] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.992822][ T4504] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.006462][ T4506] loop0: detected capacity change from 0 to 512 [ 57.017417][ T4506] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.030748][ T4508] pim6reg: entered allmulticast mode [ 57.036815][ T4508] __nla_validate_parse: 14 callbacks suppressed [ 57.036829][ T4508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.250'. [ 57.037996][ T4506] EXT4-fs (loop0): 1 truncate cleaned up [ 57.043337][ T4508] pim6reg: left allmulticast mode [ 57.085807][ T4504] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.129038][ T4515] loop4: detected capacity change from 0 to 512 [ 57.152439][ T4515] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.252: error while reading EA inode 32 err=-116 [ 57.153191][ T4504] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.181158][ T4515] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.252: error while reading EA inode 32 err=-116 [ 57.215691][ T4515] EXT4-fs (loop4): 1 orphan inode deleted [ 57.235474][ T4515] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.252: unexpected EA_INODE flag [ 57.265960][ T4504] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.387092][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.429712][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.445279][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.460196][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.468906][ T4528] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 57.475562][ T4528] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.483076][ T4528] vhci_hcd vhci_hcd.0: Device attached [ 57.500489][ T4529] usbip_core: unknown command [ 57.505253][ T4529] vhci_hcd: unknown pdu 2844066640 [ 57.510395][ T4529] usbip_core: unknown command [ 57.524498][ T4528] : renamed from vlan0 (while UP) [ 57.538908][ T31] vhci_hcd: stop threads [ 57.543204][ T31] vhci_hcd: release socket [ 57.547674][ T31] vhci_hcd: disconnect device [ 57.554077][ T4531] futex_wake_op: syz.4.257 tries to shift op by 144; fix this program [ 57.638382][ T4506] Set syz1 is full, maxelem 65536 reached [ 57.675834][ T4487] vhci_hcd: connection reset by peer [ 57.681299][ T37] vhci_hcd: stop threads [ 57.685636][ T37] vhci_hcd: release socket [ 57.690107][ T37] vhci_hcd: disconnect device [ 57.809237][ T4541] netlink: 'syz.4.261': attribute type 4 has an invalid length. [ 57.820197][ T4541] netlink: 'syz.4.261': attribute type 4 has an invalid length. [ 57.854697][ T4545] loop0: detected capacity change from 0 to 1024 [ 57.862091][ T4545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.890838][ T4549] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 57.898701][ T4549] netlink: 224 bytes leftover after parsing attributes in process `syz.4.264'. [ 57.954325][ T4554] loop3: detected capacity change from 0 to 1024 [ 57.961805][ T4554] EXT4-fs: inline encryption not supported [ 57.967870][ T4554] EXT4-fs: Ignoring removed nobh option [ 57.973512][ T4554] EXT4-fs: Ignoring removed bh option [ 57.992678][ T4554] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.266: Allocating blocks 497-513 which overlap fs metadata [ 58.062282][ T4562] netlink: 'syz.3.268': attribute type 4 has an invalid length. [ 58.070258][ T4551] program syz.0.265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.085417][ T4564] loop4: detected capacity change from 0 to 128 [ 58.144580][ T4575] loop0: detected capacity change from 0 to 512 [ 58.163767][ T4575] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.208481][ T4583] loop2: detected capacity change from 0 to 512 [ 58.219501][ T4585] loop3: detected capacity change from 0 to 512 [ 58.233985][ T4585] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 58.240964][ T4583] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.245848][ T4585] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 58.262218][ T4585] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.277: Corrupt directory, running e2fsck is recommended [ 58.265031][ T4583] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.275286][ T4585] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 58.293183][ T4585] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.277: corrupted in-inode xattr: invalid ea_ino [ 58.305508][ T4583] EXT4-fs (loop2): 1 truncate cleaned up [ 58.306735][ T4585] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.277: couldn't read orphan inode 15 (err -117) [ 58.332191][ T4585] EXT4-fs error (device loop3): __ext4_remount:6748: comm syz.3.277: Abort forced by user [ 58.342320][ T4585] EXT4-fs (loop3): Remounting filesystem read-only [ 58.348991][ T4585] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 58.359816][ T4592] loop1: detected capacity change from 0 to 1024 [ 58.369956][ T4592] EXT4-fs: inline encryption not supported [ 58.378712][ T4593] loop0: detected capacity change from 0 to 512 [ 58.385915][ T4592] EXT4-fs: Ignoring removed nobh option [ 58.391584][ T4592] EXT4-fs: Ignoring removed bh option [ 58.405672][ T4593] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 58.417402][ T4593] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 58.420157][ T4598] netlink: 'syz.3.281': attribute type 4 has an invalid length. [ 58.427629][ T4593] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.278: Corrupt directory, running e2fsck is recommended [ 58.448332][ T4593] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 58.456650][ T4602] program syz.3.284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.466893][ T4593] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.278: corrupted in-inode xattr: invalid ea_ino [ 58.482444][ T4593] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.278: couldn't read orphan inode 15 (err -117) [ 58.486438][ T4592] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.280: Allocating blocks 497-513 which overlap fs metadata [ 58.524340][ T4593] EXT4-fs error (device loop0): __ext4_remount:6748: comm syz.0.278: Abort forced by user [ 58.534502][ T4593] EXT4-fs (loop0): Remounting filesystem read-only [ 58.541196][ T4593] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 58.578220][ T4613] usb usb9: usbfs: process 4613 (syz.2.290) did not claim interface 0 before use [ 58.591102][ T4613] loop2: detected capacity change from 0 to 512 [ 58.598406][ T4612] vhci_hcd: invalid port number 255 [ 58.603692][ T4612] vhci_hcd: default hub control req: 8012 v0303 i00ff l0 [ 58.610923][ T4613] EXT4-fs: Ignoring removed orlov option [ 58.613348][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 58.618903][ T4613] ext4: Unknown parameter 'euid' [ 58.643302][ T4613] loop2: detected capacity change from 0 to 512 [ 58.650054][ T4613] ext4: Unknown parameter 'euid' [ 58.658417][ T4613] tmpfs: Bad value for 'nr_inodes' [ 58.699383][ T4625] loop1: detected capacity change from 0 to 512 [ 58.706494][ T4625] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.723172][ T4624] syz.4.293 uses obsolete (PF_INET,SOCK_PACKET) [ 58.732749][ T4625] EXT4-fs (loop1): 1 truncate cleaned up [ 58.752369][ T4631] program syz.3.295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.874006][ T4638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 59.012951][ T4650] macvtap0: entered promiscuous mode [ 59.021377][ T4644] vhci_hcd: invalid port number 96 [ 59.024026][ T4652] SELinux: policydb version 0 does not match my version range 15-35 [ 59.026610][ T4644] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 59.041738][ T4650] macvtap0: left promiscuous mode [ 59.049748][ T4652] SELinux: failed to load policy [ 59.119492][ T4656] loop4: detected capacity change from 0 to 164 [ 59.132792][ T4656] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 59.149297][ T4656] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 59.163451][ T4656] Symlink component flag not implemented [ 59.169177][ T4656] Symlink component flag not implemented [ 59.198160][ T4656] Symlink component flag not implemented (7) [ 59.204227][ T4656] Symlink component flag not implemented (116) [ 59.228980][ T4663] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.277414][ T4660] loop1: detected capacity change from 0 to 4096 [ 59.392770][ T4675] loop4: detected capacity change from 0 to 512 [ 59.399888][ T4675] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.414490][ T4675] EXT4-fs (loop4): 1 truncate cleaned up [ 59.433682][ T4679] loop2: detected capacity change from 0 to 512 [ 59.440610][ T4679] EXT4-fs: Ignoring removed orlov option [ 59.465326][ T4679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.477757][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 59.622528][ T4683] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 59.636683][ T4679] EXT4-fs (loop2): orphan cleanup on readonly fs [ 59.661016][ T4679] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.313: bg 0: block 248: padding at end of block bitmap is not set [ 59.709323][ T4679] __quota_error: 5115 callbacks suppressed [ 59.709340][ T4679] Quota error (device loop2): write_blk: dquota write failed [ 59.722676][ T4679] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 59.732692][ T4679] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.313: Failed to acquire dquot type 1 [ 59.752084][ T29] audit: type=1400 audit(1760099383.856:7690): avc: denied { write } for pid=4687 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.773353][ T4679] EXT4-fs (loop2): 1 truncate cleaned up [ 59.785604][ T29] audit: type=1400 audit(1760099383.886:7691): avc: denied { append } for pid=4689 comm="syz.3.316" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.818306][ T29] audit: type=1400 audit(1760099383.926:7692): avc: denied { firmware_load } for pid=4678 comm="syz.2.313" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 59.869891][ C0] hrtimer: interrupt took 28190 ns [ 59.876496][ T29] audit: type=1400 audit(1760099383.946:7693): avc: denied { listen } for pid=4689 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.990174][ T29] audit: type=1400 audit(1760099384.096:7694): avc: denied { create } for pid=4702 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 60.024773][ T4703] dummy0: entered promiscuous mode [ 60.043129][ T4703] bond_slave_0: entered promiscuous mode [ 60.048931][ T4703] bond_slave_0: left promiscuous mode [ 60.055665][ T29] audit: type=1400 audit(1760099384.146:7695): avc: denied { write } for pid=4702 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 60.078720][ T4706] loop2: detected capacity change from 0 to 512 [ 60.088110][ T4706] EXT4-fs: inline encryption not supported [ 60.096075][ T4675] Set syz1 is full, maxelem 65536 reached [ 60.102075][ T29] audit: type=1400 audit(1760099384.186:7696): avc: denied { mounton } for pid=4701 comm="syz.2.317" path="/67/file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.107268][ T4706] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.137879][ T4703] dummy0: left promiscuous mode [ 60.146634][ T4706] EXT4-fs (loop2): 1 truncate cleaned up [ 60.152938][ T4707] macsec0: entered allmulticast mode [ 60.168371][ T4713] FAULT_INJECTION: forcing a failure. [ 60.168371][ T4713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.181766][ T4713] CPU: 0 UID: 0 PID: 4713 Comm: syz.1.321 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 60.181821][ T4713] Tainted: [W]=WARN [ 60.181827][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 60.181839][ T4713] Call Trace: [ 60.181844][ T4713] [ 60.181850][ T4713] __dump_stack+0x1d/0x30 [ 60.181881][ T4713] dump_stack_lvl+0xe8/0x140 [ 60.181946][ T4713] dump_stack+0x15/0x1b [ 60.181960][ T4713] should_fail_ex+0x265/0x280 [ 60.181997][ T4713] should_fail+0xb/0x20 [ 60.182035][ T4713] should_fail_usercopy+0x1a/0x20 [ 60.182054][ T4713] _copy_to_user+0x20/0xa0 [ 60.182076][ T4713] simple_read_from_buffer+0xb5/0x130 [ 60.182153][ T4713] proc_fail_nth_read+0x10e/0x150 [ 60.182247][ T4713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.182274][ T4713] vfs_read+0x1a5/0x770 [ 60.182293][ T4713] ? __rcu_read_unlock+0x4f/0x70 [ 60.182316][ T4713] ? __fget_files+0x184/0x1c0 [ 60.182362][ T4713] ksys_read+0xda/0x1a0 [ 60.182383][ T4713] __x64_sys_read+0x40/0x50 [ 60.182406][ T4713] x64_sys_call+0x27c0/0x3000 [ 60.182425][ T4713] do_syscall_64+0xd2/0x200 [ 60.182519][ T4713] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.182622][ T4713] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.182678][ T4713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.182696][ T4713] RIP: 0033:0x7f68fb2fd8dc [ 60.182710][ T4713] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.182725][ T4713] RSP: 002b:00007f68f9d5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.182741][ T4713] RAX: ffffffffffffffda RBX: 00007f68fb555fa0 RCX: 00007f68fb2fd8dc [ 60.182763][ T4713] RDX: 000000000000000f RSI: 00007f68f9d5f0a0 RDI: 0000000000000004 [ 60.182774][ T4713] RBP: 00007f68f9d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.182784][ T4713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.182828][ T4713] R13: 00007f68fb556038 R14: 00007f68fb555fa0 R15: 00007ffeacb6cc58 [ 60.182845][ T4713] [ 60.393043][ T4706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.317'. [ 60.403207][ T4716] validate_nla: 3 callbacks suppressed [ 60.403224][ T4716] netlink: 'syz.3.322': attribute type 4 has an invalid length. [ 60.420881][ T29] audit: type=1400 audit(1760099384.526:7697): avc: denied { read } for pid=4717 comm="syz.0.323" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 60.444833][ T4715] netlink: 'syz.3.322': attribute type 4 has an invalid length. [ 60.549090][ T4728] loop1: detected capacity change from 0 to 512 [ 60.594924][ T4728] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.624042][ T4730] loop3: detected capacity change from 0 to 512 [ 60.642642][ T4728] EXT4-fs (loop1): 1 truncate cleaned up [ 60.946937][ T4737] FAULT_INJECTION: forcing a failure. [ 60.946937][ T4737] name failslab, interval 1, probability 0, space 0, times 0 [ 60.959704][ T4737] CPU: 1 UID: 0 PID: 4737 Comm: syz.4.327 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 60.959748][ T4737] Tainted: [W]=WARN [ 60.959757][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 60.959801][ T4737] Call Trace: [ 60.959807][ T4737] [ 60.959861][ T4737] __dump_stack+0x1d/0x30 [ 60.959889][ T4737] dump_stack_lvl+0xe8/0x140 [ 60.959915][ T4737] dump_stack+0x15/0x1b [ 60.959937][ T4737] should_fail_ex+0x265/0x280 [ 60.960046][ T4737] should_failslab+0x8c/0xb0 [ 60.960082][ T4737] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 60.960163][ T4737] ? sidtab_sid2str_get+0xa0/0x130 [ 60.960267][ T4737] kmemdup_noprof+0x2b/0x70 [ 60.960293][ T4737] sidtab_sid2str_get+0xa0/0x130 [ 60.960321][ T4737] security_sid_to_context_core+0x1eb/0x2e0 [ 60.960424][ T4737] security_sid_to_context+0x27/0x40 [ 60.960457][ T4737] selinux_lsmprop_to_secctx+0x67/0xf0 [ 60.960522][ T4737] security_lsmprop_to_secctx+0x1a0/0x1c0 [ 60.960571][ T4737] audit_log_subj_ctx+0xa4/0x3e0 [ 60.960595][ T4737] ? skb_put+0xa9/0xf0 [ 60.960629][ T4737] audit_log_task_context+0x48/0x70 [ 60.960735][ T4737] audit_log_task+0xf4/0x250 [ 60.960775][ T4737] ? kstrtouint+0x76/0xc0 [ 60.960818][ T4737] audit_seccomp+0x61/0x100 [ 60.960856][ T4737] ? __seccomp_filter+0x82d/0x1250 [ 60.960963][ T4737] __seccomp_filter+0x83e/0x1250 [ 60.960999][ T4737] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.961047][ T4737] ? vfs_write+0x7e8/0x960 [ 60.961132][ T4737] ? __rcu_read_unlock+0x4f/0x70 [ 60.961164][ T4737] ? __fget_files+0x184/0x1c0 [ 60.961203][ T4737] __secure_computing+0x82/0x150 [ 60.961236][ T4737] syscall_trace_enter+0xcf/0x1e0 [ 60.961341][ T4737] do_syscall_64+0xac/0x200 [ 60.961366][ T4737] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.961392][ T4737] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.961443][ T4737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.961472][ T4737] RIP: 0033:0x7f5de913eec9 [ 60.961495][ T4737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.961513][ T4737] RSP: 002b:00007f5de7b86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 60.961537][ T4737] RAX: ffffffffffffffda RBX: 00007f5de9396090 RCX: 00007f5de913eec9 [ 60.961554][ T4737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.961570][ T4737] RBP: 00007f5de7b86090 R08: 0000000000000000 R09: 0000000000000000 [ 60.961587][ T4737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.961669][ T4737] R13: 00007f5de9396128 R14: 00007f5de9396090 R15: 00007fffb86c2eb8 [ 60.961695][ T4737] [ 61.398799][ T4742] FAULT_INJECTION: forcing a failure. [ 61.398799][ T4742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.411942][ T4742] CPU: 1 UID: 0 PID: 4742 Comm: syz.4.329 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 61.411984][ T4742] Tainted: [W]=WARN [ 61.412055][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.412069][ T4742] Call Trace: [ 61.412075][ T4742] [ 61.412082][ T4742] __dump_stack+0x1d/0x30 [ 61.412105][ T4742] dump_stack_lvl+0xe8/0x140 [ 61.412151][ T4742] dump_stack+0x15/0x1b [ 61.412169][ T4742] should_fail_ex+0x265/0x280 [ 61.412271][ T4742] should_fail+0xb/0x20 [ 61.412315][ T4742] should_fail_usercopy+0x1a/0x20 [ 61.412341][ T4742] _copy_from_user+0x1c/0xb0 [ 61.412372][ T4742] copy_from_sockptr+0x5e/0xa0 [ 61.412409][ T4742] do_tcp_getsockopt+0x15b2/0x1af0 [ 61.412449][ T4742] ? _parse_integer+0x27/0x40 [ 61.412484][ T4742] ? __rcu_read_unlock+0x4f/0x70 [ 61.412546][ T4742] ? avc_has_perm_noaudit+0x1b1/0x200 [ 61.412652][ T4742] ? avc_has_perm+0xf7/0x180 [ 61.412686][ T4742] tcp_getsockopt+0x6e/0xe0 [ 61.412721][ T4742] sock_common_getsockopt+0x5d/0x70 [ 61.412748][ T4742] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 61.412788][ T4742] do_sock_getsockopt+0x200/0x240 [ 61.412818][ T4742] __x64_sys_getsockopt+0x11e/0x1a0 [ 61.412857][ T4742] x64_sys_call+0x2bca/0x3000 [ 61.412880][ T4742] do_syscall_64+0xd2/0x200 [ 61.412970][ T4742] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.413004][ T4742] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 61.413025][ T4742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.413051][ T4742] RIP: 0033:0x7f5de913eec9 [ 61.413093][ T4742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.413169][ T4742] RSP: 002b:00007f5de7ba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 61.413190][ T4742] RAX: ffffffffffffffda RBX: 00007f5de9395fa0 RCX: 00007f5de913eec9 [ 61.413207][ T4742] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 61.413222][ T4742] RBP: 00007f5de7ba7090 R08: 0000200000000140 R09: 0000000000000000 [ 61.413238][ T4742] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 61.413254][ T4742] R13: 00007f5de9396038 R14: 00007f5de9395fa0 R15: 00007fffb86c2eb8 [ 61.413282][ T4742] [ 61.741454][ T4720] Set syz1 is full, maxelem 65536 reached [ 61.853947][ T4748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 61.879653][ T4748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.887152][ T4748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.913884][ T4748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.921471][ T4748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.019348][ T3556] usb 5-1: enqueue for inactive port 0 [ 62.098663][ T4763] loop1: detected capacity change from 0 to 512 [ 62.111508][ T4756] loop4: detected capacity change from 0 to 1024 [ 62.135968][ T4756] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.147335][ T4763] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.161135][ T4756] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.337: Invalid block bitmap block 0 in block_group 0 [ 62.183880][ T4756] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.337: Failed to acquire dquot type 0 [ 62.251658][ T4763] EXT4-fs (loop1): 1 truncate cleaned up [ 62.317962][ T4756] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.337: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.347182][ T4756] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.337: Invalid inode bitmap blk 0 in block_group 0 [ 62.360713][ T4756] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 62.369534][ T3927] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 0 [ 62.403999][ T4771] Driver unsupported XDP return value 0 on prog (id 207) dev N/A, expect packet loss! [ 62.421177][ T4756] EXT4-fs (loop4): 1 orphan inode deleted [ 62.526491][ T4771] loop2: detected capacity change from 0 to 2048 [ 62.572808][ T4775] loop0: detected capacity change from 0 to 256 [ 62.580539][ T4775] vfat: Unknown parameter 'nonumtaǐKn) l' [ 62.605634][ T4771] loop2: p2 < > p3 < p5 > p4 [ 62.605649][ T4771] loop2: partition table partially beyond EOD, truncated [ 62.605702][ T4771] loop2: p2 start 4278190080 is beyond EOD, truncated [ 62.616156][ T4771] loop2: p4 size 8192 extends beyond EOD, truncated [ 62.618073][ T4771] loop2: p5 size 8192 extends beyond EOD, truncated [ 62.657439][ T4776] geneve2: entered promiscuous mode [ 62.657455][ T4776] geneve2: entered allmulticast mode [ 62.796177][ T4781] netlink: 'syz.2.346': attribute type 4 has an invalid length. [ 62.897251][ T4787] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.922088][ T3556] usb 5-1: enqueue for inactive port 0 [ 62.949530][ T4792] pim6reg: entered allmulticast mode [ 62.973386][ T4791] loop1: detected capacity change from 0 to 512 [ 62.982500][ T4789] futex_wake_op: syz.4.343 tries to shift op by 144; fix this program [ 62.992749][ T4792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.349'. [ 63.005089][ T3556] vhci_hcd: vhci_device speed not set [ 63.016684][ T4787] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.067420][ T4795] pim6reg: left allmulticast mode [ 63.106721][ T4787] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.173627][ T4785] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:54112 [ 63.180412][ T4803] netlink: 'syz.4.351': attribute type 4 has an invalid length. [ 63.236528][ T4787] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.246946][ T4804] netlink: 'syz.4.351': attribute type 4 has an invalid length. [ 63.247209][ T4785] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 63.330508][ T4806] loop4: detected capacity change from 0 to 512 [ 63.331297][ T312] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.363360][ T312] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.387743][ T312] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.407059][ T4806] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.417987][ T4806] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.433587][ T312] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.456498][ T4806] EXT4-fs (loop4): 1 truncate cleaned up [ 63.464817][ T4808] netlink: 3 bytes leftover after parsing attributes in process `syz.1.353'. [ 63.476132][ T4806] EXT4-fs (loop4): shut down requested (2) [ 63.485879][ T4808] batadv0: entered promiscuous mode [ 63.491146][ T4808] batadv0: entered allmulticast mode [ 63.656458][ T4817] syzkaller0: entered promiscuous mode [ 63.662014][ T4817] syzkaller0: entered allmulticast mode [ 63.703064][ T4821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.357'. [ 63.724486][ T4826] loop3: detected capacity change from 0 to 512 [ 63.825814][ T4826] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 63.837452][ T4826] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 63.847561][ T4826] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.360: Corrupt directory, running e2fsck is recommended [ 63.860714][ T4826] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 63.869245][ T4826] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.360: corrupted in-inode xattr: invalid ea_ino [ 63.882938][ T4826] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.360: couldn't read orphan inode 15 (err -117) [ 63.909894][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 63.921212][ T4826] EXT4-fs error (device loop3): __ext4_remount:6748: comm syz.3.360: Abort forced by user [ 63.923773][ T4831] loop1: detected capacity change from 0 to 512 [ 63.931466][ T4826] EXT4-fs (loop3): Remounting filesystem read-only [ 63.944169][ T4826] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 63.984763][ T4831] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 63.996351][ T4831] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 64.006549][ T4831] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.362: Corrupt directory, running e2fsck is recommended [ 64.019756][ T4831] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 64.031355][ T4831] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.362: corrupted in-inode xattr: invalid ea_ino [ 64.045366][ T4831] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.362: couldn't read orphan inode 15 (err -117) [ 64.067772][ T4831] EXT4-fs: Ignoring sb option on remount [ 64.075437][ T4840] netlink: 'syz.4.365': attribute type 4 has an invalid length. [ 64.078017][ T4837] futex_wake_op: syz.2.364 tries to shift op by 144; fix this program [ 64.090460][ T4842] loop3: detected capacity change from 0 to 1024 [ 64.092624][ T4831] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 64.107876][ T4831] EXT4-fs error (device loop1): __ext4_remount:6748: comm syz.1.362: Abort forced by user [ 64.118115][ T4831] EXT4-fs (loop1): Remounting filesystem read-only [ 64.124624][ T4831] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 64.125855][ T4842] EXT4-fs: inline encryption not supported [ 64.150251][ T4842] EXT4-fs: Ignoring removed nobh option [ 64.155906][ T4842] EXT4-fs: Ignoring removed bh option [ 64.216732][ T4847] netlink: 3 bytes leftover after parsing attributes in process `syz.2.368'. [ 64.228887][ T4847] batadv0: entered promiscuous mode [ 64.234132][ T4847] batadv0: entered allmulticast mode [ 64.296339][ T4863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'. [ 64.304891][ T4867] netlink: 'syz.1.377': attribute type 4 has an invalid length. [ 64.339893][ T4871] futex_wake_op: syz.3.379 tries to shift op by 144; fix this program [ 64.357398][ T4876] loop1: detected capacity change from 0 to 512 [ 64.364841][ T4876] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.387099][ T4876] EXT4-fs (loop1): 1 truncate cleaned up [ 64.404437][ T4874] loop4: detected capacity change from 0 to 1024 [ 64.420116][ T4874] EXT4-fs: Ignoring removed nobh option [ 64.425801][ T4874] EXT4-fs: Ignoring removed bh option [ 64.432960][ T4876] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.1.381: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 64.454026][ T4876] EXT4-fs (loop1): Remounting filesystem read-only [ 64.460609][ T4876] EXT4-fs warning (device loop1): ext4_rename_delete:3731: inode #2: comm syz.1.381: Deleting old file: nlink 5, error=-117 [ 64.517382][ T4871] loop3: detected capacity change from 0 to 32768 [ 64.588947][ T4891] loop2: detected capacity change from 0 to 512 [ 64.596450][ T4891] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.616676][ T4891] EXT4-fs (loop2): 1 truncate cleaned up [ 64.663644][ T4899] loop1: detected capacity change from 0 to 764 [ 64.665589][ T4897] netlink: 'syz.3.387': attribute type 4 has an invalid length. [ 64.678013][ T4899] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 64.704677][ T4899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 64.717743][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 64.717761][ T29] audit: type=1326 audit(1760099388.826:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 64.747819][ T4901] netlink: 'syz.3.387': attribute type 4 has an invalid length. [ 64.765399][ T4899] Symlink component flag not implemented [ 64.773537][ T29] audit: type=1326 audit(1760099388.826:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 64.797328][ T4899] Symlink component flag not implemented (7) [ 64.804407][ T4899] Symlink component flag not implemented (7) [ 64.810732][ T4899] Symlink component flag not implemented (7) [ 64.817565][ T4905] netlink: 'syz.3.391': attribute type 4 has an invalid length. [ 64.857693][ T29] audit: type=1326 audit(1760099388.966:8021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 64.881193][ T29] audit: type=1326 audit(1760099388.966:8022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 64.932018][ T4921] futex_wake_op: syz.2.398 tries to shift op by 144; fix this program [ 64.962079][ T4914] No source specified [ 64.973868][ T29] audit: type=1326 audit(1760099389.016:8023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 64.997163][ T29] audit: type=1326 audit(1760099389.016:8024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 65.020578][ T29] audit: type=1326 audit(1760099389.016:8025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 65.023286][ T4932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.402'. [ 65.044208][ T29] audit: type=1326 audit(1760099389.016:8026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 65.076503][ T29] audit: type=1326 audit(1760099389.016:8027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 65.100494][ T29] audit: type=1326 audit(1760099389.016:8028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954c4eec9 code=0x7ffc0000 [ 65.139712][ T4932] netlink: 204 bytes leftover after parsing attributes in process `syz.1.402'. [ 65.195539][ T4943] loop0: detected capacity change from 0 to 512 [ 65.210936][ T4946] loop1: detected capacity change from 0 to 1024 [ 65.220107][ T4943] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 65.231900][ T4943] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 65.232243][ T4946] EXT4-fs: inline encryption not supported [ 65.242132][ T4943] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.406: Corrupt directory, running e2fsck is recommended [ 65.248041][ T4946] EXT4-fs: Ignoring removed nobh option [ 65.266603][ T4946] EXT4-fs: Ignoring removed bh option [ 65.272817][ T4943] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 65.285204][ T4943] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.406: corrupted in-inode xattr: invalid ea_ino [ 65.299036][ T4943] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.406: couldn't read orphan inode 15 (err -117) [ 65.341126][ T4943] EXT4-fs: Ignoring sb option on remount [ 65.347944][ T4955] loop3: detected capacity change from 0 to 512 [ 65.356316][ T4955] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 65.367909][ T4955] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 65.378147][ T4955] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.411: Corrupt directory, running e2fsck is recommended [ 65.391799][ T4955] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 65.400187][ T4955] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.411: corrupted in-inode xattr: invalid ea_ino [ 65.415367][ T4955] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.411: couldn't read orphan inode 15 (err -117) [ 65.424220][ T4943] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 65.446073][ T4943] EXT4-fs error (device loop0): __ext4_remount:6748: comm syz.0.406: Abort forced by user [ 65.460402][ T4955] EXT4-fs error (device loop3): __ext4_remount:6748: comm syz.3.411: Abort forced by user [ 65.472433][ T4955] EXT4-fs (loop3): Remounting filesystem read-only [ 65.479004][ T4955] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 65.501852][ T4943] EXT4-fs (loop0): Remounting filesystem read-only [ 65.508613][ T4943] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 65.566872][ T312] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.577438][ T312] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.595482][ T312] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.603177][ T4976] loop4: detected capacity change from 0 to 512 [ 65.604401][ T312] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.635761][ T4976] EXT4-fs: Ignoring removed i_version option [ 65.679800][ T4982] FAULT_INJECTION: forcing a failure. [ 65.679800][ T4982] name failslab, interval 1, probability 0, space 0, times 0 [ 65.692519][ T4982] CPU: 1 UID: 0 PID: 4982 Comm: syz.1.418 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.692557][ T4982] Tainted: [W]=WARN [ 65.692565][ T4982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 65.692581][ T4982] Call Trace: [ 65.692593][ T4982] [ 65.692603][ T4982] __dump_stack+0x1d/0x30 [ 65.692630][ T4982] dump_stack_lvl+0xe8/0x140 [ 65.692655][ T4982] dump_stack+0x15/0x1b [ 65.692677][ T4982] should_fail_ex+0x265/0x280 [ 65.692721][ T4982] should_failslab+0x8c/0xb0 [ 65.692780][ T4982] __kvmalloc_node_noprof+0x12e/0x670 [ 65.692821][ T4982] ? alloc_netdev_mqs+0xa5/0xa50 [ 65.692941][ T4982] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 65.692970][ T4982] alloc_netdev_mqs+0xa5/0xa50 [ 65.693007][ T4982] ? sized_strscpy+0x157/0x1a0 [ 65.693155][ T4982] __ip_tunnel_create+0x2bc/0x450 [ 65.693191][ T4982] ? ip_tunnel_find+0x2b5/0x300 [ 65.693227][ T4982] ip_tunnel_ctl+0x38f/0x750 [ 65.693297][ T4982] ipgre_tunnel_ctl+0x22f/0x560 [ 65.693320][ T4982] ip_tunnel_siocdevprivate+0x77/0xe0 [ 65.693353][ T4982] dev_ifsioc+0x8f8/0xaa0 [ 65.693490][ T4982] dev_ioctl+0x78d/0x960 [ 65.693532][ T4982] sock_ioctl+0x593/0x610 [ 65.693577][ T4982] ? __pfx_sock_ioctl+0x10/0x10 [ 65.693618][ T4982] __se_sys_ioctl+0xce/0x140 [ 65.693662][ T4982] __x64_sys_ioctl+0x43/0x50 [ 65.693679][ T4982] x64_sys_call+0x1816/0x3000 [ 65.693784][ T4982] do_syscall_64+0xd2/0x200 [ 65.693810][ T4982] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.693841][ T4982] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.693870][ T4982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.693898][ T4982] RIP: 0033:0x7f68fb2feec9 [ 65.693939][ T4982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.694030][ T4982] RSP: 002b:00007f68f9d5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.694055][ T4982] RAX: ffffffffffffffda RBX: 00007f68fb555fa0 RCX: 00007f68fb2feec9 [ 65.694182][ T4982] RDX: 0000200000000280 RSI: 00000000000089f1 RDI: 0000000000000003 [ 65.694194][ T4982] RBP: 00007f68f9d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.694206][ T4982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.694217][ T4982] R13: 00007f68fb556038 R14: 00007f68fb555fa0 R15: 00007ffeacb6cc58 [ 65.694239][ T4982] [ 65.696363][ T4980] validate_nla: 2 callbacks suppressed [ 65.696462][ T4980] netlink: 'syz.3.420': attribute type 4 has an invalid length. [ 65.754924][ T4985] loop1: detected capacity change from 0 to 1024 [ 65.951392][ T4985] EXT4-fs: inline encryption not supported [ 65.957389][ T4985] EXT4-fs: Ignoring removed nobh option [ 65.962959][ T4985] EXT4-fs: Ignoring removed bh option [ 66.081068][ T4990] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 66.121820][ T4999] loop1: detected capacity change from 0 to 512 [ 66.165121][ T4999] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.176817][ T4999] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 66.186976][ T4999] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.425: Corrupt directory, running e2fsck is recommended [ 66.200152][ T4999] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 66.209316][ T4999] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.425: corrupted in-inode xattr: invalid ea_ino [ 66.230861][ T5008] loop4: detected capacity change from 0 to 512 [ 66.237326][ T4999] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.425: couldn't read orphan inode 15 (err -117) [ 66.250832][ T5008] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.262544][ T5008] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 66.272762][ T5008] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.428: Corrupt directory, running e2fsck is recommended [ 66.297190][ T5017] FAULT_INJECTION: forcing a failure. [ 66.297190][ T5017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.310401][ T5017] CPU: 1 UID: 0 PID: 5017 Comm: syz.1.430 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.310446][ T5017] Tainted: [W]=WARN [ 66.310530][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.310542][ T5017] Call Trace: [ 66.310547][ T5017] [ 66.310555][ T5017] __dump_stack+0x1d/0x30 [ 66.310665][ T5017] dump_stack_lvl+0xe8/0x140 [ 66.310690][ T5017] dump_stack+0x15/0x1b [ 66.310710][ T5017] should_fail_ex+0x265/0x280 [ 66.310731][ T5008] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 66.310753][ T5017] should_fail+0xb/0x20 [ 66.310862][ T5017] should_fail_usercopy+0x1a/0x20 [ 66.310892][ T5017] _copy_from_user+0x1c/0xb0 [ 66.310952][ T5017] memdup_user+0x5e/0xd0 [ 66.311034][ T5017] strndup_user+0x68/0xb0 [ 66.311138][ T5017] __se_sys_mount+0x4d/0x2e0 [ 66.311168][ T5017] ? fput+0x8f/0xc0 [ 66.311210][ T5017] ? ksys_write+0x192/0x1a0 [ 66.311323][ T5017] __x64_sys_mount+0x67/0x80 [ 66.311355][ T5017] x64_sys_call+0x2b51/0x3000 [ 66.311385][ T5017] do_syscall_64+0xd2/0x200 [ 66.311418][ T5017] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.311503][ T5017] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.311533][ T5017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.311564][ T5017] RIP: 0033:0x7f68fb2feec9 [ 66.311584][ T5017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.311609][ T5017] RSP: 002b:00007f68f9d5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.311634][ T5017] RAX: ffffffffffffffda RBX: 00007f68fb555fa0 RCX: 00007f68fb2feec9 [ 66.311694][ T5017] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 66.311706][ T5017] RBP: 00007f68f9d5f090 R08: 0000200000000280 R09: 0000000000000000 [ 66.311721][ T5017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.311738][ T5017] R13: 00007f68fb556038 R14: 00007f68fb555fa0 R15: 00007ffeacb6cc58 [ 66.311764][ T5017] [ 66.397979][ T5023] bridge0: entered promiscuous mode [ 66.401788][ T5008] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.428: corrupted in-inode xattr: invalid ea_ino [ 66.406514][ T5023] macvtap1: entered allmulticast mode [ 66.411217][ T5008] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.428: couldn't read orphan inode 15 (err -117) [ 66.415418][ T5023] bridge0: entered allmulticast mode [ 66.555806][ T5023] bridge0: port 3(macvtap1) entered blocking state [ 66.562353][ T5023] bridge0: port 3(macvtap1) entered disabled state [ 66.575611][ T5023] bridge0: left allmulticast mode [ 66.580737][ T5023] bridge0: left promiscuous mode [ 66.655439][ T5032] loop2: detected capacity change from 0 to 1024 [ 66.662286][ T5032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.780285][ T5043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 66.914898][ T5050] loop2: detected capacity change from 0 to 512 [ 66.952759][ T5050] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.441: couldn't read orphan inode 26 (err -116) [ 66.968609][ T5050] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.830952][ T5118] loop2: detected capacity change from 0 to 4096 [ 67.851498][ T5094] loop3: detected capacity change from 0 to 4096 [ 67.860665][ T5118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.869445][ T5094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.900054][ T5091] SELinux: security_context_str_to_sid () failed with errno=-22 [ 68.076558][ T5149] loop2: detected capacity change from 0 to 4096 [ 68.085452][ T5149] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.110935][ T5149] SELinux: security_context_str_to_sid () failed with errno=-22 [ 68.121581][ T5154] loop3: detected capacity change from 0 to 512 [ 68.128501][ T5154] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.135422][ T5154] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.146608][ T5154] EXT4-fs (loop3): 1 truncate cleaned up [ 68.154346][ T5154] EXT4-fs (loop3): shut down requested (2) [ 68.194810][ T5159] __nla_validate_parse: 3 callbacks suppressed [ 68.194826][ T5159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 69.927486][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 69.945253][ T5170] netlink: 32 bytes leftover after parsing attributes in process `syz.2.463'. [ 69.971238][ T5173] loop3: detected capacity change from 0 to 1024 [ 70.011515][ T5173] EXT4-fs: inline encryption not supported [ 70.030288][ T5173] EXT4-fs: Ignoring removed nobh option [ 70.036007][ T5173] EXT4-fs: Ignoring removed bh option [ 70.052430][ T5176] netlink: 3 bytes leftover after parsing attributes in process `syz.2.465'. [ 70.087512][ T5176] batadv0: entered promiscuous mode [ 70.092869][ T5176] batadv0: entered allmulticast mode [ 70.295981][ T29] kauditd_printk_skb: 451 callbacks suppressed [ 70.295998][ T29] audit: type=1400 audit(1760099394.406:8480): avc: denied { write } for pid=5187 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.337316][ T5190] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 70.357097][ T5192] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 70.457018][ T5198] FAULT_INJECTION: forcing a failure. [ 70.457018][ T5198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.470198][ T5198] CPU: 0 UID: 0 PID: 5198 Comm: syz.2.469 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.470238][ T5198] Tainted: [W]=WARN [ 70.470246][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 70.470327][ T5198] Call Trace: [ 70.470335][ T5198] [ 70.470344][ T5198] __dump_stack+0x1d/0x30 [ 70.470368][ T5198] dump_stack_lvl+0xe8/0x140 [ 70.470455][ T5198] dump_stack+0x15/0x1b [ 70.470488][ T5198] should_fail_ex+0x265/0x280 [ 70.470527][ T5198] should_fail+0xb/0x20 [ 70.470561][ T5198] should_fail_usercopy+0x1a/0x20 [ 70.470661][ T5198] strncpy_from_user+0x25/0x230 [ 70.470696][ T5198] path_getxattrat+0xab/0x2a0 [ 70.470744][ T5198] __x64_sys_fgetxattr+0x59/0x70 [ 70.470775][ T5198] x64_sys_call+0x1ab3/0x3000 [ 70.470857][ T5198] do_syscall_64+0xd2/0x200 [ 70.470884][ T5198] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.470988][ T5198] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 70.471018][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.471043][ T5198] RIP: 0033:0x7f23ee6aeec9 [ 70.471060][ T5198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.471081][ T5198] RSP: 002b:00007f23ed117038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 70.471157][ T5198] RAX: ffffffffffffffda RBX: 00007f23ee905fa0 RCX: 00007f23ee6aeec9 [ 70.471224][ T5198] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000007 [ 70.471239][ T5198] RBP: 00007f23ed117090 R08: 0000000000000000 R09: 0000000000000000 [ 70.471254][ T5198] R10: 00000000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 70.471267][ T5198] R13: 00007f23ee906038 R14: 00007f23ee905fa0 R15: 00007ffc83b41628 [ 70.471323][ T5198] [ 70.742821][ T29] audit: type=1400 audit(1760099394.826:8481): avc: denied { read } for pid=5199 comm="syz.3.470" path="socket:[10726]" dev="sockfs" ino=10726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.828458][ T5206] netlink: 240 bytes leftover after parsing attributes in process `syz.3.470'. [ 70.842096][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 70.893500][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 70.967112][ T5216] loop2: detected capacity change from 0 to 512 [ 70.987665][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 71.003158][ T5216] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.044056][ T5216] EXT4-fs (loop2): 1 truncate cleaned up [ 71.357970][ T5269] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 71.480616][ T5284] loop1: detected capacity change from 0 to 512 [ 71.498289][ T5282] pim6reg: entered allmulticast mode [ 71.504373][ T5282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.480'. [ 71.514737][ T5284] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.532652][ T5275] loop3: detected capacity change from 0 to 1024 [ 71.540562][ T29] audit: type=1400 audit(1760099395.646:8482): avc: denied { mounton } for pid=5274 comm="syz.3.478" path="/86/file0" dev="tmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.563713][ T5275] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.568355][ T5284] EXT4-fs (loop1): 1 truncate cleaned up [ 71.573906][ T5275] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.590117][ T5275] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.590531][ T5284] EXT4-fs mount: 81 callbacks suppressed [ 71.590548][ T5284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.599773][ T5282] pim6reg: left allmulticast mode [ 71.606544][ T5275] JBD2: no valid journal superblock found [ 71.628671][ T5275] EXT4-fs (loop3): Could not load journal inode [ 71.680980][ T5216] Set syz1 is full, maxelem 65536 reached [ 71.818648][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.851506][ T29] audit: type=1326 audit(1760099395.946:8483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 71.874501][ T29] audit: type=1326 audit(1760099395.946:8484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 71.897414][ T29] audit: type=1326 audit(1760099395.946:8485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 71.920349][ T29] audit: type=1326 audit(1760099395.946:8486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 71.931824][ T5292] futex_wake_op: syz.2.484 tries to shift op by 144; fix this program [ 71.943594][ T29] audit: type=1326 audit(1760099396.006:8487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5289 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 71.974973][ T29] audit: type=1326 audit(1760099396.006:8488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5289 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 71.998336][ T29] audit: type=1326 audit(1760099396.006:8489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5289 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f23ee6aeec9 code=0x7ffc0000 [ 72.047190][ T5296] loop2: detected capacity change from 0 to 256 [ 72.057058][ T5296] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 72.146926][ T5300] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.196907][ T5302] IPv6: sit1: Disabled Multicast RS [ 72.203199][ T5302] sit1: entered allmulticast mode [ 72.237245][ T5284] Set syz1 is full, maxelem 65536 reached [ 72.249418][ T5311] loop2: detected capacity change from 0 to 512 [ 72.256652][ T5311] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.276216][ T5311] EXT4-fs (loop2): 1 truncate cleaned up [ 72.296267][ T5311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.333222][ T5322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 72.438304][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.490117][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.509245][ T5329] loop1: detected capacity change from 0 to 512 [ 72.516489][ T5329] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 72.525659][ T5329] EXT4-fs (loop1): invalid journal inode [ 72.531334][ T5329] EXT4-fs (loop1): can't get journal size [ 72.538497][ T5329] EXT4-fs (loop1): 1 truncate cleaned up [ 72.546767][ T5329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.560764][ T5342] netlink: 'syz.2.497': attribute type 4 has an invalid length. [ 72.574859][ T5318] program syz.3.494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.586812][ T5329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.647087][ T5355] GUP no longer grows the stack in syz.2.500 (5355): 200000005000-200000008000 (200000004000) [ 72.657594][ T5355] CPU: 0 UID: 0 PID: 5355 Comm: syz.2.500 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.657631][ T5355] Tainted: [W]=WARN [ 72.657638][ T5355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 72.657650][ T5355] Call Trace: [ 72.657712][ T5355] [ 72.657723][ T5355] __dump_stack+0x1d/0x30 [ 72.657829][ T5355] dump_stack_lvl+0xe8/0x140 [ 72.657907][ T5355] dump_stack+0x15/0x1b [ 72.657930][ T5355] fixup_user_fault+0x50e/0x560 [ 72.657970][ T5355] fault_in_user_writeable+0x5d/0xd0 [ 72.658008][ T5355] futex_lock_pi+0x597/0x780 [ 72.658055][ T5355] ? __pfx_futex_wake_mark+0x10/0x10 [ 72.658173][ T5355] do_futex+0x21f/0x380 [ 72.658214][ T5355] __se_sys_futex+0x2ed/0x360 [ 72.658343][ T5355] ? xfd_validate_state+0x45/0xf0 [ 72.658382][ T5355] __x64_sys_futex+0x78/0x90 [ 72.658413][ T5355] x64_sys_call+0x2e48/0x3000 [ 72.658442][ T5355] do_syscall_64+0xd2/0x200 [ 72.658493][ T5355] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.658527][ T5355] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 72.658548][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.658606][ T5355] RIP: 0033:0x7f23ee6aeec9 [ 72.658621][ T5355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.658639][ T5355] RSP: 002b:00007f23ed117038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 72.658658][ T5355] RAX: ffffffffffffffda RBX: 00007f23ee905fa0 RCX: 00007f23ee6aeec9 [ 72.658671][ T5355] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 72.658709][ T5355] RBP: 00007f23ee731f91 R08: 0000000000000000 R09: 0000000000000000 [ 72.658726][ T5355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.658742][ T5355] R13: 00007f23ee906038 R14: 00007f23ee905fa0 R15: 00007ffc83b41628 [ 72.658774][ T5355] [ 72.853038][ T5355] loop2: detected capacity change from 0 to 1024 [ 72.861323][ T5355] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (23577!=28264) [ 72.870974][ T5355] EXT4-fs (loop2): group descriptors corrupted! [ 72.873745][ T5363] loop1: detected capacity change from 0 to 128 [ 72.896049][ T5355] loop2: detected capacity change from 0 to 1024 [ 72.905446][ T5363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.914528][ T5355] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (23577!=28264) [ 72.920219][ T5363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.924223][ T5355] EXT4-fs (loop2): group descriptors corrupted! [ 72.939106][ T5368] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.970490][ T5373] IPv6: sit1: Disabled Multicast RS [ 72.976828][ T5373] sit1: entered allmulticast mode [ 72.989035][ T5374] pim6reg: entered allmulticast mode [ 72.995503][ T5374] pim6reg: left allmulticast mode [ 73.003624][ T5368] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.086576][ T5368] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.103690][ T5392] veth2: entered promiscuous mode [ 73.108812][ T5392] veth2: entered allmulticast mode [ 73.166896][ T5368] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.214032][ T312] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.234213][ T312] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.250597][ T312] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.263988][ T312] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.277608][ T5423] xt_hashlimit: max too large, truncated to 1048576 [ 73.321559][ T5432] __nla_validate_parse: 2 callbacks suppressed [ 73.321614][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 73.337262][ T5432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.509'. [ 73.368428][ T5440] loop3: detected capacity change from 0 to 256 [ 73.375947][ T5440] FAT-fs (loop3): bogus number of FAT sectors [ 73.382057][ T5440] FAT-fs (loop3): Can't find a valid FAT filesystem [ 73.444861][ T5447] loop4: detected capacity change from 0 to 512 [ 73.452737][ T5447] ================================================================== [ 73.460892][ T5447] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 73.468513][ T5447] [ 73.470843][ T5447] read-write to 0xffff888237c25ee8 of 1 bytes by task 5452 on cpu 0: [ 73.478908][ T5447] folio_add_lru+0xa5/0x1f0 [ 73.483438][ T5447] folio_add_lru_vma+0x49/0x70 [ 73.488221][ T5447] set_pte_range+0x235/0x4f0 [ 73.492822][ T5447] finish_fault+0x855/0xa00 [ 73.497361][ T5447] handle_mm_fault+0x18fe/0x2be0 [ 73.502310][ T5447] do_user_addr_fault+0x630/0x1080 [ 73.507424][ T5447] exc_page_fault+0x62/0xa0 [ 73.511936][ T5447] asm_exc_page_fault+0x26/0x30 [ 73.516804][ T5447] [ 73.519135][ T5447] read to 0xffff888237c25ee8 of 1 bytes by task 5447 on cpu 1: [ 73.526687][ T5447] __lru_add_drain_all+0x17e/0x450 [ 73.531823][ T5447] lru_add_drain_all+0x10/0x20 [ 73.536779][ T5447] invalidate_bdev+0x47/0x70 [ 73.541383][ T5447] ext4_fill_super+0x2d2c/0x3810 [ 73.546325][ T5447] get_tree_bdev_flags+0x291/0x300 [ 73.551470][ T5447] get_tree_bdev+0x1f/0x30 [ 73.555900][ T5447] ext4_get_tree+0x1c/0x30 [ 73.560339][ T5447] vfs_get_tree+0x54/0x1d0 [ 73.564763][ T5447] do_new_mount+0x24d/0x660 [ 73.569273][ T5447] path_mount+0x4a5/0xb70 [ 73.573630][ T5447] __se_sys_mount+0x28c/0x2e0 [ 73.578323][ T5447] __x64_sys_mount+0x67/0x80 [ 73.582936][ T5447] x64_sys_call+0x2b51/0x3000 [ 73.587636][ T5447] do_syscall_64+0xd2/0x200 [ 73.592169][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.598079][ T5447] [ 73.600407][ T5447] value changed: 0x07 -> 0x08 [ 73.605084][ T5447] [ 73.607410][ T5447] Reported by Kernel Concurrency Sanitizer on: [ 73.613565][ T5447] CPU: 1 UID: 0 PID: 5447 Comm: syz.4.511 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 73.624786][ T5447] Tainted: [W]=WARN [ 73.628596][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 73.638666][ T5447] ==================================================================