last executing test programs: 2m6.47859014s ago: executing program 1 (id=153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 2m5.556127188s ago: executing program 1 (id=168): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r0) 2m5.492421209s ago: executing program 1 (id=170): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=""/4096, 0x1000}, 0x10}], 0x1, 0x2000000022, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000007c0)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20024810}, 0x2002c08c) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x28000, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x50, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r6, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) (async) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x14) (async) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) (async) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) (async) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x119a80, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r10, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r11, {0x2, 0x90de}}, './file0\x00'}) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r13}, 0x38) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r12) sendmsg$TIPC_NL_LINK_SET(r12, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, r14, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x8c}}, 0x80) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a0000, 0x0) 2m5.411173831s ago: executing program 1 (id=175): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000193c0)=@IORING_OP_WRITEV={0x2, 0x4c, 0x4004, @fd_index=0x3, 0x7, &(0x7f0000019380)=[{&(0x7f00000192c0)="8703c3a749c98598cb55aa56407a6c6ad67c881f5fac2a042d56b0a8d1dcee6d1249bc18920387345c1d5bb6930960626a0bd9278b73e6a07325a903d690f08d89560a8ef7e11c759db86453d17661bcbbd3e675bd135e750a8188aec533ba5d", 0x60}, {&(0x7f0000019280)="f1f481b265d76681b52d04b540e2", 0xe}, {&(0x7f000001a640)="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", 0x1000}], 0x3, 0x10, 0x0, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x92, 0x3620, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x64}}, 0x4008000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5a3, &(0x7f00000005c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) pwrite64(r3, &(0x7f0000000180)="f7", 0x1, 0x200980) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x80) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffff, 0x11, r5, 0x87de5000) creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = gettid() r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r7, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) r9 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r9, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r9}) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(r0, &(0x7f0000019240)='projid_map\x00') 2m5.102791987s ago: executing program 4 (id=177): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) unshare(0xa000200) r0 = semget$private(0x0, 0x4000, 0x0) fchdir(0xffffffffffffffff) io_uring_setup(0x5d70, &(0x7f0000000300)={0x0, 0x8a95, 0x400, 0x0, 0x169}) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000007c0)=""/126) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7c00, 0x4, 0x3) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r11 = dup(r10) sendfile(r11, r1, 0x0, 0x8000fffffffc) 2m5.046929669s ago: executing program 1 (id=178): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000080)={[{@fat=@check_strict}, {@dots}, {@dots}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x6}}]}, 0x1, 0x242, &(0x7f0000000300)="$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") r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x3, @vifc_lcl_addr=@rand_addr=0x1, @local}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000005"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r3}, 0x10) open(&(0x7f0000000240)='./file0\x00', 0x8582, 0x48) 2m4.259854354s ago: executing program 1 (id=187): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRES16=r0], 0x1, 0x25e, &(0x7f0000000540)="$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") ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c00028014000700fe8000000000001800000000000000420400120008000a"], 0x58}}, 0x8000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c00000000fb02903f7800000000e000030000009078006400d2"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f00, @multicast2=0xe0000300, 0x1, "028aea06ef48fc3c7b00", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2m4.259487973s ago: executing program 32 (id=187): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRES16=r0], 0x1, 0x25e, &(0x7f0000000540)="$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") ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c00028014000700fe8000000000001800000000000000420400120008000a"], 0x58}}, 0x8000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c00000000fb02903f7800000000e000030000009078006400d2"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f00, @multicast2=0xe0000300, 0x1, "028aea06ef48fc3c7b00", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2m4.250435574s ago: executing program 4 (id=189): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0x8800000, 0x0, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000180)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/253, 0xfd}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2m4.041406788s ago: executing program 4 (id=193): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x8, &(0x7f0000000040)=[{0x3, 0x83, 0x1}, {0x7a, 0xcd, 0x4, 0x3}, {0x8, 0x5, 0x9, 0x5d4}, {0x9, 0x9, 0x0, 0xcb9}, {0x0, 0x4, 0xff, 0x9}, {0x9fb, 0x6, 0xa3, 0x10000}, {0x3, 0x9, 0x80, 0xffffffff}, {0x9, 0xf}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$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") setxattr$incfs_metadata(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)={0x38, r4, 0x10ada85e65c25359, 0xfffffffe, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x408cd, 0xc) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0xfffffe3e) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x24000094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3, 0x0, 0x400000000000000}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2cc733d429cf5bada976657273696f6e3d3970323030302e752c61636365737339f3786e7ba90a6f5130cb4136646ef9d6504a0731e93aea296dc3b7742ae3aaeb2e52736f2a1fdcabfc16048386c08037fe2aa2357eb14fd469ed6cf2aaf8fe067372f9b64d04c7c0246b659d9f08a6f1f299b944062283f8a4810039c99b25a23cace378e6931ff852fe4925ad4fb3dcca2ae6c093a5aad58336b1b80712d051b6b94150b6d193cf40d87a5e8d2dac46b19bf624876e453176951a6300"/203]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r9) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 2m2.91267411s ago: executing program 4 (id=198): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000193c0)=@IORING_OP_WRITEV={0x2, 0x4c, 0x4004, @fd_index=0x3, 0x7, &(0x7f0000019380)=[{&(0x7f00000192c0)="8703c3a749c98598cb55aa56407a6c6ad67c881f5fac2a042d56b0a8d1dcee6d1249bc18920387345c1d5bb6930960626a0bd9278b73e6a07325a903d690f08d89560a8ef7e11c759db86453d17661bcbbd3e675bd135e750a8188aec533ba5d", 0x60}, {&(0x7f0000019280)="f1f481b265d76681b52d04b540e2", 0xe}, {&(0x7f000001a640)="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", 0x1000}], 0x3, 0x10, 0x0, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x92, 0x3620, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x64}}, 0x4008000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5a3, &(0x7f00000005c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) pwrite64(r3, &(0x7f0000000180)="f7", 0x1, 0x200980) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x80) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffff, 0x11, r5, 0x87de5000) creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = gettid() r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r7, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r8 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r8, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r8}) 2m2.612601235s ago: executing program 4 (id=200): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000003c0)={0x1d, r2, 0xfffffffffffffffd, {0x0, 0xf0, 0x4}, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4090000000000006910ae0000000000c4090000000000809500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in=@empty, 0x4e24, 0x6, 0x4e22, 0x2, 0x0, 0xa0, 0x0, 0x33, r2, r3}, {0x1, 0x9, 0x5, 0xf781, 0xe55, 0x5, 0x100, 0x1d61}, {0x6, 0x8000000000000, 0x9c, 0x8}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1}, {{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in=@local, 0x34ff, 0x0, 0x3, 0xe1, 0x1, 0x4, 0x9}}, 0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) set_tid_address(&(0x7f00000000c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x114a, 0x0) 2m1.679709984s ago: executing program 4 (id=207): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x43, &(0x7f0000000000), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r8}, 0x18) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x2, &(0x7f0000000740)={0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") setxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./file0/file0\x00') r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000006000000030000000000000e000000000000000000003a5f1e00"], 0x0, 0x2e}, 0x28) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x40, r10, 0x1, 0xffffff84, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x820) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r1, @ANYRESDEC, @ANYRES16=r9, @ANYRESHEX=r2, @ANYRES8=r8, @ANYRES64=r7, @ANYRES8=r4, @ANYRES64=r2, @ANYRES64=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m1.674763894s ago: executing program 33 (id=207): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x43, &(0x7f0000000000), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r8}, 0x18) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x2, &(0x7f0000000740)={0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") setxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./file0/file0\x00') r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000006000000030000000000000e000000000000000000003a5f1e00"], 0x0, 0x2e}, 0x28) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x40, r10, 0x1, 0xffffff84, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x820) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r1, @ANYRESDEC, @ANYRES16=r9, @ANYRESHEX=r2, @ANYRES8=r8, @ANYRES64=r7, @ANYRES8=r4, @ANYRES64=r2, @ANYRES64=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.662027729s ago: executing program 6 (id=2622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open$dir(&(0x7f0000000300)='./file0/file0\x00', 0x2001, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000001c0)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_setup(0x3ff, &(0x7f0000000500)=0x0) r7 = socket$caif_stream(0x25, 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) writev(r7, &(0x7f0000000940)=[{&(0x7f00000003c0)="e5", 0x1}], 0x1) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r8, 0x0) dup3(r8, r4, 0x0) ppoll(&(0x7f0000000140)=[{r8}], 0x1, 0x0, 0x0, 0x0) 1.808444645s ago: executing program 5 (id=2627): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @empty}, &(0x7f0000000300)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast1, 0x5, 0x4, 0xdcf, 0x200, 0x9, 0x80000018, r0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x0, 0x0, 0x0, 0x0, 0xfee, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 1.775267416s ago: executing program 6 (id=2628): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.754553676s ago: executing program 3 (id=2629): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) pidfd_send_signal(0xffffffffffffffff, 0x4, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1240081, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.690753248s ago: executing program 5 (id=2630): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000020c0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r3 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) dup(r4) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.668801748s ago: executing program 3 (id=2631): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x4c}}, 0x0) 1.611842609s ago: executing program 3 (id=2632): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400", @ANYRES16=r2, @ANYBLOB="0101000000ffffffe70010000000"], 0x14}}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="24801000", @ANYRES16=r2, @ANYBLOB="100025bd7000ffdbdf251100000008001500c000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000009505dcdc788d0f71c4e99dd3437587f9e893d5ca788fc206df38f8b9f15d5bef48c1ce0270a514550ff3bd47041921a5c4af0993b6bdbe96"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r6, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000010101030000000000000000020000000c001980"], 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) sendmsg$netlink(r7, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r9, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e000000200000000000000001800000000000000100100000c00000044040001e4ffffff"], 0x38}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000080), &(0x7f0000004040)}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 1.410287263s ago: executing program 6 (id=2633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf0ae594d74a98287, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fedbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="a76e4b4ee166530d9980d310e2e2b094ae77619589e842c044bca78e4cdb003cb32ac77df324e527df163ce5592daa9bd794575ee1b841a94e1813bbdb36673fc0085f46799af9075c037fe0457a3bb27f80bac359901cefa6cc3ee568ed8b01d267fc0bd62609098e3db8e31b2333b1ed90816cb09c7a6c97453a06056b42be6855e60367600711bd0fd889384507717b9acd50ca77f0f510d2cfbe9f7f551222adc7b32e8c6c3c7697049a5511520da39844249ef107c3da23ccd2a4bb65850472716d9e24139e6a0dbea8193d9bdde1ba81e10825c6344c2e5ba7275aeb5c43dc902f"], 0x5c}, 0x1, 0x0, 0x0, 0x4040058}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r13], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r14, &(0x7f0000000300)={0x11, 0x1b, r15, 0x1, 0xfc, 0x6, @local}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000040), 0xc, &(0x7f0000001580)={&(0x7f0000001600)=ANY=[@ANYBLOB='X\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES8=r7, @ANYBLOB="ec0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000008000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400d0e1484938000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400e60000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ffff00004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000a000d03000000000400b40807000000060002090600000008000100", @ANYRES32=0x0, @ANYBLOB="34010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004001444270708000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff0700003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="8001028040000100240001006c625f74785f686173685f746f5f000000000000050003000300008fc9000400", @ANYRES32=0x0, @ANYBLOB="080007000097aac898000100240001007175650000000063aaac15c8a8f903166f67985d0e80acbe30fce804316204000000ff29c87de52452eb32", @ANYRES32=r2, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400050000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYRESOCT=r4, @ANYRES32=r6, @ANYBLOB="b40002803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="b001028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000104000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400020000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r15, @ANYRES16], 0x958}, 0x1, 0x0, 0x0, 0x20004001}, 0x20040840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x60, 0x0, 0x0, r16, {}, {0xc, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 1.379210734s ago: executing program 2 (id=2634): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x9d, @empty}, @in={0x2, 0x4e22, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r1, 0x10001}}, 0x10) 1.280997066s ago: executing program 2 (id=2635): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xc00) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x45, 0x2, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000680)="259374c96ee3e9028dfdfebd1d1fcc057cd403b58804e7c35e5064c0a4862c9a0f035d267711fac854883768edd426ed71e31f0fc0451f7e11dab8cc73cc37bb13157e6561", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.222820417s ago: executing program 6 (id=2636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 1.167959078s ago: executing program 6 (id=2637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open$dir(&(0x7f0000000300)='./file0/file0\x00', 0x2001, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000001c0)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_setup(0x3ff, &(0x7f0000000500)=0x0) r7 = socket$caif_stream(0x25, 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) writev(r7, &(0x7f0000000940)=[{&(0x7f00000003c0)="e5", 0x1}], 0x1) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r8, 0x0) dup3(r8, r4, 0x0) ppoll(&(0x7f0000000140)=[{r8}], 0x1, 0x0, 0x0, 0x0) 1.151394648s ago: executing program 2 (id=2638): bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40c00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='sched_switch\x00', r2, 0x0, 0x101}, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x38}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x2b}, &(0x7f0000000200)=0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0xe) 853.216924ms ago: executing program 2 (id=2641): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 737.660057ms ago: executing program 5 (id=2642): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 737.050356ms ago: executing program 3 (id=2643): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1400"/12], 0x18}}], 0x1, 0x44008004) 733.657707ms ago: executing program 0 (id=2644): socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000003c0)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x2d, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @jmp={0x5, 0x0, 0x4, 0x6, 0x1, 0xfffffffffffffff0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x80000000, 0x43, &(0x7f0000000780)=""/67, 0x41000, 0x10, '\x00', r9, 0x25, r5, 0x8, &(0x7f0000001080)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000010c0)={0x1, 0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001100)=[{0x3, 0x2, 0x3, 0xb}], 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 673.824778ms ago: executing program 3 (id=2645): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000500)=0x0) timer_delete(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2c020400) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 608.836269ms ago: executing program 2 (id=2646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/11], 0x48) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000003c0)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x2d, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_query, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @jmp={0x5, 0x0, 0x4, 0x6, 0x1, 0xfffffffffffffff0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x80000000, 0x43, &(0x7f0000000780)=""/67, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000010c0)={0x1, 0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001100)=[{0x3, 0x2, 0x3, 0xb}], 0x10, 0x4}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 519.788231ms ago: executing program 3 (id=2647): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, &(0x7f0000001400)=""/4076, 0xfffffeea) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r6, 0x0, 0x7fffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r3, 0x1b) 495.463321ms ago: executing program 5 (id=2648): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x4c}}, 0x0) 414.795662ms ago: executing program 5 (id=2649): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r4, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 378.222433ms ago: executing program 0 (id=2650): syz_emit_ethernet(0xe, &(0x7f0000000e80)={@empty, @dev, @void, {@generic={0x88f5}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 329.544494ms ago: executing program 2 (id=2651): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x8, &(0x7f0000000040)=[{0x3, 0x83, 0x1}, {0x7a, 0xcd, 0x4, 0x3}, {0x8, 0x5, 0x9, 0x5d4}, {0x9, 0x9, 0x0, 0xcb9}, {0x0, 0x4, 0xff, 0x9}, {0x9fb, 0x6, 0xa3, 0x10000}, {0x3, 0x9, 0x80, 0xffffffff}, {0x9, 0xf}]}, 0x10) bind$bt_hci(r0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$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") setxattr$incfs_metadata(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)={0x38, r4, 0x10ada85e65c25359, 0xfffffffe, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x39000, 0x0) splice(r8, 0x0, r10, 0x0, 0x408cd, 0xc) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[], 0xfffffe3e) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x24000094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3, 0x0, 0x400000000000000}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2cc733d429cf5bada976657273696f6e3d3970323030302e752c61636365737339f3786e7ba90a6f5130cb4136646ef9d6504a0731e93aea296dc3b7742ae3aaeb2e52736f2a1fdcabfc16048386c08037fe2aa2357eb14fd469ed6cf2aaf8fe067372f9b64d04c7c0246b659d9f08a6f1f299b944062283f8a4810039c99b25a23cace378e6931ff852fe4925ad4fb3dcca2ae6c093a5aad58336b1b80712d051b6b94150b6d193cf40d87a5e8d2dac46b19bf624876e453176951a6300"/203]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r11) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 265.237776ms ago: executing program 0 (id=2652): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40c00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x101}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x38}) syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 254.339686ms ago: executing program 6 (id=2653): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0xc80c4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @private0, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000780), 0x44402, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x11070, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 187.480877ms ago: executing program 5 (id=2654): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400", @ANYRES16=r2, @ANYBLOB="0101000000ffffffe70010000000"], 0x14}}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="24801000", @ANYRES16=r2, @ANYBLOB="100025bd7000ffdbdf251100000008001500c000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000009505dcdc788d0f71c4e99dd3437587f9e893d5ca788fc206df38f8b9f15d5bef48c1ce0270a514550ff3bd47041921a5c4af0993b6bdbe96"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r6, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000010101030000000000000000020000000c001980"], 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) sendmsg$netlink(r7, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r9, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e000000200000000000000001800000000000000100100000c00000044040001e4ffffff"], 0x38}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000080), &(0x7f0000004040)}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 138.367568ms ago: executing program 0 (id=2655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 87.259739ms ago: executing program 0 (id=2656): inotify_init1(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kvm_set_irq\x00', r2, 0x0, 0x7}, 0x18) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="002b000000000000b70800000000e7ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESHEX=r3, @ANYRES32=r5, @ANYBLOB="1705c229da8bbd06f201c6aaf7562a0ada8234f29066f3b6b892a177c1b2fc277863914aff589b494918430a9919c8ce9863dfd586eabfff850efdf32ba6c03b58ac6343576edd2e127338a7372508c4882fb3bf09c00b10cae5d2e04289d547268bafb1cb522a024551fd4237dbb96707841596404e9d218c9a22d21d5f5dc792bb657a6b110f95ac598f551027cd26fc76c6b9f87950d724a0762dfeb7a05797b858614dfb3247db6f0ebd0f4924409124c016fcb6d879ed791d0a0a35065d570aca1f957d3c705e603b2bc172793e6fa8a06c0e40ea0195537cd8077665882819c23a", @ANYRES16, @ANYBLOB="a8014b76ae1029d0c399b6a25ce92e3b307488d433ba0497678f47cc4eb2c7462c17ecc25c76e8dd11550129b29f1ebb18565e159d66115b95e782d0125f970fcc2f5be318814dad3fb35a3ca1d6bae7629d1f105aa51a695f1a58aa547c927dcf1bb628a43af114da715c34dc5b11bbe145559ee2154b71283f3198cb4b1190649c294fac11ea0d06bbb95cf01552b5e1895dba3327e8d69deb99009e7b1e2ab8abf6c4b147fd83012343113de59622189cbd0f01078a"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) socket$packet(0x11, 0xa, 0x300) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) memfd_secret(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x44) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r11 = getpid() mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0x20010, r7, 0x53e94000) sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) 0s ago: executing program 0 (id=2657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/11], 0x48) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000003c0)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x2d, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_query, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @jmp={0x5, 0x0, 0x4, 0x6, 0x1, 0xfffffffffffffff0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x80000000, 0x43, &(0x7f0000000780)=""/67, 0x41000, 0x10, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000001080)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000010c0)={0x1, 0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001100)=[{0x3, 0x2, 0x3, 0xb}], 0x10, 0x4}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') kernel console output (not intermixed with test programs): h an inconsistent configuration, please check. [ 123.198197][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.205668][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.226651][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.234170][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.323265][ T8016] capability: warning: `syz.5.1511' uses deprecated v2 capabilities in a way that may be insecure [ 123.419523][ T8026] loop5: detected capacity change from 0 to 1024 [ 123.447409][ T8026] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.485499][ T8026] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.1515: lblock 1 mapped to illegal pblock 1 (length 1) [ 123.503903][ T8034] bridge4: entered promiscuous mode [ 123.541658][ T8026] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1515: Failed to acquire dquot type 0 [ 123.592245][ T8026] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1515: Freeing blocks not in datazone - block = 0, count = 4096 [ 123.628017][ T8038] loop2: detected capacity change from 0 to 8192 [ 123.641223][ T8026] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1515: Invalid inode bitmap blk 0 in block_group 0 [ 123.654763][ T6741] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 123.671631][ T8026] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 123.691056][ T6741] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 0 [ 123.704334][ T8032] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 123.705523][ T8026] EXT4-fs (loop5): 1 orphan inode deleted [ 123.725207][ T8026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.781948][ T8026] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.793604][ T8026] siw: device registration error -23 [ 123.829309][ T8056] netlink: '+}[@': attribute type 13 has an invalid length. [ 123.856989][ T8056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.883220][ T8058] __nla_validate_parse: 15 callbacks suppressed [ 123.883235][ T8058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1527'. [ 123.908994][ T8054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1525'. [ 123.918077][ T8054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1525'. [ 124.109613][ T8064] loop2: detected capacity change from 0 to 512 [ 124.136114][ T8064] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.166219][ T8064] EXT4-fs (loop2): 1 truncate cleaned up [ 124.175024][ T8064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.189887][ T8079] loop5: detected capacity change from 0 to 2048 [ 124.226132][ T8079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.273254][ T8087] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1538'. [ 124.385123][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.521031][ T8079] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 124.551855][ T8100] syz_tun: entered allmulticast mode [ 124.570566][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1539'. [ 124.605104][ T8092] syz_tun: left allmulticast mode [ 124.685499][ T8104] loop2: detected capacity change from 0 to 1024 [ 124.697343][ T8104] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.716801][ T8104] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.1543: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.731984][ T8104] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1543: Failed to acquire dquot type 0 [ 124.744305][ T8104] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1543: Freeing blocks not in datazone - block = 0, count = 4096 [ 124.758209][ T8104] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1543: Invalid inode bitmap blk 0 in block_group 0 [ 124.771082][ T37] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.786489][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 124.811571][ T8104] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 124.838250][ T8104] EXT4-fs (loop2): 1 orphan inode deleted [ 124.855675][ T8104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.874224][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1545'. [ 124.903675][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.913269][ T8109] bridge5: entered promiscuous mode [ 124.928534][ T8104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.075585][ T8129] sctp: [Deprecated]: syz.0.1553 (pid 8129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.075585][ T8129] Use struct sctp_sack_info instead [ 125.098783][ T8129] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1553'. [ 125.131505][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1555'. [ 125.155029][ T8131] bridge6: entered promiscuous mode [ 125.313598][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1560'. [ 125.366106][ T8151] loop2: detected capacity change from 0 to 8192 [ 125.392066][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 125.819348][ T8169] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 126.178273][ T8183] loop0: detected capacity change from 0 to 512 [ 126.202397][ T8183] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.222023][ T8183] EXT4-fs (loop0): 1 truncate cleaned up [ 126.228331][ T8183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.274146][ T8190] bridge8: entered promiscuous mode [ 126.360151][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.413377][ T8201] IPv6: Can't replace route, no match found [ 126.490537][ T8199] loop2: detected capacity change from 0 to 512 [ 126.523423][ T8199] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.566802][ T8199] EXT4-fs (loop2): 1 truncate cleaned up [ 126.709013][ T8215] loop5: detected capacity change from 0 to 2048 [ 127.036289][ T8237] loop0: detected capacity change from 0 to 512 [ 127.059994][ T8237] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 127.163343][ T8237] EXT4-fs (loop0): 1 truncate cleaned up [ 127.380042][ T8229] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 127.435336][ T8229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.549314][ T8246] bridge8: entered promiscuous mode [ 127.707936][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 127.707965][ T29] audit: type=1400 audit(1757895752.063:2641): avc: denied { create } for pid=8259 comm="syz.0.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.763319][ T29] audit: type=1400 audit(1757895752.073:2642): avc: denied { name_bind } for pid=8259 comm="syz.0.1603" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 127.793419][ T8267] loop2: detected capacity change from 0 to 2048 [ 127.800222][ T29] audit: type=1400 audit(1757895752.143:2643): avc: denied { setopt } for pid=8259 comm="syz.0.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.819971][ T29] audit: type=1400 audit(1757895752.143:2644): avc: denied { ioctl } for pid=8259 comm="syz.0.1603" path="socket:[22869]" dev="sockfs" ino=22869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.844879][ T29] audit: type=1400 audit(1757895752.143:2645): avc: denied { create } for pid=8259 comm="syz.0.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.878443][ T8270] loop0: detected capacity change from 0 to 1024 [ 127.885724][ T8270] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.938630][ T29] audit: type=1400 audit(1757895752.293:2646): avc: denied { module_request } for pid=8273 comm="syz.3.1608" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 127.943826][ T8270] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.1607: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.976835][ T29] audit: type=1400 audit(1757895752.333:2647): avc: denied { sys_module } for pid=8273 comm="syz.3.1608" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 128.000187][ T8270] Quota error (device loop0): write_blk: dquota write failed [ 128.007598][ T8270] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 128.045906][ T8270] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1607: Failed to acquire dquot type 0 [ 128.090746][ T8270] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.1607: Freeing blocks not in datazone - block = 0, count = 4096 [ 128.117825][ T8270] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1607: Invalid inode bitmap blk 0 in block_group 0 [ 128.131607][ T8270] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 128.140340][ T167] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.163103][ T167] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 128.171548][ T167] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 128.172240][ T8250] netlink: 'syz.5.1596': attribute type 1 has an invalid length. [ 128.183789][ T8270] EXT4-fs (loop0): 1 orphan inode deleted [ 128.202438][ T8250] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.241674][ T8250] bond2 (unregistering): Released all slaves [ 128.250945][ T8270] siw: device registration error -23 [ 128.335380][ T8280] netlink: 'syz.3.1609': attribute type 1 has an invalid length. [ 128.350531][ T8280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.593321][ T8311] geneve2: entered promiscuous mode [ 128.605010][ T8311] syz.6.1620: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 128.619685][ T8311] CPU: 1 UID: 0 PID: 8311 Comm: syz.6.1620 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.619714][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.619728][ T8311] Call Trace: [ 128.619733][ T8311] [ 128.619786][ T8311] __dump_stack+0x1d/0x30 [ 128.619805][ T8311] dump_stack_lvl+0xe8/0x140 [ 128.619863][ T8311] dump_stack+0x15/0x1b [ 128.619876][ T8311] warn_alloc+0x12b/0x1a0 [ 128.619946][ T8311] ? audit_log_end+0x1d7/0x1f0 [ 128.619972][ T8311] ? audit_log_end+0x1d7/0x1f0 [ 128.620061][ T8311] __vmalloc_node_range_noprof+0x9c/0xe00 [ 128.620109][ T8311] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 128.620192][ T8311] ? slow_avc_audit+0x104/0x140 [ 128.620215][ T8311] ? should_fail_ex+0x30/0x280 [ 128.620233][ T8311] ? xskq_create+0x36/0xe0 [ 128.620250][ T8311] vmalloc_user_noprof+0x7d/0xb0 [ 128.620334][ T8311] ? xskq_create+0x80/0xe0 [ 128.620384][ T8311] xskq_create+0x80/0xe0 [ 128.620407][ T8311] xsk_init_queue+0x95/0xf0 [ 128.620432][ T8311] xsk_setsockopt+0x477/0x640 [ 128.620465][ T8311] ? __pfx_xsk_setsockopt+0x10/0x10 [ 128.620534][ T8311] __sys_setsockopt+0x181/0x200 [ 128.620556][ T8311] __x64_sys_setsockopt+0x64/0x80 [ 128.620576][ T8311] x64_sys_call+0x20ec/0x2ff0 [ 128.620593][ T8311] do_syscall_64+0xd2/0x200 [ 128.620659][ T8311] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.620750][ T8311] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.620803][ T8311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.620819][ T8311] RIP: 0033:0x7fcdc07aeba9 [ 128.620830][ T8311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.620844][ T8311] RSP: 002b:00007fcdbf20f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.620858][ T8311] RAX: ffffffffffffffda RBX: 00007fcdc09f5fa0 RCX: 00007fcdc07aeba9 [ 128.620868][ T8311] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 128.620912][ T8311] RBP: 00007fcdc0831e19 R08: 0000000000000004 R09: 0000000000000000 [ 128.620921][ T8311] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 128.620988][ T8311] R13: 00007fcdc09f6038 R14: 00007fcdc09f5fa0 R15: 00007fff449d3548 [ 128.621003][ T8311] [ 128.621043][ T8311] Mem-Info: [ 128.844828][ T8311] active_anon:8174 inactive_anon:3 isolated_anon:0 [ 128.844828][ T8311] active_file:24553 inactive_file:2283 isolated_file:0 [ 128.844828][ T8311] unevictable:0 dirty:744 writeback:0 [ 128.844828][ T8311] slab_reclaimable:3439 slab_unreclaimable:79556 [ 128.844828][ T8311] mapped:30778 shmem:450 pagetables:1702 [ 128.844828][ T8311] sec_pagetables:0 bounce:0 [ 128.844828][ T8311] kernel_misc_reclaimable:0 [ 128.844828][ T8311] free:1809446 free_pcp:6435 free_cma:0 [ 128.889699][ T8311] Node 0 active_anon:32696kB inactive_anon:12kB active_file:98212kB inactive_file:9132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123112kB dirty:2976kB writeback:0kB shmem:1800kB kernel_stack:3936kB pagetables:6924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 128.917384][ T8311] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 128.946024][ T8311] lowmem_reserve[]: 0 2883 7862 7862 [ 128.951443][ T8311] Node 0 DMA32 free:2949292kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952824kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 128.981551][ T8311] lowmem_reserve[]: 0 0 4978 4978 [ 128.981592][ T8311] Node 0 Normal free:4272656kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32696kB inactive_anon:12kB active_file:98212kB inactive_file:9132kB unevictable:0kB writepending:3072kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:22184kB local_pcp:4624kB free_cma:0kB [ 129.018676][ T8311] lowmem_reserve[]: 0 0 0 0 [ 129.023490][ T8311] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.036354][ T8311] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949292kB [ 129.052536][ T8311] Node 0 Normal: 459*4kB (UM) 1171*8kB (UME) 610*16kB (UME) 419*32kB (UM) 298*64kB (UME) 224*128kB (UME) 143*256kB (UME) 65*512kB (UM) 34*1024kB (UME) 21*2048kB (UM) 987*4096kB (UM) = 4272580kB [ 129.071901][ T8311] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 129.077836][ T8333] geneve2: entered promiscuous mode [ 129.081247][ T8311] 27270 total pagecache pages [ 129.086460][ T8333] geneve2: entered allmulticast mode [ 129.091120][ T8311] 4 pages in swap cache [ 129.091129][ T8311] Free swap = 124980kB [ 129.104848][ T8311] Total swap = 124996kB [ 129.109051][ T8311] 2097051 pages RAM [ 129.112998][ T8311] 0 pages HighMem/MovableOnly [ 129.117821][ T8311] 80445 pages reserved [ 129.203782][ T8342] __nla_validate_parse: 9 callbacks suppressed [ 129.203798][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1631'. [ 129.301104][ T8344] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1632'. [ 129.418655][ T8357] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1637'. [ 129.468719][ T8353] loop5: detected capacity change from 0 to 512 [ 129.504824][ T8353] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 129.546923][ T8353] EXT4-fs (loop5): 1 truncate cleaned up [ 130.000114][ T8371] loop5: detected capacity change from 0 to 2048 [ 130.034880][ T8373] geneve3: entered promiscuous mode [ 130.040171][ T8373] geneve3: entered allmulticast mode [ 130.048698][ T8371] EXT4-fs mount: 12 callbacks suppressed [ 130.048753][ T8371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.052872][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 130.176558][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1647'. [ 130.193935][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.403706][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1654'. [ 130.490872][ T8411] loop5: detected capacity change from 0 to 512 [ 130.503101][ T8413] geneve2: entered promiscuous mode [ 130.508327][ T8413] geneve2: entered allmulticast mode [ 130.519840][ T8411] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.544324][ T8411] EXT4-fs (loop5): 1 truncate cleaned up [ 130.554826][ T8411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.614703][ T8415] netlink: 'syz.6.1657': attribute type 1 has an invalid length. [ 130.649115][ T8420] loop0: detected capacity change from 0 to 512 [ 130.667578][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.693980][ T8420] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.703155][ T8420] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 130.714797][ T8420] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 130.729714][ T8420] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 130.738813][ T8420] System zones: 0-2, 18-18, 34-34 [ 130.749406][ T8420] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1658: iget: bad i_size value: 360287970189639680 [ 130.783493][ T8420] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1658: couldn't read orphan inode 15 (err -117) [ 130.813383][ T8420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.874968][ T8422] netlink: 'syz.5.1659': attribute type 1 has an invalid length. [ 131.091407][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1666'. [ 131.211022][ T8445] geneve3: entered promiscuous mode [ 131.216353][ T8445] geneve3: entered allmulticast mode [ 131.229034][ T8451] siw: device registration error -23 [ 131.260045][ T8454] loop5: detected capacity change from 0 to 512 [ 131.282712][ T8454] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 131.300698][ T8454] EXT4-fs (loop5): 1 truncate cleaned up [ 131.315122][ T8454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.398675][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.515612][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.616956][ T8471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1679'. [ 131.639829][ T8466] loop5: detected capacity change from 0 to 512 [ 131.673023][ T8466] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 131.707504][ T8476] loop0: detected capacity change from 0 to 1024 [ 131.707698][ T8466] EXT4-fs (loop5): 1 truncate cleaned up [ 131.730052][ T8476] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.746850][ T8476] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 131.758738][ T8466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.770342][ T8476] EXT4-fs (loop0): orphan cleanup on readonly fs [ 131.779049][ T8476] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 131.793581][ T8476] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 131.801721][ T8476] EXT4-fs (loop0): 1 truncate cleaned up [ 131.808020][ T8476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.820954][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1684'. [ 131.840060][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.842530][ T8483] bridge7: entered promiscuous mode [ 131.875491][ T8485] netlink: 'syz.2.1686': attribute type 1 has an invalid length. [ 131.904219][ T8485] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.920286][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 131.939253][ T8491] netlink: 'syz.0.1687': attribute type 1 has an invalid length. [ 131.992622][ T8495] loop2: detected capacity change from 0 to 512 [ 131.997847][ T8491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.023157][ T8495] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.031857][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.068644][ T8495] EXT4-fs (loop2): 1 truncate cleaned up [ 132.089163][ T8495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.177099][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.196155][ T8509] loop5: detected capacity change from 0 to 2048 [ 132.209487][ T8505] loop0: detected capacity change from 0 to 512 [ 132.233011][ T8505] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.257646][ T8509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.272871][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.291716][ T8505] EXT4-fs (loop0): 1 truncate cleaned up [ 132.299288][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.306515][ T8511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.316090][ T8505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.388506][ T8511] tipc: Enabling of bearer rejected, failed to enable media [ 132.512761][ T8531] loop2: detected capacity change from 0 to 512 [ 132.522782][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.538962][ T8531] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.562547][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.593352][ T8539] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 132.615842][ T8531] EXT4-fs (loop2): 1 truncate cleaned up [ 132.630448][ T8531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.668276][ T8539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.757254][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.851998][ T8562] geneve2: entered promiscuous mode [ 132.857395][ T8562] geneve2: entered allmulticast mode [ 132.909695][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 132.909719][ T29] audit: type=1400 audit(1757895757.263:2938): avc: denied { create } for pid=8574 comm="syz.3.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.936021][ T8575] IPv6: Can't replace route, no match found [ 132.942185][ T29] audit: type=1400 audit(1757895757.293:2939): avc: denied { write } for pid=8574 comm="syz.3.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.967434][ T8571] geneve2: entered promiscuous mode [ 132.972656][ T8571] geneve2: entered allmulticast mode [ 133.254091][ T29] audit: type=1326 audit(1757895757.613:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc07aeba9 code=0x7ffc0000 [ 133.275962][ T8598] loop5: detected capacity change from 0 to 512 [ 133.277538][ T29] audit: type=1326 audit(1757895757.613:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc07aeba9 code=0x7ffc0000 [ 133.299614][ T29] audit: type=1326 audit(1757895757.633:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdc07aeba9 code=0x7ffc0000 [ 133.333498][ T29] audit: type=1326 audit(1757895757.633:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc07aeba9 code=0x7ffc0000 [ 133.333528][ T29] audit: type=1326 audit(1757895757.633:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc07aeba9 code=0x7ffc0000 [ 133.371495][ T8598] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 133.374610][ T8605] bridge12: entered promiscuous mode [ 133.397949][ T29] audit: type=1326 audit(1757895757.693:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fcdc07aeba9 code=0x7ffc0000 [ 133.434706][ T29] audit: type=1326 audit(1757895757.693:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc07aeba9 code=0x7ffc0000 [ 133.458232][ T29] audit: type=1326 audit(1757895757.693:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc07aeba9 code=0x7ffc0000 [ 133.487110][ T8606] geneve2: entered promiscuous mode [ 133.492353][ T8606] geneve2: entered allmulticast mode [ 133.513317][ T8598] EXT4-fs (loop5): 1 truncate cleaned up [ 133.579000][ T8598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.597928][ T8600] netlink: 'syz.6.1733': attribute type 1 has an invalid length. [ 133.790690][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.836616][ T8634] bridge13: entered promiscuous mode [ 133.855049][ T8632] loop5: detected capacity change from 0 to 1024 [ 133.865205][ T8632] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.878569][ T8632] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.1746: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.922365][ T8632] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1746: Failed to acquire dquot type 0 [ 133.951217][ T8632] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1746: Freeing blocks not in datazone - block = 0, count = 4096 [ 133.967527][ T8632] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1746: Invalid inode bitmap blk 0 in block_group 0 [ 133.981253][ T8632] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 133.990590][ T8632] EXT4-fs (loop5): 1 orphan inode deleted [ 133.996968][ T8632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.996992][ T37] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.052137][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 134.065008][ T8648] siw: device registration error -23 [ 134.094912][ T8632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.291282][ T8659] loop0: detected capacity change from 0 to 8192 [ 134.300071][ T8645] __nla_validate_parse: 12 callbacks suppressed [ 134.300104][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1751'. [ 134.326836][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 134.379689][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1758'. [ 134.398271][ T8663] bridge8: entered promiscuous mode [ 134.407407][ T8661] loop5: detected capacity change from 0 to 512 [ 134.418454][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1758'. [ 134.448273][ T8661] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 134.490662][ T8661] EXT4-fs (loop5): 1 truncate cleaned up [ 134.501909][ T8661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.568232][ T8681] netlink: '+}[@': attribute type 13 has an invalid length. [ 134.579588][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.589688][ T8681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.616804][ T8675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1763'. [ 134.625801][ T8675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1763'. [ 134.651097][ T8684] loop5: detected capacity change from 0 to 1024 [ 134.663328][ T8684] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 134.675110][ T8684] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.1766: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.690194][ T8684] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1766: Failed to acquire dquot type 0 [ 134.698890][ T8686] siw: device registration error -23 [ 134.701721][ T8684] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1766: Freeing blocks not in datazone - block = 0, count = 4096 [ 134.726966][ T8684] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1766: Invalid inode bitmap blk 0 in block_group 0 [ 134.740195][ T8684] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 134.749277][ T37] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.765403][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 134.778126][ T8684] EXT4-fs (loop5): 1 orphan inode deleted [ 134.793426][ T8684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.831578][ T8684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.857210][ T8684] siw: device registration error -23 [ 134.948160][ T8693] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.041187][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1768'. [ 135.086038][ T8693] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.156217][ T8693] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.217608][ T8693] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.250339][ T8713] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 135.292744][ T3434] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.341942][ T3434] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.360011][ T3434] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.422400][ T8716] loop5: detected capacity change from 0 to 512 [ 135.429907][ T8717] loop2: detected capacity change from 0 to 512 [ 135.438852][ T3434] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.460543][ T8716] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 135.477945][ T8717] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.524405][ T8716] EXT4-fs (loop5): 1 truncate cleaned up [ 135.539461][ T8716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.552867][ T8717] EXT4-fs (loop2): 1 truncate cleaned up [ 135.569234][ T8717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.688796][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.784984][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.935481][ T8741] loop5: detected capacity change from 0 to 128 [ 136.083647][ T8754] loop2: detected capacity change from 0 to 2048 [ 136.109060][ T8754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.126382][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1792'. [ 136.398553][ T8778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1802'. [ 136.462832][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.543421][ T8795] loop0: detected capacity change from 0 to 1024 [ 136.550633][ T8795] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.565329][ T8795] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.1809: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.590311][ T8795] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1809: Failed to acquire dquot type 0 [ 136.606522][ T8795] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.1809: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.623514][ T8795] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1809: Invalid inode bitmap blk 0 in block_group 0 [ 136.636477][ T6744] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.653140][ T6744] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:15: Failed to release dquot type 0 [ 136.666712][ T8795] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 136.675501][ T8795] EXT4-fs (loop0): 1 orphan inode deleted [ 136.681695][ T8795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.702471][ T8795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.714266][ T8795] siw: device registration error -23 [ 136.726853][ T8799] netlink: 'syz.2.1811': attribute type 1 has an invalid length. [ 136.741035][ T8799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.062527][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1816'. [ 137.087533][ T8827] netlink: '+}[@': attribute type 13 has an invalid length. [ 137.110439][ T8827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.160485][ T8829] geneve2: entered promiscuous mode [ 137.165718][ T8829] geneve2: entered allmulticast mode [ 137.284283][ T8839] loop0: detected capacity change from 0 to 8192 [ 137.476671][ T8854] loop5: detected capacity change from 0 to 512 [ 137.490743][ T8854] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 137.520373][ T8854] EXT4-fs (loop5): 1 truncate cleaned up [ 137.528903][ T8854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.604194][ T8862] netlink: '+}[@': attribute type 13 has an invalid length. [ 137.625818][ T8862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.683224][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.727844][ T8862] bond0: entered promiscuous mode [ 137.732918][ T8862] bond_slave_0: entered promiscuous mode [ 137.738652][ T8862] bond_slave_1: entered promiscuous mode [ 137.746545][ T8862] bond0: left promiscuous mode [ 137.751345][ T8862] bond_slave_0: left promiscuous mode [ 137.756906][ T8862] bond_slave_1: left promiscuous mode [ 137.765080][ T8865] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 137.785531][ T8867] geneve2: entered promiscuous mode [ 137.790782][ T8867] geneve2: entered allmulticast mode [ 138.735619][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 138.735704][ T29] audit: type=1326 audit(1757895763.093:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 138.769209][ T29] audit: type=1326 audit(1757895763.123:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 138.792722][ T29] audit: type=1326 audit(1757895763.123:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 138.816478][ T29] audit: type=1326 audit(1757895763.123:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 138.839999][ T29] audit: type=1326 audit(1757895763.123:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 138.847035][ T8907] geneve3: entered promiscuous mode [ 138.863475][ T29] audit: type=1326 audit(1757895763.123:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 138.868696][ T8907] geneve3: entered allmulticast mode [ 138.897432][ T29] audit: type=1326 audit(1757895763.123:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 139.030107][ T29] audit: type=1326 audit(1757895763.373:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 139.053658][ T29] audit: type=1326 audit(1757895763.373:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 139.080535][ T8914] loop0: detected capacity change from 0 to 8192 [ 139.106457][ T29] audit: type=1326 audit(1757895763.463:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 139.119999][ T8905] netlink: 'syz.3.1847': attribute type 1 has an invalid length. [ 139.225924][ T8926] loop2: detected capacity change from 0 to 512 [ 139.238756][ T8926] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.247988][ T8926] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 139.260674][ T8926] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 139.299602][ T8926] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 139.308973][ T8930] netlink: '+}[@': attribute type 13 has an invalid length. [ 139.336014][ T8926] System zones: 0-2, 18-18, 34-34 [ 139.341603][ T8930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.359763][ T8926] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1854: iget: bad i_size value: 360287970189639680 [ 139.376507][ T8926] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1854: couldn't read orphan inode 15 (err -117) [ 139.391223][ T8928] __nla_validate_parse: 7 callbacks suppressed [ 139.391235][ T8928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1853'. [ 139.406434][ T8928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1853'. [ 139.418197][ T8926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.468896][ T8933] netlink: 'syz.3.1855': attribute type 1 has an invalid length. [ 139.481584][ T8933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.492461][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 139.514667][ T8933] bond3 (unregistering): Released all slaves [ 139.552596][ T8944] IPv6: Can't replace route, no match found [ 139.645690][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1863'. [ 139.669620][ T8954] bridge10: entered promiscuous mode [ 139.732837][ T8963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1866'. [ 139.798646][ T8968] loop0: detected capacity change from 0 to 1024 [ 139.806699][ T8968] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.823218][ T8968] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.1868: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.845847][ T8968] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1868: Failed to acquire dquot type 0 [ 139.857988][ T8968] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.1868: Freeing blocks not in datazone - block = 0, count = 4096 [ 139.872286][ T8968] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1868: Invalid inode bitmap blk 0 in block_group 0 [ 139.885872][ T6744] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.902553][ T8968] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 139.912558][ T6744] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:15: Failed to release dquot type 0 [ 139.925170][ T8968] EXT4-fs (loop0): 1 orphan inode deleted [ 139.931445][ T8968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.948810][ T8968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.960114][ T8968] siw: device registration error -23 [ 140.094979][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.229068][ T8979] IPv6: Can't replace route, no match found [ 140.519623][ T8999] loop2: detected capacity change from 0 to 512 [ 140.537606][ T8999] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.565752][ T8999] EXT4-fs (loop2): 1 truncate cleaned up [ 140.574674][ T8999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.657790][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.738244][ T9003] netlink: 'syz.5.1881': attribute type 1 has an invalid length. [ 140.752343][ T9003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.773991][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1881'. [ 140.785368][ T9003] bond2 (unregistering): Released all slaves [ 141.008691][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1886'. [ 141.493264][ T9029] netlink: 'syz.5.1891': attribute type 1 has an invalid length. [ 141.514640][ T9045] netlink: '+}[@': attribute type 13 has an invalid length. [ 141.543040][ T9045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.596066][ T9042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1897'. [ 141.605172][ T9042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1897'. [ 141.621665][ T9050] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 141.994803][ T9065] loop5: detected capacity change from 0 to 512 [ 142.033319][ T9065] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.042379][ T9065] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 142.093094][ T9065] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 142.134431][ T9065] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 142.142493][ T9065] System zones: 0-2, 18-18, 34-34 [ 142.183274][ T9065] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1905: iget: bad i_size value: 360287970189639680 [ 142.223146][ T9065] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1905: couldn't read orphan inode 15 (err -117) [ 142.243315][ T9065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.297568][ T9063] netlink: 'syz.3.1904': attribute type 1 has an invalid length. [ 142.323902][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 142.342597][ T9067] netlink: 'syz.2.1900': attribute type 1 has an invalid length. [ 142.577183][ T9069] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 142.607334][ T9069] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.631271][ T9069] bond3 (unregistering): Released all slaves [ 142.823119][ T9095] bridge14: entered promiscuous mode [ 143.040917][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.465032][ T9103] netlink: 'syz.3.1917': attribute type 1 has an invalid length. [ 143.649451][ T9124] IPv6: Can't replace route, no match found [ 143.673470][ T9125] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 143.744430][ T9130] bridge9: entered promiscuous mode [ 143.807966][ T9132] loop2: detected capacity change from 0 to 512 [ 143.956199][ T9132] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.965342][ T9132] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 143.966710][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 143.966726][ T29] audit: type=1326 audit(1757895768.323:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.5.1930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac368beba9 code=0x0 [ 144.085341][ T9132] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 144.119884][ T9118] netlink: 'syz.3.1923': attribute type 1 has an invalid length. [ 144.127986][ T9132] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 144.192794][ T9132] System zones: 0-2, 18-18, 34-34 [ 144.209869][ T9118] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.230715][ T9132] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1928: iget: bad i_size value: 360287970189639680 [ 144.319714][ T9132] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1928: couldn't read orphan inode 15 (err -117) [ 144.364983][ T9132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.659617][ T9162] __nla_validate_parse: 6 callbacks suppressed [ 144.659633][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 144.677992][ T9162] bridge11: entered promiscuous mode [ 144.716613][ T29] audit: type=1326 audit(1757895769.073:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 144.828803][ T29] audit: type=1326 audit(1757895769.073:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 144.852414][ T29] audit: type=1326 audit(1757895769.073:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 144.875864][ T29] audit: type=1326 audit(1757895769.073:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 144.899275][ T29] audit: type=1326 audit(1757895769.073:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 144.922697][ T29] audit: type=1326 audit(1757895769.073:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 144.946155][ T29] audit: type=1326 audit(1757895769.093:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 144.969550][ T29] audit: type=1326 audit(1757895769.093:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 144.992963][ T29] audit: type=1326 audit(1757895769.103:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.3.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 145.019020][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.025360][ T9172] IPv6: Can't replace route, no match found [ 145.163038][ T9186] IPv6: Can't replace route, no match found [ 145.198016][ T9168] netlink: 'syz.0.1941': attribute type 1 has an invalid length. [ 145.230109][ T9168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.249955][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'. [ 145.250317][ T9177] netlink: 'syz.6.1946': attribute type 1 has an invalid length. [ 145.274173][ T9168] bond3 (unregistering): Released all slaves [ 145.340690][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'. [ 145.357422][ T9194] bridge9: entered promiscuous mode [ 145.472273][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1956'. [ 145.507104][ T9204] bridge10: entered promiscuous mode [ 145.562909][ T9212] IPv6: Can't replace route, no match found [ 145.579110][ T9214] 9pnet_fd: Insufficient options for proto=fd [ 145.670552][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1965'. [ 145.703900][ T9214] loop0: detected capacity change from 0 to 8192 [ 145.708696][ T9226] bridge11: entered promiscuous mode [ 145.719377][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 146.301566][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1978'. [ 146.311204][ T9263] netlink: '+}[@': attribute type 13 has an invalid length. [ 146.372000][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1977'. [ 146.381030][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1977'. [ 146.399234][ T9263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.424702][ T9260] bridge12: entered promiscuous mode [ 146.484073][ T9238] netlink: 'syz.3.1970': attribute type 1 has an invalid length. [ 146.501363][ T9238] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.516425][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 146.543842][ T9275] loop2: detected capacity change from 0 to 2048 [ 146.553275][ T9238] bond4 (unregistering): Released all slaves [ 146.567967][ T9275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.766650][ T9286] siw: device registration error -23 [ 146.791752][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.026477][ T9310] loop2: detected capacity change from 0 to 512 [ 147.058532][ T9310] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.126345][ T9310] EXT4-fs (loop2): 1 truncate cleaned up [ 147.152646][ T9310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.197448][ T9329] loop0: detected capacity change from 0 to 2048 [ 147.241807][ T9329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.256286][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.333642][ T9337] loop2: detected capacity change from 0 to 2048 [ 147.365567][ T9337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.514595][ T9345] loop5: detected capacity change from 0 to 512 [ 147.528156][ T9345] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 147.559445][ T9345] EXT4-fs (loop5): 1 truncate cleaned up [ 147.568124][ T9345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.597995][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.616804][ T9347] netlink: '+}[@': attribute type 13 has an invalid length. [ 147.640519][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.664753][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.676249][ T9347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.807863][ T9357] loop5: detected capacity change from 0 to 512 [ 147.812826][ T9361] bridge13: entered promiscuous mode [ 147.833830][ T9357] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 147.875401][ T9357] EXT4-fs (loop5): 1 truncate cleaned up [ 147.891942][ T9357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.932719][ T9369] IPv6: Can't replace route, no match found [ 147.946884][ T9355] netlink: 'syz.2.2011': attribute type 1 has an invalid length. [ 147.985508][ T9355] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.013013][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.027622][ T9364] bond4 (unregistering): Released all slaves [ 148.058354][ T9382] loop5: detected capacity change from 0 to 2048 [ 148.133988][ T9382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.158338][ T9381] loop0: detected capacity change from 0 to 8192 [ 148.193342][ T9393] bridge10: entered promiscuous mode [ 148.546133][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.995341][ T9418] netlink: 'syz.5.2037': attribute type 1 has an invalid length. [ 149.010916][ T9418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.023403][ T9418] bond2 (unregistering): Released all slaves [ 149.031067][ T29] kauditd_printk_skb: 537 callbacks suppressed [ 149.031080][ T29] audit: type=1326 audit(1757895773.383:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d589eba9 code=0x7ffc0000 [ 149.102191][ T29] audit: type=1326 audit(1757895773.383:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d589eba9 code=0x7ffc0000 [ 149.125615][ T29] audit: type=1326 audit(1757895773.433:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f64d589eba9 code=0x7ffc0000 [ 149.149039][ T29] audit: type=1326 audit(1757895773.433:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d589eba9 code=0x7ffc0000 [ 149.172451][ T29] audit: type=1326 audit(1757895773.433:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64d589eba9 code=0x7ffc0000 [ 149.195991][ T29] audit: type=1326 audit(1757895773.433:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d589eba9 code=0x7ffc0000 [ 149.219393][ T29] audit: type=1326 audit(1757895773.433:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64d589eba9 code=0x7ffc0000 [ 149.242776][ T29] audit: type=1326 audit(1757895773.433:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d589eba9 code=0x7ffc0000 [ 149.266285][ T29] audit: type=1326 audit(1757895773.433:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64d589eba9 code=0x7ffc0000 [ 149.289772][ T29] audit: type=1326 audit(1757895773.433:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9423 comm="syz.0.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d589eba9 code=0x7ffc0000 [ 149.514789][ T9444] loop5: detected capacity change from 0 to 512 [ 149.561925][ T9452] loop0: detected capacity change from 0 to 512 [ 149.572784][ T9444] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 149.594557][ T9452] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.617531][ T9444] EXT4-fs (loop5): 1 truncate cleaned up [ 149.655659][ T9444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.717235][ T9452] EXT4-fs (loop0): 1 truncate cleaned up [ 149.725755][ T9452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.759715][ T9459] IPv6: Can't replace route, no match found [ 150.300391][ T9470] netlink: 'syz.3.2057': attribute type 1 has an invalid length. [ 150.318616][ T9470] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.331416][ T9470] __nla_validate_parse: 19 callbacks suppressed [ 150.331434][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2057'. [ 150.355095][ T9470] bond4 (unregistering): Released all slaves [ 150.381445][ T9478] loop0: detected capacity change from 0 to 8192 [ 150.399135][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 150.846261][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2075'. [ 150.848175][ T9520] loop0: detected capacity change from 0 to 512 [ 150.875120][ T9520] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.899889][ T9520] EXT4-fs (loop0): 1 truncate cleaned up [ 151.178696][ T9538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2084'. [ 151.280564][ T9545] netlink: '+}[@': attribute type 13 has an invalid length. [ 151.405910][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2085'. [ 151.414951][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2085'. [ 151.508693][ T9545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.532798][ T9549] bond0: entered promiscuous mode [ 151.537942][ T9549] bond_slave_0: entered promiscuous mode [ 151.543743][ T9549] bond_slave_1: entered promiscuous mode [ 151.554213][ T9549] bond0: left promiscuous mode [ 151.559097][ T9549] bond_slave_0: left promiscuous mode [ 151.564615][ T9549] bond_slave_1: left promiscuous mode [ 151.616391][ T9554] netlink: 'syz.5.2089': attribute type 1 has an invalid length. [ 151.629232][ T9554] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.639960][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2089'. [ 151.708989][ T9565] IPv6: Can't replace route, no match found [ 151.715725][ T9562] siw: device registration error -23 [ 151.756302][ T9572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2096'. [ 151.813222][ T9574] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2097'. [ 151.969183][ T9589] netlink: '+}[@': attribute type 13 has an invalid length. [ 152.013700][ T9589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.071199][ T9591] loop0: detected capacity change from 0 to 512 [ 152.086855][ T9587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2100'. [ 152.103849][ T9591] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 152.122159][ T9591] EXT4-fs (loop0): 1 truncate cleaned up [ 152.217954][ T9593] netlink: 'syz.6.2103': attribute type 1 has an invalid length. [ 152.241181][ T9593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.268636][ T9602] loop2: detected capacity change from 0 to 512 [ 152.297856][ T9602] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.342031][ T9602] EXT4-fs (loop2): 1 truncate cleaned up [ 152.585551][ T9622] loop5: detected capacity change from 0 to 512 [ 152.604151][ T9622] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.622464][ T9622] EXT4-fs (loop5): 1 truncate cleaned up [ 152.872160][ T9651] loop0: detected capacity change from 0 to 512 [ 152.889164][ T9651] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 152.900467][ T9635] netlink: 'syz.3.2119': attribute type 1 has an invalid length. [ 152.920243][ T9651] EXT4-fs (loop0): 1 truncate cleaned up [ 152.920479][ T9635] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.971280][ T9662] loop2: detected capacity change from 0 to 1024 [ 152.979293][ T9662] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.010679][ T9662] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.2129: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.045524][ T9662] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2129: Failed to acquire dquot type 0 [ 153.058496][ T9662] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2129: Freeing blocks not in datazone - block = 0, count = 4096 [ 153.083761][ T9662] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2129: Invalid inode bitmap blk 0 in block_group 0 [ 153.096986][ T9662] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 153.107147][ T9662] EXT4-fs (loop2): 1 orphan inode deleted [ 153.107270][ T6741] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.141779][ T6741] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 0 [ 153.242119][ T9680] loop5: detected capacity change from 0 to 2048 [ 153.316465][ T9686] loop0: detected capacity change from 0 to 512 [ 153.647916][ T9693] netlink: 'syz.6.2142': attribute type 1 has an invalid length. [ 153.663939][ T9693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.682743][ T9697] netlink: 'syz.2.2144': attribute type 1 has an invalid length. [ 153.696811][ T9697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.713437][ T9697] bond4 (unregistering): Released all slaves [ 153.793445][ T9724] IPv6: Can't replace route, no match found [ 153.869238][ T9730] loop2: detected capacity change from 0 to 512 [ 153.880262][ T9730] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.898039][ T9730] EXT4-fs (loop2): 1 truncate cleaned up [ 153.961016][ T9734] loop2: detected capacity change from 0 to 1024 [ 153.967973][ T9734] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.982587][ T9734] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.2155: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.998639][ T9734] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2155: Failed to acquire dquot type 0 [ 154.010230][ T9734] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2155: Freeing blocks not in datazone - block = 0, count = 4096 [ 154.023931][ T9734] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2155: Invalid inode bitmap blk 0 in block_group 0 [ 154.037049][ T9734] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 154.046361][ T9734] EXT4-fs (loop2): 1 orphan inode deleted [ 154.046737][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 154.066461][ T31] __quota_error: 333 callbacks suppressed [ 154.066474][ T31] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 154.080724][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 154.294051][ T9740] loop2: detected capacity change from 0 to 512 [ 154.304473][ T9740] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.321094][ T9740] EXT4-fs (loop2): 1 truncate cleaned up [ 154.401329][ T9745] loop2: detected capacity change from 0 to 512 [ 154.409333][ T9745] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.418537][ T9745] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 154.427382][ T9745] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 154.436352][ T9745] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 154.444516][ T9745] System zones: 0-2, 18-18, 34-34 [ 154.451496][ T9745] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2159: iget: bad i_size value: 360287970189639680 [ 154.465504][ T9745] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2159: couldn't read orphan inode 15 (err -117) [ 154.499180][ T29] audit: type=1326 audit(1757895778.853:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac368beba9 code=0x7ffc0000 [ 154.522720][ T29] audit: type=1326 audit(1757895778.853:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac368beba9 code=0x7ffc0000 [ 154.546245][ T29] audit: type=1326 audit(1757895778.853:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac368beba9 code=0x7ffc0000 [ 154.569643][ T29] audit: type=1326 audit(1757895778.853:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac368beba9 code=0x7ffc0000 [ 154.593123][ T29] audit: type=1326 audit(1757895778.853:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac368beba9 code=0x7ffc0000 [ 154.616696][ T29] audit: type=1326 audit(1757895778.853:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac368beba9 code=0x7ffc0000 [ 154.640113][ T29] audit: type=1326 audit(1757895778.853:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac368beba9 code=0x7ffc0000 [ 154.664067][ T29] audit: type=1326 audit(1757895778.883:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac368beba9 code=0x7ffc0000 [ 154.687623][ T29] audit: type=1326 audit(1757895778.883:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.5.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac368beba9 code=0x7ffc0000 [ 154.717874][ T9758] IPv6: Can't replace route, no match found [ 154.761587][ T9761] siw: device registration error -23 [ 155.024721][ T9784] loop5: detected capacity change from 0 to 512 [ 155.046614][ T9784] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 155.067014][ T9784] EXT4-fs (loop5): 1 truncate cleaned up [ 155.159295][ T9794] loop5: detected capacity change from 0 to 512 [ 155.168122][ T9794] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 155.180415][ T9794] EXT4-fs (loop5): 1 truncate cleaned up [ 155.235129][ T9801] netlink: 'syz.5.2180': attribute type 1 has an invalid length. [ 155.249727][ T9801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.281693][ T9806] IPv6: Can't replace route, no match found [ 155.338895][ T9812] IPv6: Can't replace route, no match found [ 155.431854][ T9817] IPv6: Can't replace route, no match found [ 155.553296][ T9825] loop0: detected capacity change from 0 to 512 [ 155.566471][ T9825] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 155.583382][ T9825] EXT4-fs (loop0): 1 truncate cleaned up [ 155.648862][ T9832] loop2: detected capacity change from 0 to 512 [ 155.664106][ T9832] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.673257][ T9832] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 155.683048][ T9832] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 155.692032][ T9832] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 155.702133][ T9832] System zones: 0-2, 18-18, 34-34 [ 155.707634][ T9832] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2194: iget: bad i_size value: 360287970189639680 [ 155.722144][ T9832] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2194: couldn't read orphan inode 15 (err -117) [ 155.794970][ T9840] __nla_validate_parse: 9 callbacks suppressed [ 155.794983][ T9840] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2195'. [ 155.821121][ T9843] IPv6: Can't replace route, no match found [ 155.864559][ T9849] IPv6: Can't replace route, no match found [ 155.902541][ T9854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2201'. [ 155.940284][ T9857] loop0: detected capacity change from 0 to 2048 [ 156.252428][ T9926] IPv6: Can't replace route, no match found [ 156.280385][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'. [ 156.333670][ T9930] IPv6: Can't replace route, no match found [ 156.350137][ T9932] loop0: detected capacity change from 0 to 2048 [ 156.377762][ T9934] loop5: detected capacity change from 0 to 2048 [ 156.778905][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2219'. [ 156.811334][ T9960] IPv6: Can't replace route, no match found [ 156.825271][ T9962] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 156.844189][ T9962] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.851117][ T9966] loop0: detected capacity change from 0 to 512 [ 156.858347][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2221'. [ 156.867781][ T9966] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.877001][ T9966] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 156.885934][ T9966] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 156.895027][ T9966] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 156.896317][ T9962] bond4 (unregistering): Released all slaves [ 156.904110][ T9966] System zones: 0-2, 18-18, 34-34 [ 156.914514][ T9966] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2223: iget: bad i_size value: 360287970189639680 [ 156.927696][ T9966] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2223: couldn't read orphan inode 15 (err -117) [ 157.217552][ T9981] netlink: 'syz.2.2229': attribute type 1 has an invalid length. [ 157.230737][ T9981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.243561][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2229'. [ 157.246874][ T9991] IPv6: Can't replace route, no match found [ 157.279029][ T9993] netlink: 'syz.3.2234': attribute type 1 has an invalid length. [ 157.295629][ T9993] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.305079][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2234'. [ 157.316181][ T9993] bond5 (unregistering): Released all slaves [ 157.320183][ T9996] loop2: detected capacity change from 0 to 1024 [ 157.335888][ T9996] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.348828][ T9996] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.2235: lblock 1 mapped to illegal pblock 1 (length 1) [ 157.363956][ T9996] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2235: Failed to acquire dquot type 0 [ 157.375551][ T9996] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2235: Freeing blocks not in datazone - block = 0, count = 4096 [ 157.391955][ T9996] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2235: Invalid inode bitmap blk 0 in block_group 0 [ 157.404800][ T6736] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 157.420124][ T6736] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 0 [ 157.431766][ T9996] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 157.441099][ T9996] EXT4-fs (loop2): 1 orphan inode deleted [ 157.704049][T10004] loop5: detected capacity change from 0 to 512 [ 157.738444][T10004] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 157.776381][T10019] IPv6: Can't replace route, no match found [ 157.796509][T10004] EXT4-fs (loop5): 1 truncate cleaned up [ 157.864121][T10025] IPv6: Can't replace route, no match found [ 157.875526][T10027] netlink: 'syz.0.2247': attribute type 1 has an invalid length. [ 157.926340][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'. [ 157.948538][T10027] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.961604][T10031] bond3 (unregistering): Released all slaves [ 157.971348][T10033] siw: device registration error -23 [ 158.041116][T10029] loop5: detected capacity change from 0 to 512 [ 158.112014][T10029] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 158.147949][T10023] netlink: 'syz.2.2245': attribute type 1 has an invalid length. [ 158.166497][T10029] EXT4-fs (loop5): 1 truncate cleaned up [ 158.179776][T10023] 8021q: adding VLAN 0 to HW filter on device bond5 [ 158.233931][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2245'. [ 158.349451][T10056] IPv6: Can't replace route, no match found [ 158.426870][T10062] loop5: detected capacity change from 0 to 1024 [ 158.458793][T10061] loop0: detected capacity change from 0 to 512 [ 158.474101][T10054] loop2: detected capacity change from 0 to 8192 [ 158.484035][T10062] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.490085][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2256'. [ 158.506211][T10061] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.542187][T10062] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.2254: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.601597][T10061] EXT4-fs (loop0): 1 truncate cleaned up [ 158.664730][T10062] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2254: Failed to acquire dquot type 0 [ 158.712810][T10062] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.2254: Freeing blocks not in datazone - block = 0, count = 4096 [ 158.768683][T10062] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2254: Invalid inode bitmap blk 0 in block_group 0 [ 158.795054][ T37] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.819319][T10081] loop2: detected capacity change from 0 to 2048 [ 158.833308][T10062] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 158.847168][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 158.878448][T10062] EXT4-fs (loop5): 1 orphan inode deleted [ 159.044921][T10089] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 159.067647][T10089] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 666 with error 28 [ 159.080103][T10089] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.080103][T10089] [ 159.089750][T10089] EXT4-fs (loop2): Total free blocks count 0 [ 159.095885][T10089] EXT4-fs (loop2): Free/Dirty block details [ 159.101778][T10089] EXT4-fs (loop2): free_blocks=2415919104 [ 159.107604][T10089] EXT4-fs (loop2): dirty_blocks=672 [ 159.112826][T10089] EXT4-fs (loop2): Block reservation details [ 159.118821][T10089] EXT4-fs (loop2): i_reserved_data_blocks=42 [ 159.153834][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 159.153906][ T29] audit: type=1326 audit(1757895783.513:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e4fa95b67 code=0x7ffc0000 [ 159.156074][T10081] EXT4-fs error (device loop2): ext4_lookup:1787: inode #16: comm syz.2.2266: iget: bad i_size value: 8796093031208 [ 159.160105][ T29] audit: type=1326 audit(1757895783.513:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e4fa3ada9 code=0x7ffc0000 [ 159.229179][ T29] audit: type=1326 audit(1757895783.513:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 159.252797][ T29] audit: type=1326 audit(1757895783.513:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 159.276450][ T29] audit: type=1326 audit(1757895783.513:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 159.300024][ T29] audit: type=1326 audit(1757895783.513:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 159.323718][ T29] audit: type=1326 audit(1757895783.513:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 159.347444][ T29] audit: type=1326 audit(1757895783.513:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 159.370937][ T29] audit: type=1326 audit(1757895783.513:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 159.394463][ T29] audit: type=1326 audit(1757895783.513:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 159.418316][ T9889] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 159.430529][ T9889] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.430529][ T9889] [ 159.530336][T10104] loop0: detected capacity change from 0 to 512 [ 159.568638][T10104] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.612794][T10108] loop5: detected capacity change from 0 to 512 [ 159.620593][T10104] EXT4-fs (loop0): 1 truncate cleaned up [ 159.666417][T10108] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 159.704925][T10108] EXT4-fs (loop5): 1 truncate cleaned up [ 160.323796][T10155] netlink: 'syz.3.2295': attribute type 1 has an invalid length. [ 160.363889][T10155] 8021q: adding VLAN 0 to HW filter on device bond5 [ 160.571045][T10182] loop5: detected capacity change from 0 to 512 [ 160.591630][T10182] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 160.613058][T10182] EXT4-fs (loop5): 1 truncate cleaned up [ 160.621972][T10182] EXT4-fs mount: 56 callbacks suppressed [ 160.622119][T10182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.720433][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.772567][T10195] loop5: detected capacity change from 0 to 2048 [ 160.833382][T10195] loop5: p2 < > p3 < > [ 160.837538][T10195] loop5: partition table partially beyond EOD, truncated [ 160.844918][T10195] loop5: p2 start 4278190080 is beyond EOD, truncated [ 161.008771][T10204] netlink: 'syz.5.2314': attribute type 1 has an invalid length. [ 161.022474][T10204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.032276][T10204] __nla_validate_parse: 5 callbacks suppressed [ 161.032338][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2314'. [ 161.087804][T10212] netlink: 'syz.5.2317': attribute type 1 has an invalid length. [ 161.107074][T10212] 8021q: adding VLAN 0 to HW filter on device bond5 [ 161.116449][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2317'. [ 161.135669][T10212] bond5 (unregistering): Released all slaves [ 161.209571][T10219] IPv6: Can't replace route, no match found [ 161.790701][T10248] loop0: detected capacity change from 0 to 512 [ 161.840730][T10248] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 161.872482][T10248] EXT4-fs (loop0): 1 truncate cleaned up [ 161.891572][T10248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.950310][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.086777][T10255] loop0: detected capacity change from 0 to 512 [ 162.103259][T10255] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 162.126052][T10255] EXT4-fs (loop0): 1 truncate cleaned up [ 162.134940][T10255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.135434][T10257] netlink: '+}[@': attribute type 13 has an invalid length. [ 162.184792][T10257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.215585][T10257] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 162.224122][T10257] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 162.291205][T10261] IPv6: Can't replace route, no match found [ 162.310050][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.435238][T10272] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2340'. [ 162.513298][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2344'. [ 162.594654][T10289] IPv6: Can't replace route, no match found [ 162.619973][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2350'. [ 162.640794][T10283] loop2: detected capacity change from 0 to 512 [ 162.670373][T10283] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.691280][T10283] EXT4-fs (loop2): 1 truncate cleaned up [ 162.700741][T10283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.743684][T10303] IPv6: Can't replace route, no match found [ 162.764796][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.816585][T10294] loop5: detected capacity change from 0 to 512 [ 162.829040][T10294] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.848265][T10294] EXT4-fs (loop5): 1 truncate cleaned up [ 162.858992][T10294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.926862][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.954598][T10314] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2357'. [ 162.984143][T10300] netlink: 'syz.6.2352': attribute type 1 has an invalid length. [ 162.998044][T10300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.008586][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2352'. [ 163.043799][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2360'. [ 163.055692][T10324] IPv6: Can't replace route, no match found [ 163.114053][T10334] IPv6: Can't replace route, no match found [ 163.158885][T10333] loop5: detected capacity change from 0 to 512 [ 163.187822][T10333] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 163.218560][T10333] EXT4-fs (loop5): 1 truncate cleaned up [ 163.227178][T10333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.295415][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.343177][T10355] IPv6: Can't replace route, no match found [ 163.388697][T10359] netlink: '+}[@': attribute type 13 has an invalid length. [ 163.436292][T10359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.518010][T10346] netlink: 'syz.0.2371': attribute type 1 has an invalid length. [ 163.532322][T10346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.728887][T10383] loop0: detected capacity change from 0 to 512 [ 163.756455][T10383] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 163.790459][T10383] EXT4-fs (loop0): 1 truncate cleaned up [ 163.798285][T10383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.889984][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.052784][T10412] siw: device registration error -23 [ 164.217355][T10407] netlink: 'syz.2.2397': attribute type 1 has an invalid length. [ 164.238138][T10407] 8021q: adding VLAN 0 to HW filter on device bond6 [ 164.379388][T10430] loop2: detected capacity change from 0 to 512 [ 164.390796][T10430] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.416341][T10430] EXT4-fs (loop2): 1 truncate cleaned up [ 164.434165][T10430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.506089][T10438] loop5: detected capacity change from 0 to 2048 [ 164.549754][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.605400][T10438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.624196][T10445] loop2: detected capacity change from 0 to 1024 [ 164.651401][T10445] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 164.701007][T10445] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.2411: lblock 1 mapped to illegal pblock 1 (length 1) [ 164.747208][T10445] __quota_error: 200 callbacks suppressed [ 164.747221][T10445] Quota error (device loop2): write_blk: dquota write failed [ 164.760472][T10445] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 164.776321][T10445] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2411: Failed to acquire dquot type 0 [ 164.794126][T10445] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2411: Freeing blocks not in datazone - block = 0, count = 4096 [ 164.868269][T10445] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2411: Invalid inode bitmap blk 0 in block_group 0 [ 164.882795][T10445] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 164.891479][ T6736] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 164.910822][T10445] EXT4-fs (loop2): 1 orphan inode deleted [ 164.916970][ T6736] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 164.925469][ T6736] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 0 [ 164.937424][T10445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.954915][T10445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.961162][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.101159][T10470] IPv6: Can't replace route, no match found [ 165.200357][T10472] loop0: detected capacity change from 0 to 512 [ 165.232446][T10472] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 165.250510][T10472] EXT4-fs (loop0): 1 truncate cleaned up [ 165.260735][T10472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.353840][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.370703][T10493] IPv6: Can't replace route, no match found [ 165.396700][ T29] audit: type=1400 audit(1757895789.753:4741): avc: denied { create } for pid=10494 comm="syz.2.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.397222][T10497] FAULT_INJECTION: forcing a failure. [ 165.397222][T10497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.429370][T10497] CPU: 0 UID: 0 PID: 10497 Comm: syz.2.2431 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.429505][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.429516][T10497] Call Trace: [ 165.429521][T10497] [ 165.429526][T10497] __dump_stack+0x1d/0x30 [ 165.429547][T10497] dump_stack_lvl+0xe8/0x140 [ 165.429565][T10497] dump_stack+0x15/0x1b [ 165.429583][T10497] should_fail_ex+0x265/0x280 [ 165.429687][T10497] should_fail+0xb/0x20 [ 165.429751][T10497] should_fail_usercopy+0x1a/0x20 [ 165.429776][T10497] _copy_from_user+0x1c/0xb0 [ 165.429804][T10497] ____sys_sendmsg+0x1c5/0x4e0 [ 165.429887][T10497] ___sys_sendmsg+0x17b/0x1d0 [ 165.429921][T10497] __x64_sys_sendmsg+0xd4/0x160 [ 165.429952][T10497] x64_sys_call+0x191e/0x2ff0 [ 165.429977][T10497] do_syscall_64+0xd2/0x200 [ 165.430071][T10497] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 165.430098][T10497] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 165.430125][T10497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.430142][T10497] RIP: 0033:0x7f7e4fa9eba9 [ 165.430211][T10497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.430229][T10497] RSP: 002b:00007f7e4e507038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.430245][T10497] RAX: ffffffffffffffda RBX: 00007f7e4fce5fa0 RCX: 00007f7e4fa9eba9 [ 165.430255][T10497] RDX: 0000000020000024 RSI: 0000200000001040 RDI: 000000000000000b [ 165.430265][T10497] RBP: 00007f7e4e507090 R08: 0000000000000000 R09: 0000000000000000 [ 165.430275][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.430353][T10497] R13: 00007f7e4fce6038 R14: 00007f7e4fce5fa0 R15: 00007ffcb0a84518 [ 165.430372][T10497] [ 165.624490][T10488] netlink: 'syz.5.2426': attribute type 1 has an invalid length. [ 165.652493][T10488] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.802087][T10518] loop5: detected capacity change from 0 to 512 [ 165.818415][T10518] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.836612][T10518] EXT4-fs (loop5): 1 truncate cleaned up [ 165.844967][T10518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.903347][T10528] IPv6: Can't replace route, no match found [ 165.924274][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.969973][T10534] loop5: detected capacity change from 0 to 512 [ 165.978033][ T29] audit: type=1326 audit(1757895790.333:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10535 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 166.013060][T10534] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 166.020036][ T29] audit: type=1326 audit(1757895790.333:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10535 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 166.046375][ T29] audit: type=1326 audit(1757895790.333:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10535 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 166.069879][ T29] audit: type=1326 audit(1757895790.363:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10535 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a166eba9 code=0x7ffc0000 [ 166.125741][T10534] EXT4-fs (loop5): 1 truncate cleaned up [ 166.131913][T10534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.249886][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.290928][T10547] netlink: 'syz.2.2447': attribute type 1 has an invalid length. [ 166.305228][T10547] 8021q: adding VLAN 0 to HW filter on device bond7 [ 166.314928][T10547] __nla_validate_parse: 9 callbacks suppressed [ 166.314942][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'. [ 166.486007][T10565] loop2: detected capacity change from 0 to 512 [ 166.505556][T10553] netlink: 'syz.5.2452': attribute type 1 has an invalid length. [ 166.508539][T10565] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.533429][T10553] 8021q: adding VLAN 0 to HW filter on device bond6 [ 166.547110][T10565] EXT4-fs (loop2): 1 truncate cleaned up [ 166.553854][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2452'. [ 166.564914][T10565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.677775][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.687747][T10574] loop5: detected capacity change from 0 to 2048 [ 166.712432][T10574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.768815][T10582] loop2: detected capacity change from 0 to 512 [ 166.793845][T10582] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.813949][T10582] EXT4-fs (loop2): 1 truncate cleaned up [ 166.820250][T10582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.861874][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.991788][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.064315][ T29] audit: type=1326 audit(1757895791.423:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.5.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac368beba9 code=0x7ffc0000 [ 167.087840][ T29] audit: type=1326 audit(1757895791.423:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.5.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac368beba9 code=0x7ffc0000 [ 167.105034][T10600] netlink: 'syz.3.2470': attribute type 1 has an invalid length. [ 167.128033][T10600] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.152697][T10598] loop0: detected capacity change from 0 to 512 [ 167.166305][T10598] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 167.187073][T10596] loop2: detected capacity change from 0 to 512 [ 167.211025][T10596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.226373][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2470'. [ 167.243793][T10598] EXT4-fs (loop0): 1 truncate cleaned up [ 167.250191][T10596] EXT4-fs (loop2): 1 truncate cleaned up [ 167.273459][T10596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.290349][T10598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.372003][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.390443][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.124741][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2490'. [ 168.439729][T10675] siw: device registration error -23 [ 168.500581][T10678] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2495'. [ 168.509653][T10678] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2495'. [ 168.521054][T10678] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2495'. [ 168.626007][T10686] netlink: '+}[@': attribute type 13 has an invalid length. [ 168.645271][T10686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.701276][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2497'. [ 168.710481][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2497'. [ 169.106182][T10712] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2507'. [ 169.219724][T10715] netlink: 'syz.6.2508': attribute type 1 has an invalid length. [ 169.233232][T10715] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.245989][T10715] bond4 (unregistering): Released all slaves [ 169.525375][T10747] IPv6: Can't replace route, no match found [ 169.550273][T10751] netlink: 'syz.6.2524': attribute type 1 has an invalid length. [ 169.565664][T10751] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.594757][T10751] bond4 (unregistering): Released all slaves [ 169.657665][T10756] loop0: detected capacity change from 0 to 512 [ 169.674778][T10756] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 169.698191][T10756] EXT4-fs (loop0): 1 truncate cleaned up [ 169.709838][T10756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.774406][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.790726][T10765] uprobe: syz.6.2530:10765 failed to unregister, leaking uprobe [ 169.928269][T10780] loop2: detected capacity change from 0 to 512 [ 169.934936][T10780] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 169.987628][T10783] FAULT_INJECTION: forcing a failure. [ 169.987628][T10783] name failslab, interval 1, probability 0, space 0, times 0 [ 170.002836][T10783] CPU: 1 UID: 0 PID: 10783 Comm: syz.2.2536 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.002861][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 170.002872][T10783] Call Trace: [ 170.002876][T10783] [ 170.002882][T10783] __dump_stack+0x1d/0x30 [ 170.002936][T10783] dump_stack_lvl+0xe8/0x140 [ 170.002993][T10783] dump_stack+0x15/0x1b [ 170.003006][T10783] should_fail_ex+0x265/0x280 [ 170.003027][T10783] should_failslab+0x8c/0xb0 [ 170.003063][T10783] kmem_cache_alloc_node_noprof+0x57/0x320 [ 170.003129][T10783] ? dup_task_struct+0x70/0x6a0 [ 170.003158][T10783] ? perf_swevent_hrtimer+0x2b7/0x2f0 [ 170.003180][T10783] dup_task_struct+0x70/0x6a0 [ 170.003206][T10783] copy_process+0x399/0x2000 [ 170.003259][T10783] ? rb_insert_color+0x71/0x2b0 [ 170.003296][T10783] kernel_clone+0x16c/0x5c0 [ 170.003324][T10783] __x64_sys_clone+0xe6/0x120 [ 170.003386][T10783] x64_sys_call+0x119c/0x2ff0 [ 170.003404][T10783] do_syscall_64+0xd2/0x200 [ 170.003434][T10783] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 170.003519][T10783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.003616][T10783] RIP: 0033:0x7f7e4fa9eba9 [ 170.003632][T10783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.003651][T10783] RSP: 002b:00007f7e4e506fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 170.003672][T10783] RAX: ffffffffffffffda RBX: 00007f7e4fce5fa0 RCX: 00007f7e4fa9eba9 [ 170.003685][T10783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 170.003698][T10783] RBP: 00007f7e4e507090 R08: 0000000000000000 R09: 0000000000000000 [ 170.003756][T10783] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 170.003767][T10783] R13: 00007f7e4fce6038 R14: 00007f7e4fce5fa0 R15: 00007ffcb0a84518 [ 170.003783][T10783] [ 170.227338][T10783] uprobe: syz.2.2536:10783 failed to unregister, leaking uprobe [ 170.264144][T10790] netlink: 'syz.3.2539': attribute type 1 has an invalid length. [ 170.299987][T10790] 8021q: adding VLAN 0 to HW filter on device bond7 [ 170.313014][T10790] bond7 (unregistering): Released all slaves [ 170.543050][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 170.543067][ T29] audit: type=1326 audit(1757895794.883:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 170.572752][ T29] audit: type=1326 audit(1757895794.883:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 170.596316][ T29] audit: type=1326 audit(1757895794.883:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 170.619861][ T29] audit: type=1326 audit(1757895794.883:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 170.643361][ T29] audit: type=1326 audit(1757895794.883:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 170.666846][ T29] audit: type=1326 audit(1757895794.883:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 170.690396][ T29] audit: type=1326 audit(1757895794.883:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 170.714127][ T29] audit: type=1326 audit(1757895794.883:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 170.737600][ T29] audit: type=1326 audit(1757895794.883:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 170.761131][ T29] audit: type=1326 audit(1757895794.883:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4fa9eba9 code=0x7ffc0000 [ 170.890562][T10823] loop2: detected capacity change from 0 to 512 [ 170.923377][T10823] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.950563][T10823] EXT4-fs (loop2): 1 truncate cleaned up [ 170.960039][T10823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.043566][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.453073][T10857] __nla_validate_parse: 7 callbacks suppressed [ 171.453088][T10857] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2564'. [ 171.513975][T10854] loop2: detected capacity change from 0 to 512 [ 171.535071][T10854] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.566178][T10861] loop5: detected capacity change from 0 to 512 [ 171.587810][T10861] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 171.697874][T10854] EXT4-fs (loop2): 1 truncate cleaned up [ 171.704302][T10861] EXT4-fs (loop5): 1 truncate cleaned up [ 171.729279][T10861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.744845][T10854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.871605][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.923313][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.010862][T10893] loop5: detected capacity change from 0 to 512 [ 172.033115][T10897] loop2: detected capacity change from 0 to 2048 [ 172.034136][T10893] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 172.142218][T10897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 172.155397][T10893] EXT4-fs (loop5): 1 truncate cleaned up [ 172.178017][T10893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.244143][T10901] netlink: 'syz.0.2584': attribute type 1 has an invalid length. [ 172.318531][T10901] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.328807][T10908] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 172.347605][T10908] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1324 with error 28 [ 172.360103][T10908] EXT4-fs (loop2): This should not happen!! Data will be lost [ 172.360103][T10908] [ 172.369834][T10908] EXT4-fs (loop2): Total free blocks count 0 [ 172.375918][T10908] EXT4-fs (loop2): Free/Dirty block details [ 172.381816][T10908] EXT4-fs (loop2): free_blocks=2415919104 [ 172.387593][T10908] EXT4-fs (loop2): dirty_blocks=1328 [ 172.392893][T10908] EXT4-fs (loop2): Block reservation details [ 172.398994][T10908] EXT4-fs (loop2): i_reserved_data_blocks=83 [ 172.424902][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.438508][T10914] netlink: 'syz.0.2587': attribute type 1 has an invalid length. [ 172.509342][T10914] 8021q: adding VLAN 0 to HW filter on device bond5 [ 172.540992][T10911] netlink: 'syz.6.2585': attribute type 1 has an invalid length. [ 172.552331][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2587'. [ 172.558830][T10911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.591675][T10918] bond5 (unregistering): Released all slaves [ 172.621607][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2585'. [ 172.633370][ T6736] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 172.860002][T10945] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2595'. [ 173.051982][T10942] chnl_net:caif_netlink_parms(): no params data found [ 173.136452][T10947] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 173.147419][ T9889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.160493][T10965] IPv6: Can't replace route, no match found [ 173.188587][T10947] 8021q: adding VLAN 0 to HW filter on device bond8 [ 173.199439][ T9889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.260181][ T9889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.275980][T10942] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.283153][T10942] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.294609][T10942] bridge_slave_0: entered allmulticast mode [ 173.301539][T10942] bridge_slave_0: entered promiscuous mode [ 173.326960][ T9889] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.341486][T10986] IPv6: Can't replace route, no match found [ 173.342131][T10942] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.354585][T10942] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.364355][T10942] bridge_slave_1: entered allmulticast mode [ 173.370967][T10942] bridge_slave_1: entered promiscuous mode [ 173.399005][T10942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.412318][T10942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.455276][T10942] team0: Port device team_slave_0 added [ 173.465455][T10942] team0: Port device team_slave_1 added [ 173.475957][T10988] loop2: detected capacity change from 0 to 512 [ 173.486648][ T9889] bridge_slave_1: left allmulticast mode [ 173.492316][ T9889] bridge_slave_1: left promiscuous mode [ 173.498079][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.515389][ T9889] bridge_slave_0: left allmulticast mode [ 173.521074][ T9889] bridge_slave_0: left promiscuous mode [ 173.526883][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.530563][T10988] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.558404][T10988] EXT4-fs (loop2): 1 truncate cleaned up [ 173.567117][T10988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.634008][ T9889] bridge0 (unregistering): left allmulticast mode [ 173.669544][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.783736][T11000] IPv6: Can't replace route, no match found [ 173.854560][T11008] IPv6: Can't replace route, no match found [ 174.114703][ T9889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.124649][ T9889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.134404][ T9889] bond0 (unregistering): Released all slaves [ 174.142837][ T9889] bond1 (unregistering): Released all slaves [ 174.151253][ T9889] bond2 (unregistering): Released all slaves [ 174.159426][ T9889] bond3 (unregistering): Released all slaves [ 174.167597][ T9889] bond4 (unregistering): Released all slaves [ 174.195057][T10942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.202036][T10942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.228060][T10942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.239860][T10942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.246862][T10942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.272846][T10942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.287813][ T9889] team0: left promiscuous mode [ 174.292686][ T9889] team_slave_0: left promiscuous mode [ 174.298132][ T9889] team_slave_1: left promiscuous mode [ 174.304401][ T9889] batadv_slave_1: left promiscuous mode [ 174.311793][ T9889] hsr_slave_0: left promiscuous mode [ 174.317608][ T9889] hsr_slave_1: left promiscuous mode [ 174.325777][ T9889] veth1_macvtap: left promiscuous mode [ 174.331462][ T9889] veth0_macvtap: left promiscuous mode [ 174.336980][ T9889] veth1_vlan: left promiscuous mode [ 174.342251][ T9889] veth0_vlan: left promiscuous mode [ 174.379073][ T9889] pim6reg (unregistering): left allmulticast mode [ 174.410903][ T9889] team0 (unregistering): Port device team_slave_1 removed [ 174.421204][ T9889] team0 (unregistering): Port device team_slave_0 removed [ 174.465543][T10942] hsr_slave_0: entered promiscuous mode [ 174.471510][T10942] hsr_slave_1: entered promiscuous mode [ 174.477777][T10942] debugfs: 'hsr0' already exists in 'hsr' [ 174.483513][T10942] Cannot create hsr debugfs directory [ 174.604772][T11030] loop2: detected capacity change from 0 to 512 [ 174.630679][T11030] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.662425][T11030] EXT4-fs (loop2): 1 truncate cleaned up [ 174.670947][T11030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.730151][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.793335][T11053] loop2: detected capacity change from 0 to 2048 [ 174.850499][T11053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.881480][T10942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.908606][T10942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.952793][T10942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.962919][T10942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.045353][T10942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.075883][T10942] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.104755][ T6736] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.111829][ T6736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.127037][ T6736] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.134152][ T6736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.228541][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.248595][T10942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.387646][T11132] IPv6: Can't replace route, no match found [ 175.392305][T10942] veth0_vlan: entered promiscuous mode [ 175.402544][T10942] veth1_vlan: entered promiscuous mode [ 175.426574][T10942] veth0_macvtap: entered promiscuous mode [ 175.439677][T10942] veth1_macvtap: entered promiscuous mode [ 175.452257][T10942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.464358][T10942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.475090][ T6736] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.486245][ T6736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.495220][ T9904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.507516][ T9904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.587487][T11143] IPv6: Can't replace route, no match found [ 175.609756][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 175.609768][ T29] audit: type=1326 audit(1757895799.963:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0d86eba9 code=0x7ffc0000 [ 175.639479][ T29] audit: type=1326 audit(1757895799.963:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fce0d86eba9 code=0x7ffc0000 [ 175.663046][ T29] audit: type=1326 audit(1757895799.963:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0d86eba9 code=0x7ffc0000 [ 175.686645][ T29] audit: type=1326 audit(1757895799.963:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0d86eba9 code=0x7ffc0000 [ 175.710193][ T29] audit: type=1326 audit(1757895799.963:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce0d86eba9 code=0x7ffc0000 [ 175.733855][ T29] audit: type=1326 audit(1757895799.963:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0d86eba9 code=0x7ffc0000 [ 175.757475][ T29] audit: type=1326 audit(1757895799.963:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0d86eba9 code=0x7ffc0000 [ 175.781442][ T29] audit: type=1326 audit(1757895799.963:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce0d86eba9 code=0x7ffc0000 [ 175.805070][ T29] audit: type=1326 audit(1757895799.963:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0d86eba9 code=0x7ffc0000 [ 175.865035][T11149] loop5: detected capacity change from 0 to 2048 [ 175.881201][ T29] audit: type=1326 audit(1757895799.963:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0d86eba9 code=0x7ffc0000 [ 175.930676][T11149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.950658][T11153] loop0: detected capacity change from 0 to 512 [ 175.960745][T11153] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.016038][T11153] EXT4-fs (loop0): 1 truncate cleaned up [ 176.053114][T11153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.109828][ T4042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.124439][T11160] loop2: detected capacity change from 0 to 512 [ 176.151648][T11160] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 176.177412][T11160] EXT4-fs (loop2): 1 truncate cleaned up [ 176.188058][T11160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.222303][T11170] netlink: 'syz.5.2649': attribute type 1 has an invalid length. [ 176.231519][T10942] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.246970][T11170] 8021q: adding VLAN 0 to HW filter on device bond7 [ 176.268867][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.273508][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2649'. [ 176.295801][T11170] bond7 (unregistering): Released all slaves [ 176.325365][T11175] loop2: detected capacity change from 0 to 512 [ 176.369671][T11175] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.378853][T11175] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 176.391860][T11175] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 176.424507][T11175] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 176.434371][T11175] System zones: 0-2, 18-18, 34-34 [ 176.439851][T11175] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2651: iget: bad i_size value: 360287970189639680 [ 176.467707][T11185] IPv6: Can't replace route, no match found [ 176.477423][T11175] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2651: couldn't read orphan inode 15 (err -117) [ 176.520704][T11175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.545034][T11179] netlink: 'syz.6.2653': attribute type 1 has an invalid length. [ 176.561536][T11179] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.579747][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2653'. [ 176.600826][T11193] loop0: detected capacity change from 0 to 512 [ 176.608904][T11193] ================================================================== [ 176.617000][T11193] BUG: KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event [ 176.625868][T11193] [ 176.628217][T11193] write to 0xffff888104498d14 of 4 bytes by task 10461 on cpu 1: [ 176.635924][T11193] fsnotify_detach_mark+0xba/0x160 [ 176.641048][T11193] fsnotify_destroy_mark+0x70/0x150 [ 176.646246][T11193] __se_sys_inotify_rm_watch+0xe8/0x170 [ 176.651796][T11193] __x64_sys_inotify_rm_watch+0x31/0x40 [ 176.657350][T11193] x64_sys_call+0x2e86/0x2ff0 [ 176.662027][T11193] do_syscall_64+0xd2/0x200 [ 176.666547][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.672455][T11193] [ 176.674774][T11193] read to 0xffff888104498d14 of 4 bytes by task 11193 on cpu 0: [ 176.682401][T11193] fsnotify_handle_inode_event+0x125/0x220 [ 176.688231][T11193] fsnotify+0x13c9/0x14b0 [ 176.692589][T11193] __fsnotify_parent+0x2ed/0x330 [ 176.697536][T11193] __fput+0x1de/0x650 [ 176.701528][T11193] fput_close_sync+0x6e/0x120 [ 176.706220][T11193] __x64_sys_close+0x56/0xf0 [ 176.710803][T11193] x64_sys_call+0x2738/0x2ff0 [ 176.715475][T11193] do_syscall_64+0xd2/0x200 [ 176.719990][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.725881][T11193] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 176.728205][T11193] value changed: 0x00000003 -> 0x00000000 [ 176.733910][T11193] [ 176.736227][T11193] Reported by Kernel Concurrency Sanitizer on: [ 176.742377][T11193] CPU: 0 UID: 0 PID: 11193 Comm: syz.0.2657 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.752191][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.762255][T11193] ================================================================== [ 176.785463][T11193] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.829961][T11193] EXT4-fs (loop0): 1 truncate cleaned up [ 176.851125][T11193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.934011][T11193] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.106939][ T9904] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.194381][ T9904] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.315450][ T9904] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.327507][T11175] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.354875][ T9904] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.443733][ T9904] bridge_slave_1: left allmulticast mode [ 177.449379][ T9904] bridge_slave_1: left promiscuous mode [ 177.455068][ T9904] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.462669][ T9904] bridge_slave_0: left allmulticast mode [ 177.468408][ T9904] bridge_slave_0: left promiscuous mode [ 177.474107][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.541200][ T9904] bond1 (unregistering): (slave geneve2): Releasing active interface [ 178.255035][ T9904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.265012][ T9904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.274462][ T9904] bond0 (unregistering): Released all slaves [ 178.282617][ T9904] bond1 (unregistering): Released all slaves [ 178.290930][ T9904] bond2 (unregistering): Released all slaves [ 178.299450][ T9904] bond3 (unregistering): Released all slaves [ 178.308050][ T9904] bond4 (unregistering): Released all slaves [ 178.316155][ T9904] bond5 (unregistering): Released all slaves [ 178.324498][ T9904] bond6 (unregistering): Released all slaves [ 178.368588][ T9904] team0: left promiscuous mode [ 178.373449][ T9904] team_slave_0: left promiscuous mode [ 178.378886][ T9904] team_slave_1: left promiscuous mode [ 178.385899][ T9904] batadv_slave_1: left promiscuous mode [ 178.393434][ T9904] hsr_slave_0: left promiscuous mode [ 178.399191][ T9904] hsr_slave_1: left promiscuous mode [ 178.406270][ T9904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.413697][ T9904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.421349][ T9904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.428818][ T9904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.439503][ T9904] veth1_macvtap: left promiscuous mode [ 178.445998][ T9904] veth0_macvtap: left promiscuous mode [ 178.451544][ T9904] veth1_vlan: left promiscuous mode [ 178.456950][ T9904] veth0_vlan: left promiscuous mode [ 178.517495][ T9904] team0 (unregistering): Port device team_slave_1 removed [ 178.527281][ T9904] team0 (unregistering): Port device team_slave_0 removed [ 178.856770][ T9904] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.895559][ T9904] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.945553][ T9904] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.985765][ T9904] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.049121][ T9904] bridge_slave_1: left allmulticast mode [ 179.054879][ T9904] bridge_slave_1: left promiscuous mode [ 179.060557][ T9904] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.068291][ T9904] bridge_slave_0: left allmulticast mode [ 179.073976][ T9904] bridge_slave_0: left promiscuous mode [ 179.079613][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.624765][ T9904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.634618][ T9904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.644319][ T9904] bond0 (unregistering): Released all slaves [ 179.652394][ T9904] bond1 (unregistering): Released all slaves [ 179.661016][ T9904] bond2 (unregistering): Released all slaves [ 179.669437][ T9904] bond3 (unregistering): Released all slaves [ 179.677663][ T9904] bond4 (unregistering): Released all slaves [ 179.686102][ T9904] bond5 (unregistering): Released all slaves [ 179.694412][ T9904] bond6 (unregistering): Released all slaves [ 179.726747][ T9904] tipc: Disabling bearer [ 179.732058][ T9904] tipc: Left network mode [ 179.774544][ T9904] team0: left promiscuous mode [ 179.779334][ T9904] team_slave_0: left promiscuous mode [ 179.784904][ T9904] team_slave_1: left promiscuous mode [ 179.793606][ T9904] batadv_slave_1: left promiscuous mode [ 179.800787][ T9904] hsr_slave_0: left promiscuous mode [ 179.806383][ T9904] hsr_slave_1: left promiscuous mode [ 179.812025][ T9904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.819651][ T9904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.827094][ T9904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.834486][ T9904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.844483][ T9904] veth1_macvtap: left promiscuous mode [ 179.849971][ T9904] veth0_macvtap: left promiscuous mode [ 179.855549][ T9904] veth1_vlan: left promiscuous mode [ 179.860865][ T9904] veth0_vlan: left promiscuous mode [ 179.921222][ T9904] team0 (unregistering): Port device team_slave_1 removed [ 179.931226][ T9904] team0 (unregistering): Port device team_slave_0 removed [ 180.193984][ T9904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.226148][ T9904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.285739][ T9904] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.346035][ T9904] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.402042][ T9904] bridge_slave_1: left allmulticast mode [ 180.407732][ T9904] bridge_slave_1: left promiscuous mode [ 180.413719][ T9904] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.422307][ T9904] bridge_slave_0: left allmulticast mode [ 180.428164][ T9904] bridge_slave_0: left promiscuous mode [ 180.433949][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.505515][ T9904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.515271][ T9904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.524812][ T9904] bond0 (unregistering): Released all slaves [ 180.577520][ T9904] hsr_slave_0: left promiscuous mode [ 180.583489][ T9904] hsr_slave_1: left promiscuous mode [ 180.589208][ T9904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.597242][ T9904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.605150][ T9904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.612576][ T9904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.624377][ T9904] veth1_macvtap: left promiscuous mode [ 180.630157][ T9904] veth0_macvtap: left promiscuous mode [ 180.635963][ T9904] veth1_vlan: left promiscuous mode [ 180.641388][ T9904] veth0_vlan: left promiscuous mode [ 180.706364][ T9904] team0 (unregistering): Port device team_slave_1 removed [ 180.715678][ T9904] team0 (unregistering): Port device team_slave_0 removed