last executing test programs: 1m47.288828557s ago: executing program 2 (id=30): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1m46.520708084s ago: executing program 2 (id=36): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x800000000000000}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xa91a, 0x64b2, 0x85, 0x1004, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0xd}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m46.020024847s ago: executing program 2 (id=43): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001700)="b2", 0x1}, {0x0}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r7}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000000), 0x6, 0x0) write$binfmt_aout(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="938d62fa8f84a690b7d61914f1b5d656fd7e1352b42927acbe45bfc6a5676c4b71190da4a2bea1fea6605324e634bf2e4c61955578c984ebf196cfe0c79bab2e081cfb15c666cab855ad048b5f2108c2a6efd4f61a5f06503268161db2e2f6c5a00a228dd1a9d9c394c0baf3bb7a4862bf23267130b052b44730e24066b2e98f04f9ab3b2335d62b70523e73eb62cdca535e0eb3df7b92615f633636eaae72ac175770247ff92bc2d99fb54d5a62420f6f2acb4204f85a6d058b1c452a3cb61666959dfed9742dc6fb275b91f1d57084dfc05a93e5d318582568118a05a27bdca83b4409b94de6feb874a4ece2098446ab40b9c1", @ANYRES16=r9, @ANYRESHEX=r9, @ANYRESHEX=r3, @ANYBLOB="f43b51381bc9c7a2b8c5011012097ae3a28790b627e9a9726ee497364f29e8ede13db8aba6"], 0x20) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x34, r11, 0x431, 0x70bd28, 0x1, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000802}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x1a8, r11, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x194, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(%.@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3993}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffcb0}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&}-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6800}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x910}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x73, 0x5, "ccd428b0f500042402fdc36a6dc6e2812ea0635a785b3d1c62e3644401b3662a3e285c4e7f432534589525546d3ac78d5c52ca06d7c101dbe01bda21b22f78ac373884d1f7f30728a83004e134ee66a914570301afc2aaf1a2d6211652528a13447ce40d878bff808919bcb48cced8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x42, 0x5, "353edbb2c4b12cba3796d82d1ebd70635e6a2eb9408350ba20ff6cce1978a244b84e5d8d64b2d1bed1febc890b9335c2e5ac44e545fea197e6f35cd61ddd"}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000080}, 0x8880) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000040)='./file0/../file0\x00', 0x804000, 0x184) 1m45.132453433s ago: executing program 2 (id=49): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff8f4221063125"]}, 0x108) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r3 = socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0xf68}}, './file0/file0\x00'}) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f00000002c0)={0x4, 0xfffffffb, 0xff, 0x40000000, 0x86, 0x3}) syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') socket$inet6_sctp(0xa, 0x4, 0x84) r5 = socket$igmp(0x2, 0x3, 0x2) fstat(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) 1m44.805346162s ago: executing program 2 (id=55): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c45a, &(0x7f0000000700)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa76}}, {@noquota}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@errors_remount}, {@delalloc}], [], 0x2c}, 0x1, 0x464, &(0x7f0000000a40)="$eJzs28tvG8UfAPDv2nHaXx+/hFIeLQUM5RHxSJq0QA9cikDqBQkJDuUY0rQqdRvUBIlWFQ0cyhH1LwCOSPwFnOgFAScQV7gjpArlQuCAjNZeG9eOU8eJ46T+fKSNZ3ZnvfPd3YlnZ+wABlYx/ZNE7ImIXyJiJCLyzQWK1Zflpaszfy1dnUmiXH7zjyTdLf5cujpTK5pkr7uzzFiuvqrF/OUr56dLpdlLWX5i4cJ7E/OXrzx/7sL02dmzsxenjh8/dnTypRenXtiQOPemdT344dyhAyffvvH6zKkb73z/VVq5Pdn2xjiqRtd9zGIU256AJ9f97lvL3uy17QVnS0rb+lBEFCrtfyTylVzVSLz2cV8rB/RUuVwu72hZW+8BLJaBu1gS/a4B0B+1D/r0+be2bGL3o+9unag+AKVxL2dLdctQ5LIyhYbn241WjIhTi39/li6x4jgEAMDG+ibt/zy3Uv8vF/c3lPt/Njc0GhH3RMS+iLg3IvZHxH0RlbIPRMSDazx+sSnf2v/56X9dBdahWycieTmb27q9/1fr/cVoPsvtrcRfSM6cK80eyc7JWBR2pPnJVY5x89WfP223rbH/ly7p8Wt9wawevw81DdCdnl6YXk/MjW59VBkDvNYaf1KfCUgi4kBEHOzi/XdGxLlnvjzUsqFhoui2+COa4l/FUBcValL+IuLp6vVfjKb4G6u6yvzkxM4ozR6ZqN0VrX748fob7Y5/5+vfW+n137Xi/V+PfzRpnK+dX/sxrv/6Sdtnmm7v/+HkrUp6OFv3wfTCwqXJiOFksXX91H/71vK18mn8Y4dXbv/7Iv75PNvvoYhIb+KHI+KRiHg0q/tjEfF4RBxeJf7vXnni3e7j7600/tNruv5rT+TPf/t1u+N3dv2PVVJj2ZpO/v91WsH1nDsAAADYLnKV78AnufF6OpcbH69+h39/7MqV5uYXnj0z9/7F09Xvyo9GIVcb6RppGA+dzMaGa/mppvzRbCwwlebHZ+ZKvZpTBzqzu037T/2W73ftgJ5b0zyaX3jBXWUD5tGBbUr7h8Gl/cPg0v5hcK3U/q9FLPehKsAm8/kPg0v7h8Gl/cPg0v5hIK3nd/2rJfad7NU7b8fEzYhoVybf1xo+tbvb3SNXOjC8NU7vHROF7G6vr8ltkYpVEjsiotPC12KzKtbnf0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb5N8AAAD//6eJ4CE=") chdir(0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xfe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m44.427480204s ago: executing program 2 (id=59): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff8f4221063125"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r2 = socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xf68}}, './file0/file0\x00'}) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f00000002c0)={0x4, 0xfffffffb, 0xff, 0x40000000, 0x86, 0x3}) syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') socket$inet6_sctp(0xa, 0x4, 0x84) r4 = socket$igmp(0x2, 0x3, 0x2) fstat(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) 1m29.381692204s ago: executing program 32 (id=59): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff8f4221063125"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r2 = socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xf68}}, './file0/file0\x00'}) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f00000002c0)={0x4, 0xfffffffb, 0xff, 0x40000000, 0x86, 0x3}) syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') socket$inet6_sctp(0xa, 0x4, 0x84) r4 = socket$igmp(0x2, 0x3, 0x2) fstat(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) 1.272024258s ago: executing program 4 (id=2582): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0x800, 0x2}}}}}}, 0x0) 1.135678441s ago: executing program 5 (id=2588): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.085593456s ago: executing program 5 (id=2590): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x8}, 0x18) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 1.03949816s ago: executing program 0 (id=2591): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000"], 0x78}, 0x1, 0x7}, 0x0) 999.563994ms ago: executing program 0 (id=2592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000940)={0x0, 0x2421, 0x8, 0x8000, 0x400253}, &(0x7f0000000180)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r2, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 964.559437ms ago: executing program 5 (id=2593): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000feffffff00"/126]}, 0xf6) 937.8313ms ago: executing program 3 (id=2594): r0 = syz_socket_connect_nvme_tcp() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000006e6a00850000000600000018110000", @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 937.433181ms ago: executing program 0 (id=2595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 876.930436ms ago: executing program 5 (id=2596): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x106002, 0x4, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r4 = syz_io_uring_setup(0x174d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f0000000880)=""/108, 0x6c}], 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r4}) io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 875.871706ms ago: executing program 1 (id=2597): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='rxrpc_rx_rwind_change\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) mkdir(&(0x7f00000000c0)='./file0\x00', 0xa0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c00000016"], 0xfc}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x3c}}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x16, 0x0, 0x0, 0x15c4, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ef9}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(r1) 875.296996ms ago: executing program 5 (id=2598): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x21cd40, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) brk(0x3) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r5, @ANYBLOB="090126bd7000fedbdf250100000014000b00ff02000000000000000000000000000108000100", @ANYRES32=r6, @ANYBLOB="14000c00fe880000000000000000000000000001080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24000085}, 0x8014) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r5, 0x800, 0x70bd28, 0xa0, {}, [@GTPA_TID={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004041) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r7, 0x0, 0x1034}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r9, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 874.790896ms ago: executing program 0 (id=2599): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb6, 0xb6, 0x2, [@datasec={0xd, 0x9, 0x0, 0xf, 0x2, [{0x2, 0x8}, {0x1, 0x7, 0x8}, {0x2, 0x9, 0x400}, {0x1, 0xffff, 0x95a2776}, {0x2, 0x3c, 0x99a1}, {0x1, 0x1, 0x7fffffff}, {0x4, 0x3, 0x2ba5}, {0xffffffff, 0x1, 0x8}, {0x2, 0x6, 0x8115}], "ab24"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x2}, {}, {0x1}]}, @fwd, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0xd2}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x7c8e57edab868d16, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x108e, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x8, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x33c, &(0x7f0000000340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80042, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000202010120000000000000000a00f206180002801400018008000100ac1414ea080002007f000001"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x200000c4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4eed0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r7, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/215, 0xd7}], 0x1, 0xfffffffd, 0x8) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r8, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r11, &(0x7f0000002480)=[{&(0x7f00000013c0)="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", 0x49a}], 0x1) 867.747277ms ago: executing program 3 (id=2600): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x0, &(0x7f0000000040)}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 827.088461ms ago: executing program 1 (id=2601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 812.228422ms ago: executing program 3 (id=2602): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000"], 0x78}, 0x1, 0x7}, 0x0) 811.669082ms ago: executing program 4 (id=2603): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB], 0xa0}, 0x4004881) 757.441828ms ago: executing program 1 (id=2604): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@grpjquota}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x565, &(0x7f00000003c0)="$eJzs3c9rHFUcAPDvbH71lzaFUlREAj1Yqd00iT8qeKhH0WJB73VJpqFk0y3ZTWliwfZgL16kCCIWxLvePRb/Af+KghaKlKAHL5HZzCZps5ts0013634+MOG9mdl9892Z78ubfbtsAH1rLPtTiHg5Ir5JIg5HRJJvG4x849jafisPr09nSxKrq5/+ldT3y+qN52o87mBeeSkifvsq4mRha7vVpeW5UrmcLuT18dr8lfHq0vKpS/Ol2XQ2vTw5NXXm7anJ9959p2OxvnH+n+8/ufvhma+Pr3z3y/0jt5M4G4fybZvjeAo3NlfGYix/TYbi7GM7TnSgsV6SdPsA2JWBPM+HIusDDsdAnvXA/9+XEbEK9KlE/kOfaowDGvf2HboPfm48+GDtBmhr/INr743Evvq90YGV5JE7o+x+d7QD7Wdt/PrnndvZEp17HwJgRzduRsTpwcGt/V+S93+7d7qNfR5vQ/8Hz87dbPzzZrPxT2F9/BNNxj8jTXJ3N3bO/8L9DjTTUjb+e7/p+Hd90mp0IK+9UB/zDSUXL5XTrG97MSJOxNBIVt9uPufMyr3VVts2j/+yJWu/MRbMj+P+4Mijj5kp1UpPE/NmD25GvNJ0/Jusn/+kyfnPXo/zbbZxLL3zWqttO8e/t1Z/ini96fnfmNFKtp+fHK9fD+ONq2Krv28d+71V+63ivzqyB8E2kZ3/A9vHP5psnq+tPnkbP+77N2217ZH4o/3rfzj5rF4eztddK9VqCxMRw8nHW9dPbjy2UW/sn8V/4vj2/d+hJtf//oj4vM34bx39+dW24u/C9Z/FP/NE5//JC/c++uKHVu231/+9VS+dyNe00/+1e4BP89oBAAAAAABArylExKFICsX1cqFQLK59h/doHCiUK9XayYuVxcszUZ8HHY2hQmOm+/Cmz0NM5J+HbdQnH6tPRcSRiPh2YH+9XpyulGe6HTwAAAAAAAAAAAAAAAAAAAD0iIMtvv+f+WOg20cH7Dk/+Q39a8f878QvPQE9yf9/6F/yH/qX/If+Jf+hf8l/6F/yH/qX/If+Jf8BAAAAAAAAAAAAAAAAAAAAAAAAAACgo86fO5ctqysPr09n9ZmrS4tzlaunZtLqXHF+cbo4XVm4UpytVGbLaXG6Mr/T85UrlSsTk7F4bbyWVmvj1aXlC/OVxcu1C5fmS7PphXTomUQFAAAAAAAAAAAAAAAAAAAAz5fq0vJcqVxOFxQUdlUY7I3D6GZhODbWjPbA8XSk0O2eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BcAAP//k4E29A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000001000}) r1 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x40000000, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 742.660609ms ago: executing program 3 (id=2605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffff8}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {0x4}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {0x0, 0x3ff}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0xb2e}, {0x0, 0x0, 0x0, 0x0, 0x1d}, {0xfffffffd, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x5, 0x0, 0x0, 0x0, 0x5, 0x200}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x100}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1, 0x3}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x7f, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2}, {}, {0x0, 0x115, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x8, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffefffd}, {0x0, 0xffffffff, 0x0, 0x1, 0xffffffff}, {}, {0x5}, {0x93f, 0x0, 0x0, 0x2b4}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x5}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0xffffffff, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0xfffffffe}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x3}, {0x83}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x55}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xec44, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x6a44, 0x0, 0x0, 0xfffffffd, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xc0000000}, {0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0x7dff800}, {0x0, 0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {0x3}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 716.159471ms ago: executing program 4 (id=2606): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000feffffff00"/126]}, 0xf6) 704.483832ms ago: executing program 3 (id=2607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setresuid(0x0, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) recvmmsg(r1, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0}, 0xd3e8}], 0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x4, 0x3, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x10, 0x7, 0x3a3, 0x3}}) socket$inet_tcp(0x2, 0x1, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@loopback, 0x4e20, 0x0, 0x4e24, 0x4, 0x2, 0x50, 0x20, 0x6, r2}, {0x5, 0xe, 0x7, 0x9, 0x8, 0x7, 0x9, 0x9}, {0xffff, 0x5, 0x1000, 0x5}, 0x0, 0x6e6bbd, 0x1, 0x0, 0x2, 0x1}, {{@in=@broadcast, 0x4d3, 0x33}, 0x2, @in=@multicast2, 0x3506, 0x0, 0x3, 0xa, 0x3, 0xf963, 0xec}}, 0xe8) socket$igmp(0x2, 0x3, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000380)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#%\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce5+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040094}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xbfb}, 0x13) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x800, 0xfffffffc, 0xad}, &(0x7f0000000440), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, &(0x7f0000000180), 0xfe) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000000340)='./file1/file0\x00', 0x0) acct(0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100), &(0x7f00000001c0)=@v2={0x2000000, [{0x5, 0x7}, {0xfffffff7, 0x3}]}, 0x14, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$sock(r6, &(0x7f0000000480)={&(0x7f0000000200)=@isdn={0x22, 0x6, 0x87, 0x40, 0xa}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)="580a93cc3178fb690991e1077125", 0xe}, {&(0x7f0000000280)="dba0d36245ecf523474d22c293186467cbe9f330365132241ea9a0b9b0a6db4aa9b105cd89c824ac", 0x28}, {&(0x7f00000002c0)="b9e989fa56cce0c6", 0x8}], 0x3, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0xd}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0xff22}, 0x200408c0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@dioread_lock}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") 647.472078ms ago: executing program 4 (id=2608): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 647.013898ms ago: executing program 5 (id=2609): symlink(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 642.079978ms ago: executing program 4 (id=2610): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x39}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r6 = socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) acct(0xfffffffffffffffe) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 458.421556ms ago: executing program 1 (id=2611): r0 = syz_socket_connect_nvme_tcp() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000006e6a00850000000600000018110000", @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 458.139266ms ago: executing program 1 (id=2612): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x0, &(0x7f0000000040)}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 378.158963ms ago: executing program 1 (id=2613): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0x800, 0x2}}}}}}, 0x0) 377.675734ms ago: executing program 4 (id=2614): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0x800, 0x2}}}}}}, 0x0) 367.418694ms ago: executing program 0 (id=2615): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200"], 0x78}, 0x1, 0x7}, 0x0) 115.735119ms ago: executing program 0 (id=2616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff0100000000000000000000000000010100ddff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000049fe00"/128], 0x110) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000147d5919d6586d1ffaf4e6c3c9b7bedf0dcaabed84f40c227d0dffc5394095e0a4d96759215215352edb978ecebe873ae74b64c4103afbc2d1b6a2ad4dc9068dd5b65c90065bb2ea74"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000180)="a890d01c", 0x4, r4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 0s ago: executing program 3 (id=2617): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) rt_sigaction(0xd, 0x0, 0xfffffffffffffffd, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 70.080917][ T30] audit: type=1326 audit(1759948221.387:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 70.106635][ T30] audit: type=1326 audit(1759948221.407:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 70.133431][ T30] audit: type=1326 audit(1759948221.407:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 70.158784][ T30] audit: type=1326 audit(1759948221.407:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 70.184261][ T30] audit: type=1326 audit(1759948221.407:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 70.208535][ T30] audit: type=1326 audit(1759948221.407:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 70.232598][ T30] audit: type=1326 audit(1759948221.407:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 70.317669][ T5035] loop0: detected capacity change from 0 to 512 [ 70.328909][ T5045] loop5: detected capacity change from 0 to 512 [ 70.382752][ T5057] loop4: detected capacity change from 0 to 1024 [ 70.418904][ T5045] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.444: bad orphan inode 11862016 [ 70.430644][ T5045] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.472690][ T5035] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.437: bad orphan inode 11862016 [ 70.489686][ T5057] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 70.516788][ T5057] EXT4-fs (loop4): Remounting filesystem read-only [ 70.524693][ T5035] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.537025][ T5057] netlink: 'syz.4.447': attribute type 10 has an invalid length. [ 70.579003][ T5066] loop5: detected capacity change from 0 to 1024 [ 70.606528][ T5066] EXT4-fs: inline encryption not supported [ 70.613404][ T5066] EXT4-fs: Ignoring removed i_version option [ 70.657525][ T5066] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.729170][ T5055] loop3: detected capacity change from 0 to 512 [ 70.736332][ T5066] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 70.780590][ T5069] loop1: detected capacity change from 0 to 2048 [ 70.794884][ T5066] EXT4-fs (loop5): Remounting filesystem read-only [ 70.818043][ T5055] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.446: bad orphan inode 11862016 [ 70.871460][ T5055] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.922722][ T5084] loop1: detected capacity change from 0 to 512 [ 70.934455][ T5070] lo speed is unknown, defaulting to 1000 [ 70.946935][ T5084] IPv4: Oversized IP packet from 127.202.26.0 [ 70.975660][ T5090] netlink: 116 bytes leftover after parsing attributes in process `syz.1.455'. [ 71.058630][ T5087] lo speed is unknown, defaulting to 1000 [ 71.237837][ T3313] EXT4-fs unmount: 258 callbacks suppressed [ 71.237922][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 71.320101][ T5103] loop3: detected capacity change from 0 to 1024 [ 71.327697][ T5105] loop5: detected capacity change from 0 to 2048 [ 71.335673][ T5101] loop4: detected capacity change from 0 to 1024 [ 71.344697][ T5101] EXT4-fs: Ignoring removed orlov option [ 71.353507][ T5105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.369272][ T5101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.397545][ T5103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.420743][ T5103] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 71.447207][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.457280][ T5103] EXT4-fs (loop3): Remounting filesystem read-only [ 71.467357][ T5103] netlink: 'syz.3.459': attribute type 10 has an invalid length. [ 71.470151][ T5122] loop1: detected capacity change from 0 to 512 [ 71.497250][ T4418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.497825][ T5122] IPv4: Oversized IP packet from 127.202.26.0 [ 71.527571][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.571980][ T5126] loop4: detected capacity change from 0 to 2048 [ 71.583937][ T5130] loop3: detected capacity change from 0 to 1024 [ 71.592421][ T5130] EXT4-fs: Ignoring removed orlov option [ 71.600512][ T5126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.615138][ T5130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.646004][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.843291][ T5128] lo speed is unknown, defaulting to 1000 [ 71.926085][ T5145] loop4: detected capacity change from 0 to 1024 [ 71.934807][ T5145] EXT4-fs: Ignoring removed orlov option [ 71.977781][ T5145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.060363][ T5151] loop1: detected capacity change from 0 to 2048 [ 72.078261][ T5151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.091151][ T5153] loop5: detected capacity change from 0 to 1024 [ 72.098777][ T5153] EXT4-fs: Ignoring removed orlov option [ 72.098827][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.127906][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.170398][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.177284][ T5159] loop4: detected capacity change from 0 to 1024 [ 72.210712][ T5153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.224806][ T5159] EXT4-fs: Ignoring removed orlov option [ 72.231348][ T5163] loop3: detected capacity change from 0 to 1024 [ 72.239072][ T5163] EXT4-fs: Ignoring removed orlov option [ 72.268170][ T5159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.296733][ T4418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.314761][ T5163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.359792][ T5173] loop5: detected capacity change from 0 to 2048 [ 72.373803][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.392781][ T5175] loop0: detected capacity change from 0 to 1024 [ 72.400210][ T5175] EXT4-fs: Ignoring removed orlov option [ 72.407860][ T5173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.421502][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.433965][ T5173] batman_adv: batadv0: Adding interface: dummy0 [ 72.440872][ T5173] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.450633][ T5175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.467176][ T5173] batman_adv: batadv0: Interface activated: dummy0 [ 72.493313][ T5186] batadv0: mtu less than device minimum [ 72.499290][ T5186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.510381][ T5186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.521605][ T5186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.532367][ T5186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.570670][ T4418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.580873][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.600203][ T5185] lo speed is unknown, defaulting to 1000 [ 72.619445][ T5187] lo speed is unknown, defaulting to 1000 [ 72.666346][ T5195] loop5: detected capacity change from 0 to 1024 [ 72.673698][ T5195] EXT4-fs: Ignoring removed orlov option [ 72.707756][ T5195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.739176][ T4418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.882199][ T5213] loop0: detected capacity change from 0 to 512 [ 72.905322][ T5210] loop5: detected capacity change from 0 to 512 [ 72.952487][ T5217] loop3: detected capacity change from 0 to 1024 [ 72.964258][ T5217] EXT4-fs: Ignoring removed orlov option [ 72.976095][ T5210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.991253][ T5210] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.992675][ T5217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.043763][ T4418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.095835][ T5224] netlink: 76 bytes leftover after parsing attributes in process `syz.1.496'. [ 73.125452][ T5226] loop5: detected capacity change from 0 to 1024 [ 73.172592][ T5226] EXT4-fs: Ignoring removed orlov option [ 73.189454][ T5226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.258281][ T4418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.276513][ T5236] loop1: detected capacity change from 0 to 1024 [ 73.302351][ T5236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.332513][ T5246] loop5: detected capacity change from 0 to 1024 [ 73.339074][ T5245] lo speed is unknown, defaulting to 1000 [ 73.346340][ T5246] EXT4-fs: Ignoring removed orlov option [ 73.353129][ T5236] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 73.357763][ T5246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.382005][ T5236] EXT4-fs (loop1): Remounting filesystem read-only [ 73.390654][ T5236] netlink: 'syz.1.499': attribute type 10 has an invalid length. [ 73.414175][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.491027][ T5256] loop0: detected capacity change from 0 to 512 [ 73.491074][ T5254] loop1: detected capacity change from 0 to 2048 [ 73.504819][ T4418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.518213][ T5256] net_ratelimit: 16 callbacks suppressed [ 73.518233][ T5256] IPv4: Oversized IP packet from 127.202.26.0 [ 73.538780][ T5254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.557581][ T5260] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:99:29 [ 73.589253][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.617729][ T5264] loop5: detected capacity change from 0 to 1024 [ 73.624768][ T5264] EXT4-fs: Ignoring removed orlov option [ 73.644137][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.666024][ T5264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.748710][ T4418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.761674][ T5275] loop3: detected capacity change from 0 to 1024 [ 73.782701][ T5275] EXT4-fs: Ignoring removed orlov option [ 73.804710][ T5275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.820226][ T5279] loop4: detected capacity change from 0 to 1024 [ 73.860430][ T5291] loop1: detected capacity change from 0 to 512 [ 73.871962][ T5291] IPv4: Oversized IP packet from 127.202.26.0 [ 73.912170][ T5292] lo speed is unknown, defaulting to 1000 [ 73.930198][ T5279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.949357][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.027857][ T5279] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 74.068236][ T5279] EXT4-fs (loop4): Remounting filesystem read-only [ 74.097562][ T5279] netlink: 'syz.4.514': attribute type 10 has an invalid length. [ 74.114268][ T5303] loop3: detected capacity change from 0 to 2048 [ 74.129751][ T5303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.159933][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.208632][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.223249][ T5314] loop1: detected capacity change from 0 to 1024 [ 74.252960][ T5314] EXT4-fs: Ignoring removed orlov option [ 74.270519][ T5317] loop5: detected capacity change from 0 to 1024 [ 74.280734][ T5318] loop4: detected capacity change from 0 to 2048 [ 74.291086][ T5314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.293807][ T5317] EXT4-fs: Ignoring removed orlov option [ 74.352192][ T5318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.368185][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.392716][ T5317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.464010][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.513416][ T5333] loop0: detected capacity change from 0 to 1024 [ 74.521737][ T5333] EXT4-fs: Ignoring removed orlov option [ 74.580149][ T5333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.609405][ T5341] loop4: detected capacity change from 0 to 1024 [ 74.615221][ T5338] loop1: detected capacity change from 0 to 1024 [ 74.648075][ T5342] loop3: detected capacity change from 0 to 1024 [ 74.656549][ T5341] EXT4-fs: Ignoring removed orlov option [ 74.657021][ T5338] EXT4-fs: Ignoring removed orlov option [ 74.667386][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.681176][ T5342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.698702][ T5342] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 74.717177][ T5338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.731409][ T5341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.744968][ T5342] EXT4-fs (loop3): Remounting filesystem read-only [ 74.750563][ T5353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.534'. [ 74.778153][ T5342] netlink: 'syz.3.533': attribute type 10 has an invalid length. [ 74.807601][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.827254][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.890123][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.959683][ T4418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.013435][ T5369] loop5: detected capacity change from 0 to 1024 [ 75.017086][ T5372] netlink: 68 bytes leftover after parsing attributes in process `syz.4.544'. [ 75.022327][ T5369] EXT4-fs: Ignoring removed orlov option [ 75.065209][ T5379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.545'. [ 75.104202][ T5382] netlink: 'syz.1.547': attribute type 21 has an invalid length. [ 75.105194][ T5383] loop4: detected capacity change from 0 to 512 [ 75.112281][ T5382] netlink: 164 bytes leftover after parsing attributes in process `syz.1.547'. [ 75.119711][ T5369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.141980][ T5376] loop3: detected capacity change from 0 to 2048 [ 75.150348][ T5383] ext4: Unknown parameter 'bsddf"data' [ 75.159098][ T5383] netlink: 'syz.4.546': attribute type 1 has an invalid length. [ 75.166994][ T5383] netlink: 224 bytes leftover after parsing attributes in process `syz.4.546'. [ 75.181847][ T5376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.205301][ T5356] lo speed is unknown, defaulting to 1000 [ 75.210337][ T5376] batadv0: mtu less than device minimum [ 75.218425][ T5376] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.229624][ T5376] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.240813][ T5376] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.252739][ T5376] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.264387][ T5376] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.275402][ T5376] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.285838][ T30] kauditd_printk_skb: 176 callbacks suppressed [ 75.285853][ T30] audit: type=1400 audit(1759948226.747:1974): avc: denied { create } for pid=5380 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 75.360352][ T5390] loop1: detected capacity change from 0 to 2048 [ 75.394423][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.404824][ T5392] loop4: detected capacity change from 0 to 1024 [ 75.412814][ T5392] EXT4-fs: Ignoring removed orlov option [ 75.498373][ T5397] loop3: detected capacity change from 0 to 1024 [ 75.544695][ T5397] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 75.576043][ T5403] loop0: detected capacity change from 0 to 1024 [ 75.594016][ T5397] EXT4-fs (loop3): Remounting filesystem read-only [ 75.613069][ T5403] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 75.643191][ T5397] netlink: 'syz.3.549': attribute type 10 has an invalid length. [ 75.652115][ T5403] EXT4-fs (loop0): Remounting filesystem read-only [ 75.666950][ T5403] netlink: 'syz.0.561': attribute type 10 has an invalid length. [ 75.782482][ T5421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.557'. [ 75.803945][ T5427] netlink: 60 bytes leftover after parsing attributes in process `syz.0.559'. [ 75.809445][ T5425] netlink: 68 bytes leftover after parsing attributes in process `syz.5.556'. [ 75.903325][ T5432] loop4: detected capacity change from 0 to 1024 [ 75.926411][ T30] audit: type=1326 audit(1759948227.437:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 75.950638][ T30] audit: type=1326 audit(1759948227.437:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 75.975143][ T30] audit: type=1326 audit(1759948227.437:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 75.999483][ T30] audit: type=1326 audit(1759948227.437:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 75.999492][ T5437] lo speed is unknown, defaulting to 1000 [ 76.030584][ T5432] EXT4-fs: Ignoring removed orlov option [ 76.058277][ T5433] loop1: detected capacity change from 0 to 2048 [ 76.071565][ T5429] lo speed is unknown, defaulting to 1000 [ 76.105485][ T30] audit: type=1326 audit(1759948227.627:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 76.122421][ T5448] loop5: detected capacity change from 0 to 512 [ 76.130807][ T30] audit: type=1326 audit(1759948227.627:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 76.161476][ T30] audit: type=1326 audit(1759948227.627:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 76.187536][ T30] audit: type=1326 audit(1759948227.627:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 76.235836][ T30] audit: type=1326 audit(1759948227.627:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 76.262248][ T5452] loop0: detected capacity change from 0 to 128 [ 76.357444][ T5462] loop5: detected capacity change from 0 to 1024 [ 76.362186][ T5461] loop3: detected capacity change from 0 to 1024 [ 76.372412][ T5462] EXT4-fs: Ignoring removed orlov option [ 76.382532][ T5461] EXT4-fs: Ignoring removed orlov option [ 76.501423][ T5467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.571'. [ 76.590028][ T5456] lo speed is unknown, defaulting to 1000 [ 76.757776][ T5480] lo speed is unknown, defaulting to 1000 [ 76.799170][ T5484] loop0: detected capacity change from 0 to 2048 [ 76.836155][ T5484] batman_adv: batadv0: Interface deactivated: dummy0 [ 76.844364][ T5484] batman_adv: batadv0: Removing interface: dummy0 [ 77.020106][ T5501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.583'. [ 77.127545][ T5508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.587'. [ 77.242469][ T5491] lo speed is unknown, defaulting to 1000 [ 77.291176][ T5514] loop3: detected capacity change from 0 to 1024 [ 77.325481][ T5514] EXT4-fs: inline encryption not supported [ 77.332059][ T5514] EXT4-fs: Ignoring removed i_version option [ 77.379085][ T5514] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.425409][ T5520] netlink: 'syz.0.590': attribute type 21 has an invalid length. [ 77.433893][ T5520] netlink: 164 bytes leftover after parsing attributes in process `syz.0.590'. [ 77.466555][ T5514] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 77.501078][ T5521] lo speed is unknown, defaulting to 1000 [ 77.522436][ T5514] EXT4-fs (loop3): Remounting filesystem read-only [ 77.545403][ T5524] loop1: detected capacity change from 0 to 128 [ 77.635660][ T5529] loop3: detected capacity change from 0 to 2048 [ 77.953679][ T5545] lo speed is unknown, defaulting to 1000 [ 78.241400][ T5556] loop5: detected capacity change from 0 to 1024 [ 78.251098][ T5558] loop1: detected capacity change from 0 to 2048 [ 78.261403][ T5556] EXT4-fs: inline encryption not supported [ 78.268549][ T5556] EXT4-fs: Ignoring removed i_version option [ 78.324451][ T5559] loop0: detected capacity change from 0 to 1024 [ 78.354573][ T5559] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 78.358971][ T5573] netlink: 60 bytes leftover after parsing attributes in process `syz.4.606'. [ 78.372189][ T5556] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.421979][ T5559] EXT4-fs (loop0): Remounting filesystem read-only [ 78.469985][ T5577] loop3: detected capacity change from 0 to 2048 [ 78.476706][ T5579] netlink: 'syz.0.602': attribute type 10 has an invalid length. [ 78.490236][ T5580] loop1: detected capacity change from 0 to 1024 [ 78.518544][ T5556] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 78.525520][ T5583] loop0: detected capacity change from 0 to 1024 [ 78.538701][ T5580] EXT4-fs: Ignoring removed orlov option [ 78.551291][ T5556] EXT4-fs (loop5): Remounting filesystem read-only [ 78.554061][ T5577] net_ratelimit: 18 callbacks suppressed [ 78.554081][ T5577] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:99:29 [ 78.560408][ T5583] EXT4-fs: Ignoring removed orlov option [ 78.791613][ T5604] loop1: detected capacity change from 0 to 1024 [ 78.800710][ T5604] EXT4-fs: Ignoring removed orlov option [ 78.825561][ T5607] loop3: detected capacity change from 0 to 2048 [ 78.840709][ T5610] loop4: detected capacity change from 0 to 128 [ 78.869017][ T5596] lo speed is unknown, defaulting to 1000 [ 78.885659][ T5607] batman_adv: batadv0: Interface deactivated: dummy0 [ 78.893572][ T5607] batman_adv: batadv0: Removing interface: dummy0 [ 79.181388][ T5627] loop1: detected capacity change from 0 to 512 [ 79.197477][ T5625] loop0: detected capacity change from 0 to 2048 [ 79.210962][ T5627] IPv4: Oversized IP packet from 127.202.26.0 [ 79.268781][ T5633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.625'. [ 79.307573][ T5631] loop3: detected capacity change from 0 to 1024 [ 79.354129][ T5631] EXT4-fs: Ignoring removed orlov option [ 79.367614][ T5643] loop0: detected capacity change from 0 to 1024 [ 79.396666][ T5643] EXT4-fs: Ignoring removed orlov option [ 79.861345][ T5665] loop4: detected capacity change from 0 to 2048 [ 79.873282][ T5666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.637'. [ 80.004251][ T5672] loop1: detected capacity change from 0 to 512 [ 80.031518][ T5656] lo speed is unknown, defaulting to 1000 [ 80.062387][ T5672] IPv4: Oversized IP packet from 127.202.26.0 [ 80.120725][ T5678] loop1: detected capacity change from 0 to 1024 [ 80.150908][ T5679] loop3: detected capacity change from 0 to 1024 [ 80.152147][ T5678] EXT4-fs: Ignoring removed orlov option [ 80.174715][ T5681] loop4: detected capacity change from 0 to 1024 [ 80.183751][ T5679] EXT4-fs: Ignoring removed orlov option [ 80.190726][ T5681] EXT4-fs: Ignoring removed orlov option [ 80.207440][ T5683] program syz.5.643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.317169][ T5693] loop0: detected capacity change from 0 to 1024 [ 80.325394][ T30] kauditd_printk_skb: 198 callbacks suppressed [ 80.325412][ T30] audit: type=1400 audit(1759948231.847:2182): avc: denied { read } for pid=5690 comm="syz.5.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.379395][ T5701] loop1: detected capacity change from 0 to 1024 [ 80.406539][ T5701] EXT4-fs: inline encryption not supported [ 80.413546][ T5701] EXT4-fs: Ignoring removed i_version option [ 80.433104][ T5708] loop3: detected capacity change from 0 to 2048 [ 80.466409][ T5693] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 80.486992][ T5701] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.528480][ T5701] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 80.529964][ T30] audit: type=1326 audit(1759948232.047:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 80.545113][ T5693] EXT4-fs (loop0): Remounting filesystem read-only [ 80.570212][ T30] audit: type=1326 audit(1759948232.047:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 80.590835][ T5701] EXT4-fs (loop1): Remounting filesystem read-only [ 80.603980][ T30] audit: type=1326 audit(1759948232.047:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 80.640012][ T30] audit: type=1326 audit(1759948232.047:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 80.668052][ T30] audit: type=1326 audit(1759948232.047:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 80.697580][ T30] audit: type=1326 audit(1759948232.047:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 80.726489][ T30] audit: type=1326 audit(1759948232.057:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 80.753369][ T30] audit: type=1326 audit(1759948232.057:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 80.783045][ T30] audit: type=1326 audit(1759948232.147:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 80.867105][ T5693] netlink: 'syz.0.645': attribute type 10 has an invalid length. [ 80.917717][ T5720] loop1: detected capacity change from 0 to 1024 [ 80.925326][ T5720] EXT4-fs: Ignoring removed orlov option [ 80.957392][ T5727] loop4: detected capacity change from 0 to 1024 [ 80.964913][ T5727] EXT4-fs: Ignoring removed orlov option [ 81.102941][ T5724] lo speed is unknown, defaulting to 1000 [ 81.169431][ T5739] loop4: detected capacity change from 0 to 1024 [ 81.177112][ T5739] EXT4-fs: Ignoring removed orlov option [ 81.421458][ T5749] lo speed is unknown, defaulting to 1000 [ 81.510440][ T5754] loop1: detected capacity change from 0 to 1024 [ 81.531049][ T5754] EXT4-fs: Ignoring removed orlov option [ 81.570824][ T5758] loop4: detected capacity change from 0 to 512 [ 81.600101][ T5758] IPv4: Oversized IP packet from 127.202.26.0 [ 81.677516][ T5767] loop4: detected capacity change from 0 to 1024 [ 81.684450][ T5748] loop0: detected capacity change from 0 to 512 [ 81.684886][ T5767] EXT4-fs: Ignoring removed orlov option [ 81.723328][ T5748] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.660: bad orphan inode 11862016 [ 81.729558][ T5769] netlink: 16 bytes leftover after parsing attributes in process `syz.5.678'. [ 81.746309][ T5748] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.827554][ T5778] loop3: detected capacity change from 0 to 1024 [ 81.834970][ T5778] EXT4-fs: inline encryption not supported [ 81.841812][ T5778] EXT4-fs: Ignoring removed i_version option [ 81.890321][ T5784] loop5: detected capacity change from 0 to 1024 [ 81.902660][ T5778] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.906079][ T5784] EXT4-fs: Ignoring removed orlov option [ 81.958027][ T5778] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 81.990509][ T5794] syzkaller0: entered promiscuous mode [ 81.997533][ T5794] syzkaller0: entered allmulticast mode [ 82.012277][ T5792] loop1: detected capacity change from 0 to 1024 [ 82.020644][ T5797] loop4: detected capacity change from 0 to 2048 [ 82.023982][ T5778] EXT4-fs (loop3): Remounting filesystem read-only [ 82.047988][ T5792] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 82.065995][ T5792] EXT4-fs (loop1): Remounting filesystem read-only [ 82.073475][ T5792] netlink: 'syz.1.675': attribute type 10 has an invalid length. [ 82.177009][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.191166][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.347187][ T5828] loop0: detected capacity change from 0 to 1024 [ 82.366113][ T5828] EXT4-fs: Ignoring removed orlov option [ 82.406693][ T5833] loop3: detected capacity change from 0 to 1024 [ 82.422290][ T5833] EXT4-fs: Ignoring removed orlov option [ 82.440296][ T5834] loop5: detected capacity change from 0 to 1024 [ 82.490712][ T5834] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 82.547871][ T5834] EXT4-fs (loop5): Remounting filesystem read-only [ 82.555666][ T5844] loop0: detected capacity change from 0 to 2048 [ 82.574690][ T5847] netlink: 'syz.5.690': attribute type 10 has an invalid length. [ 82.594048][ T5822] loop1: detected capacity change from 0 to 512 [ 82.607440][ T5847] team0 (unregistering): Port device team_slave_0 removed [ 82.627074][ T5847] team0 (unregistering): Port device team_slave_1 removed [ 82.636691][ T5822] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.686: bad orphan inode 11862016 [ 82.664839][ T5851] syzkaller0: entered promiscuous mode [ 82.671169][ T5851] syzkaller0: entered allmulticast mode [ 82.715972][ T5857] loop0: detected capacity change from 0 to 2048 [ 82.729716][ T5822] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.181427][ T5887] loop5: detected capacity change from 0 to 1024 [ 83.333072][ T5871] loop0: detected capacity change from 0 to 512 [ 83.339778][ T5900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.710'. [ 83.419491][ T5908] loop4: detected capacity change from 0 to 1024 [ 83.431533][ T5908] EXT4-fs: Ignoring removed bh option [ 83.441097][ T5871] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.699: bad orphan inode 11862016 [ 83.458635][ T5908] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 83.476825][ T5871] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.538861][ T5887] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 83.701510][ T5887] EXT4-fs (loop5): Remounting filesystem read-only [ 83.746383][ T5887] netlink: 'syz.5.707': attribute type 10 has an invalid length. [ 83.794412][ T5908] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 83.866342][ T5902] lo speed is unknown, defaulting to 1000 [ 83.938290][ T5929] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 83.985478][ T5935] loop5: detected capacity change from 0 to 1024 [ 83.993717][ T5929] loop0: detected capacity change from 0 to 128 [ 84.002738][ T5935] EXT4-fs: Ignoring removed orlov option [ 84.027386][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.725'. [ 84.075211][ T5942] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 84.083112][ T5942] FAT-fs (loop0): Filesystem has been set read-only [ 84.126329][ T5944] loop3: detected capacity change from 0 to 1024 [ 84.166467][ T5944] EXT4-fs: Ignoring removed orlov option [ 84.170831][ T5929] syz.0.720: attempt to access beyond end of device [ 84.170831][ T5929] loop0: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 84.186304][ T5929] syz.0.720: attempt to access beyond end of device [ 84.186304][ T5929] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 84.200942][ T5929] syz.0.720: attempt to access beyond end of device [ 84.200942][ T5929] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 84.239612][ T5929] syz.0.720: attempt to access beyond end of device [ 84.239612][ T5929] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 84.261270][ T5929] syz.0.720: attempt to access beyond end of device [ 84.261270][ T5929] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 84.308086][ T5929] syz.0.720: attempt to access beyond end of device [ 84.308086][ T5929] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 84.330277][ T5929] syz.0.720: attempt to access beyond end of device [ 84.330277][ T5929] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 84.350227][ T5929] syz.0.720: attempt to access beyond end of device [ 84.350227][ T5929] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 84.372980][ T5929] syz.0.720: attempt to access beyond end of device [ 84.372980][ T5929] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 84.393810][ T5929] syz.0.720: attempt to access beyond end of device [ 84.393810][ T5929] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 84.591172][ T5949] loop5: detected capacity change from 0 to 512 [ 84.627102][ T5949] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.727: bad orphan inode 11862016 [ 84.639381][ T5949] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.684929][ T5974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.736'. [ 84.978290][ T5997] loop5: detected capacity change from 0 to 2048 [ 84.994252][ T5991] netlink: 'syz.0.744': attribute type 10 has an invalid length. [ 85.031665][ T5997] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:99:29 [ 85.075142][ T6004] loop4: detected capacity change from 0 to 1024 [ 85.084866][ T6006] loop3: detected capacity change from 0 to 1024 [ 85.092389][ T6006] EXT4-fs: Ignoring removed orlov option [ 85.098286][ T6004] EXT4-fs: Ignoring removed orlov option [ 85.197559][ T6017] loop5: detected capacity change from 0 to 2048 [ 85.224940][ T6019] IPv6: addrconf: prefix option has invalid lifetime [ 85.250748][ T6017] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:99:29 [ 85.285235][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'. [ 85.350586][ T30] kauditd_printk_skb: 259 callbacks suppressed [ 85.350602][ T30] audit: type=1400 audit(1759948236.877:2451): avc: denied { mounton } for pid=6018 comm="syz.0.754" path="/158/bus" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.382172][ T30] audit: type=1400 audit(1759948236.877:2452): avc: denied { mount } for pid=6018 comm="syz.0.754" name="/" dev="ramfs" ino=13297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 85.480205][ T6033] netlink: 'syz.0.758': attribute type 10 has an invalid length. [ 85.488569][ T6031] loop5: detected capacity change from 0 to 512 [ 85.516993][ T6031] IPv4: Oversized IP packet from 127.202.26.0 [ 85.618152][ T6045] loop5: detected capacity change from 0 to 1024 [ 85.631910][ T6040] loop1: detected capacity change from 0 to 2048 [ 85.637704][ T6045] EXT4-fs: Ignoring removed orlov option [ 85.687476][ T30] audit: type=1326 audit(1759948237.187:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f045eec9 code=0x7ffc0000 [ 85.711502][ T30] audit: type=1326 audit(1759948237.187:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fb3f045eec9 code=0x7ffc0000 [ 85.736305][ T30] audit: type=1326 audit(1759948237.197:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f045eec9 code=0x7ffc0000 [ 85.762037][ T30] audit: type=1326 audit(1759948237.197:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f045eec9 code=0x7ffc0000 [ 85.776085][ T6051] loop3: detected capacity change from 0 to 1024 [ 85.800378][ T6051] EXT4-fs: Ignoring removed orlov option [ 85.826509][ T6054] syzkaller0: entered promiscuous mode [ 85.832380][ T6054] syzkaller0: entered allmulticast mode [ 85.841754][ T6028] loop4: detected capacity change from 0 to 512 [ 85.856702][ T30] audit: type=1326 audit(1759948237.387:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6050 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 85.881805][ T30] audit: type=1326 audit(1759948237.387:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6050 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 85.906147][ T30] audit: type=1326 audit(1759948237.387:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6050 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 85.935387][ T30] audit: type=1326 audit(1759948237.457:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6050 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 85.966207][ T6028] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.757: bad orphan inode 11862016 [ 85.992150][ T6028] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.078752][ T6070] loop5: detected capacity change from 0 to 1024 [ 86.100565][ T6070] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 86.171318][ T6070] EXT4-fs (loop5): Remounting filesystem read-only [ 86.178972][ T6070] netlink: 'syz.5.770': attribute type 10 has an invalid length. [ 86.209655][ T6082] IPv4: Oversized IP packet from 127.202.26.0 [ 86.372080][ T6099] syzkaller0: entered promiscuous mode [ 86.378526][ T6099] syzkaller0: entered allmulticast mode [ 86.381338][ T6101] loop3: detected capacity change from 0 to 1024 [ 86.426178][ T6101] EXT4-fs: Ignoring removed orlov option [ 86.435155][ T6103] loop1: detected capacity change from 0 to 2048 [ 86.499452][ T6108] netlink: 'syz.0.786': attribute type 10 has an invalid length. [ 86.626471][ T6125] FAULT_INJECTION: forcing a failure. [ 86.626471][ T6125] name failslab, interval 1, probability 0, space 0, times 0 [ 86.639880][ T6125] CPU: 0 UID: 0 PID: 6125 Comm: syz.1.791 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.639945][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.639958][ T6125] Call Trace: [ 86.639965][ T6125] [ 86.639973][ T6125] __dump_stack+0x1d/0x30 [ 86.640002][ T6125] dump_stack_lvl+0xe8/0x140 [ 86.640071][ T6125] dump_stack+0x15/0x1b [ 86.640094][ T6125] should_fail_ex+0x265/0x280 [ 86.640140][ T6125] should_failslab+0x8c/0xb0 [ 86.640244][ T6125] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 86.640283][ T6125] ? __alloc_skb+0x101/0x320 [ 86.640324][ T6125] __alloc_skb+0x101/0x320 [ 86.640354][ T6125] netlink_alloc_large_skb+0xbf/0xf0 [ 86.640388][ T6125] netlink_sendmsg+0x3cf/0x6b0 [ 86.640470][ T6125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.640506][ T6125] __sock_sendmsg+0x142/0x180 [ 86.640532][ T6125] ____sys_sendmsg+0x31e/0x4e0 [ 86.640579][ T6125] ___sys_sendmsg+0x17b/0x1d0 [ 86.640657][ T6125] __x64_sys_sendmsg+0xd4/0x160 [ 86.640698][ T6125] x64_sys_call+0x191e/0x3000 [ 86.640719][ T6125] do_syscall_64+0xd2/0x200 [ 86.640746][ T6125] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.640775][ T6125] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.640795][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.640889][ T6125] RIP: 0033:0x7faf9768eec9 [ 86.640915][ T6125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.640940][ T6125] RSP: 002b:00007faf960f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.641030][ T6125] RAX: ffffffffffffffda RBX: 00007faf978e5fa0 RCX: 00007faf9768eec9 [ 86.641046][ T6125] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 86.641063][ T6125] RBP: 00007faf960f7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.641079][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.641091][ T6125] R13: 00007faf978e6038 R14: 00007faf978e5fa0 R15: 00007ffe6cf35438 [ 86.641109][ T6125] [ 86.889462][ T6109] lo speed is unknown, defaulting to 1000 [ 86.926724][ T6131] loop3: detected capacity change from 0 to 1024 [ 86.943857][ T6131] EXT4-fs: Ignoring removed orlov option [ 87.082542][ T6147] syzkaller0: entered promiscuous mode [ 87.088763][ T6147] syzkaller0: entered allmulticast mode [ 87.203581][ T6153] loop3: detected capacity change from 0 to 1024 [ 87.210962][ T6153] EXT4-fs: Ignoring removed orlov option [ 87.240081][ T6156] netlink: 'syz.0.801': attribute type 10 has an invalid length. [ 87.356685][ T6168] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 87.377623][ T6168] loop3: detected capacity change from 0 to 128 [ 87.452219][ T6173] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 87.460682][ T6173] FAT-fs (loop3): Filesystem has been set read-only [ 87.742500][ T6157] loop4: detected capacity change from 0 to 512 [ 87.776893][ T6157] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.802: bad orphan inode 11862016 [ 87.810458][ T6157] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.837662][ T6194] loop1: detected capacity change from 0 to 512 [ 87.849291][ T6195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.814'. [ 87.877838][ T6194] IPv4: Oversized IP packet from 127.202.26.0 [ 88.088983][ T6222] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 88.131717][ T6222] loop5: detected capacity change from 0 to 128 [ 88.190199][ T6231] IPv4: Oversized IP packet from 127.202.26.0 [ 88.198469][ T6227] loop1: detected capacity change from 0 to 2048 [ 88.215626][ T6234] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 88.223492][ T6234] FAT-fs (loop5): Filesystem has been set read-only [ 88.362270][ T6247] netlink: 'syz.0.836': attribute type 21 has an invalid length. [ 88.422977][ T6247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.836'. [ 88.432451][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.836'. [ 88.450793][ T6249] unsupported nla_type 52263 [ 88.649340][ T6261] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:99:29 [ 88.729014][ T6265] batman_adv: batadv0: Interface deactivated: dummy0 [ 88.735798][ T6265] batman_adv: batadv0: Removing interface: dummy0 [ 88.822848][ T6277] loop4: detected capacity change from 0 to 1024 [ 88.830909][ T6277] EXT4-fs: inline encryption not supported [ 88.837055][ T6277] EXT4-fs: Ignoring removed i_version option [ 88.878645][ T6277] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.962132][ T6277] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 88.991060][ T6277] EXT4-fs (loop4): Remounting filesystem read-only [ 89.117174][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.855'. [ 89.506943][ T6332] loop1: detected capacity change from 0 to 1024 [ 89.532085][ T6332] EXT4-fs: Ignoring removed orlov option [ 89.538684][ T6333] loop4: detected capacity change from 0 to 1024 [ 89.614716][ T6339] netlink: 24 bytes leftover after parsing attributes in process `syz.5.873'. [ 89.709699][ T6333] netlink: 'syz.4.870': attribute type 10 has an invalid length. [ 89.812115][ T6364] loop4: detected capacity change from 0 to 1024 [ 89.830184][ T6364] EXT4-fs: Ignoring removed orlov option [ 89.897409][ T6369] IPv4: Oversized IP packet from 127.202.26.0 [ 89.932350][ T6374] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 89.967380][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.888'. [ 90.029738][ T6382] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 90.055307][ T6384] netlink: 'syz.0.891': attribute type 10 has an invalid length. [ 90.474889][ T30] kauditd_printk_skb: 297 callbacks suppressed [ 90.474909][ T30] audit: type=1326 audit(1759948241.997:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 90.569940][ T30] audit: type=1326 audit(1759948241.997:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 90.596691][ T30] audit: type=1326 audit(1759948241.997:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 90.623089][ T30] audit: type=1326 audit(1759948241.997:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 90.649179][ T30] audit: type=1326 audit(1759948241.997:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 90.673005][ T30] audit: type=1326 audit(1759948241.997:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 90.697039][ T30] audit: type=1326 audit(1759948241.997:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 90.722013][ T30] audit: type=1326 audit(1759948241.997:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 90.746257][ T30] audit: type=1326 audit(1759948241.997:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 90.771581][ T30] audit: type=1326 audit(1759948241.997:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 90.825451][ T6415] netlink: 'syz.3.902': attribute type 10 has an invalid length. [ 90.894877][ T6427] loop4: detected capacity change from 0 to 1024 [ 90.915515][ T6427] EXT4-fs: Ignoring removed orlov option [ 91.548280][ T6470] loop1: detected capacity change from 0 to 1024 [ 91.556627][ T6470] EXT4-fs: Ignoring removed orlov option [ 91.559791][ T6469] netlink: 'syz.5.918': attribute type 10 has an invalid length. [ 91.855108][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.928'. [ 91.942679][ T6475] loop4: detected capacity change from 0 to 512 [ 92.026801][ T6475] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.922: bad orphan inode 11862016 [ 92.040876][ T6475] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.268060][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.934'. [ 92.379476][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.938'. [ 92.413525][ T6522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.940'. [ 92.423986][ T6523] netlink: 'syz.4.933': attribute type 21 has an invalid length. [ 92.480761][ T6525] loop1: detected capacity change from 0 to 2048 [ 92.591339][ T6535] loop1: detected capacity change from 0 to 1024 [ 92.608373][ T6535] EXT4-fs: Ignoring removed orlov option [ 92.700732][ T6551] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 92.711251][ T6553] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 92.949276][ T6567] loop1: detected capacity change from 0 to 512 [ 92.964346][ T6567] IPv4: Oversized IP packet from 127.202.26.0 [ 93.051112][ T6571] __nla_validate_parse: 4 callbacks suppressed [ 93.051128][ T6571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.959'. [ 93.367100][ T6582] syzkaller0: entered promiscuous mode [ 93.372817][ T6582] syzkaller0: entered allmulticast mode [ 93.388178][ T6586] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 93.700682][ T6600] loop4: detected capacity change from 0 to 2048 [ 93.736158][ T6606] netlink: 60 bytes leftover after parsing attributes in process `syz.5.974'. [ 94.053778][ T6622] loop4: detected capacity change from 0 to 1024 [ 94.062144][ T6622] EXT4-fs: Ignoring removed orlov option [ 94.191623][ T6635] loop4: detected capacity change from 0 to 1024 [ 94.204375][ T6635] EXT4-fs: Ignoring removed orlov option [ 94.250401][ T6638] IPv4: Oversized IP packet from 127.202.26.0 [ 94.258722][ T6645] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 94.291697][ T6647] IPv4: Oversized IP packet from 127.202.26.0 [ 94.302169][ T6645] loop1: detected capacity change from 0 to 128 [ 94.371587][ T6657] loop4: detected capacity change from 0 to 1024 [ 94.389657][ T6659] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 94.394455][ T6657] EXT4-fs: Ignoring removed orlov option [ 94.397640][ T6659] FAT-fs (loop1): Filesystem has been set read-only [ 94.502588][ T6645] bio_check_eod: 182 callbacks suppressed [ 94.502610][ T6645] syz.1.987: attempt to access beyond end of device [ 94.502610][ T6645] loop1: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 94.552483][ T6645] syz.1.987: attempt to access beyond end of device [ 94.552483][ T6645] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 94.555519][ T6679] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 94.569623][ T6645] syz.1.987: attempt to access beyond end of device [ 94.569623][ T6645] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 94.594186][ T6681] IPv4: Oversized IP packet from 127.202.26.0 [ 94.602396][ T6645] syz.1.987: attempt to access beyond end of device [ 94.602396][ T6645] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 94.616606][ T6645] syz.1.987: attempt to access beyond end of device [ 94.616606][ T6645] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 94.691002][ T6645] syz.1.987: attempt to access beyond end of device [ 94.691002][ T6645] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 94.727786][ T6645] syz.1.987: attempt to access beyond end of device [ 94.727786][ T6645] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 94.734510][ T6693] loop4: detected capacity change from 0 to 512 [ 94.772644][ T6645] syz.1.987: attempt to access beyond end of device [ 94.772644][ T6645] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 94.790295][ T6693] IPv4: Oversized IP packet from 127.202.26.0 [ 94.793291][ T6645] syz.1.987: attempt to access beyond end of device [ 94.793291][ T6645] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 94.813831][ T6645] syz.1.987: attempt to access beyond end of device [ 94.813831][ T6645] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 94.928590][ T6708] loop1: detected capacity change from 0 to 1024 [ 94.933451][ T6712] loop4: detected capacity change from 0 to 512 [ 94.973500][ T6708] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 94.991386][ T6708] EXT4-fs (loop1): Remounting filesystem read-only [ 94.997430][ T6712] IPv4: Oversized IP packet from 127.202.26.0 [ 95.000429][ T6708] netlink: 'syz.1.1012': attribute type 10 has an invalid length. [ 95.084525][ T6727] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1016'. [ 95.102801][ T6726] loop1: detected capacity change from 0 to 2048 [ 95.217266][ T6740] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 95.247191][ T6740] loop1: detected capacity change from 0 to 128 [ 95.326192][ T6754] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 95.334322][ T6754] FAT-fs (loop1): Filesystem has been set read-only [ 95.361777][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1032'. [ 95.389558][ T6753] netlink: 'syz.3.1030': attribute type 10 has an invalid length. [ 95.498578][ T6774] loop1: detected capacity change from 0 to 1024 [ 95.505671][ T6774] EXT4-fs: Ignoring removed orlov option [ 95.625826][ T6784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1043'. [ 95.726911][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1048'. [ 95.815582][ T30] kauditd_printk_skb: 286 callbacks suppressed [ 95.815597][ T30] audit: type=1326 audit(1759948247.337:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 95.895084][ T30] audit: type=1326 audit(1759948247.387:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6802 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 95.919684][ T30] audit: type=1326 audit(1759948247.387:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6802 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 95.944747][ T30] audit: type=1326 audit(1759948247.387:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6802 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 95.969516][ T30] audit: type=1326 audit(1759948247.387:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6802 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 95.994135][ T30] audit: type=1326 audit(1759948247.387:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6802 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 96.018245][ T30] audit: type=1326 audit(1759948247.387:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6802 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 96.043555][ T30] audit: type=1326 audit(1759948247.387:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6802 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 96.067495][ T30] audit: type=1326 audit(1759948247.387:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6802 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 96.091287][ T30] audit: type=1326 audit(1759948247.387:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6802 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7faf9768eec9 code=0x7ffc0000 [ 96.497054][ T6829] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1062'. [ 96.551509][ T6835] loop1: detected capacity change from 0 to 1024 [ 96.558477][ T6835] EXT4-fs: Ignoring removed orlov option [ 96.627966][ T6839] loop1: detected capacity change from 0 to 2048 [ 96.845032][ T6850] loop1: detected capacity change from 0 to 2048 [ 97.036598][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1075'. [ 97.091693][ T6846] lo speed is unknown, defaulting to 1000 [ 97.145833][ T6872] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1078'. [ 97.267656][ T6858] loop4: detected capacity change from 0 to 512 [ 97.282857][ T6881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1082'. [ 97.371575][ T6858] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1072: bad orphan inode 11862016 [ 97.404198][ T6858] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.658885][ T6902] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 97.779810][ T6914] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 97.881135][ T6888] loop1: detected capacity change from 0 to 512 [ 98.037134][ T6888] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1084: bad orphan inode 11862016 [ 98.055955][ T6888] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.062614][ T6918] lo speed is unknown, defaulting to 1000 [ 98.361800][ T6931] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 98.445202][ T6935] __nla_validate_parse: 1 callbacks suppressed [ 98.445224][ T6935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1103'. [ 98.533057][ T6944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1107'. [ 98.633896][ T6951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1108'. [ 98.736256][ T6955] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 98.773901][ T6955] loop4: detected capacity change from 0 to 128 [ 98.794511][ T6950] lo speed is unknown, defaulting to 1000 [ 98.841755][ T6963] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 98.849709][ T6963] FAT-fs (loop4): Filesystem has been set read-only [ 99.024703][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1122'. [ 99.151187][ T6986] loop4: detected capacity change from 0 to 512 [ 99.218675][ T6991] loop4: detected capacity change from 0 to 2048 [ 99.247857][ T6992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1121'. [ 99.283250][ T6971] loop1: detected capacity change from 0 to 512 [ 99.313670][ T7001] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 99.341998][ T6971] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1120: bad orphan inode 11862016 [ 99.363409][ T6971] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.421910][ T7001] loop4: detected capacity change from 0 to 128 [ 99.493672][ T6994] lo speed is unknown, defaulting to 1000 [ 99.513238][ T7013] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 99.520938][ T7013] FAT-fs (loop4): Filesystem has been set read-only [ 99.647426][ T7001] bio_check_eod: 182 callbacks suppressed [ 99.647446][ T7001] syz.4.1132: attempt to access beyond end of device [ 99.647446][ T7001] loop4: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 99.706012][ T7001] syz.4.1132: attempt to access beyond end of device [ 99.706012][ T7001] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 99.735868][ T7001] syz.4.1132: attempt to access beyond end of device [ 99.735868][ T7001] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 99.751821][ T7001] syz.4.1132: attempt to access beyond end of device [ 99.751821][ T7001] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 99.769376][ T7001] syz.4.1132: attempt to access beyond end of device [ 99.769376][ T7001] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 99.785550][ T7001] syz.4.1132: attempt to access beyond end of device [ 99.785550][ T7001] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 99.829766][ T7041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1150'. [ 99.897186][ T7048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1145'. [ 99.973421][ T7001] syz.4.1132: attempt to access beyond end of device [ 99.973421][ T7001] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 99.987373][ T7001] syz.4.1132: attempt to access beyond end of device [ 99.987373][ T7001] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 100.021134][ T7001] syz.4.1132: attempt to access beyond end of device [ 100.021134][ T7001] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 100.038770][ T7001] syz.4.1132: attempt to access beyond end of device [ 100.038770][ T7001] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 100.124991][ T7064] dvmrp0: entered allmulticast mode [ 100.160590][ T7066] loop1: detected capacity change from 0 to 2048 [ 100.176382][ T7064] dvmrp0: left allmulticast mode [ 100.219153][ T7075] dvmrp0: entered allmulticast mode [ 100.235351][ T7075] dvmrp0: left allmulticast mode [ 100.338275][ T7088] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1171'. [ 100.408403][ T7098] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 100.701764][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1183'. [ 100.711273][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1183'. [ 100.791076][ T7133] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 100.800710][ T7136] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 101.044718][ T30] kauditd_printk_skb: 286 callbacks suppressed [ 101.044734][ T30] audit: type=1400 audit(1759948252.567:3350): avc: denied { create } for pid=7143 comm="syz.0.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 101.255779][ T30] audit: type=1326 audit(1759948252.777:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 101.281156][ T30] audit: type=1326 audit(1759948252.777:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 101.305162][ T30] audit: type=1326 audit(1759948252.777:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 101.329330][ T30] audit: type=1326 audit(1759948252.777:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 101.353669][ T30] audit: type=1326 audit(1759948252.777:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 101.377783][ T30] audit: type=1326 audit(1759948252.777:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 101.402521][ T30] audit: type=1326 audit(1759948252.777:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 101.426595][ T30] audit: type=1326 audit(1759948252.777:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 101.450931][ T30] audit: type=1326 audit(1759948252.777:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.0.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 101.650249][ T7187] IPv6: Can't replace route, no match found [ 101.787363][ T7195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.842294][ T7199] IPv6: Can't replace route, no match found [ 102.137060][ T7227] tmpfs: Bad value for 'size' [ 102.186598][ T7227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7227 comm=syz.3.1231 [ 102.281192][ T7249] FAULT_INJECTION: forcing a failure. [ 102.281192][ T7249] name failslab, interval 1, probability 0, space 0, times 0 [ 102.294178][ T7249] CPU: 0 UID: 0 PID: 7249 Comm: syz.1.1238 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.294213][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.294228][ T7249] Call Trace: [ 102.294235][ T7249] [ 102.294242][ T7249] __dump_stack+0x1d/0x30 [ 102.294268][ T7249] dump_stack_lvl+0xe8/0x140 [ 102.294294][ T7249] dump_stack+0x15/0x1b [ 102.294316][ T7249] should_fail_ex+0x265/0x280 [ 102.294442][ T7249] should_failslab+0x8c/0xb0 [ 102.294477][ T7249] kmem_cache_alloc_noprof+0x50/0x480 [ 102.294527][ T7249] ? pidfs_register_pid+0x87/0x180 [ 102.294598][ T7249] pidfs_register_pid+0x87/0x180 [ 102.294641][ T7249] unix_socketpair+0x7c/0x430 [ 102.294675][ T7249] __sys_socketpair+0x21a/0x430 [ 102.294706][ T7249] __x64_sys_socketpair+0x52/0x60 [ 102.294730][ T7249] x64_sys_call+0x2bf6/0x3000 [ 102.294781][ T7249] do_syscall_64+0xd2/0x200 [ 102.294806][ T7249] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.294843][ T7249] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.294895][ T7249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.294925][ T7249] RIP: 0033:0x7faf97690e1a [ 102.294945][ T7249] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.295010][ T7249] RSP: 002b:00007faf960f6f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 102.295036][ T7249] RAX: ffffffffffffffda RBX: 00007faf978e5f00 RCX: 00007faf97690e1a [ 102.295123][ T7249] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 102.295140][ T7249] RBP: 00007faf960f7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.295156][ T7249] R10: 00007faf960f6f98 R11: 0000000000000246 R12: 0000000000000000 [ 102.295172][ T7249] R13: 00007faf978e6038 R14: 00007faf978e5fa0 R15: 00007ffe6cf35438 [ 102.295198][ T7249] [ 102.997353][ T7293] IPv6: Can't replace route, no match found [ 103.029164][ T7291] lo speed is unknown, defaulting to 1000 [ 103.575960][ T7335] netlink: 'syz.5.1271': attribute type 30 has an invalid length. [ 103.782428][ T7355] loop1: detected capacity change from 0 to 1024 [ 103.855394][ T7355] EXT4-fs mount: 181 callbacks suppressed [ 103.855411][ T7355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.906216][ T7353] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 103.939818][ T7353] EXT4-fs (loop1): Remounting filesystem read-only [ 103.974503][ T7366] __nla_validate_parse: 9 callbacks suppressed [ 103.974525][ T7366] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1281'. [ 103.995283][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.068954][ T7350] lo speed is unknown, defaulting to 1000 [ 104.830716][ T7432] lo speed is unknown, defaulting to 1000 [ 104.900635][ T7442] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 104.925829][ T7444] loop1: detected capacity change from 0 to 1024 [ 104.933162][ T7444] EXT4-fs: Ignoring removed orlov option [ 104.974325][ T7444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.171577][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.198967][ T7460] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 105.213106][ T7460] loop1: detected capacity change from 0 to 128 [ 105.246300][ T7457] lo speed is unknown, defaulting to 1000 [ 105.282150][ T7466] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 105.290217][ T7466] FAT-fs (loop1): Filesystem has been set read-only [ 105.391778][ T7460] bio_check_eod: 54 callbacks suppressed [ 105.391796][ T7460] syz.1.1319: attempt to access beyond end of device [ 105.391796][ T7460] loop1: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 105.414262][ T7460] syz.1.1319: attempt to access beyond end of device [ 105.414262][ T7460] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 105.429149][ T7460] syz.1.1319: attempt to access beyond end of device [ 105.429149][ T7460] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 105.444072][ T7460] syz.1.1319: attempt to access beyond end of device [ 105.444072][ T7460] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 105.459458][ T7460] syz.1.1319: attempt to access beyond end of device [ 105.459458][ T7460] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 105.475244][ T7460] syz.1.1319: attempt to access beyond end of device [ 105.475244][ T7460] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 105.494865][ T7460] syz.1.1319: attempt to access beyond end of device [ 105.494865][ T7460] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 105.510078][ T7460] syz.1.1319: attempt to access beyond end of device [ 105.510078][ T7460] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 105.538381][ T7460] syz.1.1319: attempt to access beyond end of device [ 105.538381][ T7460] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 105.556848][ T7460] syz.1.1319: attempt to access beyond end of device [ 105.556848][ T7460] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 105.648300][ T7482] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 105.820188][ T7491] loop1: detected capacity change from 0 to 2048 [ 105.893392][ T7491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.030980][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.072818][ T7512] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 106.168218][ T7521] loop1: detected capacity change from 0 to 1024 [ 106.177711][ T7521] EXT4-fs: inline encryption not supported [ 106.183681][ T7521] EXT4-fs: Ignoring removed i_version option [ 106.202568][ T30] kauditd_printk_skb: 368 callbacks suppressed [ 106.202590][ T30] audit: type=1326 audit(1759948257.727:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 106.246296][ T30] audit: type=1326 audit(1759948257.767:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 106.273320][ T30] audit: type=1326 audit(1759948257.767:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 106.298017][ T30] audit: type=1326 audit(1759948257.767:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 106.322123][ T30] audit: type=1326 audit(1759948257.767:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 106.346823][ T30] audit: type=1326 audit(1759948257.767:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f653713d710 code=0x7ffc0000 [ 106.372008][ T30] audit: type=1326 audit(1759948257.767:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f653713d710 code=0x7ffc0000 [ 106.397077][ T30] audit: type=1326 audit(1759948257.767:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 106.422975][ T30] audit: type=1326 audit(1759948257.767:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 106.480708][ T30] audit: type=1326 audit(1759948258.007:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 106.667519][ T7521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.697264][ T7521] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.830512][ T7521] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 106.866074][ T7521] EXT4-fs (loop1): Remounting filesystem read-only [ 106.900169][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.925416][ T7568] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 106.956992][ T7574] netlink: 'syz.5.1360': attribute type 5 has an invalid length. [ 106.965575][ T7574] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1360'. [ 106.971538][ T7572] loop1: detected capacity change from 0 to 1024 [ 107.023935][ T7572] EXT4-fs: Ignoring removed orlov option [ 107.068076][ T7572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.227460][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.328989][ T7571] lo speed is unknown, defaulting to 1000 [ 107.419313][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1368'. [ 107.439919][ T7604] loop1: detected capacity change from 0 to 512 [ 107.777919][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1381'. [ 107.994256][ T7643] loop1: detected capacity change from 0 to 1024 [ 108.003290][ T7648] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 108.031474][ T7643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.056098][ T7643] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 108.075534][ T7649] lo speed is unknown, defaulting to 1000 [ 108.096048][ T7643] EXT4-fs (loop1): Remounting filesystem read-only [ 108.268703][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.383569][ T7637] lo speed is unknown, defaulting to 1000 [ 108.554995][ T7676] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 108.807054][ T7697] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 108.823108][ T7699] loop1: detected capacity change from 0 to 1024 [ 108.832079][ T7699] EXT4-fs: Ignoring removed orlov option [ 108.844947][ T7683] lo speed is unknown, defaulting to 1000 [ 108.867438][ T7699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.088421][ T7719] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 109.601185][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.962394][ T7762] loop1: detected capacity change from 0 to 8192 [ 111.131990][ T7828] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 111.161876][ T7830] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 111.234735][ T30] kauditd_printk_skb: 621 callbacks suppressed [ 111.234754][ T30] audit: type=1326 audit(1759948262.757:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 111.276454][ T30] audit: type=1326 audit(1759948262.757:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 111.301095][ T30] audit: type=1326 audit(1759948262.797:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 111.325783][ T30] audit: type=1326 audit(1759948262.797:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 111.350038][ T30] audit: type=1326 audit(1759948262.797:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 111.374695][ T30] audit: type=1326 audit(1759948262.797:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 111.398618][ T30] audit: type=1326 audit(1759948262.797:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 111.423849][ T30] audit: type=1326 audit(1759948262.797:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 111.423904][ T7808] loop1: detected capacity change from 0 to 512 [ 111.456183][ T30] audit: type=1326 audit(1759948262.797:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 111.480655][ T30] audit: type=1326 audit(1759948262.797:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 111.525073][ T7808] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1453: bad orphan inode 11862016 [ 111.549957][ T7808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 111.568883][ T7808] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.634288][ T7866] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 111.822967][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 112.023725][ T7889] loop1: detected capacity change from 0 to 512 [ 112.041680][ T7889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.069512][ T7889] EXT4-fs (loop1): 1 truncate cleaned up [ 112.091144][ T7889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.137375][ T7896] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 112.148745][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.150880][ T7898] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 112.585510][ T7923] netlink: 'syz.1.1500': attribute type 2 has an invalid length. [ 112.593876][ T7923] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1500'. [ 112.783104][ T7927] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 113.090432][ T7944] loop1: detected capacity change from 0 to 1024 [ 113.137618][ T7944] EXT4-fs: inline encryption not supported [ 113.144354][ T7944] EXT4-fs: Ignoring removed i_version option [ 113.210631][ T7944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.293233][ T7944] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.319957][ T7955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1516'. [ 113.408174][ T7944] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 113.459182][ T7944] EXT4-fs (loop1): Remounting filesystem read-only [ 113.545108][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.768663][ T7973] FAULT_INJECTION: forcing a failure. [ 113.768663][ T7973] name failslab, interval 1, probability 0, space 0, times 0 [ 113.782830][ T7973] CPU: 0 UID: 0 PID: 7973 Comm: syz.1.1524 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.782869][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.782886][ T7973] Call Trace: [ 113.782895][ T7973] [ 113.782905][ T7973] __dump_stack+0x1d/0x30 [ 113.782934][ T7973] dump_stack_lvl+0xe8/0x140 [ 113.782962][ T7973] dump_stack+0x15/0x1b [ 113.782985][ T7973] should_fail_ex+0x265/0x280 [ 113.783081][ T7973] should_failslab+0x8c/0xb0 [ 113.783119][ T7973] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 113.783148][ T7973] ? __alloc_skb+0x101/0x320 [ 113.783179][ T7973] __alloc_skb+0x101/0x320 [ 113.783260][ T7973] alloc_skb_with_frags+0x7d/0x470 [ 113.783298][ T7973] ? should_fail_ex+0xdb/0x280 [ 113.783337][ T7973] sock_alloc_send_pskb+0x430/0x4e0 [ 113.783397][ T7973] ? __rcu_read_unlock+0x4f/0x70 [ 113.783434][ T7973] packet_sendmsg+0x222b/0x31f0 [ 113.783502][ T7973] ? avc_has_perm+0xf7/0x180 [ 113.783541][ T7973] ? selinux_socket_sendmsg+0x175/0x1b0 [ 113.783612][ T7973] ? __pfx_packet_sendmsg+0x10/0x10 [ 113.783643][ T7973] __sock_sendmsg+0x142/0x180 [ 113.783664][ T7973] __sys_sendto+0x268/0x330 [ 113.783738][ T7973] __x64_sys_sendto+0x76/0x90 [ 113.783808][ T7973] x64_sys_call+0x2d14/0x3000 [ 113.783838][ T7973] do_syscall_64+0xd2/0x200 [ 113.783902][ T7973] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 113.783931][ T7973] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 113.783954][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.783983][ T7973] RIP: 0033:0x7faf9768eec9 [ 113.784003][ T7973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.784028][ T7973] RSP: 002b:00007faf960f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 113.784147][ T7973] RAX: ffffffffffffffda RBX: 00007faf978e5fa0 RCX: 00007faf9768eec9 [ 113.784164][ T7973] RDX: 000000000000fd35 RSI: 00002000000002c0 RDI: 0000000000000003 [ 113.784181][ T7973] RBP: 00007faf960f7090 R08: 0000200000000140 R09: 0000000000000014 [ 113.784198][ T7973] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 113.784215][ T7973] R13: 00007faf978e6038 R14: 00007faf978e5fa0 R15: 00007ffe6cf35438 [ 113.784243][ T7973] [ 114.881492][ T7993] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 115.238767][ T8009] loop1: detected capacity change from 0 to 1024 [ 115.306235][ T8009] EXT4-fs: Ignoring removed orlov option [ 115.393005][ T8012] netlink: 'syz.5.1540': attribute type 30 has an invalid length. [ 115.471522][ T8009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.561834][ T8021] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 115.629439][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.656090][ T8025] netlink: 'syz.0.1543': attribute type 30 has an invalid length. [ 115.820092][ T8031] netlink: 'syz.4.1546': attribute type 30 has an invalid length. [ 115.872888][ T8042] netlink: 'syz.0.1550': attribute type 2 has an invalid length. [ 115.880975][ T8042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1550'. [ 116.045308][ T8050] netlink: 'syz.3.1554': attribute type 2 has an invalid length. [ 116.053963][ T8050] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1554'. [ 116.333104][ T8071] loop1: detected capacity change from 0 to 2048 [ 116.347612][ T8071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.397168][ T30] kauditd_printk_skb: 597 callbacks suppressed [ 116.397185][ T30] audit: type=1326 audit(1759948267.927:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 116.440158][ T30] audit: type=1326 audit(1759948267.957:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 116.466311][ T30] audit: type=1326 audit(1759948267.957:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 116.491584][ T30] audit: type=1326 audit(1759948267.957:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 116.518288][ T30] audit: type=1326 audit(1759948267.957:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 116.543314][ T30] audit: type=1326 audit(1759948267.957:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 116.570254][ T30] audit: type=1326 audit(1759948267.957:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 116.595198][ T30] audit: type=1326 audit(1759948267.957:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 116.621157][ T30] audit: type=1326 audit(1759948267.957:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 116.661507][ T30] audit: type=1326 audit(1759948268.097:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8086 comm="syz.4.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 116.740296][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.800773][ T8096] pim6reg: entered allmulticast mode [ 116.841623][ T8096] pim6reg: left allmulticast mode [ 116.921777][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1575'. [ 116.946831][ T8106] loop1: detected capacity change from 0 to 128 [ 116.981559][ T8104] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 117.056554][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1576'. [ 117.363136][ T8136] 9pnet: Could not find request transport: fd0x0000000000000009 [ 117.422874][ T8132] lo speed is unknown, defaulting to 1000 [ 117.515167][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1597'. [ 117.605421][ T8166] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 117.658931][ T8173] netlink: 'syz.4.1605': attribute type 30 has an invalid length. [ 117.848473][ T8178] lo speed is unknown, defaulting to 1000 [ 117.957376][ T8191] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 118.210991][ T8217] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 118.354204][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1629'. [ 118.737497][ T8253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1640'. [ 118.961364][ T8274] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 119.105417][ T8288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1654'. [ 119.453180][ T8309] netlink: 'syz.1.1663': attribute type 30 has an invalid length. [ 119.577872][ T8324] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 119.599607][ T8326] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 119.615237][ T8295] lo speed is unknown, defaulting to 1000 [ 120.038974][ T8353] netlink: 'syz.3.1683': attribute type 30 has an invalid length. [ 120.498711][ T8380] netlink: 'syz.1.1696': attribute type 30 has an invalid length. [ 120.914279][ T8434] netlink: 'syz.5.1720': attribute type 30 has an invalid length. [ 121.017278][ T8442] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 121.095827][ T8448] lo speed is unknown, defaulting to 1000 [ 121.154272][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.165153][ T8453] batadv_slave_0: entered promiscuous mode [ 121.187878][ T8450] lo speed is unknown, defaulting to 1000 [ 121.227620][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1728'. [ 121.239570][ T8457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.252260][ T8457] batadv_slave_0: entered promiscuous mode [ 121.416121][ T30] kauditd_printk_skb: 657 callbacks suppressed [ 121.416143][ T30] audit: type=1326 audit(1759948272.927:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 121.446686][ T30] audit: type=1326 audit(1759948272.927:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 121.470894][ T30] audit: type=1326 audit(1759948272.927:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 121.495956][ T30] audit: type=1326 audit(1759948272.927:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 121.520954][ T30] audit: type=1326 audit(1759948272.927:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653713eec9 code=0x7ffc0000 [ 121.694029][ T30] audit: type=1326 audit(1759948273.217:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 121.765930][ T30] audit: type=1326 audit(1759948273.217:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 121.791086][ T30] audit: type=1326 audit(1759948273.217:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 121.815619][ T30] audit: type=1326 audit(1759948273.217:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 121.839886][ T30] audit: type=1326 audit(1759948273.217:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 121.890276][ T8497] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 121.960899][ T8505] netlink: 'syz.0.1746': attribute type 30 has an invalid length. [ 121.984181][ T8493] netlink: 'syz.5.1741': attribute type 30 has an invalid length. [ 122.024597][ T8508] lo speed is unknown, defaulting to 1000 [ 122.155916][ T8519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1751'. [ 122.174385][ T8522] netlink: 'syz.0.1753': attribute type 5 has an invalid length. [ 122.227478][ T8524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.235016][ T8524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.260717][ T8524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.268914][ T8524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.320340][ T8530] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1758'. [ 122.398766][ T8537] delete_channel: no stack [ 122.613062][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1769'. [ 122.685223][ T8563] netlink: 'syz.1.1771': attribute type 13 has an invalid length. [ 122.724089][ T8563] gretap0: refused to change device tx_queue_len [ 122.736337][ T8563] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 123.010862][ T8590] netlink: 'syz.5.1782': attribute type 30 has an invalid length. [ 124.095571][ T8635] lo speed is unknown, defaulting to 1000 [ 124.224721][ T8664] pim6reg: entered allmulticast mode [ 124.236418][ T8668] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 124.993748][ T8718] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1842'. [ 125.205604][ T8731] pim6reg: entered allmulticast mode [ 125.380116][ T8746] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 125.437116][ T8749] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 125.597255][ T8763] pim6reg: entered allmulticast mode [ 125.831659][ T8781] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 125.944360][ T8789] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 126.422611][ T8820] netlink: 'syz.4.1887': attribute type 30 has an invalid length. [ 126.465096][ T8822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1888'. [ 126.489416][ T30] kauditd_printk_skb: 453 callbacks suppressed [ 126.489494][ T30] audit: type=1326 audit(1759948278.017:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8819 comm="syz.4.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 126.520099][ T30] audit: type=1326 audit(1759948278.017:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8819 comm="syz.4.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 126.662325][ T30] audit: type=1326 audit(1759948278.157:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 126.688007][ T30] audit: type=1326 audit(1759948278.177:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 126.712550][ T30] audit: type=1326 audit(1759948278.177:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 126.737383][ T30] audit: type=1326 audit(1759948278.177:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 126.762092][ T30] audit: type=1326 audit(1759948278.177:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 126.786214][ T30] audit: type=1326 audit(1759948278.177:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 126.810740][ T30] audit: type=1326 audit(1759948278.177:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 126.964861][ T8844] netlink: 'syz.5.1897': attribute type 4 has an invalid length. [ 126.996534][ T30] audit: type=1400 audit(1759948278.517:6105): avc: denied { getopt } for pid=8843 comm="syz.5.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.008954][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 127.213717][ T8867] netlink: 'syz.4.1907': attribute type 30 has an invalid length. [ 127.389420][ T8877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1910'. [ 127.459794][ T8861] lo speed is unknown, defaulting to 1000 [ 127.556406][ T8882] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 127.637277][ T8868] lo speed is unknown, defaulting to 1000 [ 127.888587][ T8899] netlink: 'syz.3.1922': attribute type 30 has an invalid length. [ 127.910976][ T8877] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1910'. [ 127.920418][ T8877] unsupported nlmsg_type 40 [ 128.025273][ T8912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1926'. [ 128.252324][ T8932] netlink: 'syz.3.1936': attribute type 30 has an invalid length. [ 128.324681][ T8936] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 128.817129][ T8972] tipc: Started in network mode [ 128.822414][ T8972] tipc: Node identity ac14140f, cluster identity 4711 [ 128.848107][ T8972] tipc: New replicast peer: 255.255.255.255 [ 128.855467][ T8972] tipc: Enabled bearer , priority 10 [ 129.730813][ T9050] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 129.788635][ T9] IPVS: starting estimator thread 0... [ 129.889451][ T9054] IPVS: using max 2256 ests per chain, 112800 per kthread [ 129.966249][ T36] tipc: Node number set to 2886997007 [ 130.165506][ T9081] netlink: 'syz.1.1996': attribute type 4 has an invalid length. [ 130.312243][ T9090] netlink: 'syz.4.2001': attribute type 30 has an invalid length. [ 130.519428][ T9114] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 131.370860][ T9159] netlink: 'syz.4.2030': attribute type 30 has an invalid length. [ 131.519883][ T23] IPVS: starting estimator thread 0... [ 131.577466][ T30] kauditd_printk_skb: 460 callbacks suppressed [ 131.577561][ T30] audit: type=1326 audit(1759948283.097:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.4.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 131.607947][ T30] audit: type=1326 audit(1759948283.097:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.4.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 131.643362][ T9176] netlink: 'syz.3.2036': attribute type 30 has an invalid length. [ 131.657976][ T9173] IPVS: using max 2304 ests per chain, 115200 per kthread [ 131.685978][ T30] audit: type=1326 audit(1759948283.167:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9175 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 131.710531][ T30] audit: type=1326 audit(1759948283.167:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9175 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 131.734912][ T30] audit: type=1326 audit(1759948283.167:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9175 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 131.758956][ T30] audit: type=1326 audit(1759948283.167:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9175 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 131.783327][ T30] audit: type=1326 audit(1759948283.167:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9175 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 131.807238][ T30] audit: type=1326 audit(1759948283.167:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9175 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 131.831295][ T30] audit: type=1326 audit(1759948283.167:6574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9175 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 131.855316][ T30] audit: type=1326 audit(1759948283.167:6575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9175 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 132.020432][ T9189] tipc: Started in network mode [ 132.025498][ T9189] tipc: Node identity ac14140f, cluster identity 4711 [ 132.040460][ T9189] tipc: New replicast peer: 255.255.255.255 [ 132.046808][ T9189] tipc: Enabled bearer , priority 10 [ 132.079686][ T9201] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 132.216171][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 132.225538][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 132.235048][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 132.334698][ T9232] netlink: 'syz.3.2061': attribute type 4 has an invalid length. [ 132.347546][ T9232] netlink: 'syz.3.2061': attribute type 4 has an invalid length. [ 132.374577][ T9235] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 132.489574][ T9249] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 132.505468][ T9251] netlink: 'syz.5.2069': attribute type 30 has an invalid length. [ 132.542321][ T9259] tipc: Enabling of bearer rejected, already enabled [ 132.561054][ T9263] tipc: Enabling of bearer rejected, already enabled [ 132.595674][ T9267] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 132.755513][ T9289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2088'. [ 132.814478][ T9295] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2086'. [ 132.858218][ T9294] netlink: 'syz.4.2090': attribute type 30 has an invalid length. [ 133.018534][ T9316] pim6reg: entered allmulticast mode [ 133.034030][ T9316] pim6reg: left allmulticast mode [ 133.079458][ T9326] netlink: 'syz.0.2105': attribute type 4 has an invalid length. [ 133.098481][ T9329] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 133.167431][ T23] tipc: Node number set to 2886997007 [ 133.222824][ T9345] pim6reg: entered allmulticast mode [ 133.234959][ T9345] pim6reg: left allmulticast mode [ 133.377343][ T9366] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 133.421199][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2129'. [ 133.534340][ T9386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2132'. [ 133.543465][ T9386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2132'. [ 133.587971][ T9386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2132'. [ 133.597148][ T9386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2132'. [ 134.019657][ T9423] tipc: Started in network mode [ 134.024991][ T9423] tipc: Node identity ac14140f, cluster identity 4711 [ 134.211040][ T9423] tipc: New replicast peer: 255.255.255.255 [ 134.217358][ T9423] tipc: Enabled bearer , priority 10 [ 134.515023][ T9458] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 134.722448][ T9471] netlink: 'syz.4.2166': attribute type 30 has an invalid length. [ 134.858860][ T9478] tipc: Enabling of bearer rejected, already enabled [ 135.225742][ T9] tipc: Node number set to 2886997007 [ 136.765216][ T9633] netlink: 'syz.4.2233': attribute type 4 has an invalid length. [ 136.793989][ T3407] lo speed is unknown, defaulting to 1000 [ 136.799871][ T3407] syz2: Port: 1 Link DOWN [ 137.179023][ T9676] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 137.247765][ T30] kauditd_printk_skb: 298 callbacks suppressed [ 137.247784][ T30] audit: type=1326 audit(1759948288.777:6874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 137.312986][ T30] audit: type=1326 audit(1759948288.807:6875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 137.338661][ T30] audit: type=1326 audit(1759948288.807:6876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 137.365764][ T30] audit: type=1326 audit(1759948288.807:6877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 137.390010][ T30] audit: type=1326 audit(1759948288.807:6878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 137.414018][ T30] audit: type=1326 audit(1759948288.807:6879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 137.438345][ T30] audit: type=1326 audit(1759948288.807:6880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 137.462645][ T30] audit: type=1326 audit(1759948288.807:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 137.634679][ T30] audit: type=1326 audit(1759948289.087:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 137.658303][ T30] audit: type=1326 audit(1759948289.087:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff395eec9 code=0x7ffc0000 [ 138.161813][ T9712] netlink: 'syz.4.2267': attribute type 30 has an invalid length. [ 138.181526][ T9698] lo speed is unknown, defaulting to 1000 [ 138.508294][ T9763] pim6reg: entered allmulticast mode [ 138.535608][ T9763] pim6reg: left allmulticast mode [ 138.597264][ T9773] __nla_validate_parse: 16 callbacks suppressed [ 138.597280][ T9773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2294'. [ 138.685893][ T9774] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2293'. [ 138.811504][ T9788] netlink: 'syz.4.2299': attribute type 30 has an invalid length. [ 138.847039][ T9792] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2303'. [ 138.856197][ T9792] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2303'. [ 138.883399][ T9792] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2303'. [ 138.892790][ T9792] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2303'. [ 138.990360][ T9792] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2303'. [ 138.999814][ T9792] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2303'. [ 139.053211][ T9813] pim6reg: entered allmulticast mode [ 139.101017][ T9813] pim6reg: left allmulticast mode [ 139.373746][ T9833] netlink: 'syz.3.2320': attribute type 30 has an invalid length. [ 139.536229][ T9842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2326'. [ 139.550138][ T9844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2325'. [ 139.789558][ T9874] netlink: 'syz.5.2337': attribute type 30 has an invalid length. [ 139.886137][ T9882] pim6reg: entered allmulticast mode [ 139.895913][ T9882] pim6reg: left allmulticast mode [ 140.197443][ T9907] netlink: 'syz.3.2352': attribute type 30 has an invalid length. [ 140.497964][ T9940] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 141.599379][T10013] netlink: 'syz.3.2394': attribute type 30 has an invalid length. [ 142.330744][T10079] pim6reg: entered allmulticast mode [ 142.341600][ T30] kauditd_printk_skb: 322 callbacks suppressed [ 142.341616][ T30] audit: type=1326 audit(1759948293.867:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 142.376600][T10079] pim6reg: left allmulticast mode [ 142.436132][ T30] audit: type=1326 audit(1759948293.907:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 142.459989][ T30] audit: type=1326 audit(1759948293.907:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 142.484165][ T30] audit: type=1326 audit(1759948293.907:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 142.508700][ T30] audit: type=1326 audit(1759948293.907:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 142.532938][ T30] audit: type=1326 audit(1759948293.907:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 142.557407][ T30] audit: type=1326 audit(1759948293.907:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 142.980132][T10098] lo speed is unknown, defaulting to 1000 [ 143.047128][ T30] audit: type=1326 audit(1759948294.577:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10131 comm="syz.3.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 143.131067][ T30] audit: type=1326 audit(1759948294.577:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10131 comm="syz.3.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 143.154991][ T30] audit: type=1326 audit(1759948294.577:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10131 comm="syz.3.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 143.331614][ T295] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.409863][ T295] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.518000][ T295] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.667849][T10180] __nla_validate_parse: 33 callbacks suppressed [ 143.667870][T10180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2465'. [ 143.683424][T10180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2465'. [ 143.729258][ T295] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.753599][T10180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2465'. [ 143.762736][T10180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2465'. [ 143.876101][ T295] bridge_slave_1: left allmulticast mode [ 143.882341][ T295] bridge_slave_1: left promiscuous mode [ 143.888234][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.952009][ T295] bridge_slave_0: left allmulticast mode [ 143.957813][ T295] bridge_slave_0: left promiscuous mode [ 143.963875][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.992844][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 144.146033][ T295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.177681][ T295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.198938][ T295] bond0 (unregistering): Released all slaves [ 144.254558][ T295] hsr_slave_0: left promiscuous mode [ 144.260842][ T295] hsr_slave_1: left promiscuous mode [ 144.273207][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.280738][ T295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.306531][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.314167][ T295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.353881][ T295] veth1_macvtap: left promiscuous mode [ 144.372388][ T295] veth0_macvtap: left promiscuous mode [ 144.383238][ T295] veth1_vlan: left promiscuous mode [ 144.395072][ T295] veth0_vlan: left promiscuous mode [ 144.582747][ T295] team0 (unregistering): Port device team_slave_1 removed [ 144.597764][ T295] team0 (unregistering): Port device team_slave_0 removed [ 144.616047][T10240] capability: warning: `syz.3.2492' uses 32-bit capabilities (legacy support in use) [ 144.696838][T10235] netlink: 'syz.5.2489': attribute type 30 has an invalid length. [ 144.699223][T10243] netlink: 'syz.4.2491': attribute type 30 has an invalid length. [ 145.212989][T10262] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 145.626751][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2508'. [ 145.917876][T10299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2511'. [ 145.927023][T10299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2511'. [ 146.004838][T10299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2511'. [ 146.013997][T10299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2511'. [ 146.447843][T10323] lo speed is unknown, defaulting to 1000 [ 146.632556][T10356] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 146.910946][T10384] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 147.187254][T10391] lo speed is unknown, defaulting to 1000 [ 147.377331][T10417] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 148.041396][T10484] pim6reg: entered allmulticast mode [ 148.060089][T10484] pim6reg: left allmulticast mode [ 148.276190][T10502] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 148.471357][T10530] tipc: Started in network mode [ 148.476457][T10530] tipc: Node identity ac14140f, cluster identity 4711 [ 148.487249][T10530] tipc: New replicast peer: 255.255.255.255 [ 148.493384][T10530] tipc: Enabled bearer , priority 10 [ 149.055768][ C0] ================================================================== [ 149.063906][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 149.071229][ C0] [ 149.073601][ C0] read-write to 0xffff8881010a04b8 of 8 bytes by interrupt on cpu 1: [ 149.081714][ C0] wq_worker_tick+0x60/0x230 [ 149.086393][ C0] sched_tick+0x11a/0x270 [ 149.090848][ C0] update_process_times+0x15f/0x190 [ 149.096068][ C0] tick_nohz_handler+0x249/0x2d0 [ 149.101120][ C0] __hrtimer_run_queues+0x20c/0x5a0 [ 149.106458][ C0] hrtimer_interrupt+0x21a/0x460 [ 149.111514][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 149.117529][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 149.123200][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 149.129311][ C0] memset_orig+0x75/0xb0 [ 149.133590][ C0] bpf_send_signal_common+0x3c/0x300 [ 149.138920][ C0] bpf_send_signal+0x1d/0x30 [ 149.143532][ C0] bpf_prog_8f9dbacca2d17414+0x2c/0x5b [ 149.148999][ C0] bpf_trace_run2+0x107/0x1c0 [ 149.153821][ C0] __traceiter_kfree+0x2e/0x50 [ 149.158604][ C0] kfree+0x351/0x400 [ 149.162526][ C0] io_alloc_cache_free+0xc0/0xe0 [ 149.167490][ C0] io_rsrc_cache_free+0x36/0x40 [ 149.172481][ C0] io_free_alloc_caches+0x65/0x70 [ 149.177528][ C0] io_ring_ctx_free+0x78/0x3a0 [ 149.182313][ C0] io_ring_exit_work+0x529/0x560 [ 149.187274][ C0] process_scheduled_works+0x4cb/0x9d0 [ 149.192861][ C0] worker_thread+0x582/0x770 [ 149.197468][ C0] kthread+0x486/0x510 [ 149.201574][ C0] ret_from_fork+0x122/0x1b0 [ 149.206178][ C0] ret_from_fork_asm+0x1a/0x30 [ 149.211105][ C0] [ 149.213441][ C0] read-write to 0xffff8881010a04b8 of 8 bytes by interrupt on cpu 0: [ 149.221518][ C0] wq_worker_tick+0x60/0x230 [ 149.226119][ C0] sched_tick+0x11a/0x270 [ 149.230473][ C0] update_process_times+0x15f/0x190 [ 149.235766][ C0] tick_nohz_handler+0x249/0x2d0 [ 149.240745][ C0] __hrtimer_run_queues+0x20c/0x5a0 [ 149.246110][ C0] hrtimer_interrupt+0x21a/0x460 [ 149.251099][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 149.257114][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 149.262788][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 149.268788][ C0] __tsan_read_write8+0x14d/0x190 [ 149.273976][ C0] perf_callchain_kernel+0x29c/0x330 [ 149.279317][ C0] get_perf_callchain+0x2ac/0x530 [ 149.284381][ C0] bpf_get_stackid+0xce/0x120 [ 149.289084][ C0] bpf_get_stackid_raw_tp+0xf6/0x120 [ 149.294399][ C0] bpf_prog_ae3bc260cbdd1f03+0x2a/0x32 [ 149.299875][ C0] bpf_trace_run2+0x107/0x1c0 [ 149.304594][ C0] __traceiter_kfree+0x2e/0x50 [ 149.309569][ C0] kfree+0x351/0x400 [ 149.313495][ C0] io_alloc_cache_free+0xc0/0xe0 [ 149.318463][ C0] io_free_alloc_caches+0x42/0x70 [ 149.323686][ C0] io_ring_ctx_free+0x78/0x3a0 [ 149.328574][ C0] io_ring_exit_work+0x529/0x560 [ 149.333718][ C0] process_scheduled_works+0x4cb/0x9d0 [ 149.339388][ C0] worker_thread+0x582/0x770 [ 149.344530][ C0] kthread+0x486/0x510 [ 149.348806][ C0] ret_from_fork+0x122/0x1b0 [ 149.353434][ C0] ret_from_fork_asm+0x1a/0x30 [ 149.358402][ C0] [ 149.360748][ C0] value changed: 0x000000000015aae0 -> 0x000000000015d1f0 [ 149.367871][ C0] [ 149.370203][ C0] Reported by Kernel Concurrency Sanitizer on: [ 149.376445][ C0] CPU: 0 UID: 0 PID: 169 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.386271][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.396529][ C0] Workqueue: iou_exit io_ring_exit_work [ 149.402104][ C0] ================================================================== [ 149.486637][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 149.486655][ T30] audit: type=1326 audit(1759948301.007:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 149.516930][ T30] audit: type=1326 audit(1759948301.007:7384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 149.541010][ T30] audit: type=1326 audit(1759948301.007:7385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 149.564652][ T30] audit: type=1326 audit(1759948301.017:7386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 149.588519][ T30] audit: type=1326 audit(1759948301.017:7387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 149.612410][ T3400] tipc: Node number set to 2886997007 [ 149.619177][ T30] audit: type=1326 audit(1759948301.147:7388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 149.642948][ T30] audit: type=1326 audit(1759948301.147:7389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 149.666949][ T30] audit: type=1326 audit(1759948301.147:7390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 149.690706][ T30] audit: type=1326 audit(1759948301.147:7391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 149.714519][ T30] audit: type=1326 audit(1759948301.147:7392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8ac2eec9 code=0x7ffc0000 [ 149.742266][T10596] netlink: 'syz.3.2617': attribute type 30 has an invalid length.