last executing test programs: 2m8.839096769s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 2m8.758114549s ago: executing program 3 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) sendto$inet(r2, &(0x7f0000000100)="ab", 0xfffd, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 2m8.507235341s ago: executing program 3 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYRESHEX=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x40, 0x20, 0x3ff, 0x7, {{0x14, 0x4, 0x2, 0x21, 0x50, 0x64, 0x0, 0x1, 0x2f, 0x0, @remote, @loopback, {[@generic={0x157, 0x10, "73ce167e3a8def6b84747cf4c909"}, @noop, @cipso={0x86, 0x28, 0x3, [{0x5, 0x7, "70ab45acec"}, {0x0, 0x10, "39b090c4011e7fee363ed5bf62ec"}, {0x0, 0xb, "50cb5d7066e6e1145a"}]}]}}}}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x9}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r5}, 0x10) 2m7.373050258s ago: executing program 3 (id=21): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) getsockopt(r0, 0x3f, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket(0x28, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r6 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x4, 0x1, 0x1, 0x5], 0x1, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0xf) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m6.813224402s ago: executing program 3 (id=27): symlinkat(0x0, 0xffffffffffffff9c, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000002c0)) lseek(0xffffffffffffffff, 0x10001, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)="279c59a724cf1bca3ae684ec3af2e7dfa3fe4de17fe946293ae52e8b7df41a2e8626a6ed40b5771ff6a466d8a5e1b0", 0x2f) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x4040003) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) r8 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r8, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 2m4.397174798s ago: executing program 3 (id=56): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="9d96a79bbade2f30151b0fc229cd2de805280f1087316e34397f19087fd72cf01feb5de664bf789a94d1eb722232e90b538bb457e6366ae78047e38248e1cb049cfa150f4f1eaf56afacb079310c94f5b8f34ddc07e9293010c47f0d0d0518eacca02be8cf9544bda6e60030e10f5fd9a53828fce205799254e98a10ba6ebbc26baf093f9255e1e3d60165c49f8391dcb01844ef28d8b49f8fd510ad6d8438ff0888d903cc", @ANYRES32=r2, @ANYBLOB="83b57595b3fbf52a4d8e6cdd9f8b8c18bd6b775412c71a10f8552fb2bd3c1fd8971b837fde33d28002e8b974fe01606f5aa751d9d7b35056cd1377521545a4a1f9782997516f7f0e1fb8e8e8d8bed1771b2cacfd51256940ac9552808c1e58b333c5164d6bc298fc9a5e4296962eeec163382395fc55debd8dced0c130e9e373858527646b112ebfad58934340779e93ad8279932e6dae38d9188b67a2cd21d5ae998b64c968ebd16a2464683e50b858bf46370fdd38438caf5b9a5128433d689163ee9e01edb6bcd252c2e921", @ANYBLOB="d62ff3dd12346c273a4b66c1bc87fcf1feb8ffd94df593d4d3a2f9101dccbdf6c82d4399f44c497fab31482a18ad19979f6e65ded400dcc1c297ecfe2167e9d5dfe6dacafe94745703b284bbee0ee1a027459c48fb75a990d803d819a15bce5621d10d3447c0cd944305548e45b87f711f40a84ccd5b01a33666e9b6df400be97ecb6f08c48abcd68b26826542c82819ba067c5c9669e6e069ca6805dfbe547645d84a7015704b95a7edb8c80c481bfc6393221f3d3fd1b27ad4c6eebb0c9808bc6c12311caf", @ANYRES8=r0, @ANYRESHEX=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000200), 0x45, 0x9, 0x9, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r8, 0x0, &(0x7f0000000100)={{0x0, 0x3ffffffe}}, 0x0) 2m4.396982188s ago: executing program 32 (id=56): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="9d96a79bbade2f30151b0fc229cd2de805280f1087316e34397f19087fd72cf01feb5de664bf789a94d1eb722232e90b538bb457e6366ae78047e38248e1cb049cfa150f4f1eaf56afacb079310c94f5b8f34ddc07e9293010c47f0d0d0518eacca02be8cf9544bda6e60030e10f5fd9a53828fce205799254e98a10ba6ebbc26baf093f9255e1e3d60165c49f8391dcb01844ef28d8b49f8fd510ad6d8438ff0888d903cc", @ANYRES32=r2, @ANYBLOB="83b57595b3fbf52a4d8e6cdd9f8b8c18bd6b775412c71a10f8552fb2bd3c1fd8971b837fde33d28002e8b974fe01606f5aa751d9d7b35056cd1377521545a4a1f9782997516f7f0e1fb8e8e8d8bed1771b2cacfd51256940ac9552808c1e58b333c5164d6bc298fc9a5e4296962eeec163382395fc55debd8dced0c130e9e373858527646b112ebfad58934340779e93ad8279932e6dae38d9188b67a2cd21d5ae998b64c968ebd16a2464683e50b858bf46370fdd38438caf5b9a5128433d689163ee9e01edb6bcd252c2e921", @ANYBLOB="d62ff3dd12346c273a4b66c1bc87fcf1feb8ffd94df593d4d3a2f9101dccbdf6c82d4399f44c497fab31482a18ad19979f6e65ded400dcc1c297ecfe2167e9d5dfe6dacafe94745703b284bbee0ee1a027459c48fb75a990d803d819a15bce5621d10d3447c0cd944305548e45b87f711f40a84ccd5b01a33666e9b6df400be97ecb6f08c48abcd68b26826542c82819ba067c5c9669e6e069ca6805dfbe547645d84a7015704b95a7edb8c80c481bfc6393221f3d3fd1b27ad4c6eebb0c9808bc6c12311caf", @ANYRES8=r0, @ANYRESHEX=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000200), 0x45, 0x9, 0x9, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r8, 0x0, &(0x7f0000000100)={{0x0, 0x3ffffffe}}, 0x0) 4.54170412s ago: executing program 1 (id=1849): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000900142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) connect$packet(r0, &(0x7f0000019200)={0x11, 0x2, 0x0, 0x1, 0x39, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x14) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) 4.456899071s ago: executing program 1 (id=1853): semctl$SETVAL(0x0, 0xed6ea0fbfbfc8682, 0x10, 0x0) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$GETVAL(r0, 0x1, 0xc, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x19) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, 0x0, 0x40000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1], [0x0, 0x8, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000000)=""/3) 3.562893457s ago: executing program 1 (id=1861): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="00000000300000000000000001000000010000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 3.199045309s ago: executing program 2 (id=1867): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000900142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) connect$packet(r0, &(0x7f0000019200)={0x11, 0x2, 0x0, 0x1, 0x39, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x14) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) 3.08328352s ago: executing program 2 (id=1868): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x188e, 0xc, 0x0, 0x8, 0x2020008, 0xb, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r4 = syz_io_uring_setup(0xbc4, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x82, 0x3e8}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r4, 0x29ab, 0xd480, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r7, 0x1, 0x9}, 0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c000000050000000f00000001000004000000000700000004000000020000000d00002c343c9266514b9107d7000000000c010000000300000000000012020000000f0000000000000b020000000a0000000000000e02000000000000000c00000030300015a5269f7f10eba3ca9058698e3dc2d77db18e85b72964eabbafcc5ca85c13f65655d83d0143d58435e9e3e2adc7bcb377a69276c2a0d6c8006d30ed341f8d753550a4771574e15bb59bcc5390815fb8c3e55953034b2f"], &(0x7f0000001a80)=""/4096, 0x79, 0x1000, 0x0, 0x6, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x9, 0x0}, 0x8) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x9, 0x8}, 0xc) r11 = dup2(r2, r10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r11, 0x8008f512, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000300000000000000000000ad1376ce73706f6300"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x11, &(0x7f00000004c0)=""/17, 0x0, 0x1, '\x00', r7, @fallback=0x5b, r8, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xb, 0x9, 0x1fd}, 0x10, r9, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, r11, r2, 0xffffffffffffffff, r10, r11, r2], &(0x7f0000000780)=[{0x2, 0x5, 0x8000009, 0xb}], 0x10, 0x5ee}, 0x94) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@empty, r7}, 0x14) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='afs_call_done\x00', r12, 0x0, 0x4}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x2, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000081ff9b867985c956872f160000feffff108500009a000700000095c03b075bd7b2c99f78c6d9569659fcfcfa2b3e86f2acc39130758561a964971379ce53b4f8720dfed3228e9dcffa2f76a3fff6804e4a12407fbdd8f8ad933d54595051634b60f1d6854a68f453391b9faad9bcc2f45b20e2a5dfa5c7daa2f7ce5e1a9c6e3ff6176ba27a5e800c43f034756976a8c4ef205d506a8ebacb91984513ff407d8efb487e67d7fe672f166462d314f62cfe7f28dd767f37cb8089c4d4244911cb38f48f1e86f07a9d8c907a018a5b2caa36b40634df177ef50000000000000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x30, '\x00', r7, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r13, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_NEW_SEC_KEY(r14, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r15, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000100)) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000980)={0x0, @in6={{0xa, 0x4e26, 0x46, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}}, 0x0, 0x8, 0x8002, 0xff, 0x1b2, 0x0, 0x9}, 0x9c) 2.851216812s ago: executing program 2 (id=1869): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9800000013000100"/20, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a8010"], 0x98}}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08070000001c0000000000019078ac1e0001ac1414aa00009078006700080e4948099f0aae7df2a2b4b6432ae607f114b14220e7094be72c494672f429e300dd00398066bc89b5531ebc418a39f279ea6091d382f549e674f6266326d559ec630e55fa7081eff7ae1f9a134cca49468c60e7732e912e5a48d80b537731f03bc4620cfe457084245e18e02cde2cdd1ae611806e6b1e551266f1e5e4941318beb65ca1b31373ab3a92f2ad2c5c33eea617"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1c00000000d1c07e0017000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x46, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000100)={0x0}) mq_timedreceive(r2, &(0x7f0000036600)=""/102378, 0x18fea, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") pipe(&(0x7f0000000080)) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) socket(0xa, 0x3, 0x3a) 2.668848953s ago: executing program 1 (id=1870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYRESHEX=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x40, 0x20, 0x3ff, 0x7, {{0x14, 0x4, 0x2, 0x21, 0x50, 0x64, 0x0, 0x1, 0x2f, 0x0, @remote, @loopback, {[@generic={0x157, 0x10, "73ce167e3a8def6b84747cf4c909"}, @noop, @cipso={0x86, 0x28, 0x3, [{0x5, 0x7, "70ab45acec"}, {0x0, 0x10, "39b090c4011e7fee363ed5bf62ec"}, {0x0, 0xb, "50cb5d7066e6e1145a"}]}]}}}}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x9}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r5}, 0x10) 2.429729234s ago: executing program 4 (id=1876): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.356178975s ago: executing program 4 (id=1877): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x34) open$dir(&(0x7f0000000080)='./file0\x00', 0xc200, 0x100) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$caif_stream(0x25, 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) dup2(r2, r3) sendmmsg(r4, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000001c0)='b', 0x1}], 0x1}}], 0x1, 0x40) 2.295655955s ago: executing program 4 (id=1879): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0080, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x4ea0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x800, 0x2, 0x0, 0xa, 0x0, 0x7}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0xb99}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.902572578s ago: executing program 2 (id=1884): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x0, 0x69, 0x0, 0x12a7}}]}]}}}]}, 0x70}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 1.833564498s ago: executing program 1 (id=1885): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0080, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x4ea0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x800, 0x2, 0x0, 0xa, 0x0, 0x7}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0xb99}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 1.075500223s ago: executing program 0 (id=1888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) close(r0) 872.830465ms ago: executing program 2 (id=1892): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000006c0), 0x1, 0x509, &(0x7f0000001500)="$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") socketpair(0x28, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x4, 0x9, 0xa, 0x162}, {0x5, 0x1, 0x5, 0x71}, {0x3, 0x0, 0x7, 0x2}, {0x9d, 0xfc, 0x2, 0x2}, {0xa25, 0x2, 0x8c, 0x5}]}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2f, &(0x7f0000000040), 0x3b) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x1, r7, 0x1, 0x9}, 0x14) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x9, 0x0}, 0x8) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x9, 0x8}, 0xc) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r11, @ANYBLOB="04002cbd7000fedbdf25110000001c0001800800030001000000080003000200000000680001800800010000000000000000", @ANYRES32=r7, @ANYBLOB="0800030000000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="08000300000000000a0002007663616e3000000000000000000000001400020073797a6b616c6c657230000000000000140002006772657461703000000000000000000014000180080003000100000008000100", @ANYRES32=r7, @ANYBLOB="38000180450003000100000008000300020000001400020062726964"], 0xe4}, 0x1, 0x0, 0x0, 0x4048804}, 0x40000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095", @ANYRES8=r0, @ANYRES64=r10, @ANYRES64=r2, @ANYRES8=r8, @ANYRES32=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) r15 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d80)='kfree\x00', r4}, 0x18) r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000d00)=ANY=[@ANYRES8=r15, @ANYRES32=r3, @ANYRES8=r15, @ANYRES32=r1, @ANYRES16=r14], &(0x7f0000000880)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000001340)=""/199, 0x41100, 0x18, '\x00', r7, 0x0, r15, 0x8, &(0x7f0000000f40)={0x17, 0x3}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0x5, 0x4, 0x8001}, 0x10, 0x22a11, r13, 0x3, &(0x7f0000001000), &(0x7f0000001040)=[{0x5, 0x1, 0xd, 0x7}, {0x2, 0x1, 0x210, 0xb}, {0x5, 0x3, 0xe, 0x4}], 0x10, 0x5}, 0x94) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r8) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="000225bd7000ffdbdf250600000308000300", @ANYRES32=0x0, @ANYBLOB="0c009900070000006c0000000a001800030303030303000004000500050000000800050002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4850}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r3}, &(0x7f0000000800), &(0x7f0000000140)=r16}, 0x20) close(r2) r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r18, 0x0, 0xfffffffffffffffd}, 0x18) open(&(0x7f00000003c0)='./file2\x00', 0x80, 0x113) 778.716615ms ago: executing program 0 (id=1893): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c000600010000000100"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 731.169176ms ago: executing program 5 (id=1894): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 690.068526ms ago: executing program 1 (id=1895): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0xa0080, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x4ea0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x800, 0x2, 0x0, 0xa, 0x0, 0x7}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0xb99}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 648.350506ms ago: executing program 5 (id=1896): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 606.253116ms ago: executing program 4 (id=1897): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x400, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={0x0}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000400)={0x101, 0x9, 0x200, 0x81, 0x9, 0xe2a3, 0x6, 0x10000, r3}, &(0x7f00000004c0)=0x20) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9ce", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 588.033157ms ago: executing program 5 (id=1898): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000800)="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", 0x272}, {&(0x7f0000000340)="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", 0x22f}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf032a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c86", 0x52}, {&(0x7f0000001080)="8faf7172d3633337220d108a9a30", 0xe}, {&(0x7f0000000600)="999c2c21e0bf34bc842640d954f0abbeb75747ec63fe7d6b46823f077b4474a513979d4b165bd0cab665851f5320ccc44690c4294f4ac17edd3a4e71e119b86d79fb7a9ad5e132abdea7de677c313727a1b5463bc71d762a2c57dc02fcd3037fd0b83e8ec77d8eff19bf5408aee74e49a203699b5666688330a2118c3de4ea5affd131", 0x83}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0) 561.949037ms ago: executing program 0 (id=1899): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x11e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10002, 0x8, 0x1, 0x8, 0x20005, 0xe, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 549.462437ms ago: executing program 5 (id=1900): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r0}, 0xfffffffffffffdee) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000280)={[{@rodir}, {@fat=@nocase}, {@utf8no}, {@fat=@discard}, {@shortname_mixed}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@fat=@check_normal}, {@uni_xlateno}, {@fat=@usefree}, {@utf8}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@utf8no}, {@rodir}]}, 0x1, 0x27b, &(0x7f0000000640)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7d018, &(0x7f0000000240)=ANY=[], 0x3c, 0x2ef, &(0x7f0000001b80)="$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") r2 = syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000001a40)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001a80)=ANY=[@ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, 0x0, 0x0) llistxattr(&(0x7f00000012c0)='./file1\x00', &(0x7f0000001700)=""/93, 0x5d) recvmmsg(r6, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/184, 0xb8}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000000140)={0x8, 0x48, '\x00', 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 503.267787ms ago: executing program 4 (id=1901): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x188e, 0xc, 0x0, 0x8, 0x2020008, 0xb, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r4 = syz_io_uring_setup(0xbc4, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x82, 0x3e8}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r4, 0x29ab, 0xd480, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r7, 0x1, 0x9}, 0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c000000050000000f00000001000004000000000700000004000000020000000d00002c343c9266514b9107d7000000000c010000000300000000000012020000000f0000000000000b020000000a0000000000000e02000000000000000c00000030300015a5269f7f10eba3ca9058698e3dc2d77db18e85b72964eabbafcc5ca85c13f65655d83d0143d58435e9e3e2adc7bcb377a69276c2a0d6c8006d30ed341f8d753550a4771574e15bb59bcc5390815fb8c3e55953034b2f"], &(0x7f0000001a80)=""/4096, 0x79, 0x1000, 0x0, 0x6, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x9, 0x0}, 0x8) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x9, 0x8}, 0xc) r11 = dup2(r2, r10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r11, 0x8008f512, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000300000000000000000000ad1376ce73706f6300"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x11, &(0x7f00000004c0)=""/17, 0x0, 0x1, '\x00', r7, @fallback=0x5b, r8, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xb, 0x9, 0x1fd}, 0x10, r9, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, r11, r2, 0xffffffffffffffff, r10, r11, r2], &(0x7f0000000780)=[{0x2, 0x5, 0x8000009, 0xb}], 0x10, 0x5ee}, 0x94) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@empty, r7}, 0x14) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='afs_call_done\x00', r12, 0x0, 0x4}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x2, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000081ff9b867985c956872f160000feffff108500009a000700000095c03b075bd7b2c99f78c6d9569659fcfcfa2b3e86f2acc39130758561a964971379ce53b4f8720dfed3228e9dcffa2f76a3fff6804e4a12407fbdd8f8ad933d54595051634b60f1d6854a68f453391b9faad9bcc2f45b20e2a5dfa5c7daa2f7ce5e1a9c6e3ff6176ba27a5e800c43f034756976a8c4ef205d506a8ebacb91984513ff407d8efb487e67d7fe672f166462d314f62cfe7f28dd767f37cb8089c4d4244911cb38f48f1e86f07a9d8c907a018a5b2caa36b40634df177ef50000000000000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x30, '\x00', r7, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r13, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_NEW_SEC_KEY(r14, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r15, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000100)) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000980)={0x0, @in6={{0xa, 0x4e26, 0x46, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}}, 0x0, 0x8, 0x8002, 0xff, 0x1b2, 0x0, 0x9}, 0x9c) 444.762068ms ago: executing program 0 (id=1902): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x6200c051}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2, 0x0, 0x7ff}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000200)) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14"], 0x64}}, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 384.482568ms ago: executing program 2 (id=1903): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r4, &(0x7f0000000080)="cc", 0x1, 0x200980) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) listen(0xffffffffffffffff, 0x50) socket$inet6(0xa, 0x3, 0x0) sendfile(r5, r5, 0x0, 0xe0000000) 304.728269ms ago: executing program 4 (id=1904): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYBLOB, @ANYRES16=r0], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='cq_poll\x00', r2}, 0x18) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="fd000000000000000006c2adc198831f0c0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xe, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='ext4_fc_cleanup\x00', r2, 0x0, 0xad}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="000088f7ffffffffffffaaaaaaaaaaaa08004500002000661400fc2f"], 0x32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 82.95598ms ago: executing program 5 (id=1905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 73.8383ms ago: executing program 0 (id=1906): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 3.51908ms ago: executing program 5 (id=1907): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x400, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgget$private(0x0, 0x0) 0s ago: executing program 0 (id=1908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '+f'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) kernel console output (not intermixed with test programs): node_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 132.494770][ T7157] loop0: detected capacity change from 0 to 128 [ 132.499575][ T7128] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.1230: bad symlink. [ 132.633684][ T7162] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1237'. [ 132.712042][ T7164] loop2: detected capacity change from 0 to 2048 [ 133.360090][ T7192] syz0: rxe_newlink: already configured on team_slave_1 [ 133.724640][ T7197] loop4: detected capacity change from 0 to 2048 [ 133.941314][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 134.318592][ T7222] tipc: Enabling of bearer rejected, failed to enable media [ 134.496143][ T7230] loop0: detected capacity change from 0 to 2048 [ 134.657508][ T7233] loop2: detected capacity change from 0 to 1024 [ 134.663991][ T7238] __nla_validate_parse: 2 callbacks suppressed [ 134.664076][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1258'. [ 134.686727][ T7240] loop4: detected capacity change from 0 to 128 [ 134.703348][ T7233] journal_path: Non-blockdev passed as './file0' [ 134.709865][ T7233] EXT4-fs: error: could not find journal device path [ 134.725140][ T7240] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.764356][ T7238] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 134.772716][ T7238] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 134.796759][ T7233] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.138307][ T7256] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1265'. [ 135.259861][ T7265] tipc: Enabling of bearer rejected, failed to enable media [ 135.565165][ T7267] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 136.056617][ T7279] loop5: detected capacity change from 0 to 1024 [ 136.069577][ T7279] journal_path: Non-blockdev passed as './file0' [ 136.076002][ T7279] EXT4-fs: error: could not find journal device path [ 136.088532][ T7280] loop0: detected capacity change from 0 to 2048 [ 136.105801][ T7279] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.109515][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 136.109535][ T29] audit: type=1107 audit(1762523908.147:4733): pid=7278 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 136.363421][ T7289] FAULT_INJECTION: forcing a failure. [ 136.363421][ T7289] name failslab, interval 1, probability 0, space 0, times 0 [ 136.376244][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.5.1275 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.376310][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.376323][ T7289] Call Trace: [ 136.376330][ T7289] [ 136.376341][ T7289] __dump_stack+0x1d/0x30 [ 136.376370][ T7289] dump_stack_lvl+0xe8/0x140 [ 136.376391][ T7289] dump_stack+0x15/0x1b [ 136.376411][ T7289] should_fail_ex+0x265/0x280 [ 136.376438][ T7289] should_failslab+0x8c/0xb0 [ 136.376553][ T7289] __kmalloc_noprof+0xa5/0x570 [ 136.376583][ T7289] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 136.376633][ T7289] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 136.376736][ T7289] genl_family_rcv_msg_doit+0x48/0x1b0 [ 136.376764][ T7289] ? selinux_capable+0x31/0x40 [ 136.376795][ T7289] ? security_capable+0x83/0x90 [ 136.376909][ T7289] ? ns_capable+0x7d/0xb0 [ 136.376976][ T7289] genl_rcv_msg+0x422/0x460 [ 136.377003][ T7289] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 136.377036][ T7289] netlink_rcv_skb+0x123/0x220 [ 136.377094][ T7289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.377131][ T7289] genl_rcv+0x28/0x40 [ 136.377201][ T7289] netlink_unicast+0x5c0/0x690 [ 136.377298][ T7289] netlink_sendmsg+0x58b/0x6b0 [ 136.377327][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.377352][ T7289] __sock_sendmsg+0x145/0x180 [ 136.377378][ T7289] ____sys_sendmsg+0x31e/0x4e0 [ 136.377410][ T7289] ___sys_sendmsg+0x17b/0x1d0 [ 136.377450][ T7289] __x64_sys_sendmsg+0xd4/0x160 [ 136.377506][ T7289] x64_sys_call+0x191e/0x3000 [ 136.377537][ T7289] do_syscall_64+0xd2/0x200 [ 136.377564][ T7289] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.377602][ T7289] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 136.377647][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.377671][ T7289] RIP: 0033:0x7ff410dcf6c9 [ 136.377687][ T7289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.377711][ T7289] RSP: 002b:00007ff40f82f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.377730][ T7289] RAX: ffffffffffffffda RBX: 00007ff411025fa0 RCX: 00007ff410dcf6c9 [ 136.377747][ T7289] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 136.377762][ T7289] RBP: 00007ff40f82f090 R08: 0000000000000000 R09: 0000000000000000 [ 136.377778][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.377795][ T7289] R13: 00007ff411026038 R14: 00007ff411025fa0 R15: 00007ffe050962b8 [ 136.377871][ T7289] [ 136.675759][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'. [ 136.714497][ T7292] loop5: detected capacity change from 0 to 2048 [ 136.863956][ T29] audit: type=1326 audit(1762523908.897:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 136.887519][ T29] audit: type=1326 audit(1762523908.907:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 136.910978][ T29] audit: type=1326 audit(1762523908.907:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 136.934465][ T29] audit: type=1326 audit(1762523908.907:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 136.957951][ T29] audit: type=1326 audit(1762523908.907:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 136.981427][ T29] audit: type=1326 audit(1762523908.907:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 137.004893][ T29] audit: type=1326 audit(1762523908.907:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4c27015e7 code=0x7ffc0000 [ 137.028297][ T29] audit: type=1326 audit(1762523908.907:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc4c270155c code=0x7ffc0000 [ 137.051682][ T29] audit: type=1326 audit(1762523908.907:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc4c2701494 code=0x7ffc0000 [ 137.078828][ T7304] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 137.092107][ T7300] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1278'. [ 140.891890][ C1] hrtimer: interrupt took 37618 ns [ 140.929049][ T7323] loop4: detected capacity change from 0 to 2048 [ 140.970229][ T7323] loop4: p2 < > p4 [ 140.974645][ T7323] loop4: p4 size 262144 extends beyond EOD, truncated [ 141.092879][ T7333] FAULT_INJECTION: forcing a failure. [ 141.092879][ T7333] name failslab, interval 1, probability 0, space 0, times 0 [ 141.105628][ T7333] CPU: 1 UID: 0 PID: 7333 Comm: syz.2.1287 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.105725][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.105755][ T7333] Call Trace: [ 141.105762][ T7333] [ 141.105770][ T7333] __dump_stack+0x1d/0x30 [ 141.105796][ T7333] dump_stack_lvl+0xe8/0x140 [ 141.105824][ T7333] dump_stack+0x15/0x1b [ 141.105862][ T7333] should_fail_ex+0x265/0x280 [ 141.105888][ T7333] should_failslab+0x8c/0xb0 [ 141.105919][ T7333] kmem_cache_alloc_noprof+0x50/0x480 [ 141.105994][ T7333] ? prepare_creds+0x37/0x4c0 [ 141.106022][ T7333] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 141.106053][ T7333] prepare_creds+0x37/0x4c0 [ 141.106108][ T7333] copy_creds+0x8f/0x3f0 [ 141.106161][ T7333] copy_process+0x658/0x2000 [ 141.106213][ T7333] ? kstrtouint+0x76/0xc0 [ 141.106250][ T7333] ? __rcu_read_unlock+0x4f/0x70 [ 141.106280][ T7333] kernel_clone+0x16c/0x5c0 [ 141.106380][ T7333] ? vfs_write+0x7e8/0x960 [ 141.106409][ T7333] __x64_sys_clone+0xe6/0x120 [ 141.106449][ T7333] x64_sys_call+0x119c/0x3000 [ 141.106492][ T7333] do_syscall_64+0xd2/0x200 [ 141.106513][ T7333] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.106591][ T7333] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 141.106657][ T7333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.106724][ T7333] RIP: 0033:0x7f8473d1f6c9 [ 141.106739][ T7333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.106758][ T7333] RSP: 002b:00007f847273cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 141.106778][ T7333] RAX: ffffffffffffffda RBX: 00007f8473f76180 RCX: 00007f8473d1f6c9 [ 141.106791][ T7333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200000 [ 141.106804][ T7333] RBP: 00007f847273d090 R08: 0000000000000000 R09: 0000000000000000 [ 141.106875][ T7333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 141.106887][ T7333] R13: 00007f8473f76218 R14: 00007f8473f76180 R15: 00007ffeef799158 [ 141.106908][ T7333] [ 141.319934][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 141.319952][ T29] audit: type=1326 audit(1762523913.357:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.0.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 141.349584][ T29] audit: type=1326 audit(1762523913.357:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.1.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 141.492562][ T29] audit: type=1326 audit(1762523913.377:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.0.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 141.516384][ T29] audit: type=1326 audit(1762523913.387:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.0.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 141.539970][ T29] audit: type=1326 audit(1762523913.397:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.0.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 141.563391][ T29] audit: type=1326 audit(1762523913.397:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.1.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 141.586883][ T29] audit: type=1326 audit(1762523913.407:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.0.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 141.610324][ T29] audit: type=1326 audit(1762523913.407:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.1.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 141.633745][ T29] audit: type=1326 audit(1762523913.417:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.0.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 141.657363][ T29] audit: type=1326 audit(1762523913.417:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.1.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 141.839390][ T7342] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1291'. [ 141.948454][ T7354] loop0: detected capacity change from 0 to 2048 [ 142.412522][ T7369] loop4: detected capacity change from 0 to 128 [ 142.423323][ T7369] ext4 filesystem being mounted at /235/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.555455][ T7376] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 142.690216][ T7387] syz.1.1304 uses obsolete (PF_INET,SOCK_PACKET) [ 142.736288][ T7393] loop1: detected capacity change from 0 to 128 [ 142.764003][ T7395] tipc: Enabling of bearer rejected, failed to enable media [ 142.859827][ T7397] loop0: detected capacity change from 0 to 4096 [ 142.866799][ T7400] netlink: 'syz.2.1308': attribute type 10 has an invalid length. [ 142.914073][ T7403] loop2: detected capacity change from 0 to 128 [ 142.961864][ T7403] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.014293][ T7405] dvmrp1: entered allmulticast mode [ 143.307909][ T7414] FAULT_INJECTION: forcing a failure. [ 143.307909][ T7414] name failslab, interval 1, probability 0, space 0, times 0 [ 143.320716][ T7414] CPU: 1 UID: 0 PID: 7414 Comm: syz.1.1313 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.320814][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.320831][ T7414] Call Trace: [ 143.320840][ T7414] [ 143.320848][ T7414] __dump_stack+0x1d/0x30 [ 143.320873][ T7414] dump_stack_lvl+0xe8/0x140 [ 143.320900][ T7414] dump_stack+0x15/0x1b [ 143.320924][ T7414] should_fail_ex+0x265/0x280 [ 143.321021][ T7414] should_failslab+0x8c/0xb0 [ 143.321061][ T7414] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 143.321099][ T7414] ? __get_vm_area_node+0x106/0x1d0 [ 143.321136][ T7414] __get_vm_area_node+0x106/0x1d0 [ 143.321253][ T7414] __vmalloc_node_range_noprof+0x28c/0xed0 [ 143.321316][ T7414] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 143.321450][ T7414] ? terminate_walk+0x27f/0x2a0 [ 143.321492][ T7414] ? path_openat+0x1bf8/0x2170 [ 143.321525][ T7414] ? css_rstat_updated+0xb7/0x240 [ 143.321550][ T7414] ? __rcu_read_unlock+0x4f/0x70 [ 143.321629][ T7414] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 143.321676][ T7414] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 143.321722][ T7414] __vmalloc_noprof+0x83/0xc0 [ 143.321814][ T7414] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 143.321884][ T7414] ? ppp_ioctl+0x1/0x11c0 [ 143.321914][ T7414] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 143.321965][ T7414] ? bpf_prog_alloc+0x2a/0x150 [ 143.322001][ T7414] ? ppp_ioctl+0x1/0x11c0 [ 143.322034][ T7414] bpf_prog_alloc+0x3c/0x150 [ 143.322118][ T7414] ? ppp_ioctl+0x1/0x11c0 [ 143.322157][ T7414] bpf_prog_create+0x73/0x130 [ 143.322312][ T7414] ? __pfx_ppp_ioctl+0x10/0x10 [ 143.322349][ T7414] ppp_get_filter+0x113/0x160 [ 143.322390][ T7414] ppp_ioctl+0xb93/0x11c0 [ 143.322467][ T7414] ? __fget_files+0x184/0x1c0 [ 143.322580][ T7414] ? __pfx_ppp_ioctl+0x10/0x10 [ 143.322682][ T7414] __se_sys_ioctl+0xce/0x140 [ 143.322708][ T7414] __x64_sys_ioctl+0x43/0x50 [ 143.322739][ T7414] x64_sys_call+0x1816/0x3000 [ 143.322771][ T7414] do_syscall_64+0xd2/0x200 [ 143.322799][ T7414] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.322902][ T7414] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.323032][ T7414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.323058][ T7414] RIP: 0033:0x7fc4c26ff6c9 [ 143.323133][ T7414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.323154][ T7414] RSP: 002b:00007fc4c115f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.323179][ T7414] RAX: ffffffffffffffda RBX: 00007fc4c2955fa0 RCX: 00007fc4c26ff6c9 [ 143.323242][ T7414] RDX: 00002000000003c0 RSI: 0000000040107446 RDI: 0000000000000006 [ 143.323259][ T7414] RBP: 00007fc4c115f090 R08: 0000000000000000 R09: 0000000000000000 [ 143.323276][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.323312][ T7414] R13: 00007fc4c2956038 R14: 00007fc4c2955fa0 R15: 00007fff2b942428 [ 143.323345][ T7414] [ 143.323356][ T7414] syz.1.1313: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 143.464496][ T7419] syz0: rxe_newlink: already configured on team_slave_1 [ 143.466005][ T7414] ,cpuset=/,mems_allowed=0 [ 143.634873][ T7414] CPU: 1 UID: 0 PID: 7414 Comm: syz.1.1313 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.634909][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.634976][ T7414] Call Trace: [ 143.634984][ T7414] [ 143.634992][ T7414] __dump_stack+0x1d/0x30 [ 143.635093][ T7414] dump_stack_lvl+0xe8/0x140 [ 143.635121][ T7414] dump_stack+0x15/0x1b [ 143.635142][ T7414] warn_alloc+0x12b/0x1a0 [ 143.635190][ T7414] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 143.635308][ T7414] ? terminate_walk+0x27f/0x2a0 [ 143.635351][ T7414] ? path_openat+0x1bf8/0x2170 [ 143.635381][ T7414] ? css_rstat_updated+0xb7/0x240 [ 143.635401][ T7414] ? __rcu_read_unlock+0x4f/0x70 [ 143.635498][ T7414] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 143.635539][ T7414] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 143.635586][ T7414] __vmalloc_noprof+0x83/0xc0 [ 143.635627][ T7414] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 143.635748][ T7414] ? ppp_ioctl+0x1/0x11c0 [ 143.635853][ T7414] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 143.635962][ T7414] ? bpf_prog_alloc+0x2a/0x150 [ 143.636096][ T7414] ? ppp_ioctl+0x1/0x11c0 [ 143.636136][ T7414] bpf_prog_alloc+0x3c/0x150 [ 143.636173][ T7414] ? ppp_ioctl+0x1/0x11c0 [ 143.636210][ T7414] bpf_prog_create+0x73/0x130 [ 143.636259][ T7414] ? __pfx_ppp_ioctl+0x10/0x10 [ 143.636298][ T7414] ppp_get_filter+0x113/0x160 [ 143.636375][ T7414] ppp_ioctl+0xb93/0x11c0 [ 143.636414][ T7414] ? __fget_files+0x184/0x1c0 [ 143.636453][ T7414] ? __pfx_ppp_ioctl+0x10/0x10 [ 143.636490][ T7414] __se_sys_ioctl+0xce/0x140 [ 143.636560][ T7414] __x64_sys_ioctl+0x43/0x50 [ 143.636585][ T7414] x64_sys_call+0x1816/0x3000 [ 143.636663][ T7414] do_syscall_64+0xd2/0x200 [ 143.636691][ T7414] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.636752][ T7414] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.636788][ T7414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.636816][ T7414] RIP: 0033:0x7fc4c26ff6c9 [ 143.636896][ T7414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.636935][ T7414] RSP: 002b:00007fc4c115f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.636958][ T7414] RAX: ffffffffffffffda RBX: 00007fc4c2955fa0 RCX: 00007fc4c26ff6c9 [ 143.636970][ T7414] RDX: 00002000000003c0 RSI: 0000000040107446 RDI: 0000000000000006 [ 143.636982][ T7414] RBP: 00007fc4c115f090 R08: 0000000000000000 R09: 0000000000000000 [ 143.636994][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.637006][ T7414] R13: 00007fc4c2956038 R14: 00007fc4c2955fa0 R15: 00007fff2b942428 [ 143.637026][ T7414] [ 143.637045][ T7414] Mem-Info: [ 143.900255][ T7414] active_anon:15098 inactive_anon:0 isolated_anon:0 [ 143.900255][ T7414] active_file:9300 inactive_file:2339 isolated_file:0 [ 143.900255][ T7414] unevictable:0 dirty:530 writeback:6 [ 143.900255][ T7414] slab_reclaimable:3291 slab_unreclaimable:15494 [ 143.900255][ T7414] mapped:34944 shmem:11711 pagetables:930 [ 143.900255][ T7414] sec_pagetables:0 bounce:0 [ 143.900255][ T7414] kernel_misc_reclaimable:0 [ 143.900255][ T7414] free:1892334 free_pcp:5577 free_cma:0 [ 143.945326][ T7414] Node 0 active_anon:60392kB inactive_anon:0kB active_file:37200kB inactive_file:9356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139776kB dirty:2120kB writeback:24kB shmem:46844kB kernel_stack:3232kB pagetables:3720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 143.972887][ T7414] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.002736][ T7414] lowmem_reserve[]: 0 2881 7859 7859 [ 144.008160][ T7414] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 144.039560][ T7414] lowmem_reserve[]: 0 0 4978 4978 [ 144.044637][ T7414] Node 0 Normal free:4607248kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60392kB inactive_anon:0kB active_file:37200kB inactive_file:9356kB unevictable:0kB writepending:2144kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:18776kB local_pcp:7560kB free_cma:0kB [ 144.077775][ T7414] lowmem_reserve[]: 0 0 0 0 [ 144.082360][ T7414] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 144.095193][ T7414] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 144.111456][ T7414] Node 0 Normal: 2*4kB (UE) 847*8kB (UME) 653*16kB (ME) 256*32kB (UM) 75*64kB (UM) 72*128kB (UME) 25*256kB (UM) 19*512kB (UM) 19*1024kB (UM) 7*2048kB (UE) 1103*4096kB (M) = 4607248kB [ 144.129986][ T7414] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 144.139325][ T7414] 23304 total pagecache pages [ 144.144027][ T7414] 0 pages in swap cache [ 144.148180][ T7414] Free swap = 124996kB [ 144.152359][ T7414] Total swap = 124996kB [ 144.156522][ T7414] 2097051 pages RAM [ 144.160347][ T7414] 0 pages HighMem/MovableOnly [ 144.165058][ T7414] 81087 pages reserved [ 144.271280][ T7427] loop4: detected capacity change from 0 to 2048 [ 144.313398][ T7433] tipc: Enabling of bearer rejected, failed to enable media [ 144.378082][ T7439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7439 comm=syz.1.1321 [ 144.435708][ T7445] loop1: detected capacity change from 0 to 1024 [ 144.436102][ T7445] EXT4-fs: Ignoring removed orlov option [ 144.449330][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 144.788032][ T7464] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1326'. [ 144.799307][ T7456] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1325'. [ 145.269743][ T7476] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1331'. [ 145.460513][ T7484] tipc: Enabling of bearer rejected, failed to enable media [ 145.667106][ T7495] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1338'. [ 145.713231][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'. [ 145.854596][ T7504] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 145.920040][ T7506] vhci_hcd: invalid port number 96 [ 145.925216][ T7506] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 146.106570][ T7517] loop0: detected capacity change from 0 to 256 [ 146.125834][ T7517] FAT-fs (loop0): IO charset cp932 not found [ 146.158120][ T7517] loop0: detected capacity change from 0 to 128 [ 146.189282][ T7519] loop2: detected capacity change from 0 to 1024 [ 146.224779][ T7519] EXT4-fs: Ignoring removed orlov option [ 146.317464][ T7528] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1350'. [ 146.362887][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 146.362906][ T29] audit: type=1400 audit(1762523918.407:5308): avc: denied { create } for pid=7529 comm="syz.0.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 146.409513][ T29] audit: type=1400 audit(1762523918.437:5309): avc: denied { bind } for pid=7529 comm="syz.0.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 146.428905][ T29] audit: type=1400 audit(1762523918.437:5310): avc: denied { write } for pid=7529 comm="syz.0.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 146.449715][ T3656] Bluetooth: hci0: command 0x1003 tx timeout [ 146.455786][ T3611] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 146.459991][ T29] audit: type=1326 audit(1762523918.497:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 146.485534][ T29] audit: type=1326 audit(1762523918.497:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 146.569938][ T29] audit: type=1326 audit(1762523918.567:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 146.593554][ T29] audit: type=1326 audit(1762523918.567:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 146.617070][ T29] audit: type=1326 audit(1762523918.567:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 146.640597][ T29] audit: type=1326 audit(1762523918.567:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 146.664252][ T29] audit: type=1326 audit(1762523918.567:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 146.689225][ T7540] tipc: Enabling of bearer rejected, failed to enable media [ 146.732616][ T7535] syz0: rxe_newlink: already configured on team_slave_1 [ 146.770327][ T7540] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 146.841473][ T7550] loop1: detected capacity change from 0 to 256 [ 146.886845][ T7550] FAT-fs (loop1): IO charset cp932 not found [ 146.895581][ T7555] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1361'. [ 147.000871][ T7550] loop1: detected capacity change from 0 to 128 [ 147.074705][ T3330] EXT4-fs unmount: 70 callbacks suppressed [ 147.074736][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.228450][ T7568] loop2: detected capacity change from 0 to 2048 [ 147.239298][ T7570] FAULT_INJECTION: forcing a failure. [ 147.239298][ T7570] name failslab, interval 1, probability 0, space 0, times 0 [ 147.251982][ T7570] CPU: 0 UID: 0 PID: 7570 Comm: syz.1.1367 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.252095][ T7570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.252108][ T7570] Call Trace: [ 147.252115][ T7570] [ 147.252122][ T7570] __dump_stack+0x1d/0x30 [ 147.252145][ T7570] dump_stack_lvl+0xe8/0x140 [ 147.252173][ T7570] dump_stack+0x15/0x1b [ 147.252197][ T7570] should_fail_ex+0x265/0x280 [ 147.252252][ T7570] should_failslab+0x8c/0xb0 [ 147.252332][ T7570] kmem_cache_alloc_noprof+0x50/0x480 [ 147.252371][ T7570] ? security_file_alloc+0x32/0x100 [ 147.252410][ T7570] security_file_alloc+0x32/0x100 [ 147.252452][ T7570] init_file+0x5c/0x1d0 [ 147.252469][ T7570] alloc_empty_file+0x8b/0x200 [ 147.252544][ T7570] path_openat+0x68/0x2170 [ 147.252572][ T7570] ? __rcu_read_unlock+0x4f/0x70 [ 147.252676][ T7570] ? avc_has_extended_perms+0x73d/0x940 [ 147.252714][ T7570] do_filp_open+0x109/0x230 [ 147.252762][ T7570] do_sys_openat2+0xa6/0x110 [ 147.252804][ T7570] __x64_sys_openat+0xf2/0x120 [ 147.252898][ T7570] x64_sys_call+0x2eab/0x3000 [ 147.252929][ T7570] do_syscall_64+0xd2/0x200 [ 147.252958][ T7570] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.252995][ T7570] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 147.253066][ T7570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.253089][ T7570] RIP: 0033:0x7fc4c26fdf10 [ 147.253105][ T7570] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 147.253130][ T7570] RSP: 002b:00007fc4c115ef00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 147.253155][ T7570] RAX: ffffffffffffffda RBX: 0000000000000080 RCX: 00007fc4c26fdf10 [ 147.253248][ T7570] RDX: 0000000000000080 RSI: 00007fc4c115efa0 RDI: 00000000ffffff9c [ 147.253265][ T7570] RBP: 00007fc4c115efa0 R08: 0000000000000000 R09: 00007fc4c115ed17 [ 147.253281][ T7570] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 147.253297][ T7570] R13: 00007fc4c2956038 R14: 00007fc4c2955fa0 R15: 00007fff2b942428 [ 147.253316][ T7570] [ 147.256671][ T7568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.475013][ T7575] hub 9-0:1.0: USB hub found [ 147.480235][ T7575] hub 9-0:1.0: 8 ports detected [ 147.485961][ T7576] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 147.529259][ T7578] tipc: Enabling of bearer rejected, failed to enable media [ 147.588788][ T7583] hub 9-0:1.0: USB hub found [ 147.598684][ T7583] FAULT_INJECTION: forcing a failure. [ 147.598684][ T7583] name failslab, interval 1, probability 0, space 0, times 0 [ 147.611407][ T7583] CPU: 0 UID: 0 PID: 7583 Comm: syz.1.1372 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.611443][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.611458][ T7583] Call Trace: [ 147.611464][ T7583] [ 147.611487][ T7583] __dump_stack+0x1d/0x30 [ 147.611514][ T7583] dump_stack_lvl+0xe8/0x140 [ 147.611534][ T7583] dump_stack+0x15/0x1b [ 147.611557][ T7583] should_fail_ex+0x265/0x280 [ 147.611583][ T7583] ? hub_probe+0x796/0x1700 [ 147.611700][ T7583] should_failslab+0x8c/0xb0 [ 147.611746][ T7583] __kmalloc_cache_noprof+0x4c/0x4a0 [ 147.611782][ T7583] hub_probe+0x796/0x1700 [ 147.611857][ T7583] ? read_tsc+0x9/0x20 [ 147.611880][ T7583] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 147.611913][ T7583] usb_probe_interface+0x47c/0x700 [ 147.611948][ T7583] ? __pfx_usb_probe_interface+0x10/0x10 [ 147.612030][ T7583] really_probe+0x1bf/0x5c0 [ 147.612103][ T7583] __driver_probe_device+0x121/0x190 [ 147.612134][ T7583] driver_probe_device+0x37/0x2f0 [ 147.612158][ T7583] __device_attach_driver+0x205/0x310 [ 147.612200][ T7583] ? __pfx___device_attach_driver+0x10/0x10 [ 147.612233][ T7583] bus_for_each_drv+0x1c0/0x230 [ 147.612273][ T7583] __device_attach+0x1c7/0x290 [ 147.612297][ T7583] device_attach+0x17/0x20 [ 147.612316][ T7583] proc_ioctl+0x2f7/0x400 [ 147.612343][ T7583] proc_ioctl_default+0x71/0xa0 [ 147.612376][ T7583] usbdev_ioctl+0xe8b/0x1700 [ 147.612485][ T7583] ? __pfx_usbdev_ioctl+0x10/0x10 [ 147.612537][ T7583] __se_sys_ioctl+0xce/0x140 [ 147.612559][ T7583] __x64_sys_ioctl+0x43/0x50 [ 147.612579][ T7583] x64_sys_call+0x1816/0x3000 [ 147.612634][ T7583] do_syscall_64+0xd2/0x200 [ 147.612661][ T7583] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.612695][ T7583] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 147.612729][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.612793][ T7583] RIP: 0033:0x7fc4c26ff6c9 [ 147.612808][ T7583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.612826][ T7583] RSP: 002b:00007fc4c115f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.612848][ T7583] RAX: ffffffffffffffda RBX: 00007fc4c2955fa0 RCX: 00007fc4c26ff6c9 [ 147.612865][ T7583] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 147.612882][ T7583] RBP: 00007fc4c115f090 R08: 0000000000000000 R09: 0000000000000000 [ 147.612935][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.612947][ T7583] R13: 00007fc4c2956038 R14: 00007fc4c2955fa0 R15: 00007fff2b942428 [ 147.612973][ T7583] [ 147.613061][ T7583] hub 9-0:1.0: config failed, out of memory (err -12) [ 147.878455][ T7588] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1373'. [ 147.987604][ T7602] loop4: detected capacity change from 0 to 4096 [ 148.003543][ T7604] FAULT_INJECTION: forcing a failure. [ 148.003543][ T7604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.016655][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.5.1380 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.016720][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.016737][ T7604] Call Trace: [ 148.016745][ T7604] [ 148.016755][ T7604] __dump_stack+0x1d/0x30 [ 148.016778][ T7604] dump_stack_lvl+0xe8/0x140 [ 148.016799][ T7604] dump_stack+0x15/0x1b [ 148.016823][ T7604] should_fail_ex+0x265/0x280 [ 148.016893][ T7604] should_fail+0xb/0x20 [ 148.016910][ T7604] should_fail_usercopy+0x1a/0x20 [ 148.016937][ T7604] _copy_from_user+0x1c/0xb0 [ 148.017004][ T7604] dev_ethtool+0xce/0x1670 [ 148.017034][ T7604] ? full_name_hash+0x92/0xe0 [ 148.017078][ T7604] ? strcmp+0x22/0x50 [ 148.017102][ T7604] dev_ioctl+0x2e0/0x960 [ 148.017127][ T7604] sock_do_ioctl+0x197/0x220 [ 148.017222][ T7604] sock_ioctl+0x41b/0x610 [ 148.017317][ T7604] ? __pfx_sock_ioctl+0x10/0x10 [ 148.017346][ T7604] __se_sys_ioctl+0xce/0x140 [ 148.017376][ T7604] __x64_sys_ioctl+0x43/0x50 [ 148.017411][ T7604] x64_sys_call+0x1816/0x3000 [ 148.017484][ T7604] do_syscall_64+0xd2/0x200 [ 148.017511][ T7604] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 148.017546][ T7604] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 148.017617][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.017644][ T7604] RIP: 0033:0x7ff410dcf6c9 [ 148.017663][ T7604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.017684][ T7604] RSP: 002b:00007ff40f82f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.017715][ T7604] RAX: ffffffffffffffda RBX: 00007ff411025fa0 RCX: 00007ff410dcf6c9 [ 148.017791][ T7604] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000006 [ 148.017807][ T7604] RBP: 00007ff40f82f090 R08: 0000000000000000 R09: 0000000000000000 [ 148.017823][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.017896][ T7604] R13: 00007ff411026038 R14: 00007ff411025fa0 R15: 00007ffe050962b8 [ 148.017993][ T7604] [ 148.234860][ T7602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.248732][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.467956][ T7619] loop0: detected capacity change from 0 to 256 [ 148.539340][ T7619] FAT-fs (loop0): IO charset cp932 not found [ 148.635899][ T7621] loop0: detected capacity change from 0 to 128 [ 148.766922][ T7625] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1387'. [ 148.790781][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.813039][ T7629] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 148.820401][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1388'. [ 148.837002][ T7631] team0 (unregistering): Port device team_slave_0 removed [ 148.872456][ T7631] team0 (unregistering): Port device team_slave_1 removed [ 148.886240][ T7636] pim6reg: entered allmulticast mode [ 148.910866][ T7638] loop1: detected capacity change from 0 to 512 [ 148.917658][ T7638] EXT4-fs: Ignoring removed nobh option [ 148.942560][ T7638] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 148.951177][ T7638] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1392: attempt to clear invalid blocks 1 len 1 [ 148.964456][ T7638] EXT4-fs (loop1): Remounting filesystem read-only [ 148.971871][ T7638] EXT4-fs (loop1): 1 truncate cleaned up [ 148.978116][ T7638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.993389][ T7647] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 149.011412][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.031969][ T7650] loop4: detected capacity change from 0 to 2048 [ 149.043514][ T7652] loop1: detected capacity change from 0 to 512 [ 149.050488][ T7652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.055381][ T7650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.074400][ T7652] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1395: invalid indirect mapped block 83886080 (level 1) [ 149.092763][ T7652] EXT4-fs (loop1): Remounting filesystem read-only [ 149.099765][ T7652] EXT4-fs (loop1): 1 orphan inode deleted [ 149.105683][ T7652] EXT4-fs (loop1): 1 truncate cleaned up [ 149.128696][ T7652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.146760][ T7661] loop0: detected capacity change from 0 to 512 [ 149.155147][ T7661] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.177248][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.188058][ T7661] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 149.196093][ T7661] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 149.216069][ T7661] System zones: 0-1, 15-15, 18-18, 34-34 [ 149.222510][ T7661] EXT4-fs (loop0): orphan cleanup on readonly fs [ 149.229042][ T7661] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 149.243639][ T7661] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 149.254900][ T7661] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1398: bg 0: block 40: padding at end of block bitmap is not set [ 149.271143][ T7661] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 149.280444][ T7661] EXT4-fs (loop0): 1 truncate cleaned up [ 149.280826][ T7661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.284257][ T7661] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1398: bad symlink. [ 149.285023][ T7661] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1398: bad symlink. [ 149.308372][ T7670] SELinux: failed to load policy [ 149.327231][ T7665] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1399'. [ 149.540056][ T7681] netlink: 'syz.0.1398': attribute type 10 has an invalid length. [ 149.550175][ T7681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.558891][ T7681] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 150.441451][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.470152][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.562717][ T7695] FAULT_INJECTION: forcing a failure. [ 150.562717][ T7695] name failslab, interval 1, probability 0, space 0, times 0 [ 150.575512][ T7695] CPU: 1 UID: 0 PID: 7695 Comm: syz.1.1407 Not tainted syzkaller #0 PREEMPT(voluntary) [ 150.575540][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.575555][ T7695] Call Trace: [ 150.575562][ T7695] [ 150.575571][ T7695] __dump_stack+0x1d/0x30 [ 150.575599][ T7695] dump_stack_lvl+0xe8/0x140 [ 150.575625][ T7695] dump_stack+0x15/0x1b [ 150.575648][ T7695] should_fail_ex+0x265/0x280 [ 150.575674][ T7695] should_failslab+0x8c/0xb0 [ 150.575714][ T7695] kmem_cache_alloc_noprof+0x50/0x480 [ 150.575743][ T7695] ? vm_area_alloc+0x2c/0xb0 [ 150.575774][ T7695] vm_area_alloc+0x2c/0xb0 [ 150.575812][ T7695] mmap_region+0xa99/0x1620 [ 150.575878][ T7695] do_mmap+0x9b3/0xbe0 [ 150.575899][ T7695] vm_mmap_pgoff+0x17a/0x2e0 [ 150.575937][ T7695] ksys_mmap_pgoff+0xc2/0x310 [ 150.575959][ T7695] ? __x64_sys_mmap+0x49/0x70 [ 150.575984][ T7695] x64_sys_call+0x14a3/0x3000 [ 150.576012][ T7695] do_syscall_64+0xd2/0x200 [ 150.576038][ T7695] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 150.576073][ T7695] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 150.576116][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.576143][ T7695] RIP: 0033:0x7fc4c26ff703 [ 150.576158][ T7695] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 150.576180][ T7695] RSP: 002b:00007fc4c115ee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 150.576204][ T7695] RAX: ffffffffffffffda RBX: 00000000000006a9 RCX: 00007fc4c26ff703 [ 150.576220][ T7695] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 150.576236][ T7695] RBP: 0000200000003042 R08: 00000000ffffffff R09: 0000000000000000 [ 150.576251][ T7695] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000009 [ 150.576267][ T7695] R13: 00007fc4c115eef0 R14: 00007fc4c115eeb0 R15: 0000200000000080 [ 150.576292][ T7695] [ 150.850753][ T7701] loop2: detected capacity change from 0 to 1024 [ 150.889198][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 150.914504][ T7701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 150.974164][ T7712] SELinux: ebitmap: truncated map [ 150.980427][ T7712] SELinux: failed to load policy [ 151.006718][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 151.031935][ T7714] loop1: detected capacity change from 0 to 512 [ 151.039913][ T7714] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.069403][ T7714] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 151.077376][ T7714] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 151.089899][ T7714] System zones: 0-1, 15-15, 18-18, 34-34 [ 151.090068][ T7714] EXT4-fs (loop1): orphan cleanup on readonly fs [ 151.090142][ T7714] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 151.090177][ T7714] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 151.090526][ T7714] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1414: bg 0: block 40: padding at end of block bitmap is not set [ 151.090619][ T7714] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 151.090753][ T7714] EXT4-fs (loop1): 1 truncate cleaned up [ 151.091448][ T7714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.122968][ T7721] loop5: detected capacity change from 0 to 128 [ 151.136035][ T7714] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.1414: bad symlink. [ 151.140901][ T7721] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.150161][ T7714] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.1414: bad symlink. [ 151.153555][ T7721] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.183971][ T7723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1817 sclass=netlink_route_socket pid=7723 comm=syz.2.1415 [ 151.382419][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 151.382436][ T29] audit: type=1400 audit(1762523923.387:5711): avc: denied { append } for pid=7720 comm="syz.5.1416" path="/247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpuacct.usage_percpu" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 151.382772][ T29] audit: type=1326 audit(1762523923.427:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 151.393040][ T29] audit: type=1326 audit(1762523923.437:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 151.483365][ T29] audit: type=1326 audit(1762523923.507:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 151.483447][ T29] audit: type=1326 audit(1762523923.507:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 151.484060][ T7724] netlink: 'syz.1.1414': attribute type 10 has an invalid length. [ 151.536611][ T29] audit: type=1326 audit(1762523923.577:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 151.541285][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.570753][ T7724] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 151.591840][ T3675] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.601618][ T29] audit: type=1326 audit(1762523923.647:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 151.625433][ T29] audit: type=1326 audit(1762523923.677:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 151.652339][ T29] audit: type=1326 audit(1762523923.697:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 151.676438][ T29] audit: type=1326 audit(1762523923.717:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 151.784292][ T7738] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1419'. [ 151.921823][ T7760] xt_hashlimit: max too large, truncated to 1048576 [ 151.981658][ T7761] loop0: detected capacity change from 0 to 2048 [ 152.000929][ T7761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.066084][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.317466][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 152.730760][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.757588][ T7782] loop1: detected capacity change from 0 to 128 [ 152.834904][ T7784] loop0: detected capacity change from 0 to 2048 [ 152.915071][ T7788] loop5: detected capacity change from 0 to 128 [ 152.929129][ T7782] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.942885][ T7784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.955066][ T7782] ext4 filesystem being mounted at /330/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.995490][ T7788] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.007711][ T7788] ext4 filesystem being mounted at /251/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.046185][ T7784] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.1435: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 153.105117][ T7784] EXT4-fs (loop0): Remounting filesystem read-only [ 153.112643][ T3323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.135207][ T3675] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.145400][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.173123][ T7805] netlink: 'syz.0.1441': attribute type 21 has an invalid length. [ 153.211978][ T7808] loop4: detected capacity change from 0 to 2048 [ 153.240611][ T7808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.407439][ T7826] loop5: detected capacity change from 0 to 2048 [ 153.442378][ T7826] EXT4-fs warning (device loop5): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 153.494358][ T7835] loop0: detected capacity change from 0 to 512 [ 153.502236][ T7835] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 153.510572][ T7835] EXT4-fs (loop0): orphan cleanup on readonly fs [ 153.517391][ T7835] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1454: Failed to acquire dquot type 1 [ 153.529499][ T7835] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1454: bg 0: block 40: padding at end of block bitmap is not set [ 153.544851][ T7835] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 153.553870][ T7835] EXT4-fs (loop0): 1 truncate cleaned up [ 153.562167][ T7835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.618507][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1454'. [ 153.628195][ T7835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7835 comm=syz.0.1454 [ 153.643312][ T7835] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.1454: corrupted xattr block 31: invalid header [ 153.657152][ T7835] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 153.667625][ T7835] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.1454: corrupted xattr block 31: invalid header [ 153.683530][ T7835] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 153.703189][ T7835] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.1454: bad symlink. [ 153.725054][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.753219][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.798600][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 153.818535][ T7844] loop0: detected capacity change from 0 to 2048 [ 153.842682][ T7844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.927578][ T7851] netlink: 'syz.4.1458': attribute type 12 has an invalid length. [ 153.935567][ T7851] netlink: 'syz.4.1458': attribute type 29 has an invalid length. [ 153.943412][ T7851] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1458'. [ 154.073542][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.095948][ T7856] loop0: detected capacity change from 0 to 128 [ 154.104280][ T7856] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.117364][ T7856] ext4 filesystem being mounted at /311/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 154.197945][ T7858] loop4: detected capacity change from 0 to 2048 [ 154.218878][ T7858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.257779][ T3327] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.441497][ T7874] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1465'. [ 154.545532][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1468'. [ 154.576621][ T7882] loop0: detected capacity change from 0 to 2048 [ 154.598022][ T7882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.663325][ T7889] netlink: 'syz.5.1470': attribute type 12 has an invalid length. [ 154.671294][ T7889] netlink: 'syz.5.1470': attribute type 29 has an invalid length. [ 154.679127][ T7889] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1470'. [ 154.730611][ T7895] netlink: 'syz.5.1472': attribute type 21 has an invalid length. [ 154.817328][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.868988][ T7905] loop0: detected capacity change from 0 to 128 [ 154.941328][ T7905] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.953803][ T7905] ext4 filesystem being mounted at /317/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.040850][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.295424][ T3327] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.560697][ T7912] loop2: detected capacity change from 0 to 512 [ 155.728486][ T7912] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 155.745991][ T7912] EXT4-fs (loop2): orphan cleanup on readonly fs [ 155.754868][ T7912] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1479: Failed to acquire dquot type 1 [ 155.767106][ T7912] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1479: bg 0: block 40: padding at end of block bitmap is not set [ 156.068065][ T7912] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 156.078243][ T7912] EXT4-fs (loop2): 1 truncate cleaned up [ 156.131668][ T7922] loop1: detected capacity change from 0 to 128 [ 156.149222][ T7924] loop5: detected capacity change from 0 to 512 [ 156.181101][ T7922] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.212005][ T7924] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 156.246056][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 156.255544][ T7922] ext4 filesystem being mounted at /338/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.288110][ T7924] EXT4-fs (loop5): orphan cleanup on readonly fs [ 156.298698][ T7924] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1480: Failed to acquire dquot type 1 [ 156.373646][ T7912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.396128][ T7924] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1480: bg 0: block 40: padding at end of block bitmap is not set [ 156.440352][ T7933] netlink: 'syz.4.1482': attribute type 12 has an invalid length. [ 156.448300][ T7933] netlink: 'syz.4.1482': attribute type 29 has an invalid length. [ 156.456289][ T7933] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1482'. [ 156.458959][ T7924] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 156.484342][ T7924] EXT4-fs (loop5): 1 truncate cleaned up [ 156.484392][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1479'. [ 156.492009][ T7924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.539775][ T7912] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.1479: corrupted xattr block 31: invalid header [ 156.554816][ T3323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.564634][ T7912] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 156.573714][ T7912] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.1479: corrupted xattr block 31: invalid header [ 156.587459][ T7912] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 156.596767][ T7912] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.1479: bad symlink. [ 156.611328][ T7945] netlink: 'syz.0.1486': attribute type 21 has an invalid length. [ 156.640523][ T7924] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1480: corrupted xattr block 31: invalid header [ 156.652853][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.665215][ T7924] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 156.686219][ T7924] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1480: corrupted xattr block 31: invalid header [ 156.705178][ T7924] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 156.714393][ T7924] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.1480: bad symlink. [ 156.786092][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.805240][ T7963] loop1: detected capacity change from 0 to 128 [ 156.846973][ T7964] loop2: detected capacity change from 0 to 2048 [ 156.859199][ T7963] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.880521][ T7963] ext4 filesystem being mounted at /342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.884116][ T7964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.032325][ T7977] netlink: 'syz.5.1496': attribute type 12 has an invalid length. [ 157.040235][ T7977] netlink: 'syz.5.1496': attribute type 29 has an invalid length. [ 157.147514][ T3323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.179759][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 157.179779][ T29] audit: type=1326 audit(1762523929.227:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 157.211097][ T29] audit: type=1326 audit(1762523929.227:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 157.234611][ T29] audit: type=1326 audit(1762523929.227:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 157.258076][ T29] audit: type=1326 audit(1762523929.227:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 157.281728][ T29] audit: type=1326 audit(1762523929.227:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 157.305296][ T29] audit: type=1326 audit(1762523929.227:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 157.328781][ T29] audit: type=1326 audit(1762523929.227:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 157.352232][ T29] audit: type=1326 audit(1762523929.227:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 157.375660][ T29] audit: type=1326 audit(1762523929.227:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4c27015e7 code=0x7ffc0000 [ 157.398999][ T29] audit: type=1326 audit(1762523929.227:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc4c270155c code=0x7ffc0000 [ 157.460376][ T7987] netlink: 'syz.5.1501': attribute type 21 has an invalid length. [ 157.607638][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.652209][ T7998] __nla_validate_parse: 3 callbacks suppressed [ 157.652229][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1506'. [ 157.662527][ T8002] netlink: 'syz.4.1508': attribute type 12 has an invalid length. [ 157.675466][ T8002] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1508'. [ 157.765711][ T8013] loop2: detected capacity change from 0 to 512 [ 157.777530][ T8013] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 157.785770][ T8013] EXT4-fs (loop2): orphan cleanup on readonly fs [ 157.792577][ T8013] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1513: Failed to acquire dquot type 1 [ 157.804358][ T8013] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1513: bg 0: block 40: padding at end of block bitmap is not set [ 157.819325][ T8013] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 157.828467][ T8013] EXT4-fs (loop2): 1 truncate cleaned up [ 157.838983][ T8015] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 157.851515][ T8013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.876183][ T8016] loop4: detected capacity change from 0 to 2048 [ 157.897014][ T8016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.912414][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'. [ 157.922194][ T8013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8013 comm=syz.2.1513 [ 157.948227][ T8013] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.1513: corrupted xattr block 31: invalid header [ 157.962880][ T8013] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 157.972036][ T8013] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.1513: corrupted xattr block 31: invalid header [ 157.993990][ T8013] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 158.003340][ T8013] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.1513: bad symlink. [ 158.154811][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.513526][ T8032] loop5: detected capacity change from 0 to 2048 [ 158.531360][ T8032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.771523][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.059592][ T8041] loop1: detected capacity change from 0 to 512 [ 159.089352][ T8041] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 159.095844][ T8043] loop0: detected capacity change from 0 to 2048 [ 159.109730][ T8041] EXT4-fs (loop1): orphan cleanup on readonly fs [ 159.120812][ T8043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.129795][ T8041] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1519: Failed to acquire dquot type 1 [ 159.154696][ T8041] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1519: bg 0: block 40: padding at end of block bitmap is not set [ 159.189492][ T8041] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 159.198506][ T8041] EXT4-fs (loop1): 1 truncate cleaned up [ 159.214870][ T8041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.303839][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.329940][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 159.347990][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.348814][ T8056] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1521'. [ 159.380432][ T8041] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.1519: corrupted xattr block 31: invalid header [ 159.393995][ T8041] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 159.419134][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1523'. [ 159.459073][ T8041] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.1519: corrupted xattr block 31: invalid header [ 159.484494][ T8041] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 159.500021][ T8041] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.1519: bad symlink. [ 159.538635][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.598828][ T8068] loop0: detected capacity change from 0 to 256 [ 159.639651][ T8068] FAT-fs (loop0): IO charset cp932 not found [ 159.689524][ T8068] loop0: detected capacity change from 0 to 128 [ 159.787940][ T8081] loop5: detected capacity change from 0 to 2048 [ 159.814672][ T8081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.940372][ T8088] loop0: detected capacity change from 0 to 2048 [ 159.952840][ T8088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.991992][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.014177][ T8092] validate_nla: 4 callbacks suppressed [ 160.014192][ T8092] netlink: 'syz.5.1534': attribute type 12 has an invalid length. [ 160.027623][ T8092] netlink: 'syz.5.1534': attribute type 29 has an invalid length. [ 160.035503][ T8092] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1534'. [ 160.128599][ T8098] loop5: detected capacity change from 0 to 512 [ 160.136532][ T8098] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 160.138212][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1538'. [ 160.144845][ T8098] EXT4-fs (loop5): orphan cleanup on readonly fs [ 160.160383][ T8098] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1537: Failed to acquire dquot type 1 [ 160.174229][ T8098] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1537: bg 0: block 40: padding at end of block bitmap is not set [ 160.192394][ T8102] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 160.200248][ T8098] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 160.209376][ T8098] EXT4-fs (loop5): 1 truncate cleaned up [ 160.243324][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1537'. [ 160.256716][ T8098] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1537: corrupted xattr block 31: invalid header [ 160.270545][ T8098] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 160.279845][ T8098] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1537: corrupted xattr block 31: invalid header [ 160.293591][ T8098] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 160.302788][ T8098] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.1537: bad symlink. [ 160.332881][ T8112] netlink: 'syz.5.1541': attribute type 21 has an invalid length. [ 160.379685][ T8117] loop5: detected capacity change from 0 to 256 [ 160.405495][ T8117] FAT-fs (loop5): IO charset cp932 not found [ 160.412817][ T8120] loop2: detected capacity change from 0 to 128 [ 160.430944][ T8120] ext4 filesystem being mounted at /293/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.434776][ T8117] loop5: detected capacity change from 0 to 128 [ 160.491998][ T8125] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 160.565595][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1549'. [ 160.661476][ T8136] loop5: detected capacity change from 0 to 512 [ 160.669685][ T8136] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 160.708424][ T8136] EXT4-fs (loop5): orphan cleanup on readonly fs [ 160.732351][ T8136] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1551: Failed to acquire dquot type 1 [ 160.751112][ T8141] netlink: 'syz.0.1552': attribute type 21 has an invalid length. [ 160.767020][ T8136] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1551: bg 0: block 40: padding at end of block bitmap is not set [ 160.816731][ T8136] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 160.834974][ T8136] EXT4-fs (loop5): 1 truncate cleaned up [ 160.915445][ T8152] loop0: detected capacity change from 0 to 256 [ 160.969652][ T8136] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1551: corrupted xattr block 31: invalid header [ 161.016446][ T8136] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 161.027158][ T8152] FAT-fs (loop0): IO charset cp932 not found [ 161.061244][ T8136] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1551: corrupted xattr block 31: invalid header [ 161.084264][ T8152] loop0: detected capacity change from 0 to 128 [ 161.093891][ T8136] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 161.113557][ T8136] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.1551: bad symlink. [ 161.218408][ T8160] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 161.228873][ T8160] gretap1: entered allmulticast mode [ 161.268308][ T8158] netlink: 'syz.4.1557': attribute type 3 has an invalid length. [ 161.516996][ T8179] netlink: 'syz.4.1564': attribute type 21 has an invalid length. [ 161.895564][ T8190] loop1: detected capacity change from 0 to 256 [ 161.963011][ T8190] FAT-fs (loop1): IO charset cp932 not found [ 162.030574][ T8193] loop0: detected capacity change from 0 to 128 [ 162.055741][ T8194] loop1: detected capacity change from 0 to 128 [ 162.071621][ T8193] ext4 filesystem being mounted at /341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 162.230572][ T8205] loop1: detected capacity change from 0 to 2048 [ 162.243764][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 162.243824][ T29] audit: type=1326 audit(1762523934.287:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 162.291767][ T29] audit: type=1326 audit(1762523934.327:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 162.315356][ T29] audit: type=1326 audit(1762523934.327:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f41a916f703 code=0x7ffc0000 [ 162.338711][ T29] audit: type=1326 audit(1762523934.327:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f41a916f703 code=0x7ffc0000 [ 162.362172][ T29] audit: type=1326 audit(1762523934.327:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 162.385791][ T29] audit: type=1326 audit(1762523934.327:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 162.409327][ T29] audit: type=1326 audit(1762523934.327:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 162.432761][ T29] audit: type=1326 audit(1762523934.327:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 162.456282][ T29] audit: type=1326 audit(1762523934.327:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 162.479743][ T29] audit: type=1326 audit(1762523934.327:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41a916f6c9 code=0x7ffc0000 [ 162.805491][ T8248] loop5: detected capacity change from 0 to 2048 [ 162.832970][ T8250] __nla_validate_parse: 5 callbacks suppressed [ 162.832990][ T8250] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1590'. [ 162.903944][ T8256] loop1: detected capacity change from 0 to 2048 [ 162.936407][ T8259] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1593'. [ 163.201830][ T8269] syz0: rxe_newlink: already configured on team_slave_1 [ 163.472463][ T8283] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1603'. [ 163.500648][ T8285] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.598156][ T8293] sch_fq: defrate 0 ignored. [ 163.720429][ T8308] loop0: detected capacity change from 0 to 2048 [ 163.876167][ T8316] netlink: 212 bytes leftover after parsing attributes in process `syz.5.1616'. [ 163.902157][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1617'. [ 163.997951][ T8323] loop5: detected capacity change from 0 to 2048 [ 164.062247][ T8322] loop4: detected capacity change from 0 to 512 [ 164.089069][ T8322] ext4 filesystem being mounted at /294/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.332094][ T8332] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 164.838970][ T8352] loop2: detected capacity change from 0 to 256 [ 164.881126][ T8357] tipc: Enabled bearer , priority 0 [ 164.910211][ T8352] FAT-fs (loop2): IO charset cp932 not found [ 164.917260][ T8357] tipc: Disabling bearer [ 164.945045][ T8359] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1628'. [ 164.984015][ T8361] loop5: detected capacity change from 0 to 256 [ 165.001037][ T8363] loop2: detected capacity change from 0 to 128 [ 165.011074][ T8361] FAT-fs (loop5): IO charset cp932 not found [ 165.032790][ T8365] loop4: detected capacity change from 0 to 512 [ 165.066286][ T8365] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 165.088979][ T8361] loop5: detected capacity change from 0 to 128 [ 165.114473][ T8365] EXT4-fs (loop4): orphan cleanup on readonly fs [ 165.135802][ T8365] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1630: Failed to acquire dquot type 1 [ 165.154117][ T8365] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1630: bg 0: block 40: padding at end of block bitmap is not set [ 165.179756][ T8365] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 165.193845][ T8365] EXT4-fs (loop4): 1 truncate cleaned up [ 165.228789][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1630'. [ 165.244057][ T8365] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.1630: corrupted xattr block 31: invalid header [ 165.258580][ T8365] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 165.268336][ T8365] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.1630: corrupted xattr block 31: invalid header [ 165.281857][ T8365] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 165.291198][ T8365] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.1630: bad symlink. [ 165.320664][ T8376] bond1 (unregistering): Released all slaves [ 165.709286][ T8391] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 165.790900][ T8393] tipc: Enabled bearer , priority 0 [ 165.800130][ T8393] tipc: Disabling bearer [ 165.966787][ T8395] loop2: detected capacity change from 0 to 256 [ 166.037651][ T8395] FAT-fs (loop2): IO charset cp932 not found [ 166.082283][ T8395] loop2: detected capacity change from 0 to 128 [ 166.088855][ T8398] loop0: detected capacity change from 0 to 2048 [ 166.272242][ T8409] loop2: detected capacity change from 0 to 2048 [ 166.286046][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 166.406307][ T8410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1646'. [ 166.480343][ T8431] loop1: detected capacity change from 0 to 128 [ 166.500244][ T8431] ext4 filesystem being mounted at /370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 166.844124][ T8440] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1655'. [ 167.088359][ T8450] loop2: detected capacity change from 0 to 128 [ 167.106555][ T8450] ext4 filesystem being mounted at /311/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.364667][ T8460] loop4: detected capacity change from 0 to 2048 [ 167.392812][ T8464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8464 comm=syz.0.1665 [ 167.562402][ T8475] loop0: detected capacity change from 0 to 256 [ 167.574527][ T8477] loop5: detected capacity change from 0 to 128 [ 167.587220][ T8475] FAT-fs (loop0): IO charset cp932 not found [ 167.596235][ T8477] ext4 filesystem being mounted at /306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.645655][ T8475] loop0: detected capacity change from 0 to 128 [ 167.718300][ T8493] netlink: 'syz.5.1674': attribute type 21 has an invalid length. [ 167.758066][ T8497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8497 comm=syz.5.1676 [ 167.829059][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 167.829073][ T29] audit: type=1326 audit(1762523939.867:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 167.859232][ T29] audit: type=1326 audit(1762523939.867:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 167.882765][ T29] audit: type=1326 audit(1762523939.867:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 167.906177][ T29] audit: type=1326 audit(1762523939.867:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 167.929763][ T29] audit: type=1326 audit(1762523939.867:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008988f6c9 code=0x7ffc0000 [ 167.953248][ T29] audit: type=1326 audit(1762523939.867:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00898915e7 code=0x7ffc0000 [ 167.976611][ T29] audit: type=1326 audit(1762523939.867:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f008989155c code=0x7ffc0000 [ 168.000113][ T29] audit: type=1326 audit(1762523939.867:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0089891494 code=0x7ffc0000 [ 168.023627][ T29] audit: type=1326 audit(1762523939.867:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0089891494 code=0x7ffc0000 [ 168.046973][ T29] audit: type=1326 audit(1762523939.867:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.4.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f008988e32a code=0x7ffc0000 [ 168.163491][ T8498] FAULT_INJECTION: forcing a failure. [ 168.163491][ T8498] name failslab, interval 1, probability 0, space 0, times 0 [ 168.176196][ T8498] CPU: 1 UID: 0 PID: 8498 Comm: syz.0.1675 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.176262][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.176323][ T8498] Call Trace: [ 168.176340][ T8498] [ 168.176349][ T8498] __dump_stack+0x1d/0x30 [ 168.176435][ T8498] dump_stack_lvl+0xe8/0x140 [ 168.176462][ T8498] dump_stack+0x15/0x1b [ 168.176484][ T8498] should_fail_ex+0x265/0x280 [ 168.176510][ T8498] should_failslab+0x8c/0xb0 [ 168.176617][ T8498] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 168.176656][ T8498] ? dup_task_struct+0x70/0x6b0 [ 168.176697][ T8498] dup_task_struct+0x70/0x6b0 [ 168.176737][ T8498] ? _parse_integer+0x27/0x40 [ 168.176783][ T8498] copy_process+0x399/0x2000 [ 168.176819][ T8498] ? kstrtouint+0x76/0xc0 [ 168.176941][ T8498] ? kstrtouint_from_user+0x9f/0xf0 [ 168.177029][ T8498] ? __rcu_read_unlock+0x4f/0x70 [ 168.177127][ T8498] kernel_clone+0x16c/0x5c0 [ 168.177191][ T8498] ? vfs_write+0x7e8/0x960 [ 168.177226][ T8498] __x64_sys_clone+0xe6/0x120 [ 168.177315][ T8498] x64_sys_call+0x119c/0x3000 [ 168.177351][ T8498] do_syscall_64+0xd2/0x200 [ 168.177378][ T8498] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 168.177413][ T8498] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 168.177457][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.177537][ T8498] RIP: 0033:0x7f41a916f6c9 [ 168.177574][ T8498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.177632][ T8498] RSP: 002b:00007f41a7bd6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 168.177657][ T8498] RAX: ffffffffffffffda RBX: 00007f41a93c5fa0 RCX: 00007f41a916f6c9 [ 168.177739][ T8498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 168.177754][ T8498] RBP: 00007f41a7bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.177770][ T8498] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 168.177786][ T8498] R13: 00007f41a93c6038 R14: 00007f41a93c5fa0 R15: 00007ffcb5745498 [ 168.177811][ T8498] [ 168.410461][ T8513] loop1: detected capacity change from 0 to 2048 [ 168.472023][ T8518] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 168.544098][ T8521] loop2: detected capacity change from 0 to 2048 [ 168.747709][ T8527] loop5: detected capacity change from 0 to 256 [ 168.768419][ T8527] FAT-fs (loop5): IO charset cp932 not found [ 168.801349][ T8531] __nla_validate_parse: 2 callbacks suppressed [ 168.801378][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1685'. [ 168.820721][ T8532] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1686'. [ 168.831275][ T8535] loop5: detected capacity change from 0 to 128 [ 168.889426][ T8539] netlink: 'syz.5.1687': attribute type 21 has an invalid length. [ 168.893101][ T8540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1685'. [ 168.908142][ T8537] loop0: detected capacity change from 0 to 128 [ 168.926018][ T8537] ext4 filesystem being mounted at /367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.978577][ T8544] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1689'. [ 168.987996][ T8544] netlink: zone id is out of range [ 168.990790][ T8549] tipc: Enabled bearer , priority 0 [ 168.993152][ T8544] netlink: zone id is out of range [ 169.005061][ T8544] netlink: zone id is out of range [ 169.010228][ T8544] netlink: zone id is out of range [ 169.024804][ T8549] tipc: Disabling bearer [ 169.032453][ T8544] netlink: set zone limit has 8 unknown bytes [ 169.082896][ T8554] loop1: detected capacity change from 0 to 2048 [ 169.157907][ T8563] tipc: Enabled bearer , priority 0 [ 169.183267][ T8564] loop0: detected capacity change from 0 to 2048 [ 169.192699][ T8563] tipc: Disabling bearer [ 169.455312][ T8576] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1697'. [ 169.508872][ T8578] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1698'. [ 169.618911][ T8585] netlink: 'syz.2.1701': attribute type 21 has an invalid length. [ 169.672509][ T8588] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1702'. [ 169.715225][ T8592] loop1: detected capacity change from 0 to 128 [ 169.723897][ T8592] ext4 filesystem being mounted at /383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.963641][ T8602] loop1: detected capacity change from 0 to 2048 [ 170.005252][ T8608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8608 comm=syz.0.1717 [ 170.030914][ T8606] tipc: Enabled bearer , priority 0 [ 170.066367][ T8606] tipc: Disabling bearer [ 170.303794][ T8621] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1712'. [ 170.346704][ T8625] netlink: 'syz.4.1713': attribute type 21 has an invalid length. [ 170.429899][ T8630] loop4: detected capacity change from 0 to 512 [ 170.437695][ T8630] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 170.445909][ T8630] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.453198][ T8630] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1715: Failed to acquire dquot type 1 [ 170.464914][ T8630] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1715: bg 0: block 40: padding at end of block bitmap is not set [ 170.480268][ T8630] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 170.489620][ T8630] EXT4-fs (loop4): 1 truncate cleaned up [ 170.532647][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1715'. [ 170.548951][ T8630] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.1715: corrupted xattr block 31: invalid header [ 170.563283][ T8630] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 170.572867][ T8630] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.1715: corrupted xattr block 31: invalid header [ 170.587033][ T8630] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 170.597238][ T8630] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.1715: bad symlink. [ 171.134805][ T8655] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1724'. [ 171.310921][ T8659] loop2: detected capacity change from 0 to 128 [ 171.346675][ T8660] loop1: detected capacity change from 0 to 2048 [ 171.354676][ T8659] ext4 filesystem being mounted at /322/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.448814][ T8673] netlink: zone id is out of range [ 171.454087][ T8673] netlink: zone id is out of range [ 171.484577][ T8673] netlink: zone id is out of range [ 171.490822][ T8673] netlink: zone id is out of range [ 171.505760][ T8673] netlink: set zone limit has 8 unknown bytes [ 171.599183][ T8681] tipc: Enabled bearer , priority 0 [ 171.607938][ T8681] tipc: Disabling bearer [ 171.643478][ T8685] loop4: detected capacity change from 0 to 256 [ 171.659554][ T8685] FAT-fs (loop4): IO charset cp932 not found [ 171.731230][ T8689] loop4: detected capacity change from 0 to 128 [ 172.197003][ T8715] loop0: detected capacity change from 0 to 512 [ 172.243080][ T8710] loop1: detected capacity change from 0 to 2048 [ 172.275269][ T8710] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 172.310349][ T8715] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 172.333792][ T8715] EXT4-fs (loop0): orphan cleanup on readonly fs [ 172.341320][ T8715] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1744: Failed to acquire dquot type 1 [ 172.353234][ T8715] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1744: bg 0: block 40: padding at end of block bitmap is not set [ 172.367698][ T8715] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 172.377122][ T8715] EXT4-fs (loop0): 1 truncate cleaned up [ 172.442729][ T8719] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.1744: corrupted xattr block 31: invalid header [ 172.581375][ T8719] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 172.590676][ T8719] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.1744: corrupted xattr block 31: invalid header [ 172.604126][ T8719] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 172.618438][ T8719] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.1744: bad symlink. [ 172.763454][ T8725] netlink: 'syz.0.1746': attribute type 21 has an invalid length. [ 172.967415][ T8729] loop0: detected capacity change from 0 to 128 [ 173.061102][ T8729] ext4 filesystem being mounted at /380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.261132][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 173.261152][ T29] audit: type=1326 audit(1762523945.307:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.1.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 173.290837][ T29] audit: type=1326 audit(1762523945.307:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.1.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 173.314341][ T29] audit: type=1326 audit(1762523945.307:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.1.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 173.337797][ T29] audit: type=1326 audit(1762523945.307:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.1.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 173.361362][ T29] audit: type=1326 audit(1762523945.307:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.1.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 173.384955][ T29] audit: type=1326 audit(1762523945.307:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.1.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 173.431053][ T29] audit: type=1326 audit(1762523945.307:6836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.1.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4c2731f85 code=0x7ffc0000 [ 173.454560][ T29] audit: type=1326 audit(1762523945.307:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.1.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 173.478027][ T29] audit: type=1326 audit(1762523945.307:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.1.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 173.501575][ T29] audit: type=1326 audit(1762523945.307:6839): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.1.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 173.551141][ T8752] netlink: 'syz.1.1755': attribute type 21 has an invalid length. [ 173.575281][ T8756] tipc: Enabled bearer , priority 0 [ 173.583933][ T8756] tipc: Disabling bearer [ 173.808545][ T8763] loop2: detected capacity change from 0 to 2048 [ 173.839339][ T8765] loop1: detected capacity change from 0 to 256 [ 173.940041][ T8765] FAT-fs (loop1): IO charset cp932 not found [ 174.043508][ T8765] loop1: detected capacity change from 0 to 128 [ 174.252214][ T8790] tipc: Enabled bearer , priority 0 [ 174.271254][ T8790] tipc: Disabling bearer [ 174.310565][ T8794] __nla_validate_parse: 2 callbacks suppressed [ 174.310583][ T8794] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1766'. [ 174.325955][ T8794] IPVS: Unknown mcast interface: ipvlan1 [ 174.360548][ T8799] netlink: 'syz.1.1771': attribute type 21 has an invalid length. [ 174.371075][ T8800] loop2: detected capacity change from 0 to 256 [ 174.393481][ T8800] FAT-fs (loop2): IO charset cp932 not found [ 174.444416][ T8800] loop2: detected capacity change from 0 to 128 [ 174.508865][ T8817] netlink: 'syz.2.1779': attribute type 21 has an invalid length. [ 174.568816][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 174.711687][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 175.313340][ T8838] sch_fq: defrate 0 ignored. [ 175.431018][ T8843] netlink: 'syz.2.1786': attribute type 21 has an invalid length. [ 175.465416][ T8841] loop4: detected capacity change from 0 to 2048 [ 175.565370][ T8856] loop5: detected capacity change from 0 to 128 [ 175.592838][ T8864] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1790'. [ 175.600851][ T8856] ext4 filesystem being mounted at /333/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.788781][ T8878] loop2: detected capacity change from 0 to 512 [ 175.805062][ T8878] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 175.813326][ T8878] EXT4-fs (loop2): orphan cleanup on readonly fs [ 175.929739][ T8878] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1799: Failed to acquire dquot type 1 [ 175.941605][ T8878] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1799: bg 0: block 40: padding at end of block bitmap is not set [ 175.956310][ T8878] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 175.965641][ T8878] EXT4-fs (loop2): 1 truncate cleaned up [ 176.467843][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 176.515190][ T8894] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.1799: corrupted xattr block 31: invalid header [ 176.529026][ T8894] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 176.538388][ T8894] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.1799: corrupted xattr block 31: invalid header [ 176.552795][ T8894] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 176.564378][ T8894] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.1799: bad symlink. [ 176.740424][ T8897] loop5: detected capacity change from 0 to 512 [ 176.772189][ T8897] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.810102][ T8897] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 176.837918][ T8904] FAULT_INJECTION: forcing a failure. [ 176.837918][ T8904] name failslab, interval 1, probability 0, space 0, times 0 [ 176.850616][ T8904] CPU: 1 UID: 0 PID: 8904 Comm: syz.2.1804 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.850669][ T8904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.850685][ T8904] Call Trace: [ 176.850693][ T8904] [ 176.850702][ T8904] __dump_stack+0x1d/0x30 [ 176.850732][ T8904] dump_stack_lvl+0xe8/0x140 [ 176.850754][ T8904] dump_stack+0x15/0x1b [ 176.850778][ T8904] should_fail_ex+0x265/0x280 [ 176.850856][ T8904] should_failslab+0x8c/0xb0 [ 176.850886][ T8904] kmem_cache_alloc_noprof+0x50/0x480 [ 176.850991][ T8904] ? audit_log_start+0x342/0x720 [ 176.851014][ T8904] audit_log_start+0x342/0x720 [ 176.851038][ T8904] audit_seccomp+0x48/0x100 [ 176.851079][ T8904] ? __seccomp_filter+0x82d/0x1250 [ 176.851135][ T8904] __seccomp_filter+0x83e/0x1250 [ 176.851178][ T8904] ? _raw_spin_unlock+0x26/0x50 [ 176.851269][ T8904] __secure_computing+0x82/0x150 [ 176.851352][ T8904] syscall_trace_enter+0xcf/0x1e0 [ 176.851382][ T8904] do_syscall_64+0xac/0x200 [ 176.851410][ T8904] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 176.851535][ T8904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.851564][ T8904] RIP: 0033:0x7f8473d1e0dc [ 176.851660][ T8904] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 176.851684][ T8904] RSP: 002b:00007f847277f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.851719][ T8904] RAX: ffffffffffffffda RBX: 00007f8473f75fa0 RCX: 00007f8473d1e0dc [ 176.851736][ T8904] RDX: 000000000000000f RSI: 00007f847277f0a0 RDI: 0000000000000005 [ 176.851752][ T8904] RBP: 00007f847277f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.851768][ T8904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.851784][ T8904] R13: 00007f8473f76038 R14: 00007f8473f75fa0 R15: 00007ffeef799158 [ 176.851804][ T8904] [ 177.122866][ T8897] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1805: attempt to clear invalid blocks 2 len 1 [ 177.136031][ T8897] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 177.173366][ T8911] loop1: detected capacity change from 0 to 256 [ 177.189682][ T8897] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1805: invalid indirect mapped block 1819239214 (level 0) [ 177.199049][ T8911] FAT-fs (loop1): IO charset cp932 not found [ 177.204318][ T8913] tipc: Enabled bearer , priority 0 [ 177.218347][ T8897] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1805: invalid indirect mapped block 1819239214 (level 1) [ 177.236327][ T8913] tipc: Disabling bearer [ 177.252912][ T8897] EXT4-fs (loop5): 1 truncate cleaned up [ 177.261862][ T8897] EXT4-fs mount: 67 callbacks suppressed [ 177.261887][ T8897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.311974][ T8919] loop1: detected capacity change from 0 to 128 [ 177.396836][ T8924] loop4: detected capacity change from 0 to 2048 [ 177.427571][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.453996][ T8924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.455372][ T8932] loop1: detected capacity change from 0 to 2048 [ 177.572621][ T8932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.129677][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.182149][ T8948] tipc: Enabled bearer , priority 0 [ 178.190296][ T8948] tipc: Disabling bearer [ 178.208882][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.257198][ T8952] loop1: detected capacity change from 0 to 2048 [ 178.271204][ T8952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.303849][ T8960] loop2: detected capacity change from 0 to 256 [ 178.368952][ T8960] FAT-fs (loop2): IO charset cp932 not found [ 178.398966][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1828'. [ 178.402964][ T8960] loop2: detected capacity change from 0 to 128 [ 178.490765][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.546779][ T8971] loop2: detected capacity change from 0 to 2048 [ 178.553747][ T8974] netlink: 'syz.1.1830': attribute type 21 has an invalid length. [ 178.562803][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 178.562816][ T29] audit: type=1400 audit(1762523950.607:7003): avc: denied { mount } for pid=8970 comm="syz.2.1831" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 178.577479][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 178.646615][ T29] audit: type=1400 audit(1762523950.687:7004): avc: denied { unmount } for pid=3330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 178.793442][ T8981] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 178.836119][ T8980] loop2: detected capacity change from 0 to 1024 [ 178.892229][ T8980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.953932][ T8987] netlink: 'syz.1.1834': attribute type 21 has an invalid length. [ 178.986318][ T8980] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 16: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 179.078324][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.106571][ T29] audit: type=1400 audit(1762523951.147:7005): avc: denied { bind } for pid=8999 comm="syz.1.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.123602][ T9003] loop4: detected capacity change from 0 to 2048 [ 179.138694][ T29] audit: type=1400 audit(1762523951.177:7006): avc: denied { listen } for pid=8999 comm="syz.1.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.163225][ T9003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.257445][ T9008] capability: warning: `syz.1.1840' uses 32-bit capabilities (legacy support in use) [ 179.267994][ T9008] tipc: Enabling of bearer rejected, failed to enable media [ 179.279068][ T29] audit: type=1326 audit(1762523951.327:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.1.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 179.303291][ T29] audit: type=1326 audit(1762523951.327:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.1.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 179.326779][ T29] audit: type=1326 audit(1762523951.327:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.1.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 179.350351][ T29] audit: type=1326 audit(1762523951.327:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.1.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 179.373797][ T29] audit: type=1326 audit(1762523951.327:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.1.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 179.397189][ T29] audit: type=1326 audit(1762523951.327:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8999 comm="syz.1.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c26ff6c9 code=0x7ffc0000 [ 179.423408][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.530492][ T9012] loop5: detected capacity change from 0 to 512 [ 179.595599][ T9016] tipc: Enabling of bearer rejected, failed to enable media [ 179.605587][ T9012] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 179.618451][ T9012] EXT4-fs (loop5): orphan cleanup on readonly fs [ 179.625771][ T9012] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1844: Failed to acquire dquot type 1 [ 179.638057][ T9012] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1844: bg 0: block 40: padding at end of block bitmap is not set [ 179.656410][ T9012] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 179.665806][ T9012] EXT4-fs (loop5): 1 truncate cleaned up [ 179.672484][ T9012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.784414][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1844'. [ 179.903565][ T9022] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1844: corrupted xattr block 31: invalid header [ 179.939720][ T9022] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 179.949021][ T9022] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1844: corrupted xattr block 31: invalid header [ 179.963337][ T9022] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 179.972508][ T9022] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.1844: bad symlink. [ 180.138364][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.173778][ T9035] netlink: 'syz.1.1849': attribute type 21 has an invalid length. [ 180.213833][ T9030] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1848'. [ 180.265968][ T9049] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 180.354025][ T9056] loop4: detected capacity change from 0 to 512 [ 180.361556][ T9056] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 180.390356][ T9056] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 180.398368][ T9056] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 180.406504][ T9056] System zones: 0-1, 15-15, 18-18, 34-34 [ 180.412378][ T9056] EXT4-fs (loop4): orphan cleanup on readonly fs [ 180.418754][ T9056] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 180.433417][ T9056] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 180.440321][ T9056] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1858: bg 0: block 40: padding at end of block bitmap is not set [ 180.454646][ T9056] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 180.463574][ T9056] EXT4-fs (loop4): 1 truncate cleaned up [ 180.469718][ T9056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.485594][ T9056] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.1858: bad symlink. [ 180.498208][ T9056] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.1858: bad symlink. [ 180.673742][ T9061] netlink: 'syz.4.1858': attribute type 10 has an invalid length. [ 180.684068][ T9061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.692608][ T9061] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 180.795356][ T9064] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 180.855875][ T9065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1817 sclass=netlink_route_socket pid=9065 comm=syz.0.1859 [ 181.025293][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1860'. [ 181.106330][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1860'. [ 181.143818][ T9072] loop5: detected capacity change from 0 to 128 [ 181.145621][ T9072] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.163625][ T9072] ext4 filesystem being mounted at /342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.325438][ T3675] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.341901][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.488956][ T9088] loop5: detected capacity change from 0 to 2048 [ 181.502392][ T9088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.523840][ T9093] netlink: 'syz.2.1867': attribute type 21 has an invalid length. [ 181.779077][ T9101] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1868'. [ 182.037638][ T9105] loop2: detected capacity change from 0 to 2048 [ 182.051502][ T9105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.096105][ T9113] tipc: Enabled bearer , priority 0 [ 182.105599][ T9113] tipc: Disabling bearer [ 182.202164][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.206577][ T9116] tipc: Enabled bearer , priority 0 [ 182.236696][ T9118] loop5: detected capacity change from 0 to 512 [ 182.244071][ T9118] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 182.254087][ T9116] tipc: Disabling bearer [ 182.274026][ T9118] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 182.282101][ T9118] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 182.291875][ T9118] System zones: 0-1, 15-15, 18-18, 34-34 [ 182.297846][ T9118] EXT4-fs (loop5): orphan cleanup on readonly fs [ 182.304655][ T9118] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 182.319284][ T9118] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 182.326333][ T9118] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1875: bg 0: block 40: padding at end of block bitmap is not set [ 182.341506][ T9118] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 182.350754][ T9118] EXT4-fs (loop5): 1 truncate cleaned up [ 182.358508][ T9118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.362275][ T9125] tipc: Enabled bearer , priority 0 [ 182.378503][ T9118] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.1875: bad symlink. [ 182.406977][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.418444][ T9125] tipc: Disabling bearer [ 182.522717][ T9134] loop0: detected capacity change from 0 to 256 [ 182.538205][ T9134] FAT-fs (loop0): IO charset cp932 not found [ 182.563754][ T9134] loop0: detected capacity change from 0 to 128 [ 182.581111][ T9136] loop5: detected capacity change from 0 to 2048 [ 182.591102][ T9136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.633931][ T9141] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 182.676326][ T9145] loop0: detected capacity change from 0 to 512 [ 182.784778][ T9145] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 182.794426][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.806137][ T9145] EXT4-fs (loop0): orphan cleanup on readonly fs [ 182.830429][ T9145] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1883: Failed to acquire dquot type 1 [ 182.873189][ T9145] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1883: bg 0: block 40: padding at end of block bitmap is not set [ 182.991079][ T9145] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 183.035810][ T9145] EXT4-fs (loop0): 1 truncate cleaned up [ 183.042394][ T9145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.131310][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 183.150301][ T9154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9154 comm=syz.0.1883 [ 183.170601][ T9154] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.1883: corrupted xattr block 31: invalid header [ 183.190019][ T9154] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 183.209888][ T9154] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.1883: corrupted xattr block 31: invalid header [ 183.267677][ T9154] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 183.305563][ T9154] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.1883: bad symlink. [ 183.402669][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.542401][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.632667][ T9162] tipc: Enabled bearer , priority 0 [ 183.645453][ T9162] tipc: Disabling bearer [ 183.690386][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 183.690405][ T29] audit: type=1326 audit(1762523955.737:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff410dcf6c9 code=0x7ffc0000 [ 183.725055][ T29] audit: type=1326 audit(1762523955.737:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff410dcf6c9 code=0x7ffc0000 [ 183.769085][ T9170] loop2: detected capacity change from 0 to 512 [ 183.776917][ T29] audit: type=1326 audit(1762523955.797:7321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff410dcf6c9 code=0x7ffc0000 [ 183.800451][ T29] audit: type=1326 audit(1762523955.797:7322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff410dcf703 code=0x7ffc0000 [ 183.824013][ T29] audit: type=1326 audit(1762523955.797:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff410dcf703 code=0x7ffc0000 [ 183.847466][ T29] audit: type=1326 audit(1762523955.797:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff410dcf6c9 code=0x7ffc0000 [ 183.871229][ T29] audit: type=1326 audit(1762523955.797:7325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff410dcf6c9 code=0x7ffc0000 [ 183.894750][ T29] audit: type=1326 audit(1762523955.807:7326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff410dcf6c9 code=0x7ffc0000 [ 183.918394][ T29] audit: type=1326 audit(1762523955.807:7327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff410dcf6c9 code=0x7ffc0000 [ 183.941860][ T29] audit: type=1326 audit(1762523955.807:7328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.5.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff410dcf6c9 code=0x7ffc0000 [ 183.998033][ T9170] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 184.010737][ T9170] EXT4-fs (loop2): orphan cleanup on readonly fs [ 184.017462][ T9170] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1892: Failed to acquire dquot type 1 [ 184.029253][ T9170] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1892: bg 0: block 40: padding at end of block bitmap is not set [ 184.046170][ T9170] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 184.046502][ T9170] EXT4-fs (loop2): 1 truncate cleaned up [ 184.047004][ T9170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.055615][ T9179] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1893'. [ 184.150064][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1892'. [ 184.168597][ T9170] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.1892: corrupted xattr block 31: invalid header [ 184.194532][ T9170] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 184.216430][ T9192] loop5: detected capacity change from 0 to 256 [ 184.218744][ T9170] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.1892: corrupted xattr block 31: invalid header [ 184.236256][ T9170] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 184.246703][ T9170] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.1892: bad symlink. [ 184.265138][ T9192] FAT-fs (loop5): IO charset cp932 not found [ 184.281738][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 184.302160][ T9196] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1901'. [ 184.381685][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.451952][ T9192] loop5: detected capacity change from 0 to 128 [ 184.699828][ T36] ================================================================== [ 184.707969][ T36] BUG: KCSAN: data-race in delete_from_page_cache_batch / nr_blockdev_pages [ 184.716677][ T36] [ 184.719027][ T36] read-write to 0xffff8881005f11f8 of 8 bytes by task 3330 on cpu 0: [ 184.727368][ T36] delete_from_page_cache_batch+0x4f1/0x6f0 [ 184.733286][ T36] truncate_inode_pages_range+0x1ba/0x780 [ 184.739021][ T36] truncate_inode_pages+0x24/0x30 [ 184.744058][ T36] blkdev_flush_mapping+0xa4/0x1a0 [ 184.749184][ T36] bdev_release+0x2bf/0x3d0 [ 184.753703][ T36] blkdev_release+0x15/0x20 [ 184.758222][ T36] __fput+0x29b/0x650 [ 184.762241][ T36] ____fput+0x1c/0x30 [ 184.766319][ T36] task_work_run+0x131/0x1a0 [ 184.770949][ T36] exit_to_user_mode_loop+0xed/0x110 [ 184.776248][ T36] do_syscall_64+0x1d6/0x200 [ 184.780870][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.786783][ T36] [ 184.789110][ T36] read to 0xffff8881005f11f8 of 8 bytes by task 36 on cpu 1: [ 184.796489][ T36] nr_blockdev_pages+0x7e/0xd0 [ 184.801267][ T36] si_meminfo+0x87/0xd0 [ 184.805443][ T36] update_defense_level+0x47/0x5c0 [ 184.810579][ T36] defense_work_handler+0x1f/0x80 [ 184.815650][ T36] process_scheduled_works+0x4ce/0x9d0 [ 184.821138][ T36] worker_thread+0x582/0x770 [ 184.825734][ T36] kthread+0x489/0x510 [ 184.829817][ T36] ret_from_fork+0x122/0x1b0 [ 184.834419][ T36] ret_from_fork_asm+0x1a/0x30 [ 184.839200][ T36] [ 184.841524][ T36] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 184.848635][ T36] [ 184.850975][ T36] Reported by Kernel Concurrency Sanitizer on: [ 184.857164][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 184.866805][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 184.876866][ T36] Workqueue: events_long defense_work_handler [ 184.882955][ T36] ================================================================== [ 184.904452][ T9214] loop2: detected capacity change from 0 to 128 [ 184.920417][ T9214] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.933391][ T9214] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.094228][ T3330] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.