last executing test programs: 41.482151982s ago: executing program 2 (id=1027): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "3f844b", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff9297d00001392000100"}, {0x18, 0x1, "00f5ffffff00"}]}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) capget(&(0x7f00000000c0)={0x20080522}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000001980)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8fv\x9f\x05\xd1\x984\xc8\x14\xaaa\xe9\x91\x8e\xf9\xc8\xa4e\x00u\xef\xc2\xa5\xe27\xb4\xcds\xf4*I\x8f\x00\x00\x00\x00\x00\x00\x10\xac5\x1a\v\n\xca\x18\xfc\xd3G\xbd\'\xad<\x19O\xa6#\x82\xff \x03\xccA\x9f\x0e@\r\x1cD\x80nbWR\\\xfb\xc0a\xc5\x95P\xe7\xf4fPA\xc8\x03\xaeN\x12u\x91\x18\x17\xab\xc9\xf2\x1d\x96D\xc8\x0ft\x88\xb6{\xf6p\xfaU\x9a\x8f\xb1\xaf\x90\xb2u\'\xdc\x81\f\xe1\\89d\xe9\x06\xb1\xd9\x90\xb4\x9f\x11\'\xac\x14r\xfa\x88\xc9p#~E\x1c\xab\x96\b\xad\f\xe6\xc9\xad\xc9\xa0\f\x83\xb94\x0e[\xcd\xd6\xc9O\xba\xac\xc5\'\xdb\xce\xb4\xa4\xa3\x9a\x1eXk\x92g\x81\x7f\xfdBr\x84\xaf:O\xcf}N\xe1\x91\xaf\xd1\xb7\xd6=\xaf\xc1gf\x9d\x0fl;y\x05\xc0\xd7\xef\x05\xd3\xa0U\x12\xf4\xe2>\xad\x1df\xcf\xaaL,#\x82:\xb6\x8d\x89\xd9i\xcd\x88\x9a\x83Ig\x15m\x15\x1d\xd7m\xa48\xb3\x06\xec\xbe\xa2\xb8\xb6\xc8\xbec\x968\xa3\x00;\x85\x90-\x12\x16\xfa\x86jf\x9c\x17h\fIaUK\xf8\xc3\xf2\xe9\xaa\xb4=H\x8bF\xdb\x18\xcfM\xf8\x93\xb2\xb2F\x017k\xbe\xadr\x8b\xf0T^m0\xe2\xec\x9f\xddi\x82}\xa1\x85\xc1\xb9\x8b\xd9\x12(\xd5\xb3\xa7\xe8\xfen\xf8\xf5\xe4z\x02uC\x8f\x18\xe4D\x90\xfa1\x0e\x1c\xa7\xe0)Z\x86;V\x03\x84\x9b\x97\xe1\x97\xc3\x8bSc\xb4\xc7\xafk\xda\xb6\a\x1d\v\x00\x00\x00\x00\x00\x00\x00\xffbz:\x04\xfa\xb0\xbc\x15b\x1b\x1f\xbc\x17c5 p\x0f\xbb2\xc7k\x1b\xe8\xe3G\xba\x8d\x9e\xf3s\xd7\x13-\x0ec++B\x96\x98\r\x03\x88\xd6b)m\x80h/?i\x82t\xad\x91\xe7\x8b\x10\xed\x02\xd7wmt\x18\x12g\xbcL@\x9f\x98=\xc4\x9d2\xb9\xb5\xd0\x0f\xfc9\xac!\xd7\xb3\xe3n\xfe\xc0S\xa3\xc1\xe3\xd4\xa4kN\xba\xd4F\x97C \x1ckK,T\x03\xb6\x19\x9a\xeb\x11=\x8b\xd6\x86\x10oR\x8d\xcf\xa3\x8a\x01\x92T\x05bE\n{\xf8\xbac\x10\x9a\xee{,\xb4?\x92#{\xe4Mv\xab\x1d\x957\f\xd1') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 41.393620354s ago: executing program 2 (id=1017): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0xd0, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xbc, 0x1, [@m_mirred={0xb8, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r6}}]}, {0x6b, 0xa, "d8f815a53380a5d9febf7497e6ec1fd8eaf083e39bd2bbb42396b1c11f00fae8ea49d544de8ffccb52adc1f5a8dd91ff34ac4d766bc73e27953ed2bd6b5196e219cb4a27ba4bdfd60547dfea9ad4c9735200000000000000005bc6cfa73116f9567e6743c2d4c4"}, {0xc}, {0xc}}}]}]}, 0xd0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 41.351974664s ago: executing program 2 (id=1021): socket(0x28, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "b17984e27e43e8415cf0021455201a08a32d7cbf58cf4ddef6bc7e8e3f0e3289de0bffaf0595e784d05ddde104717d45ab1e8a1b6b61000f613483477d631661", 0x12}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x10400) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000100) 41.264627126s ago: executing program 2 (id=1022): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xa}, 0x2, 0xe3b, 0x2, 0x0, 0x400, 0x240, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0xa) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x60}}, 0x20000000) 41.056725829s ago: executing program 2 (id=1028): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) pipe(&(0x7f0000000300)) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 40.935414811s ago: executing program 2 (id=1032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, 0x0, 0x4000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 40.912272961s ago: executing program 32 (id=1032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, 0x0, 0x4000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 4.360210295s ago: executing program 5 (id=1513): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x40}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) faccessat2(r3, &(0x7f0000000040)='\x00', 0x2, 0x1200) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b00000000020009000000000000000000000a00000054fc00000000fe880000000000000000000000010018"], 0x88}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) kcmp(0xffffffffffffffff, 0x0, 0x3, r0, r4) 4.063346259s ago: executing program 5 (id=1523): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340), &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) keyctl$read(0xb, 0x0, &(0x7f0000000380)=""/235, 0xeb) creat(&(0x7f0000000200)='./file0\x00', 0x20) 3.724727564s ago: executing program 5 (id=1527): socket$packet(0x11, 0x3, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x11, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) removexattr(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000004000/0x4000)=nil) unshare(0x2040400) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.598489226s ago: executing program 5 (id=1528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) 2.423445144s ago: executing program 5 (id=1533): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) accept4(r1, 0x0, &(0x7f00000000c0), 0x800) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000001000)) 2.277287356s ago: executing program 4 (id=1538): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$eJzs3c1rHOUfAPDvbJK+/35NoRQVkUAPVmo3TeJLBQ/1KFos6L0uyTSUbLoluylNLNge7MWLFEHEgnjXu8fiP+BfUdBCkRL04CUym9k0L7vJNt2ajfP5wITn2Znd5/nuzPfJMzuzbACFNZL9KUW8GBFfJRFHIyLJ1w1GvnJkZbulxzcnsyWJ5eWP/0ia22X11mu1nnc4r7wQEb98EXG6tLnd+sLiTKVaTefy+mhj9tpofWHxzJXZynQ6nV4dn5g49+bE+Dtvv9WzWF+7+Ne3H91//9yXJ5e++enhsbtJnI8j+bq1cTyDW2srIzGSvydDcX7DhmM9aKyfJLvdAXZkIM/zocjGgKMxkGc98N/3eUQsAwWVyH8oqNY8oHVu36Pz4D3j0XsrJ0Cb4x9c+WwkDjTPjQ4tJevOjLLz3eEetJ+18fPv9+5mS2z4HOJAD14foJNbtyPi7ODg5vEvyce/nTvbxTYb2yja/x/YTfez+c/r7eY/pdX5T7SZ/xxuk7s7sX3+lx72oJmOsvnfu23nv6sXrYYH8tr/mnO+oeTylWqajW3/j4hTMbQ/q291Pefc0oPlTuvWzv+yJWu/NRfM+/FwcP/650xVGpVniXmtR7cjXmo7/01W93/SZv9n78fFLts4kd57pdO67eN/vpZ/iHi17f5/ckUr2fr65GjzeBhtHRWb/XnnxK+d2t/t+LP9f2jr+IeTtddr60/fxvcH/k47rVsXf3R//O9LPmmW9+WP3ag0GnNjEfuSDzc/Pv7kua16a/ss/lMntx7/2h3/ByPi0y7jv3P8x5e7in+X9v/UU+3/py88+OCz7zq1393490azdCp/pJvxr9sOPst7BwAAAAAAAP2mFBFHIimVV8ulUrm8cn/H8ThUqtbqjdOXa/NXp6L5XdnhGCq1rnQfXXM/xFh+P2yrPr6hPhERxyLi64GDzXp5slad2u3gAQAAAAAAAAAAAAAAAAAAoE8c7vD9/8xvA7vdO+C585PfUFzb5n8vfukJ6Ev+/0NxyX8oLvkPxSX/objkPxSX/Ifikv9QXPIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeurihQvZsrz0+OZkVp+6vjA/U7t+Ziqtz5Rn5yfLk7W5a+XpWm26mpYna7PbvV61Vrs2Nh7zN0Ybab0xWl9YvDRbm7/auHRltjKdXkqH/pWoAAAAAAAAAAAAAAAAAAAAYG+pLyzOVKrVdE5BYUeFwf7oxp4vZNnYB91Y1x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6A//BAAA//8iuzYD") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) unshare(0x68040200) r0 = open(0x0, 0x143142, 0x80) ftruncate(r0, 0x2007ffb) socket$rds(0x15, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r1, 0xffffffffffffffff, 0x1f, 0x0, @void}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.176726787s ago: executing program 3 (id=1540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 2.128657898s ago: executing program 4 (id=1542): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70001ca10000250000000e0001006e657464657673696d0000000f54fe", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x1, 0x808, r2, 0x0, 0x0, 0x8, 0x0, 0x2, r2}]) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.624945055s ago: executing program 5 (id=1544): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x44, 0x1, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x77}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x44}}, 0x400d0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xe, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x81) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e1e}, 0xffffffffffffffcd) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x10}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x800) 1.567896966s ago: executing program 0 (id=1546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(r3, 0x0, 0x0, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x100}, 0x18) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x20, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x8, 0x0, 0xe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.522269977s ago: executing program 4 (id=1548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c844}, 0x4000000) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(r1, 0x0, 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_uring_setup(0x560e, 0x0) close(0x3) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) 1.458253168s ago: executing program 4 (id=1550): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000cc0)=ANY=[@ANYBLOB='overriderockperm,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nocompress,block=0x0000000000000200,gid=', @ANYRESHEX=0x0, @ANYBLOB=',map=acorn,map=normal,iocharset=default,map=acorn,map=off,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x2, 0xa28, &(0x7f0000000180)="$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") perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x1}, 0x18208, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) io_setup(0x2, &(0x7f00000011c0)=0x0) io_submit(r2, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback, 0xffffffffffffffff, 0x1b, 0x10}, 0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 1.457598318s ago: executing program 0 (id=1559): r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24000044}, 0x4008010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x67b}}, './file1\x00'}) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfcfa, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x4) ftruncate(r1, 0x8800000) 1.388166109s ago: executing program 4 (id=1551): mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x80002) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xdf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) close_range(r2, r4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 1.378810939s ago: executing program 0 (id=1553): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x1d, 0xfffff034}, {0x80000006, 0x81}]}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES64], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r2, @ANYBLOB], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) 1.30872878s ago: executing program 0 (id=1554): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x600, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x4, 0x0, 0x800000, 0x0, 0x2, 0x6788, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, 0x0, 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.30432796s ago: executing program 3 (id=1555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x14}, 0x40044) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x57e4, &(0x7f00000003c0)={0x0, 0xfefffbfe, 0x10100, 0x5, 0x1000303}, &(0x7f0000000540), &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xe) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.299203731s ago: executing program 1 (id=1556): dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000ac0)={[{@grpjquota}, {@barrier}, {@dax_never}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdda}}], [{@permit_directio}, {@euid_eq}, {@fowner_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '@/\\:^+^'}}, {@smackfsroot={'smackfsroot', 0x3d, '^@\x8e\xdb\x19('}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',[[$}*:'}}, {@appraise_type}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") sendmsg$unix(0xffffffffffffffff, 0x0, 0x20008980) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000080)={0x6, 'veth0_vlan\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000380)={0x0, 'bridge_slave_0\x00', {}, 0x1ff}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r2, 0x6, 0x0, 0x0, 0xa}) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 1.170390342s ago: executing program 1 (id=1557): r0 = msgget$private(0x0, 0x480) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x10d002, 0x40) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'sit0\x00', 'ip6_vti0\x00', {}, {}, 0x6, 0x0, 0x4a}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) msgget(0x1, 0x80) 887.496317ms ago: executing program 1 (id=1558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000810}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x260c80, 0x0) getdents64(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x76, 0x2, 0x0, 0x0, 0x0, 0x5, 0x200, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0xe29, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r3}, 0x10) close(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r4 = fsopen(&(0x7f00000018c0)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x6, 0x0, 0x0, 0x0) 685.467409ms ago: executing program 1 (id=1560): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4, 0x0, 0x8000000000000}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 684.632349ms ago: executing program 3 (id=1561): signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40) 509.100172ms ago: executing program 3 (id=1562): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0xfd}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x48}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000240)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000040000000400000012", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007963da43a191dbe85155fa891cd4745fc0f5ceae87499a7009ceac3575e086e9406be47d6dfd2f705d5d59288c62496eb1826f1199e34567367237cf441527acdb6aab4d2b7f31f1de67aa8c29d9ef927f9641044439"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000140), 0x1003, r5}, 0x38) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40481c0) 508.798392ms ago: executing program 4 (id=1563): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)="4baa9f6869f100") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 507.049362ms ago: executing program 1 (id=1572): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x600, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x4, 0x0, 0x800000, 0x0, 0x2, 0x6788, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, 0x0, 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 506.745612ms ago: executing program 0 (id=1564): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x29, 0x0, &(0x7f00000010c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r4, 0x10c, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) 456.134173ms ago: executing program 0 (id=1565): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xa002a008}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 314.295085ms ago: executing program 3 (id=1566): socket(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x7c355b998715fcd1, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 222.3µs ago: executing program 1 (id=1567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 0s ago: executing program 3 (id=1568): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x814) kernel console output (not intermixed with test programs): ering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.415988][ T5830] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 45558 - 0 [ 87.422446][ T5836] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.439651][ T5836] EXT4-fs (loop2): 1 truncate cleaned up [ 87.445755][ T5836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.485280][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.503519][ T5830] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.513490][ T5830] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 45558 - 0 [ 87.573847][ T5831] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 87.582223][ T5831] ref_ctr decrement failed for inode: 0x307 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88812aca7900 [ 87.598017][ T5831] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 87.606364][ T5831] ref_ctr decrement failed for inode: 0x307 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88812aca7900 [ 87.620794][ T5830] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.630584][ T5830] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 45558 - 0 [ 87.643552][ T5831] uprobe: syz.4.723:5831 failed to unregister, leaking uprobe [ 87.678865][ T5830] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.687122][ T5830] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 45558 - 0 [ 87.697433][ T5842] lo speed is unknown, defaulting to 1000 [ 87.740910][ T5830] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.750413][ T5830] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 45558 - 0 [ 87.761747][ T5830] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.769980][ T5830] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 45558 - 0 [ 87.782460][ T5830] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.790660][ T5830] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 45558 - 0 [ 87.856646][ T5853] netlink: 404 bytes leftover after parsing attributes in process `syz.1.730'. [ 88.265752][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 88.265831][ T29] audit: type=1326 audit(1753070579.699:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc925b45967 code=0x7ffc0000 [ 88.297077][ T29] audit: type=1326 audit(1753070579.739:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc925aeab89 code=0x7ffc0000 [ 88.321055][ T29] audit: type=1326 audit(1753070579.739:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc925b45967 code=0x7ffc0000 [ 88.344339][ T29] audit: type=1326 audit(1753070579.739:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc925aeab89 code=0x7ffc0000 [ 88.368270][ T29] audit: type=1326 audit(1753070579.739:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 88.391955][ T29] audit: type=1326 audit(1753070579.759:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc925b45967 code=0x7ffc0000 [ 88.415791][ T29] audit: type=1326 audit(1753070579.759:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc925aeab89 code=0x7ffc0000 [ 88.439783][ T29] audit: type=1326 audit(1753070579.759:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 88.463374][ T29] audit: type=1326 audit(1753070579.759:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc925b45967 code=0x7ffc0000 [ 88.487215][ T29] audit: type=1326 audit(1753070579.759:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc925aeab89 code=0x7ffc0000 [ 88.898095][ T5881] loop1: detected capacity change from 0 to 1024 [ 88.906131][ T5881] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 88.970244][ T5881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.061794][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.082290][ T5889] tipc: New replicast peer: 255.255.255.255 [ 89.089634][ T5889] tipc: Enabled bearer , priority 10 [ 89.283645][ T5894] SELinux: ebitmap: map size 335544384 does not match my size 64 (high bit was 0) [ 89.309966][ T5899] lo speed is unknown, defaulting to 1000 [ 89.606478][ T5894] SELinux: failed to load policy [ 89.653778][ T5903] bridge_slave_1: left allmulticast mode [ 89.659653][ T5903] bridge_slave_1: left promiscuous mode [ 89.665362][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.674876][ T5903] bridge_slave_0: left promiscuous mode [ 89.680607][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.682737][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.750'. [ 89.700305][ T5891] loop4: detected capacity change from 0 to 128 [ 89.706883][ T5891] EXT4-fs: Ignoring removed nobh option [ 89.716516][ T5891] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.728948][ T5891] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.744146][ T5911] SELinux: Context system_u:object is not valid (left unmapped). [ 89.769660][ T5906] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 89.778799][ T5906] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 89.787028][ T5906] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 89.795387][ T5906] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 89.804832][ T5906] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 89.843138][ T5914] lo speed is unknown, defaulting to 1000 [ 89.849252][ T5906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.750'. [ 89.859412][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.862095][ T5906] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.904659][ T5917] netlink: 'syz.4.753': attribute type 4 has an invalid length. [ 89.984607][ T5929] netlink: 'syz.4.758': attribute type 1 has an invalid length. [ 90.002049][ T5929] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 90.013536][ T5929] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 90.052434][ T5934] gretap1: entered promiscuous mode [ 90.059586][ T5934] bond3: (slave gretap1): making interface the new active one [ 90.067389][ T5934] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 90.088962][ T3413] tipc: Node number set to 1071311160 [ 90.095788][ T5929] macvlan2: entered promiscuous mode [ 90.101147][ T5929] macvlan2: entered allmulticast mode [ 90.107140][ T5929] bond3: entered promiscuous mode [ 90.112482][ T5929] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.123908][ T5929] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 90.139595][ T5929] bond3: left promiscuous mode [ 90.152591][ T5936] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 90.160305][ T5936] netlink: 'syz.3.760': attribute type 2 has an invalid length. [ 90.168733][ T5936] Cannot find add_set index 0 as target [ 90.231114][ T5946] loop4: detected capacity change from 0 to 1024 [ 90.240198][ T5946] EXT4-fs: inline encryption not supported [ 90.246037][ T5946] EXT4-fs: Ignoring removed i_version option [ 90.253545][ T5946] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.265505][ T5946] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.762: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.280294][ T5946] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.762: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.294652][ T5946] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.762: Failed to acquire dquot type 0 [ 90.306000][ T5946] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 90.316175][ T5946] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.762: mark_inode_dirty error [ 90.329425][ T5946] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 90.339796][ T5946] EXT4-fs (loop4): 1 orphan inode deleted [ 90.346023][ T5946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.359737][ T4177] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.374132][ T4177] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 0 [ 90.386456][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.396263][ T5946] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.762: Invalid inode table block 1 in block_group 0 [ 90.410090][ T5946] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 90.421951][ T5946] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.762: mark_inode_dirty error [ 90.522934][ T5958] netlink: 'syz.3.766': attribute type 25 has an invalid length. [ 90.531590][ T5958] netlink: 184 bytes leftover after parsing attributes in process `syz.3.766'. [ 90.592356][ T5959] netlink: 'syz.3.766': attribute type 10 has an invalid length. [ 90.666872][ T5956] 9pnet_fd: Insufficient options for proto=fd [ 90.934003][ T5968] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 91.022160][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 91.142456][ T5975] lo speed is unknown, defaulting to 1000 [ 91.460998][ T5979] netlink: 'syz.4.772': attribute type 1 has an invalid length. [ 91.468787][ T5979] netlink: 'syz.4.772': attribute type 2 has an invalid length. [ 91.479183][ T5979] Cannot find add_set index 0 as target [ 91.503396][ T5986] netlink: 'syz.4.774': attribute type 4 has an invalid length. [ 91.505932][ T5988] netlink: 'syz.2.773': attribute type 1 has an invalid length. [ 91.542846][ T5992] loop4: detected capacity change from 0 to 512 [ 91.550698][ T5988] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 91.561911][ T5988] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 91.580628][ T5992] EXT4-fs (loop4): 1 orphan inode deleted [ 91.586650][ T5992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.599597][ T5992] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.605381][ T5998] gretap1: entered promiscuous mode [ 91.611546][ T4177] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 1 [ 91.633825][ T5998] bond2: (slave gretap1): making interface the new active one [ 91.644569][ T5998] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 91.653498][ T5992] random: crng reseeded on system resumption [ 91.685168][ T5988] macvlan2: entered promiscuous mode [ 91.690604][ T5988] macvlan2: entered allmulticast mode [ 91.696438][ T5988] bond2: entered promiscuous mode [ 91.702548][ T5988] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.717063][ T5988] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 91.743083][ T5988] bond2: left promiscuous mode [ 91.829504][ T6006] loop0: detected capacity change from 0 to 512 [ 91.836238][ T6006] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.846967][ T6006] EXT4-fs (loop0): 1 truncate cleaned up [ 91.854162][ T6006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.947003][ T6011] lo speed is unknown, defaulting to 1000 [ 92.090572][ T6022] SELinux: Context system_u:object_r:selinux_config_t:s0 is not valid (left unmapped). [ 92.106131][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.406071][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.476752][ T10] lo speed is unknown, defaulting to 1000 [ 92.482639][ T10] syz0: Port: 1 Link ACTIVE [ 92.540263][ T6046] loop2: detected capacity change from 0 to 164 [ 92.549487][ T6046] bio_check_eod: 20711 callbacks suppressed [ 92.549500][ T6046] syz.2.794: attempt to access beyond end of device [ 92.549500][ T6046] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 92.570851][ T6046] syz.2.794: attempt to access beyond end of device [ 92.570851][ T6046] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 92.612832][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 92.666546][ T6058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.752547][ T6066] loop2: detected capacity change from 0 to 128 [ 93.230045][ T6081] loop2: detected capacity change from 0 to 2048 [ 93.240237][ T6085] loop0: detected capacity change from 0 to 1024 [ 93.273287][ T6085] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 93.301586][ T6085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.344977][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 93.344988][ T29] audit: type=1326 audit(1753070584.779:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 93.443396][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.452658][ T29] audit: type=1326 audit(1753070584.819:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 93.476083][ T29] audit: type=1326 audit(1753070584.819:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 93.499683][ T29] audit: type=1326 audit(1753070584.819:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 93.522501][ T29] audit: type=1326 audit(1753070584.819:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 93.546015][ T29] audit: type=1326 audit(1753070584.819:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 93.569538][ T29] audit: type=1326 audit(1753070584.819:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 93.592444][ T29] audit: type=1326 audit(1753070584.819:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 93.615829][ T29] audit: type=1326 audit(1753070584.819:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 93.639367][ T29] audit: type=1326 audit(1753070584.819:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 93.665036][ T6100] netlink: 52 bytes leftover after parsing attributes in process `syz.2.808'. [ 93.720852][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.815'. [ 93.755597][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 93.768418][ T6108] xt_hashlimit: max too large, truncated to 1048576 [ 93.803322][ T6110] loop0: detected capacity change from 0 to 512 [ 93.823431][ T6110] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.813: bg 0: block 16: invalid block bitmap [ 93.836543][ T6110] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 93.845506][ T6110] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.813: invalid indirect mapped block 5 (level 0) [ 93.865271][ T6110] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.813: invalid indirect mapped block 4294967295 (level 1) [ 93.879717][ T6110] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.813: invalid indirect mapped block 4294967295 (level 2) [ 93.897286][ T6110] EXT4-fs (loop0): 1 truncate cleaned up [ 93.903367][ T6110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.965949][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.978264][ T6115] tipc: Enabling of bearer rejected, failed to enable media [ 93.996772][ T6119] loop2: detected capacity change from 0 to 512 [ 94.004615][ T6119] ext4: Unknown parameter 'noacl' [ 94.022037][ T6121] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 94.025090][ T6119] loop2: detected capacity change from 0 to 1024 [ 94.033335][ T6121] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 94.039043][ T6119] ext4: Unknown parameter 'fowner<00000000000000000000' [ 94.072198][ T6123] gretap1: entered promiscuous mode [ 94.078556][ T6123] bond2: (slave gretap1): making interface the new active one [ 94.086304][ T6123] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 94.107131][ T6121] macvlan2: entered promiscuous mode [ 94.112497][ T6121] macvlan2: entered allmulticast mode [ 94.118436][ T6121] bond2: entered promiscuous mode [ 94.123699][ T6121] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.132899][ T6121] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 94.144455][ T6121] bond2: left promiscuous mode [ 94.220575][ T6131] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 94.286715][ T6142] lo speed is unknown, defaulting to 1000 [ 94.319791][ T6152] ip6erspan0: entered promiscuous mode [ 94.348057][ T6162] loop0: detected capacity change from 0 to 128 [ 94.357971][ T6162] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 94.376221][ T6155] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.828'. [ 94.444361][ T6174] loop0: detected capacity change from 0 to 512 [ 94.502219][ T6174] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 94.511485][ T6174] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.834: invalid indirect mapped block 2683928664 (level 1) [ 94.527369][ T6174] EXT4-fs (loop0): Remounting filesystem read-only [ 94.534210][ T6174] EXT4-fs (loop0): 1 truncate cleaned up [ 94.540438][ T6174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.587473][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.616553][ T6199] loop0: detected capacity change from 0 to 512 [ 94.626872][ T6199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.634588][ T6199] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.645468][ T6199] EXT4-fs (loop0): 1 truncate cleaned up [ 94.652573][ T6199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.673787][ T6199] Trying to write to read-only block-device loop0 [ 94.717794][ T6199] loop0: detected capacity change from 512 to 64 [ 94.738138][ T3305] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 94.750740][ T3305] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 94.771817][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.090274][ T6292] validate_nla: 9 callbacks suppressed [ 95.090289][ T6292] netlink: 'syz.1.838': attribute type 1 has an invalid length. [ 95.131097][ T6293] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.164591][ T6292] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 95.203095][ T6292] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 95.252047][ T6301] gretap1: entered promiscuous mode [ 95.275478][ T6301] bond3: (slave gretap1): making interface the new active one [ 95.283639][ T6301] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 95.335168][ T6316] tipc: Enabling of bearer rejected, already enabled [ 95.348779][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'. [ 95.358327][ T6316] tipc: Disabling bearer [ 95.381982][ T6292] macvlan2: entered promiscuous mode [ 95.387281][ T6292] macvlan2: entered allmulticast mode [ 95.397958][ T6292] bond3: entered promiscuous mode [ 95.403345][ T6292] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 95.421719][ T6292] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 95.435355][ T6292] bond3: left promiscuous mode [ 95.447225][ T6294] lo speed is unknown, defaulting to 1000 [ 95.454766][ T6319] netlink: 'syz.4.847': attribute type 27 has an invalid length. [ 95.473690][ T6319] erspan0: left allmulticast mode [ 95.480112][ T6319] sit0: left promiscuous mode [ 95.484816][ T6319] sit0: left allmulticast mode [ 95.504834][ T6319] vti0: left promiscuous mode [ 95.510398][ T6319] bridge3: left allmulticast mode [ 95.547130][ T6319] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.555643][ T6319] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.564141][ T6319] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.564720][ T6327] loop1: detected capacity change from 0 to 1024 [ 95.573175][ T6319] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.581622][ T6327] EXT4-fs: Ignoring removed orlov option [ 95.603636][ T6319] veth3: left promiscuous mode [ 95.611634][ T6327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.627355][ T6319] gretap1: left promiscuous mode [ 95.679207][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.700013][ T6322] 8021q: adding VLAN 0 to HW filter on device  [ 95.714993][ T6322] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.734171][ T6322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.760907][ T4151] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.787916][ T3917] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 95.800800][ T4151] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.823457][ T6294] chnl_net:caif_netlink_parms(): no params data found [ 96.760467][ T4151] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.782571][ T6340] siw: device registration error -23 [ 96.784223][ T4178] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 96.795896][ T3414] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 96.847003][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.854118][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.865121][ T6294] bridge_slave_0: entered allmulticast mode [ 96.872379][ T6294] bridge_slave_0: entered promiscuous mode [ 96.887366][ T6339] lo speed is unknown, defaulting to 1000 [ 96.919912][ T4151] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.933776][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.940937][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.968199][ T6361] loop4: detected capacity change from 0 to 1024 [ 96.975946][ T6294] bridge_slave_1: entered allmulticast mode [ 96.982382][ T6294] bridge_slave_1: entered promiscuous mode [ 97.000594][ T6361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 97.011952][ T6351] syzkaller0: entered promiscuous mode [ 97.018114][ T6351] syzkaller0: entered allmulticast mode [ 97.018262][ T6361] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.033874][ T6365] loop1: detected capacity change from 0 to 512 [ 97.049365][ T6361] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.862: lblock 3 mapped to illegal pblock 3 (length 3) [ 97.052154][ T6365] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.064257][ T6361] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 97.075417][ T6365] EXT4-fs (loop1): 1 truncate cleaned up [ 97.085395][ T6361] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.085395][ T6361] [ 97.091918][ T6365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.123123][ T6294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.138749][ T6294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.151126][ T3690] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 97.188014][ T3690] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 97.200968][ T3690] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.200968][ T3690] [ 97.211801][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 97.219158][ T6294] team0: Port device team_slave_0 added [ 97.226541][ T6369] loop2: detected capacity change from 0 to 1024 [ 97.228786][ T6294] team0: Port device team_slave_1 added [ 97.238690][ T6369] EXT4-fs: inline encryption not supported [ 97.244635][ T6369] EXT4-fs: Ignoring removed i_version option [ 97.251596][ T4151] bridge_slave_1: left allmulticast mode [ 97.257312][ T4151] bridge_slave_1: left promiscuous mode [ 97.263090][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.271158][ T6369] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.288669][ T6369] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.864: lblock 2 mapped to illegal pblock 2 (length 1) [ 97.305876][ T6372] loop4: detected capacity change from 0 to 128 [ 97.313211][ T6369] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.864: lblock 0 mapped to illegal pblock 48 (length 1) [ 97.328815][ T4151] bridge_slave_0: left allmulticast mode [ 97.334456][ T4151] bridge_slave_0: left promiscuous mode [ 97.337295][ T6369] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.864: Failed to acquire dquot type 0 [ 97.340824][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.351998][ T6369] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 97.372898][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.377463][ T6369] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.864: mark_inode_dirty error [ 97.393404][ T6369] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 97.404801][ T6369] EXT4-fs (loop2): 1 orphan inode deleted [ 97.410959][ T6369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.423383][ T3690] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.438805][ T3690] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0 [ 97.450676][ T4151] bond0 (unregistering): (slave erspan0): Releasing active interface [ 97.450882][ T6369] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.469408][ T6369] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.864: Invalid inode table block 1 in block_group 0 [ 97.482286][ T4151] bond2 (unregistering): (slave gretap1): Releasing active interface [ 97.482453][ T6369] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 97.501289][ T6369] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.864: mark_inode_dirty error [ 97.551307][ T4151] bond1 (unregistering): Released all slaves [ 97.565057][ T4151] bond0 (unregistering): (slave veth3): Releasing active interface [ 97.574326][ T4151] bond0 (unregistering): Released all slaves [ 97.575680][ T6384] netlink: 'syz.4.869': attribute type 39 has an invalid length. [ 97.582854][ T4151] bond2 (unregistering): Released all slaves [ 97.601687][ T6375] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 97.609422][ T6382] netlink: 'syz.2.868': attribute type 4 has an invalid length. [ 97.626560][ T6382] netlink: 'syz.2.868': attribute type 4 has an invalid length. [ 97.636906][ T6294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.644457][ T6294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.671145][ T6294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.685666][ T3917] lo speed is unknown, defaulting to 1000 [ 97.686283][ T6294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.699023][ T6294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.725029][ T6294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.747412][ T4151] tipc: Left network mode [ 97.747407][ T3414] lo speed is unknown, defaulting to 1000 [ 97.780821][ T6294] hsr_slave_0: entered promiscuous mode [ 97.787034][ T6294] hsr_slave_1: entered promiscuous mode [ 97.793649][ T6294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.801298][ T6294] Cannot create hsr debugfs directory [ 97.812240][ T4151] hsr_slave_1: left promiscuous mode [ 97.852418][ T6400] loop2: detected capacity change from 0 to 2048 [ 97.876642][ T4151] team0 (unregistering): Port device team_slave_1 removed [ 97.886454][ T4151] team0 (unregistering): Port device team_slave_0 removed [ 97.902138][ T6400] loop2: p1 < > p4 [ 97.906328][ T6400] loop2: p4 size 8388608 extends beyond EOD, truncated [ 97.943677][ T3690] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 97.951616][ T3690] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 97.967606][ T6401] lo speed is unknown, defaulting to 1000 [ 97.977784][ T6407] SELinux: failed to load policy [ 98.005540][ T6400] loop2: detected capacity change from 0 to 512 [ 98.014362][ T6400] ext4: Unknown parameter 'fowner<00000000000000000000' [ 98.053239][ T6416] netlink: 'syz.2.880': attribute type 4 has an invalid length. [ 98.071239][ T6416] netlink: 'syz.2.880': attribute type 4 has an invalid length. [ 98.081933][ T3413] lo speed is unknown, defaulting to 1000 [ 98.087805][ T3413] syz0: Port: 1 Link DOWN [ 98.095092][ T3413] lo speed is unknown, defaulting to 1000 [ 98.101542][ T3413] syz0: Port: 1 Link ACTIVE [ 98.144891][ T6423] netlink: 'syz.1.883': attribute type 4 has an invalid length. [ 98.290412][ T6431] nfs4: Bad value for 'source' [ 98.330556][ T6294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.339232][ T6294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.348038][ T6294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.350649][ T6433] 9pnet_fd: Insufficient options for proto=fd [ 98.364821][ T6294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.401843][ T6294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.414440][ T6294] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.424478][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.431606][ T4178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.443141][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.450281][ T4178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.480095][ T6441] loop1: detected capacity change from 0 to 512 [ 98.489583][ T6441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.502331][ T6441] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.514284][ T6441] bridge0: port 4(syz_tun) entered blocking state [ 98.521418][ T6441] bridge0: port 4(syz_tun) entered disabled state [ 98.528386][ T6441] syz_tun: entered allmulticast mode [ 98.534043][ T6441] syz_tun: entered promiscuous mode [ 98.539956][ T6441] bridge0: port 4(syz_tun) entered blocking state [ 98.546411][ T6441] bridge0: port 4(syz_tun) entered forwarding state [ 98.560531][ T6441] syz_tun: left allmulticast mode [ 98.565568][ T6441] syz_tun: left promiscuous mode [ 98.571058][ T6441] bridge0: port 4(syz_tun) entered disabled state [ 98.581120][ T6441] dummy0: left allmulticast mode [ 98.586173][ T6441] bridge0: port 3(dummy0) entered disabled state [ 98.597272][ T6441] bridge_slave_0: left allmulticast mode [ 98.603141][ T6441] bridge_slave_0: left promiscuous mode [ 98.608846][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.617384][ T6441] bridge_slave_1: left allmulticast mode [ 98.623493][ T6441] bridge_slave_1: left promiscuous mode [ 98.629132][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.638468][ T6441] bond0: (slave bond_slave_0): Releasing backup interface [ 98.646137][ T6441] bond_slave_0: left promiscuous mode [ 98.653972][ T6441] bond0: (slave bond_slave_1): Releasing backup interface [ 98.662948][ T6441] bond_slave_1: left promiscuous mode [ 98.671350][ T6441] team0: Port device team_slave_0 removed [ 98.680209][ T6441] team0: Port device team_slave_1 removed [ 98.686655][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.694054][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.702466][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.710288][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.728225][ T6441] team0: Port device geneve1 removed [ 98.739012][ T6441] bond2: (slave geneve3): Releasing backup interface [ 98.747474][ T6441] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 98.755979][ T6441] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 98.764592][ T6441] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 98.773699][ T6441] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 98.784342][ T6441] bond3: (slave gretap1): Releasing active interface [ 98.814750][ T6294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.829260][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.863882][ T6457] lo speed is unknown, defaulting to 1000 [ 98.887845][ T3413] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 98.990636][ T6294] veth0_vlan: entered promiscuous mode [ 99.001601][ T6294] veth1_vlan: entered promiscuous mode [ 99.033414][ T6294] veth0_macvtap: entered promiscuous mode [ 99.044066][ T6294] veth1_macvtap: entered promiscuous mode [ 99.050992][ T6476] veth0_vlan: entered allmulticast mode [ 99.077840][ T6475] veth0_vlan: left allmulticast mode [ 99.085146][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 99.085183][ T29] audit: type=1400 audit(1753070590.519:5118): avc: denied { ioctl } for pid=6481 comm="syz.3.898" path="socket:[14132]" dev="sockfs" ino=14132 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 99.087054][ T6294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.128405][ T6294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.136126][ T29] audit: type=1326 audit(1753070590.569:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.3.898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f854483e9a9 code=0x0 [ 99.138204][ T6294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.168282][ T6294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.176966][ T6294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.185674][ T6294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.238803][ T29] audit: type=1400 audit(1753070590.649:5120): avc: denied { mount } for pid=6294 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 99.261550][ T29] audit: type=1400 audit(1753070590.649:5121): avc: denied { mounton } for pid=6294 comm="syz-executor" path="/root/syzkaller.Wqy2Rl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 99.288847][ T29] audit: type=1400 audit(1753070590.679:5122): avc: denied { mount } for pid=6294 comm="syz-executor" name="/" dev="gadgetfs" ino=3752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 99.315249][ T29] audit: type=1400 audit(1753070590.749:5123): avc: denied { write } for pid=6294 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 99.341121][ T29] audit: type=1400 audit(1753070590.749:5124): avc: denied { open } for pid=6294 comm="syz-executor" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 99.402844][ T6493] loop0: detected capacity change from 0 to 2048 [ 99.426711][ T6495] loop4: detected capacity change from 0 to 512 [ 99.449753][ T6495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.462963][ T6495] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.476282][ T6495] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.901: corrupted inode contents [ 99.489416][ T6495] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.901: mark_inode_dirty error [ 99.501481][ T6495] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.901: corrupted inode contents [ 99.515097][ T6495] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.901: mark_inode_dirty error [ 99.528392][ T6495] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.901: mark inode dirty (error -117) [ 99.588940][ T6495] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 99.675230][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.449791][ T29] audit: type=1326 audit(1753070591.859:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 100.473150][ T29] audit: type=1326 audit(1753070591.859:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 100.496810][ T29] audit: type=1326 audit(1753070591.859:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 100.557166][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.909'. [ 100.619810][ T6518] netlink: 156 bytes leftover after parsing attributes in process `syz.1.908'. [ 100.640523][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 100.650158][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 100.705706][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.745166][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.769684][ T6529] macvtap1: entered allmulticast mode [ 100.775090][ T6529] syz_tun: entered allmulticast mode [ 100.792193][ T6529] syz_tun: left allmulticast mode [ 100.931443][ T6539] macsec0: entered allmulticast mode [ 100.996461][ T6543] loop2: detected capacity change from 0 to 2048 [ 101.012022][ T6543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.030349][ T6543] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.045343][ T6543] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 101.058388][ T6543] EXT4-fs (loop2): This should not happen!! Data will be lost [ 101.058388][ T6543] [ 101.068023][ T6543] EXT4-fs (loop2): Total free blocks count 0 [ 101.073995][ T6543] EXT4-fs (loop2): Free/Dirty block details [ 101.079920][ T6543] EXT4-fs (loop2): free_blocks=2415919104 [ 101.085647][ T6543] EXT4-fs (loop2): dirty_blocks=32 [ 101.091417][ T6543] EXT4-fs (loop2): Block reservation details [ 101.097488][ T6543] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 101.165975][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.987753][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 102.097779][ T6574] vlan2: entered allmulticast mode [ 102.102921][ T6574] vlan1: entered allmulticast mode [ 102.108053][ T6574] veth0_vlan: entered allmulticast mode [ 102.116261][ T6575] netlink: 'syz.1.923': attribute type 4 has an invalid length. [ 102.134780][ T6562] lo speed is unknown, defaulting to 1000 [ 102.161296][ T6580] netlink: 'syz.1.926': attribute type 4 has an invalid length. [ 102.233029][ T6580] netlink: 'syz.1.926': attribute type 4 has an invalid length. [ 102.436355][ T6590] loop2: detected capacity change from 0 to 512 [ 102.461196][ T6590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.486214][ T6597] netlink: 'GPL': attribute type 10 has an invalid length. [ 102.494183][ T6597] team0: Device macvtap0 failed to register rx_handler [ 102.502344][ T6590] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.565595][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.608413][ T6611] loop4: detected capacity change from 0 to 1024 [ 102.619491][ T6611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.634939][ T6611] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 102.650835][ T6611] EXT4-fs (loop4): Remounting filesystem read-only [ 102.657382][ T6611] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 102.681147][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.725206][ T6617] loop4: detected capacity change from 0 to 512 [ 102.732301][ T6617] journal_path: Non-blockdev passed as './bus' [ 102.739233][ T6617] EXT4-fs: error: could not find journal device path [ 102.756049][ T6617] loop4: detected capacity change from 0 to 512 [ 102.763031][ T6617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.771161][ T6617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.800957][ T6623] lo speed is unknown, defaulting to 1000 [ 102.826130][ T6617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.839800][ T6617] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.853256][ T6617] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 102.863580][ T6617] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 102.907631][ T6617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.003369][ T6636] vlan2: entered allmulticast mode [ 103.008658][ T6636] vlan1: entered allmulticast mode [ 103.013757][ T6636] veth0_vlan: entered allmulticast mode [ 103.307627][ T6640] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 103.323416][ T3413] IPVS: starting estimator thread 0... [ 103.438527][ T6642] IPVS: using max 2640 ests per chain, 132000 per kthread [ 103.539058][ T6654] lo speed is unknown, defaulting to 1000 [ 103.581133][ T6659] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.948'. [ 103.659548][ T6663] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.951'. [ 103.670126][ T6660] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.951'. [ 103.790242][ T6672] lo speed is unknown, defaulting to 1000 [ 103.799760][ T6674] loop4: detected capacity change from 0 to 512 [ 103.801049][ T6676] loop0: detected capacity change from 0 to 512 [ 103.815127][ T6676] bridge0: port 3(syz_tun) entered blocking state [ 103.815837][ T6674] ext4: Unknown parameter 'nouser_xattr' [ 103.821584][ T6676] bridge0: port 3(syz_tun) entered disabled state [ 103.822053][ T6676] syz_tun: entered allmulticast mode [ 103.840655][ T6676] syz_tun: entered promiscuous mode [ 103.845981][ T6676] bridge0: port 3(syz_tun) entered blocking state [ 103.852513][ T6676] bridge0: port 3(syz_tun) entered forwarding state [ 103.878316][ T6676] syz_tun: left allmulticast mode [ 103.883397][ T6676] syz_tun: left promiscuous mode [ 103.888514][ T6676] bridge0: port 3(syz_tun) entered disabled state [ 103.905127][ T6676] bridge_slave_0: left allmulticast mode [ 103.910847][ T6676] bridge_slave_0: left promiscuous mode [ 103.916432][ T6676] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.926336][ T6676] bridge_slave_1: left allmulticast mode [ 103.932032][ T6676] bridge_slave_1: left promiscuous mode [ 103.937680][ T6676] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.947019][ T6676] bond0: (slave bond_slave_0): Releasing backup interface [ 103.966775][ T6676] bond0: (slave bond_slave_1): Releasing backup interface [ 103.983555][ T6676] team0: Port device team_slave_0 removed [ 103.992701][ T6676] team0: Port device team_slave_1 removed [ 103.999768][ T6676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.007165][ T6676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.016583][ T6676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.024081][ T6676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.074908][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 104.094645][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 104.094658][ T29] audit: type=1326 audit(1753070595.529:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc925b45967 code=0x7ffc0000 [ 104.157591][ T29] audit: type=1326 audit(1753070595.539:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc925aeab89 code=0x7ffc0000 [ 104.181584][ T29] audit: type=1326 audit(1753070595.539:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 104.204877][ T29] audit: type=1326 audit(1753070595.559:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc925b45967 code=0x7ffc0000 [ 104.228847][ T29] audit: type=1326 audit(1753070595.559:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc925aeab89 code=0x7ffc0000 [ 104.252104][ T29] audit: type=1326 audit(1753070595.559:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 104.276036][ T29] audit: type=1326 audit(1753070595.569:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc925b45967 code=0x7ffc0000 [ 104.300006][ T29] audit: type=1326 audit(1753070595.569:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc925aeab89 code=0x7ffc0000 [ 104.323421][ T29] audit: type=1326 audit(1753070595.569:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 104.346814][ T29] audit: type=1326 audit(1753070595.579:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc925b45967 code=0x7ffc0000 [ 104.437543][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'. [ 104.617369][ T6701] lo speed is unknown, defaulting to 1000 [ 104.659985][ T6710] loop1: detected capacity change from 0 to 512 [ 104.671789][ T6711] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.967'. [ 104.687130][ T6710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.700769][ T6710] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.715757][ T6710] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.969: corrupted inode contents [ 104.728854][ T6710] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.969: mark_inode_dirty error [ 104.742274][ T6710] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.969: corrupted inode contents [ 104.754580][ T6710] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.969: mark_inode_dirty error [ 104.767287][ T6710] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.969: mark inode dirty (error -117) [ 104.780599][ T6710] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 104.805233][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.879681][ T6718] tipc: Started in network mode [ 104.884602][ T6718] tipc: Node identity d6bb68382176, cluster identity 4711 [ 104.891780][ T6718] tipc: Enabled bearer , priority 0 [ 104.908383][ T6717] tipc: Resetting bearer [ 104.937575][ T6717] tipc: Disabling bearer [ 105.052377][ T6726] macsec0: entered promiscuous mode [ 105.256198][ T6743] loop0: detected capacity change from 0 to 512 [ 105.683506][ T6757] loop0: detected capacity change from 0 to 512 [ 105.706297][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 105.715236][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 105.741368][ T6761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.790503][ T6761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.840891][ T6761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.892066][ T6761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.945907][ T6761] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.995555][ T6761] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.018867][ T6761] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.038517][ T6761] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.121026][ T6778] loop0: detected capacity change from 0 to 512 [ 106.175397][ T6780] bridge0: entered allmulticast mode [ 106.233341][ T6788] capability: warning: `syz.4.998' uses deprecated v2 capabilities in a way that may be insecure [ 106.272503][ T6782] lo speed is unknown, defaulting to 1000 [ 106.330747][ T6800] lo speed is unknown, defaulting to 1000 [ 106.605218][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 106.623068][ T6812] netlink: 'syz.4.1004': attribute type 4 has an invalid length. [ 106.886081][ T6822] loop1: detected capacity change from 0 to 512 [ 106.899769][ T6822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.913506][ T6822] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.010746][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.069106][ T6830] tipc: Enabled bearer , priority 0 [ 107.076322][ T6829] tipc: Resetting bearer [ 107.092046][ T6829] tipc: Disabling bearer [ 107.740397][ T6846] lo speed is unknown, defaulting to 1000 [ 107.823572][ T6854] netlink: 'syz.2.1017': attribute type 4 has an invalid length. [ 107.833441][ T6856] IPv6: Can't replace route, no match found [ 107.949581][ T6865] loop2: detected capacity change from 0 to 512 [ 107.963194][ T6865] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.977553][ T6865] EXT4-fs (loop2): 1 truncate cleaned up [ 108.011154][ T6865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.028629][ T6865] rdma_rxe: rxe_newlink: failed to add lo [ 108.112666][ T3311] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 108.176367][ T3311] EXT4-fs (loop2): Remounting filesystem read-only [ 108.210459][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.317478][ T6885] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 108.470247][ T4153] bond1 (unregistering): (slave erspan0): Releasing active interface [ 108.480097][ T4153] bond2 (unregistering): (slave gretap1): Releasing active interface [ 108.588906][ T4153] bond0 (unregistering): Released all slaves [ 108.597284][ T4153] bond1 (unregistering): (slave veth3): Releasing active interface [ 108.605762][ T4153] bond1 (unregistering): Released all slaves [ 108.613284][ T4153] bond2 (unregistering): Released all slaves [ 108.620931][ T6888] lo speed is unknown, defaulting to 1000 [ 108.652248][ T4153] tipc: Left network mode [ 108.660055][ T4153] hsr_slave_0: left promiscuous mode [ 108.665745][ T4153] hsr_slave_1: left promiscuous mode [ 108.692567][ T4153] team0 (unregistering): Port device team_slave_1 removed [ 108.701671][ T4153] team0 (unregistering): Port device team_slave_0 removed [ 108.726692][ T1029] lo speed is unknown, defaulting to 1000 [ 108.729804][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 108.732454][ T1029] infiniband syz0: ib_query_port failed (-19) [ 108.762883][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.770000][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.777219][ T6888] bridge_slave_0: entered allmulticast mode [ 108.783704][ T6888] bridge_slave_0: entered promiscuous mode [ 108.790494][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.797525][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.805389][ T6888] bridge_slave_1: entered allmulticast mode [ 108.811667][ T6888] bridge_slave_1: entered promiscuous mode [ 108.825796][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.836428][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.853807][ T6888] team0: Port device team_slave_0 added [ 108.860454][ T6888] team0: Port device team_slave_1 added [ 108.874546][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.881501][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.907891][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.919041][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.925979][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.952095][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.965502][ T4153] IPVS: stop unused estimator thread 0... [ 108.981762][ T6905] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1038'. [ 108.998174][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1038'. [ 109.012220][ T6888] hsr_slave_0: entered promiscuous mode [ 109.018399][ T6888] hsr_slave_1: entered promiscuous mode [ 109.024252][ T6888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.032712][ T6888] Cannot create hsr debugfs directory [ 109.041773][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.052544][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.112518][ T6888] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.122116][ T6888] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.130525][ T6888] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.140148][ T6888] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.158983][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.166068][ T6888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.173371][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.180446][ T6888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.210101][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.221552][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.238648][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.251773][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.261903][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.268963][ T4151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.281968][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.289083][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.374346][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.553973][ T6888] veth0_vlan: entered promiscuous mode [ 109.563590][ T6888] veth1_vlan: entered promiscuous mode [ 109.581151][ T6888] veth0_macvtap: entered promiscuous mode [ 109.593788][ T6888] veth1_macvtap: entered promiscuous mode [ 109.605109][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.616220][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.625420][ T6888] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.634156][ T6888] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.643386][ T6888] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.652061][ T6888] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.677160][ T29] kauditd_printk_skb: 983 callbacks suppressed [ 109.677174][ T29] audit: type=1400 audit(1753070601.109:6410): avc: denied { add_name } for pid=6888 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 109.708883][ T29] audit: type=1400 audit(1753070601.109:6411): avc: denied { associate } for pid=6888 comm="syz-executor" name="syz5" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 109.734124][ T29] audit: type=1400 audit(1753070601.169:6412): avc: denied { write } for pid=6936 comm="syz.5.1033" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 109.877403][ T6946] netlink: 'syz.3.1042': attribute type 4 has an invalid length. [ 109.907417][ T6946] netlink: 'syz.3.1042': attribute type 4 has an invalid length. [ 110.023612][ T6953] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1043'. [ 110.033374][ T6949] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1043'. [ 110.141938][ T6959] loop5: detected capacity change from 0 to 128 [ 110.175195][ T6959] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.188139][ T6959] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.208619][ T29] audit: type=1400 audit(1753070601.639:6413): avc: denied { setattr } for pid=6958 comm="syz.5.1046" path="/1/file1/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.253396][ T6888] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.314973][ T29] audit: type=1326 audit(1753070601.749:6414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915d30e9a9 code=0x7ffc0000 [ 110.338585][ T29] audit: type=1326 audit(1753070601.749:6415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915d30e9a9 code=0x7ffc0000 [ 110.375278][ T29] audit: type=1326 audit(1753070601.809:6416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915d30e9a9 code=0x7ffc0000 [ 110.398872][ T29] audit: type=1326 audit(1753070601.809:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915d30e9a9 code=0x7ffc0000 [ 110.407716][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 110.422307][ T29] audit: type=1326 audit(1753070601.809:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915d30e9a9 code=0x7ffc0000 [ 110.453768][ T29] audit: type=1326 audit(1753070601.809:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915d30e9a9 code=0x7ffc0000 [ 110.865225][ T7000] netlink: 'syz.5.1059': attribute type 27 has an invalid length. [ 110.923626][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.930909][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.116368][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.132400][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.258914][ T7019] loop4: detected capacity change from 0 to 1024 [ 111.271443][ T7000] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.280515][ T7000] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.284222][ T7019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.289406][ T7000] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.289478][ T7000] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.124890][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.133707][ T7006] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.159107][ T7006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.226663][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.248194][ T7024] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 112.257484][ T7024] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 112.337935][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1069'. [ 112.371694][ T7040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33040 sclass=netlink_route_socket pid=7040 comm=syz.4.1072 [ 112.386262][ T7040] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 112.413407][ T7045] netlink: 'syz.0.1084': attribute type 27 has an invalid length. [ 112.475059][ T7051] netlink: 'syz.3.1075': attribute type 1 has an invalid length. [ 112.535094][ T7045] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.543623][ T7045] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.552783][ T7045] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.561247][ T7045] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.571318][ T7045] vlan2: left allmulticast mode [ 112.576205][ T7045] vlan1: left allmulticast mode [ 112.581151][ T7045] veth0_vlan: left allmulticast mode [ 112.586927][ T7048] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1074'. [ 112.596811][ T7042] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1074'. [ 112.630494][ T7050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.639008][ T7050] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.665597][ T7050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.683593][ T7063] netlink: 'syz.3.1076': attribute type 4 has an invalid length. [ 112.709244][ T7062] syzkaller0: entered promiscuous mode [ 112.714749][ T7062] syzkaller0: entered allmulticast mode [ 114.128482][ T7113] loop4: detected capacity change from 0 to 512 [ 114.136176][ T7113] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.148591][ T7113] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.162316][ T7113] EXT4-fs (loop4): 1 truncate cleaned up [ 114.169465][ T7113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.285880][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.373218][ T7123] wg2: entered promiscuous mode [ 114.378175][ T7123] wg2: entered allmulticast mode [ 114.477525][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1105'. [ 114.513256][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 114.570990][ T7144] loop0: detected capacity change from 0 to 512 [ 114.583202][ T7146] loop4: detected capacity change from 0 to 128 [ 114.589803][ T7146] EXT4-fs: Ignoring removed nobh option [ 114.596562][ T7146] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.609320][ T7146] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.661848][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 114.677592][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 114.713149][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 114.745207][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 114.762689][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.844139][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1115'. [ 114.884686][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 114.884698][ T29] audit: type=1400 audit(1753070606.319:6832): avc: denied { write } for pid=7162 comm="syz.0.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.974741][ T29] audit: type=1400 audit(1753070606.409:6833): avc: denied { ioctl } for pid=7168 comm="syz.4.1119" path="socket:[17452]" dev="sockfs" ino=17452 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.195112][ T7173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33040 sclass=netlink_route_socket pid=7173 comm=syz.1.1120 [ 115.245866][ T7173] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 115.373751][ T7179] loop4: detected capacity change from 0 to 512 [ 115.421865][ T7179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.434572][ T7179] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.449068][ T29] audit: type=1326 audit(1753070606.889:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 115.472527][ T29] audit: type=1326 audit(1753070606.889:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 115.497068][ T29] audit: type=1326 audit(1753070606.889:6836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 115.520550][ T29] audit: type=1326 audit(1753070606.889:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 115.544037][ T29] audit: type=1326 audit(1753070606.889:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 115.567413][ T29] audit: type=1326 audit(1753070606.889:6839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 115.590890][ T29] audit: type=1326 audit(1753070606.889:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 115.614326][ T29] audit: type=1326 audit(1753070606.889:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 115.638676][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.923038][ T7196] netlink: 'syz.3.1130': attribute type 10 has an invalid length. [ 116.758211][ T7208] Set syz1 is full, maxelem 65536 reached [ 116.927983][ T7229] netlink: 'syz.1.1141': attribute type 27 has an invalid length. [ 116.977171][ T7229] dummy0: left promiscuous mode [ 116.997148][ T7229] wg2: left promiscuous mode [ 117.001813][ T7229] wg2: left allmulticast mode [ 117.261142][ T7229] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.269606][ T7229] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.278014][ T7229] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.286351][ T7229] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.357272][ T7229] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 45558 - 0 [ 117.365823][ T7229] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 45558 - 0 [ 117.374354][ T7229] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 45558 - 0 [ 117.382824][ T7229] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 45558 - 0 [ 117.391993][ T7229] geneve2: left promiscuous mode [ 117.396961][ T7229] geneve2: left allmulticast mode [ 117.406775][ T7229] gretap1: left promiscuous mode [ 117.421519][ T7235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.430858][ T7235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.503441][ T7256] loop5: detected capacity change from 0 to 2048 [ 117.548824][ T7256] Alternate GPT is invalid, using primary GPT. [ 117.555165][ T7256] loop5: p1 p2 p3 [ 118.022471][ T7294] loop4: detected capacity change from 0 to 128 [ 118.030714][ T7294] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.043102][ T7294] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.074768][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.200483][ T7307] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 118.217572][ T7308] loop4: detected capacity change from 0 to 1024 [ 118.269482][ T7307] team0: Device macvtap1 is already an upper device of the team interface [ 118.290794][ T7308] EXT4-fs error (device loop4): __ext4_fill_super:5500: comm syz.4.1168: inode #2: comm syz.4.1168: iget: illegal inode # [ 118.304928][ T7308] EXT4-fs (loop4): get root inode failed [ 118.310914][ T7308] EXT4-fs (loop4): mount failed [ 118.326693][ T7303] loop4: detected capacity change from 0 to 512 [ 118.339164][ T7303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.351983][ T7303] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.363874][ T7303] __nla_validate_parse: 4 callbacks suppressed [ 118.363919][ T7303] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1168'. [ 118.411192][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.482362][ T7323] 9pnet_fd: Insufficient options for proto=fd [ 118.491866][ T7323] loop7: detected capacity change from 0 to 7 [ 118.499478][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.508743][ C1] buffer_io_error: 20702 callbacks suppressed [ 118.508767][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.527106][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.536289][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.585173][ T7323] loop7: unable to read partition table [ 118.604368][ T7323] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 118.959094][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 119.005028][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 119.097398][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 119.564855][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 119.673361][ T7391] netlink: 'syz.0.1198': attribute type 4 has an invalid length. [ 119.681182][ T7391] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1198'. [ 119.837393][ T7399] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1201'. [ 119.894723][ T7403] netlink: 'syz.1.1203': attribute type 6 has an invalid length. [ 119.924885][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 119.924897][ T29] audit: type=1326 audit(1753070611.359:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d841e9a9 code=0x7ffc0000 [ 119.954666][ T29] audit: type=1326 audit(1753070611.359:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d841e9a9 code=0x7ffc0000 [ 120.013135][ T29] audit: type=1326 audit(1753070611.419:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 120.036630][ T29] audit: type=1326 audit(1753070611.419:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 120.060073][ T29] audit: type=1326 audit(1753070611.419:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 120.083457][ T29] audit: type=1326 audit(1753070611.419:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 120.106926][ T29] audit: type=1326 audit(1753070611.419:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 120.116809][ T7410] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1206'. [ 120.130207][ T29] audit: type=1326 audit(1753070611.419:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 120.130303][ T29] audit: type=1326 audit(1753070611.419:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 120.130323][ T29] audit: type=1326 audit(1753070611.419:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49394e9a9 code=0x7ffc0000 [ 120.140256][ T7410] netlink: zone id is out of range [ 120.220210][ T7410] netlink: zone id is out of range [ 120.226878][ T7410] netlink: zone id is out of range [ 120.232670][ T7410] netlink: zone id is out of range [ 120.237828][ T7410] netlink: zone id is out of range [ 120.242950][ T7410] netlink: zone id is out of range [ 120.250581][ T7410] netlink: del zone limit has 8 unknown bytes [ 120.291762][ T7416] sch_fq: defrate 0 ignored. [ 120.350104][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1209'. [ 120.360266][ T7426] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1213'. [ 120.435190][ T7437] vlan2: entered allmulticast mode [ 120.440428][ T7437] dummy0: entered allmulticast mode [ 120.846349][ T7457] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 121.484477][ T7483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7483 comm=syz.4.1232 [ 121.561381][ T7488] loop0: detected capacity change from 0 to 164 [ 121.582637][ T7488] ISOFS: unable to read i-node block [ 121.587996][ T7488] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 121.598051][ T7488] isofs_fill_super: get root inode failed [ 121.608716][ T7488] loop0: detected capacity change from 0 to 512 [ 121.654863][ T7488] loop0: detected capacity change from 0 to 512 [ 121.661548][ T7488] EXT4-fs: Ignoring removed i_version option [ 121.685783][ T7488] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup [ 121.694605][ T7488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.723916][ T6294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.474291][ T7519] netlink: 'syz.5.1256': attribute type 1 has an invalid length. [ 122.486652][ T7519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.501106][ T7519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.508412][ T7519] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 122.519550][ T7519] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 122.551251][ T7525] gretap1: entered promiscuous mode [ 122.557938][ T7525] bond1: (slave gretap1): making interface the new active one [ 122.565783][ T7525] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 122.580650][ T7525] bond1: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 122.662756][ T7531] loop5: detected capacity change from 0 to 2048 [ 122.679282][ T7531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.799894][ T6888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.886216][ T7547] loop5: detected capacity change from 0 to 2048 [ 122.899694][ T7547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.912075][ T7547] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.935901][ T6888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.526384][ T7569] loop4: detected capacity change from 0 to 512 [ 123.550825][ T7569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.563703][ T7569] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.725543][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.835332][ T7584] loop5: detected capacity change from 0 to 1024 [ 123.851540][ T7584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.921611][ T7589] //: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 123.935449][ T7589] CPU: 0 UID: 0 PID: 7589 Comm: // Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 123.935475][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.935487][ T7589] Call Trace: [ 123.935494][ T7589] [ 123.935501][ T7589] __dump_stack+0x1d/0x30 [ 123.935524][ T7589] dump_stack_lvl+0xe8/0x140 [ 123.935651][ T7589] dump_stack+0x15/0x1b [ 123.935666][ T7589] warn_alloc+0x12b/0x1a0 [ 123.935768][ T7589] __vmalloc_node_range_noprof+0x9c/0xe00 [ 123.935793][ T7589] ? __futex_wait+0x1ff/0x260 [ 123.935846][ T7589] ? __pfx_futex_wake_mark+0x10/0x10 [ 123.935869][ T7589] ? __rcu_read_unlock+0x4f/0x70 [ 123.935886][ T7589] ? avc_has_perm_noaudit+0x1b1/0x200 [ 123.935920][ T7589] ? should_fail_ex+0x30/0x280 [ 123.935944][ T7589] ? xskq_create+0x36/0xe0 [ 123.935968][ T7589] vmalloc_user_noprof+0x7d/0xb0 [ 123.936001][ T7589] ? xskq_create+0x80/0xe0 [ 123.936022][ T7589] xskq_create+0x80/0xe0 [ 123.936094][ T7589] xsk_init_queue+0x95/0xf0 [ 123.936113][ T7589] xsk_setsockopt+0x35c/0x510 [ 123.936131][ T7589] ? __pfx_xsk_setsockopt+0x10/0x10 [ 123.936149][ T7589] __sys_setsockopt+0x184/0x200 [ 123.936182][ T7589] __x64_sys_setsockopt+0x64/0x80 [ 123.936212][ T7589] x64_sys_call+0x2bd5/0x2fb0 [ 123.936232][ T7589] do_syscall_64+0xd2/0x200 [ 123.936248][ T7589] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.936378][ T7589] ? clear_bhb_loop+0x40/0x90 [ 123.936396][ T7589] ? clear_bhb_loop+0x40/0x90 [ 123.936425][ T7589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.936445][ T7589] RIP: 0033:0x7fc925b4e9a9 [ 123.936463][ T7589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.936525][ T7589] RSP: 002b:00007fc92418e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 123.936544][ T7589] RAX: ffffffffffffffda RBX: 00007fc925d76080 RCX: 00007fc925b4e9a9 [ 123.936557][ T7589] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 123.936569][ T7589] RBP: 00007fc925bd0d69 R08: 0000000000000004 R09: 0000000000000000 [ 123.936589][ T7589] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.936601][ T7589] R13: 0000000000000000 R14: 00007fc925d76080 R15: 00007ffc4f72acb8 [ 123.936653][ T7589] [ 123.936663][ T7589] Mem-Info: [ 124.162597][ T7589] active_anon:32138 inactive_anon:4 isolated_anon:0 [ 124.162597][ T7589] active_file:20894 inactive_file:2549 isolated_file:0 [ 124.162597][ T7589] unevictable:0 dirty:315 writeback:0 [ 124.162597][ T7589] slab_reclaimable:3136 slab_unreclaimable:51610 [ 124.162597][ T7589] mapped:38828 shmem:27158 pagetables:1090 [ 124.162597][ T7589] sec_pagetables:0 bounce:0 [ 124.162597][ T7589] kernel_misc_reclaimable:0 [ 124.162597][ T7589] free:1805342 free_pcp:26907 free_cma:0 [ 124.207779][ T7589] Node 0 active_anon:128552kB inactive_anon:16kB active_file:83576kB inactive_file:10196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155312kB dirty:1260kB writeback:0kB shmem:108632kB writeback_tmp:0kB kernel_stack:4560kB pagetables:4360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 124.237029][ T7589] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.265706][ T7589] lowmem_reserve[]: 0 2882 7860 7860 [ 124.271262][ T7589] Node 0 DMA32 free:2947820kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951348kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 124.302596][ T7589] lowmem_reserve[]: 0 0 4978 4978 [ 124.307638][ T7589] Node 0 Normal free:4258188kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:115560kB inactive_anon:16kB active_file:83576kB inactive_file:10196kB unevictable:0kB writepending:1260kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:117220kB local_pcp:1476kB free_cma:0kB [ 124.340441][ T7589] lowmem_reserve[]: 0 0 0 0 [ 124.345070][ T7589] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.357844][ T7589] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 2*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947820kB [ 124.373946][ T7589] Node 0 Normal: 875*4kB (UME) 531*8kB (UME) 206*16kB (UM) 149*32kB (UME) 109*64kB (UME) 96*128kB (UM) 80*256kB (UME) 76*512kB (UME) 62*1024kB (UM) 34*2048kB (UME) 986*4096kB (UM) = 4266244kB [ 124.393193][ T7589] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 124.402552][ T7589] 44889 total pagecache pages [ 124.407210][ T7589] 4 pages in swap cache [ 124.411358][ T7589] Free swap = 124960kB [ 124.415517][ T7589] Total swap = 124996kB [ 124.419657][ T7589] 2097051 pages RAM [ 124.423502][ T7589] 0 pages HighMem/MovableOnly [ 124.428171][ T7589] 80814 pages reserved [ 124.432647][ T6888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.443343][ T7594] rdma_op ffff88811b3aa580 conn xmit_rdma 0000000000000000 [ 124.523323][ T7605] netlink: 'syz.3.1277': attribute type 10 has an invalid length. [ 124.536170][ T7602] infiniband syz!: set down [ 124.540779][ T7602] infiniband syz!: added team_slave_0 [ 124.547852][ T7605] team0 (unregistering): Port device team_slave_0 removed [ 124.553051][ T7602] RDS/IB: syz!: added [ 124.559301][ T7602] smc: adding ib device syz! with port count 1 [ 124.560032][ T7610] __nla_validate_parse: 9 callbacks suppressed [ 124.560059][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1275'. [ 124.565500][ T7602] smc: ib device syz! port 1 has pnetid [ 124.586777][ T7605] team0 (unregistering): Port device team_slave_1 removed [ 124.601964][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 124.847516][ T7627] veth1_to_bond: entered allmulticast mode [ 124.882466][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 124.915200][ T7627] veth1_to_bond (unregistering): left allmulticast mode [ 125.310990][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 125.311005][ T29] audit: type=1326 audit(1753070616.749:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 125.341375][ T29] audit: type=1326 audit(1753070616.779:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 125.364899][ T29] audit: type=1326 audit(1753070616.779:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 125.388287][ T29] audit: type=1326 audit(1753070616.779:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 125.411683][ T29] audit: type=1326 audit(1753070616.779:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 125.435563][ T29] audit: type=1326 audit(1753070616.779:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 125.459140][ T29] audit: type=1326 audit(1753070616.779:7653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 125.482603][ T29] audit: type=1326 audit(1753070616.779:7654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 125.506065][ T29] audit: type=1326 audit(1753070616.779:7655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 125.529524][ T29] audit: type=1326 audit(1753070616.779:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc925b4e9a9 code=0x7ffc0000 [ 125.709696][ T7662] loop4: detected capacity change from 0 to 512 [ 125.716632][ T7662] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.728749][ T7662] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 125.743482][ T7662] EXT4-fs (loop4): 1 truncate cleaned up [ 125.750580][ T7662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.774465][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.804327][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 125.821358][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 125.840707][ T7671] loop5: detected capacity change from 0 to 128 [ 125.848948][ T7671] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.861523][ T7671] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.889743][ T6888] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.910361][ T7674] loop5: detected capacity change from 0 to 512 [ 125.919134][ T7674] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 125.928387][ T7674] EXT4-fs (loop5): orphan cleanup on readonly fs [ 125.935966][ T7674] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 125.953700][ T7674] EXT4-fs (loop5): Remounting filesystem read-only [ 125.960457][ T7674] EXT4-fs (loop5): 1 truncate cleaned up [ 125.966269][ T4178] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 125.976816][ T4178] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 125.988198][ T4178] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 125.999189][ T7674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.055186][ T6888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.073176][ T7686] loop5: detected capacity change from 0 to 128 [ 126.081383][ T7686] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.094575][ T7686] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.160976][ T6888] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.225864][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 126.239542][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 127.107321][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 127.123566][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 127.355508][ T7729] random: crng reseeded on system resumption [ 127.478794][ T7732] netlink: 'syz.1.1321': attribute type 4 has an invalid length. [ 127.486696][ T7732] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1321'. [ 127.523958][ T7733] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 127.574377][ T7733] loop4: detected capacity change from 0 to 512 [ 127.608571][ T7733] EXT4-fs: Ignoring removed orlov option [ 127.629560][ T7733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.667784][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 127.699112][ T7733] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.712881][ T7733] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1320: bg 0: block 248: padding at end of block bitmap is not set [ 127.728470][ T7733] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1320: Failed to acquire dquot type 1 [ 127.752252][ T7733] EXT4-fs (loop4): 1 truncate cleaned up [ 127.758749][ T7733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.787413][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.045011][ T7758] loop4: detected capacity change from 0 to 8192 [ 128.659541][ T7771] netlink: 'syz.3.1344': attribute type 27 has an invalid length. [ 128.685509][ T7771] macsec0: left promiscuous mode [ 128.691126][ T7771] geneve2: left promiscuous mode [ 128.696077][ T7771] geneve2: left allmulticast mode [ 128.701533][ T7771] bridge1: left allmulticast mode [ 128.707276][ T7771] gretap2: left promiscuous mode [ 128.712469][ T7771] ip6erspan0: left promiscuous mode [ 128.731350][ T7774] xt_CT: No such helper "pptp" [ 128.900350][ T7790] loop4: detected capacity change from 0 to 128 [ 130.141832][ T7820] loop4: detected capacity change from 0 to 4096 [ 130.319249][ T29] kauditd_printk_skb: 565 callbacks suppressed [ 130.319264][ T29] audit: type=1326 audit(1753070621.759:8214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8544835967 code=0x7ffc0000 [ 130.503009][ T29] audit: type=1326 audit(1753070621.789:8215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85447dab89 code=0x7ffc0000 [ 130.526435][ T29] audit: type=1326 audit(1753070621.789:8216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8544835967 code=0x7ffc0000 [ 130.533998][ T7820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.549761][ T29] audit: type=1326 audit(1753070621.789:8217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85447dab89 code=0x7ffc0000 [ 130.585577][ T29] audit: type=1326 audit(1753070621.789:8218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 130.608983][ T29] audit: type=1326 audit(1753070621.789:8219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7806 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f06d8415967 code=0x7ffc0000 [ 130.632413][ T29] audit: type=1326 audit(1753070621.789:8220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7806 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f06d83bab89 code=0x7ffc0000 [ 130.655774][ T29] audit: type=1326 audit(1753070621.789:8221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7806 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f06d841e9a9 code=0x7ffc0000 [ 130.679173][ T29] audit: type=1326 audit(1753070621.789:8222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7806 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f06d8415967 code=0x7ffc0000 [ 130.702444][ T29] audit: type=1326 audit(1753070621.789:8223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7806 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f06d83bab89 code=0x7ffc0000 [ 130.766899][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.903832][ T7836] loop5: detected capacity change from 0 to 512 [ 130.910867][ T7836] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.978980][ T7836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.992340][ T7836] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.192068][ T6888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.813134][ T7867] binfmt_misc: register: failed to install interpreter file ./file2 [ 131.824625][ T7867] tipc: Enabling of bearer rejected, failed to enable media [ 131.835245][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1369'. [ 131.844648][ T7872] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1369'. [ 131.872744][ T7874] tipc: Failed to obtain node identity [ 131.878250][ T7874] tipc: Enabling of bearer rejected, failed to enable media [ 133.188571][ T7910] netlink: 'syz.3.1383': attribute type 1 has an invalid length. [ 133.522167][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1384'. [ 133.619151][ T7910] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.694241][ T7911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.702135][ T7911] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 133.714826][ T7911] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 133.756801][ T7929] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1388'. [ 134.081664][ T7935] tipc: Enabled bearer , priority 10 [ 134.142326][ T7939] netlink: 'syz.0.1392': attribute type 10 has an invalid length. [ 134.150233][ T7939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1392'. [ 134.225302][ T7939] dummy0: entered promiscuous mode [ 134.245648][ T7942] netlink: 'syz.0.1392': attribute type 10 has an invalid length. [ 134.253576][ T7942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1392'. [ 134.266666][ T7939] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 134.282440][ T7942] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.290733][ T7942] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.299045][ T7942] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.307279][ T7942] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.316962][ T7942] team0: Port device geneve1 added [ 134.354898][ T7947] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 134.361414][ T7947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.368998][ T7947] vhci_hcd vhci_hcd.0: Device attached [ 134.617748][ T7948] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 134.907222][ T4153] vhci_hcd: stop threads [ 134.911513][ T4153] vhci_hcd: release socket [ 134.915933][ T4153] vhci_hcd: disconnect device [ 134.967731][ T1029] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 134.975239][ T1029] usb 1-1: enqueue for inactive port 0 [ 134.981465][ T1029] usb 1-1: enqueue for inactive port 0 [ 134.987262][ T1029] usb 1-1: enqueue for inactive port 0 [ 135.028656][ T7960] loop5: detected capacity change from 0 to 2048 [ 135.039959][ T7960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.058623][ T1029] vhci_hcd: vhci_device speed not set [ 135.075514][ T6888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.289525][ T7970] netlink: 'syz.4.1401': attribute type 1 has an invalid length. [ 135.304172][ T7970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.322234][ T7970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.329316][ T7970] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 135.341370][ T7970] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 135.419912][ T29] kauditd_printk_skb: 644 callbacks suppressed [ 135.419926][ T29] audit: type=1326 audit(1753070626.839:8868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.3.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 135.449732][ T29] audit: type=1326 audit(1753070626.839:8869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.3.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 135.473167][ T29] audit: type=1326 audit(1753070626.839:8870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.3.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 135.496830][ T29] audit: type=1326 audit(1753070626.839:8871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.3.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 135.559598][ T29] audit: type=1326 audit(1753070626.889:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.3.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 135.583038][ T29] audit: type=1326 audit(1753070626.889:8873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.3.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 135.606490][ T29] audit: type=1326 audit(1753070626.889:8874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.3.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 135.629872][ T29] audit: type=1326 audit(1753070626.889:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.3.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 135.653567][ T29] audit: type=1326 audit(1753070626.889:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.3.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 135.677121][ T29] audit: type=1326 audit(1753070626.889:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.3.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 135.764913][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 135.774569][ T7989] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1408'. [ 138.919752][ T8046] loop4: detected capacity change from 0 to 128 [ 138.926834][ T8046] EXT4-fs: Ignoring removed nobh option [ 138.934879][ T8046] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.947518][ T8046] ext4 filesystem being mounted at /298/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.996552][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.209691][ T8059] loop4: detected capacity change from 0 to 1024 [ 139.216740][ T8059] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 139.414424][ T8077] netlink: 'syz.4.1436': attribute type 10 has an invalid length. [ 139.423344][ T8077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1436'. [ 139.448015][ T8077] dummy0: entered promiscuous mode [ 139.457347][ T8077] : (slave dummy0): Releasing backup interface [ 139.466336][ T8082] netlink: 'syz.4.1436': attribute type 10 has an invalid length. [ 139.466381][ T8082] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1436'. [ 139.495575][ T8077] bridge0: port 3(dummy0) entered blocking state [ 139.502716][ T8077] bridge0: port 3(dummy0) entered disabled state [ 139.511461][ T8077] dummy0: entered allmulticast mode [ 139.525854][ T8082] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.534236][ T8082] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.542472][ T8082] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.550727][ T8082] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.564319][ T8082] team0: Port device geneve1 added [ 140.440347][ T29] kauditd_printk_skb: 715 callbacks suppressed [ 140.440361][ T29] audit: type=1326 audit(1753070631.849:9593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8106 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f915d305967 code=0x7ffc0000 [ 140.469961][ T29] audit: type=1326 audit(1753070631.849:9594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8106 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f915d2aab89 code=0x7ffc0000 [ 140.493411][ T29] audit: type=1326 audit(1753070631.849:9595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8106 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f915d30e9a9 code=0x7ffc0000 [ 140.517075][ T29] audit: type=1326 audit(1753070631.859:9596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8106 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f915d305967 code=0x7ffc0000 [ 140.540377][ T29] audit: type=1326 audit(1753070631.859:9597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8106 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f915d2aab89 code=0x7ffc0000 [ 140.563797][ T29] audit: type=1326 audit(1753070631.859:9598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8106 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f915d30e9a9 code=0x7ffc0000 [ 140.587217][ T29] audit: type=1326 audit(1753070631.869:9599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8106 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f915d305967 code=0x7ffc0000 [ 140.610640][ T29] audit: type=1326 audit(1753070631.869:9600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8106 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f915d2aab89 code=0x7ffc0000 [ 140.633963][ T29] audit: type=1326 audit(1753070631.869:9601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8106 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f915d30e9a9 code=0x7ffc0000 [ 140.657334][ T29] audit: type=1326 audit(1753070631.879:9602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8544835967 code=0x7ffc0000 [ 141.019043][ T8136] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1465'. [ 141.158300][ T8143] netlink: 'syz.1.1457': attribute type 4 has an invalid length. [ 141.195961][ T8150] xt_connbytes: Forcing CT accounting to be enabled [ 141.202679][ T8150] Cannot find set identified by id 0 to match [ 141.223102][ T8154] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1460'. [ 141.266465][ T8159] loop5: detected capacity change from 0 to 1024 [ 141.285173][ T8159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.411133][ T6888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.451422][ T8171] xt_CT: No such helper "pptp" [ 141.481192][ T8174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.610149][ T8195] Invalid ELF header magic: != ELF [ 141.797504][ T8198] loop5: detected capacity change from 0 to 128 [ 141.805834][ T8198] xt_ecn: cannot match TCP bits for non-tcp packets [ 141.871097][ T8207] loop5: detected capacity change from 0 to 512 [ 141.877911][ T8207] EXT4-fs: dax option not supported [ 141.940285][ T8211] xt_hashlimit: max too large, truncated to 1048576 [ 141.966416][ T8214] tipc: Started in network mode [ 141.971661][ T8214] tipc: Node identity 3261189e3594, cluster identity 4711 [ 141.979025][ T8214] tipc: Enabled bearer , priority 0 [ 141.986628][ T8214] syzkaller0: entered promiscuous mode [ 141.992273][ T8214] syzkaller0: entered allmulticast mode [ 142.001552][ T8214] tipc: Resetting bearer [ 142.059799][ T8213] tipc: Resetting bearer [ 142.068823][ T8213] tipc: Disabling bearer [ 142.218972][ T8234] loop4: detected capacity change from 0 to 512 [ 142.232584][ T8232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1502'. [ 142.255776][ T8234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.280293][ T8234] ext4 filesystem being mounted at /307/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.611745][ T8234] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 142.618385][ T8234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.625904][ T8234] vhci_hcd vhci_hcd.0: Device attached [ 142.889103][ T1029] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 143.451375][ T8244] vhci_hcd: connection closed [ 143.451650][ T3690] vhci_hcd: stop threads [ 143.460649][ T3690] vhci_hcd: release socket [ 143.465106][ T3690] vhci_hcd: disconnect device [ 144.477906][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.511845][ T8274] netlink: 'syz.1.1505': attribute type 1 has an invalid length. [ 144.525790][ T8274] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.540717][ T8274] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.547761][ T8274] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 144.559352][ T8274] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 144.853932][ T8295] loop5: detected capacity change from 0 to 512 [ 144.861033][ T8295] EXT4-fs: Ignoring removed orlov option [ 144.869021][ T8295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.882955][ T8300] xt_connbytes: Forcing CT accounting to be enabled [ 144.889458][ T8295] EXT4-fs (loop5): orphan cleanup on readonly fs [ 144.889761][ T8300] Cannot find set identified by id 0 to match [ 144.897277][ T8295] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1513: bg 0: block 248: padding at end of block bitmap is not set [ 144.917192][ T8295] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1513: Failed to acquire dquot type 1 [ 144.929637][ T8295] EXT4-fs (loop5): 1 truncate cleaned up [ 144.936471][ T8295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.977313][ T8295] EXT4-fs: Ignoring removed orlov option [ 144.983536][ T8295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.992669][ T8295] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 145.018973][ T8295] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.1513: Abort forced by user [ 145.030610][ T8295] EXT4-fs (loop5): Remounting filesystem read-only [ 145.037137][ T8295] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 145.046038][ T8295] ext4 filesystem being remounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.060830][ T8295] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 145.071345][ T8312] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 145.085248][ T8312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.106000][ T8312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.113406][ T8312] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 145.125849][ T8312] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 145.143390][ T6888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.164199][ T8318] gretap1: entered promiscuous mode [ 145.171354][ T8318] bond1: (slave gretap1): making interface the new active one [ 145.179735][ T8318] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 145.189981][ T8322] loop5: detected capacity change from 0 to 128 [ 145.204037][ T8312] bond1: (slave vlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 145.281906][ T8324] syz.5.1523: attempt to access beyond end of device [ 145.281906][ T8324] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 145.402867][ T8330] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.411363][ T8330] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.419773][ T8330] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.428197][ T8330] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.439901][ T8330] team0: Port device geneve1 removed [ 145.461825][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 145.461840][ T29] audit: type=1326 audit(1753070636.879:9846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8296 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85447dab89 code=0x7ffc0000 [ 145.482510][ T8330] bond1: (slave gretap1): Releasing active interface [ 145.491373][ T29] audit: type=1326 audit(1753070636.879:9847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8296 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 145.521427][ T29] audit: type=1326 audit(1753070636.889:9848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8296 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8544835967 code=0x7ffc0000 [ 145.544791][ T29] audit: type=1326 audit(1753070636.889:9849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8296 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85447dab89 code=0x7ffc0000 [ 145.568116][ T29] audit: type=1326 audit(1753070636.889:9850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8296 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 145.593643][ T29] audit: type=1326 audit(1753070636.899:9851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8296 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8544835967 code=0x7ffc0000 [ 145.616996][ T29] audit: type=1326 audit(1753070636.899:9852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8296 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85447dab89 code=0x7ffc0000 [ 145.640376][ T29] audit: type=1326 audit(1753070636.899:9853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8296 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f854483e9a9 code=0x7ffc0000 [ 145.663882][ T29] audit: type=1326 audit(1753070636.919:9854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8296 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8544835967 code=0x7ffc0000 [ 145.687203][ T29] audit: type=1326 audit(1753070636.919:9855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8296 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85447dab89 code=0x7ffc0000 [ 146.716241][ T8345] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 146.822918][ T8353] netlink: 'syz.1.1530': attribute type 10 has an invalid length. [ 146.832747][ T8353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1530'. [ 146.845422][ T8353] dummy0: entered promiscuous mode [ 146.875266][ T8353] bridge0: port 1(dummy0) entered blocking state [ 146.882331][ T8353] bridge0: port 1(dummy0) entered disabled state [ 146.890518][ T8362] netlink: 'syz.1.1530': attribute type 10 has an invalid length. [ 146.890991][ T8353] dummy0: entered allmulticast mode [ 146.898386][ T8362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1530'. [ 146.937956][ T8364] loop4: detected capacity change from 0 to 1024 [ 146.957168][ T8364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.981107][ T8369] siw: device registration error -23 [ 147.080450][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.133880][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1542'. [ 147.147041][ T8377] netlink: 'syz.4.1542': attribute type 10 has an invalid length. [ 147.155884][ T8377] dummy0: left allmulticast mode [ 147.161422][ T8377] dummy0: left promiscuous mode [ 147.166536][ T8377] bridge0: port 3(dummy0) entered disabled state [ 147.198700][ T8379] netlink: 'syz.4.1542': attribute type 10 has an invalid length. [ 147.312797][ T8377] team0: Port device dummy0 added [ 147.586641][ T8379] team0: Port device dummy0 removed [ 147.595061][ T8379] : (slave dummy0): Enslaving as an active interface with an up link [ 147.740991][ T8396] loop4: detected capacity change from 0 to 1764 [ 147.764311][ T8400] vlan3: entered allmulticast mode [ 147.769751][ T8400] dummy0: entered allmulticast mode [ 147.987716][ T1029] usb 9-1: enqueue for inactive port 0 [ 148.068587][ T1029] vhci_hcd: vhci_device speed not set [ 148.214481][ T8415] xt_ecn: cannot match TCP bits for non-tcp packets [ 148.329738][ T8422] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.907450][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 148.949252][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 148.958645][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 148.967954][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 148.977028][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 149.208340][ C1] ================================================================== [ 149.216435][ C1] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 149.222833][ C1] [ 149.225140][ C1] read to 0xffffc90002e5fbc0 of 4 bytes by task 8440 on cpu 0: [ 149.232664][ C1] do_sys_poll+0x99c/0xbd0 [ 149.237062][ C1] __se_sys_ppoll+0x1b9/0x200 [ 149.241732][ C1] __x64_sys_ppoll+0x67/0x80 [ 149.246313][ C1] x64_sys_call+0x2de5/0x2fb0 [ 149.250980][ C1] do_syscall_64+0xd2/0x200 [ 149.255466][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.261346][ C1] [ 149.263652][ C1] write to 0xffffc90002e5fbc0 of 4 bytes by interrupt on cpu 1: [ 149.271266][ C1] pollwake+0xb6/0x100 [ 149.275316][ C1] __wake_up+0x66/0xb0 [ 149.279384][ C1] bpf_ringbuf_notify+0x22/0x30 [ 149.284226][ C1] irq_work_run+0xe2/0x2d0 [ 149.288632][ C1] __sysvec_irq_work+0x22/0x170 [ 149.293467][ C1] sysvec_irq_work+0x66/0x80 [ 149.298045][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 149.302967][ C1] native_apic_msr_write+0x3d/0x60 [ 149.308072][ C1] x2apic_send_IPI_self+0x10/0x20 [ 149.313091][ C1] arch_irq_work_raise+0x46/0x50 [ 149.318024][ C1] __irq_work_queue_local+0x10f/0x2c0 [ 149.323388][ C1] irq_work_queue+0x70/0x100 [ 149.327969][ C1] bpf_ringbuf_discard+0xd3/0xf0 [ 149.332898][ C1] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 149.338345][ C1] bpf_trace_run3+0x10f/0x1d0 [ 149.343006][ C1] kmem_cache_free+0x257/0x300 [ 149.347756][ C1] kernfs_free_rcu+0x97/0xb0 [ 149.352345][ C1] rcu_core+0x5a5/0xc00 [ 149.356488][ C1] rcu_core_si+0xd/0x20 [ 149.360625][ C1] handle_softirqs+0xb7/0x290 [ 149.365286][ C1] run_ksoftirqd+0x1c/0x30 [ 149.369687][ C1] smpboot_thread_fn+0x328/0x530 [ 149.374620][ C1] kthread+0x489/0x510 [ 149.378675][ C1] ret_from_fork+0xda/0x150 [ 149.383161][ C1] ret_from_fork_asm+0x1a/0x30 [ 149.387912][ C1] [ 149.390219][ C1] value changed: 0x00000001 -> 0x00000000 [ 149.395916][ C1] [ 149.398222][ C1] Reported by Kernel Concurrency Sanitizer on: [ 149.404357][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 149.414928][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.424965][ C1] ==================================================================