last executing test programs: 41.165754309s ago: executing program 2 (id=642): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r0, 0x0, 0x80001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) socket$kcm(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 41.137635941s ago: executing program 2 (id=643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 41.106954984s ago: executing program 2 (id=644): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x14020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x1}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x40, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) 41.038214019s ago: executing program 2 (id=645): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 40.962806675s ago: executing program 2 (id=647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) write$selinux_access(0xffffffffffffffff, 0x0, 0x0) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 40.830048856s ago: executing program 2 (id=648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) 40.829821206s ago: executing program 32 (id=648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) 32.861472279s ago: executing program 1 (id=825): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r3, 0x0, 0x9}, 0x18) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 32.805884313s ago: executing program 1 (id=828): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r5, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x94) 32.72536489s ago: executing program 1 (id=830): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 32.449375442s ago: executing program 1 (id=834): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$eJzs3T9qFGEYBvDXGJM1FqYQbCxGbKwW9QaDRBAHhJUptHIg2mRFmTSj1Z7ATryDF/AGnsJTpEq3kp0hk782mpls5veDMA95GPb9YNnd4vt23977sLP9cff9t1/fYzRKYiViFvsRmwepca25rizyWhw1CwBg2UwmRdr3DFysskyLGxGxfqrJf/QyEAAAAAAAAAAAAP/M/n8AGB77/6++skyLjebz23H2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD92Z/Pb8//8tf3fADA/+f9HwCG59XrNy/SLNuaJMkoYm9W5VVeX+v+2fNs61GysNnetVdV+fXD/nHdJ0159/7XT4uw0fRPjvfN/Wvx8EHdH3RPX2Yn+vXY7mD9AAAAAAAAAAAAAAAAAAAAcBmMk0Nnnu8fj8/r63Tk+wFOnN9fjVurnS0DAAAAAAAAAAAAAAAAAAAAltru5y87xXT6rmzD71P/GUxILscYXYSb5z8BBKGY9vzCBAAAAAAAAAAAAAAAAAAAA9Qe+u17EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoT/v7/xcXznzgn3c6XysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNz+BAAA//9auV53") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 32.178168424s ago: executing program 1 (id=835): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 30.978284241s ago: executing program 1 (id=863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1000, 0x4, 0x4}}}]}]}]}}]}, 0x50}}, 0x0) 30.975932571s ago: executing program 33 (id=863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1000, 0x4, 0x4}}}]}]}]}}]}, 0x50}}, 0x0) 23.843511207s ago: executing program 3 (id=977): socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x20000001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000380)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 23.692395488s ago: executing program 3 (id=983): socket(0x10, 0x803, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1fffffffffffffaa, &(0x7f0000000200)=[{0x30, 0x9, 0x0, 0x6}]}, 0xfffffffffffffdf1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 23.529135202s ago: executing program 3 (id=985): r0 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) open$dir(&(0x7f0000000000)='./bus\x00', 0x80000, 0x4c) close(r0) 23.17641922s ago: executing program 3 (id=990): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 22.956895968s ago: executing program 3 (id=992): r0 = socket$inet(0x2, 0x801, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x1a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x60000002}) 22.790785002s ago: executing program 3 (id=998): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000003c0), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 22.774664253s ago: executing program 34 (id=998): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000003c0), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 1.590085352s ago: executing program 5 (id=1465): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.588155852s ago: executing program 0 (id=1466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100000080000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.460370002s ago: executing program 5 (id=1470): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) 1.381677199s ago: executing program 5 (id=1472): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "36a6434088fea58f", "111ed631702ca6fb3f5c4725ca7b6844", "3cbd0155", "559cd81cd03b2248"}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, ' \x00', "ae460d2d26cb2c92eb9da9b99ff762f0", "96a73145", "7018682274a5df86"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 1.378203809s ago: executing program 0 (id=1473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 1.352082211s ago: executing program 0 (id=1474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 1.275227067s ago: executing program 5 (id=1477): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x7, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x8000c}, 0x50) 1.260053698s ago: executing program 0 (id=1479): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x28) ioperm(0x284, 0x7f, 0xe3) rt_sigsuspend(&(0x7f0000000240)={[0x10]}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.202472843s ago: executing program 5 (id=1480): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 971.296122ms ago: executing program 6 (id=1484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), 0xffffffffffffffff) 805.551285ms ago: executing program 4 (id=1488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "36a6434088fea58f", "111ed631702ca6fb3f5c4725ca7b6844", "3cbd0155", "559cd81cd03b2248"}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, ' \x00', "ae460d2d26cb2c92eb9da9b99ff762f0", "96a73145", "7018682274a5df86"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 803.602115ms ago: executing program 5 (id=1489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)=r2) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 745.947439ms ago: executing program 4 (id=1491): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x7, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x8000c}, 0x50) 718.565232ms ago: executing program 6 (id=1493): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 652.903828ms ago: executing program 6 (id=1496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x4, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) 561.916845ms ago: executing program 6 (id=1497): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f00000015c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 561.666005ms ago: executing program 4 (id=1499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffff81}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 561.030045ms ago: executing program 7 (id=1500): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 349.796502ms ago: executing program 7 (id=1501): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mq_open(0x0, 0x42, 0x1f0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 349.659392ms ago: executing program 4 (id=1502): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 293.024046ms ago: executing program 0 (id=1503): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x112120, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x7, 0xe80, 0x0, &(0x7f0000000040)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmsg$unix(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2}, 0x48) r3 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 233.548211ms ago: executing program 0 (id=1504): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) 197.935634ms ago: executing program 4 (id=1505): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 110.542431ms ago: executing program 7 (id=1506): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0xce) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 103.050812ms ago: executing program 6 (id=1507): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) close(r2) 86.767033ms ago: executing program 6 (id=1508): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80001, 0x0) write(r3, &(0x7f0000004200)='4', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f", 0xe) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 26.834498ms ago: executing program 7 (id=1509): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 26.228708ms ago: executing program 7 (id=1510): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000720000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x6}, 0x18) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 594.05µs ago: executing program 7 (id=1511): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "36a6434088fea58f", "111ed631702ca6fb3f5c4725ca7b6844", "3cbd0155", "559cd81cd03b2248"}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, ' \x00', "ae460d2d26cb2c92eb9da9b99ff762f0", "96a73145", "7018682274a5df86"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 0s ago: executing program 4 (id=1512): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x312}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x1}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) kernel console output (not intermixed with test programs): 8][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.529256][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 58.529271][ T29] audit: type=1326 audit(1755025845.288:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4733 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c480cadd9 code=0x7ffc0000 [ 58.587356][ T29] audit: type=1326 audit(1755025845.316:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4733 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4812ebe9 code=0x7ffc0000 [ 58.611848][ T29] audit: type=1326 audit(1755025845.316:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4733 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4812ebe9 code=0x7ffc0000 [ 58.933018][ T4742] loop1: detected capacity change from 0 to 128 [ 59.043787][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.057300][ T29] audit: type=1326 audit(1755025845.777:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62324ebe9 code=0x7ffc0000 [ 59.101876][ T29] audit: type=1326 audit(1755025845.777:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff62324ebe9 code=0x7ffc0000 [ 59.125362][ T29] audit: type=1326 audit(1755025845.777:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62324ebe9 code=0x7ffc0000 [ 59.148783][ T29] audit: type=1326 audit(1755025845.777:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7ff62324ebe9 code=0x7ffc0000 [ 59.172150][ T29] audit: type=1326 audit(1755025845.777:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62324ebe9 code=0x7ffc0000 [ 59.463336][ T4758] loop1: detected capacity change from 0 to 1024 [ 59.483361][ T4758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.523956][ T4758] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.464: Allocating blocks 449-513 which overlap fs metadata [ 59.545778][ T4757] EXT4-fs (loop1): pa ffff8881071c1380: logic 48, phys. 177, len 21 [ 59.554082][ T4757] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 59.573320][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.905584][ T4774] tipc: Started in network mode [ 59.910603][ T4774] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 59.920035][ T4774] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 59.928713][ T4774] tipc: Enabled bearer , priority 10 [ 59.972132][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 59.982733][ C1] vcan0: j1939_session_tx_dat: 0xffff888119bbc200: queue data error: -100 [ 59.992965][ T29] audit: type=1400 audit(1755025846.636:1313): avc: denied { read } for pid=2974 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 60.015300][ T29] audit: type=1400 audit(1755025846.636:1314): avc: denied { search } for pid=2974 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.452611][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 60.817750][ T4808] tipc: Started in network mode [ 60.822667][ T4808] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 60.831746][ T4808] tipc: Enabling of bearer rejected, failed to enable media [ 60.861414][ T4812] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 60.884662][ T4812] bond1: entered promiscuous mode [ 60.889859][ T4812] bond1: entered allmulticast mode [ 60.896082][ T4812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.911322][ T4812] bridge1: entered promiscuous mode [ 60.916754][ T4812] bridge1: entered allmulticast mode [ 60.925043][ T4812] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 60.998702][ T4035] net_ratelimit: 2 callbacks suppressed [ 60.998739][ T4035] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 61.064491][ T4831] loop0: detected capacity change from 0 to 128 [ 61.095318][ T4836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.497'. [ 61.128587][ T4035] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 61.161101][ T1092] tipc: Node number set to 1 [ 61.284778][ T4845] loop0: detected capacity change from 0 to 1024 [ 61.291592][ T4845] EXT4-fs: Ignoring removed orlov option [ 61.299569][ T4845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.602351][ T4862] netlink: 96 bytes leftover after parsing attributes in process `syz.2.506'. [ 61.703712][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.754859][ T4874] loop0: detected capacity change from 0 to 1024 [ 61.781196][ T4874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.815662][ T4874] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.513: Allocating blocks 449-513 which overlap fs metadata [ 61.838053][ T4873] EXT4-fs (loop0): pa ffff888107393930: logic 48, phys. 177, len 21 [ 61.846600][ T4873] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 61.866163][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.885811][ T4882] loop0: detected capacity change from 0 to 512 [ 61.900350][ T4882] EXT4-fs (loop0): too many log groups per flexible block group [ 61.908252][ T4882] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 61.915587][ T4882] EXT4-fs (loop0): mount failed [ 62.022455][ T4893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.519'. [ 62.186765][ T4900] loop1: detected capacity change from 0 to 1024 [ 62.193552][ T4900] EXT4-fs: Ignoring removed orlov option [ 62.201912][ T4900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.544897][ T4913] loop4: detected capacity change from 0 to 1024 [ 62.592255][ T4913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.624979][ T4918] loop0: detected capacity change from 0 to 128 [ 62.639303][ T4918] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.652855][ T4918] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.674815][ T4913] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.526: Allocating blocks 449-513 which overlap fs metadata [ 62.757615][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.768941][ T4912] EXT4-fs (loop4): pa ffff8881071c1460: logic 48, phys. 177, len 21 [ 62.777322][ T4912] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 62.790403][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.824424][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.855925][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'. [ 62.869205][ T4939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.876922][ T4939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.893784][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 62.902844][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 62.997850][ T4944] syz_tun: entered allmulticast mode [ 63.016625][ T4944] dvmrp1: entered allmulticast mode [ 63.053427][ T4943] syz_tun: left allmulticast mode [ 63.096286][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 63.097629][ T4948] bridge0: port 3(macsec1) entered blocking state [ 63.112538][ T4948] bridge0: port 3(macsec1) entered disabled state [ 63.122700][ T4948] macsec1: entered allmulticast mode [ 63.128499][ T4948] bridge0: entered allmulticast mode [ 63.143433][ T4950] loop0: detected capacity change from 0 to 2048 [ 63.163825][ T4948] macsec1: left allmulticast mode [ 63.169718][ T4948] bridge0: left allmulticast mode [ 63.188885][ T4950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 63.233793][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 63.275327][ T4954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 63.481623][ T4965] loop4: detected capacity change from 0 to 1024 [ 63.488580][ T4965] EXT4-fs: Ignoring removed orlov option [ 63.498306][ T4965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.692133][ T4976] loop2: detected capacity change from 0 to 1024 [ 63.711312][ T4976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.726095][ T4035] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 63.781649][ T4976] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.547: Allocating blocks 449-513 which overlap fs metadata [ 63.811561][ T4975] EXT4-fs (loop2): pa ffff8881073939a0: logic 48, phys. 177, len 21 [ 63.820528][ T4975] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 63.846872][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.861041][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.983092][ T4991] bridge0: entered promiscuous mode [ 64.001464][ T4991] bridge0: port 3(macsec0) entered blocking state [ 64.008573][ T4991] bridge0: port 3(macsec0) entered disabled state [ 64.026297][ T4991] macsec0: entered allmulticast mode [ 64.031936][ T4991] bridge0: entered allmulticast mode [ 64.041373][ T4991] macsec0: left allmulticast mode [ 64.047202][ T4991] bridge0: left allmulticast mode [ 64.056366][ T4991] bridge0: left promiscuous mode [ 64.293025][ T5011] loop4: detected capacity change from 0 to 512 [ 64.302701][ T5011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.388851][ T5015] loop2: detected capacity change from 0 to 1024 [ 64.403453][ T5015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.434363][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.476172][ T5015] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.565: Allocating blocks 449-513 which overlap fs metadata [ 64.517672][ T5014] EXT4-fs (loop2): pa ffff8881073938c0: logic 48, phys. 177, len 21 [ 64.526868][ T5014] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 64.537507][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 64.537522][ T29] audit: type=1326 audit(1755025850.817:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6d1aa5ba7 code=0x7ffc0000 [ 64.568128][ T29] audit: type=1326 audit(1755025850.817:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6d1a4add9 code=0x7ffc0000 [ 64.593478][ T29] audit: type=1326 audit(1755025850.817:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6d1aa5ba7 code=0x7ffc0000 [ 64.619836][ T29] audit: type=1326 audit(1755025850.817:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6d1a4add9 code=0x7ffc0000 [ 64.644245][ T29] audit: type=1326 audit(1755025850.817:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 64.669701][ T29] audit: type=1326 audit(1755025850.817:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 64.695822][ T29] audit: type=1326 audit(1755025850.826:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 64.719764][ T29] audit: type=1326 audit(1755025850.826:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 64.743341][ T29] audit: type=1326 audit(1755025850.826:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 64.766836][ T29] audit: type=1326 audit(1755025850.826:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 64.791815][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.933929][ T5037] loop4: detected capacity change from 0 to 1024 [ 64.990678][ T5033] bridge0: entered promiscuous mode [ 65.009684][ T5033] bridge0: port 3(macsec1) entered blocking state [ 65.016846][ T5033] bridge0: port 3(macsec1) entered disabled state [ 65.025366][ T5033] macsec1: entered allmulticast mode [ 65.031607][ T5033] bridge0: entered allmulticast mode [ 65.052162][ T5033] macsec1: left allmulticast mode [ 65.057654][ T5033] bridge0: left allmulticast mode [ 65.087663][ T5037] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.581: Allocating blocks 449-513 which overlap fs metadata [ 65.121703][ T5033] bridge0: left promiscuous mode [ 65.132500][ T5036] EXT4-fs (loop4): pa ffff8881071c14d0: logic 48, phys. 177, len 21 [ 65.140867][ T5036] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 65.190761][ T5051] bridge0: port 1(batadv1) entered blocking state [ 65.197630][ T5051] bridge0: port 1(batadv1) entered disabled state [ 65.204754][ T5051] batadv1: entered allmulticast mode [ 65.210952][ T5051] batadv1: entered promiscuous mode [ 65.218524][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 65.243818][ T5051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.251942][ T5051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.284031][ T5056] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.297689][ T5057] mmap: syz.1.579 (5057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.390175][ T5056] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.443195][ T5056] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.497101][ T5056] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.555097][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.569123][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.593302][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.612143][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.702559][ T5075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.585'. [ 65.733401][ T4033] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 65.742775][ T4033] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 65.783203][ T5085] loop2: detected capacity change from 0 to 1024 [ 65.824544][ T5085] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #14: comm syz.2.589: attempt to clear invalid blocks 1886221359 len 1 [ 65.905628][ T5104] loop0: detected capacity change from 0 to 1024 [ 65.950928][ T5104] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.601: Allocating blocks 449-513 which overlap fs metadata [ 65.973329][ T5103] EXT4-fs (loop0): pa ffff8881073939a0: logic 48, phys. 177, len 21 [ 65.981705][ T5103] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 66.021614][ T5117] loop0: detected capacity change from 0 to 512 [ 66.029113][ T5117] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 66.038949][ T5117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 66.047576][ T5117] System zones: 1-12 [ 66.051713][ T5117] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.605: corrupted in-inode xattr: e_value size too large [ 66.070344][ T5117] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.605: couldn't read orphan inode 15 (err -117) [ 66.120855][ T5117] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.605: Unrecognised inode hash code 4 [ 66.133463][ T5117] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.605: Corrupt directory, running e2fsck is recommended [ 66.221134][ T5127] loop3: detected capacity change from 0 to 512 [ 66.229411][ T5127] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.239179][ T5127] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.251340][ T5127] EXT4-fs (loop3): 1 truncate cleaned up [ 66.303164][ T5136] syzkaller1: entered promiscuous mode [ 66.310716][ T5136] syzkaller1: entered allmulticast mode [ 66.613963][ T5142] loop1: detected capacity change from 0 to 512 [ 66.654717][ T5142] EXT4-fs (loop1): too many log groups per flexible block group [ 66.663148][ T5142] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 66.671265][ T5142] EXT4-fs (loop1): mount failed [ 67.019878][ T5169] __nla_validate_parse: 6 callbacks suppressed [ 67.019894][ T5169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.626'. [ 67.623446][ T5201] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.656311][ T5205] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 67.667777][ T5201] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.699896][ T5210] loop2: detected capacity change from 0 to 512 [ 67.709570][ T5210] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm gtp: corrupted in-inode xattr: invalid ea_ino [ 67.724479][ T5210] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 67.725460][ T5201] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.791919][ T5210] loop2: detected capacity change from 512 to 64 [ 67.802391][ T5201] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.823538][ T3312] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 67.865165][ T4033] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.878300][ T4033] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.889607][ T4033] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.903008][ T4033] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.015941][ T5223] capability: warning: `syz.0.651' uses deprecated v2 capabilities in a way that may be insecure [ 68.058765][ T5227] syzkaller1: entered promiscuous mode [ 68.064804][ T5227] syzkaller1: entered allmulticast mode [ 68.099812][ T5237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'. [ 68.140643][ T4031] batadv1: left allmulticast mode [ 68.145876][ T4031] batadv1: left promiscuous mode [ 68.151254][ T4031] bridge0: port 1(batadv1) entered disabled state [ 68.196979][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 68.232927][ T4031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.242870][ T4031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.252147][ T4031] bond0 (unregistering): Released all slaves [ 68.267132][ T5242] ip6gre1: entered allmulticast mode [ 68.294274][ T4031] tipc: Left network mode [ 68.314126][ T4031] hsr_slave_0: left promiscuous mode [ 68.320127][ T4031] hsr_slave_1: left promiscuous mode [ 68.339350][ T5251] netlink: 256 bytes leftover after parsing attributes in process `syz.1.659'. [ 68.350546][ T5251] netlink: 72 bytes leftover after parsing attributes in process `syz.1.659'. [ 68.360306][ T4031] team0 (unregistering): Port device team_slave_1 removed [ 68.385766][ T4031] team0 (unregistering): Port device team_slave_0 removed [ 68.447989][ T5258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5258 comm=syz.1.662 [ 68.498277][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 68.575873][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.585105][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.596979][ T5224] bridge_slave_0: entered allmulticast mode [ 68.605553][ T5224] bridge_slave_0: entered promiscuous mode [ 68.615720][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.624000][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.632404][ T5224] bridge_slave_1: entered allmulticast mode [ 68.639158][ T5224] bridge_slave_1: entered promiscuous mode [ 68.658845][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.669914][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.693780][ T5224] team0: Port device team_slave_0 added [ 68.700490][ T5224] team0: Port device team_slave_1 added [ 68.718122][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.725322][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.752748][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.770522][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.777880][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.804650][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.822751][ T4031] ------------[ cut here ]------------ [ 68.828442][ T4031] WARNING: CPU: 1 PID: 4031 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x17c/0x1f0 [ 68.838231][ T4031] Modules linked in: [ 68.842146][ T4031] CPU: 1 UID: 0 PID: 4031 Comm: kworker/u8:24 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 68.855056][ T4031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.865214][ T4031] Workqueue: netns cleanup_net [ 68.871808][ T4031] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 68.879172][ T4031] Code: 48 8d bb 30 0e 00 00 e8 12 10 bd fc 48 8b bb 30 0e 00 00 e8 d6 90 c9 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 65 52 a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 57 52 a2 fc 90 0f 0b 90 4c 89 f7 e8 db [ 68.903253][ T4031] RSP: 0018:ffffc9000eef7c60 EFLAGS: 00010293 [ 68.911270][ T4031] RAX: ffffffff84b5a76b RBX: ffff88810acf97c0 RCX: ffff888124f11080 [ 68.920096][ T4031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810acfa5c0 [ 68.928777][ T4031] RBP: ffffffff86c8b7a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 68.936933][ T4031] R10: ffffc9000eef7be8 R11: 0001c9000eef7be8 R12: ffffffff86c8b7c0 [ 68.945113][ T4031] R13: ffff88810acf97e8 R14: ffff88810acfa5c0 R15: ffff88810acf97c0 [ 68.953296][ T4031] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 68.962672][ T4031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.969373][ T4031] CR2: 00007ffe7eae7ff8 CR3: 0000000129972000 CR4: 00000000003506f0 [ 68.977628][ T4031] Call Trace: [ 68.981008][ T4031] [ 68.984189][ T4031] xfrm_net_exit+0x2d/0x60 [ 68.988789][ T4031] ops_undo_list+0x278/0x410 [ 68.993450][ T4031] cleanup_net+0x2de/0x4d0 [ 68.998055][ T4031] process_scheduled_works+0x4cb/0x9d0 [ 69.004138][ T4031] worker_thread+0x582/0x770 [ 69.010374][ T4031] kthread+0x489/0x510 [ 69.014457][ T4031] ? finish_task_switch+0xad/0x2b0 [ 69.019826][ T4031] ? __pfx_worker_thread+0x10/0x10 [ 69.025250][ T4031] ? __pfx_kthread+0x10/0x10 [ 69.030302][ T4031] ret_from_fork+0xda/0x150 [ 69.035475][ T4031] ? __pfx_kthread+0x10/0x10 [ 69.040562][ T4031] ret_from_fork_asm+0x1a/0x30 [ 69.045654][ T4031] [ 69.049234][ T4031] ---[ end trace 0000000000000000 ]--- [ 69.056384][ T4031] ------------[ cut here ]------------ [ 69.062360][ T4031] WARNING: CPU: 1 PID: 4031 at net/xfrm/xfrm_state.c:3310 xfrm_state_fini+0x1bc/0x1f0 [ 69.072618][ T4031] Modules linked in: [ 69.076699][ T4031] CPU: 1 UID: 0 PID: 4031 Comm: kworker/u8:24 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 69.091853][ T4031] Tainted: [W]=WARN [ 69.096461][ T4031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.107766][ T4031] Workqueue: netns cleanup_net [ 69.112995][ T4031] RIP: 0010:xfrm_state_fini+0x1bc/0x1f0 [ 69.118843][ T4031] Code: 0f bd fc 4d 8b 3e e9 06 ff ff ff e8 3e 52 a2 fc 90 0f 0b 90 4c 89 f7 e8 c2 0f bd fc 4d 8b 3e e9 24 ff ff ff e8 25 52 a2 fc 90 <0f> 0b 90 4c 89 f7 e8 a9 0f bd fc 4d 8b 3e e9 42 ff ff ff e8 0c 52 [ 69.138819][ T4031] RSP: 0018:ffffc9000eef7c60 EFLAGS: 00010293 [ 69.144870][ T4031] RAX: ffffffff84b5a7ab RBX: ffff88810acf97c0 RCX: ffff888124f11080 [ 69.152844][ T4031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888118141f00 [ 69.160819][ T4031] RBP: 0000000000000040 R08: 000188810acfa5df R09: 0000000000000000 [ 69.168937][ T4031] R10: ffff888118141f80 R11: 0001888118141f7f R12: ffffffff86c8b7c0 [ 69.177049][ T4031] R13: ffff88810acf97e8 R14: ffff88810acfa5d8 R15: ffff888118141f00 [ 69.185142][ T4031] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 69.194094][ T4031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.200707][ T4031] CR2: 00007ffe7eae7ff8 CR3: 0000000129972000 CR4: 00000000003506f0 [ 69.208668][ T4031] Call Trace: [ 69.212043][ T4031] [ 69.215063][ T4031] xfrm_net_exit+0x2d/0x60 [ 69.219475][ T4031] ops_undo_list+0x278/0x410 [ 69.224236][ T4031] cleanup_net+0x2de/0x4d0 [ 69.228702][ T4031] process_scheduled_works+0x4cb/0x9d0 [ 69.234401][ T4031] worker_thread+0x582/0x770 [ 69.239060][ T4031] kthread+0x489/0x510 [ 69.243126][ T4031] ? finish_task_switch+0xad/0x2b0 [ 69.248367][ T4031] ? __pfx_worker_thread+0x10/0x10 [ 69.254099][ T4031] ? __pfx_kthread+0x10/0x10 [ 69.259065][ T4031] ret_from_fork+0xda/0x150 [ 69.263864][ T4031] ? __pfx_kthread+0x10/0x10 [ 69.268548][ T4031] ret_from_fork_asm+0x1a/0x30 [ 69.273604][ T4031] [ 69.277082][ T4031] ---[ end trace 0000000000000000 ]--- [ 69.283433][ T4031] ------------[ cut here ]------------ [ 69.290451][ T4031] WARNING: CPU: 1 PID: 4031 at net/xfrm/xfrm_state.c:3312 xfrm_state_fini+0x1d5/0x1f0 [ 69.302304][ T4031] Modules linked in: [ 69.306392][ T4031] CPU: 1 UID: 0 PID: 4031 Comm: kworker/u8:24 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 69.321155][ T4031] Tainted: [W]=WARN [ 69.325002][ T4031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.335184][ T4031] Workqueue: netns cleanup_net [ 69.340148][ T4031] RIP: 0010:xfrm_state_fini+0x1d5/0x1f0 [ 69.345804][ T4031] Code: 0f bd fc 4d 8b 3e e9 24 ff ff ff e8 25 52 a2 fc 90 0f 0b 90 4c 89 f7 e8 a9 0f bd fc 4d 8b 3e e9 42 ff ff ff e8 0c 52 a2 fc 90 <0f> 0b 90 4c 89 f7 e8 90 0f bd fc 4d 8b 3e e9 60 ff ff ff 0f 1f 84 [ 69.365701][ T4031] RSP: 0018:ffffc9000eef7c60 EFLAGS: 00010293 [ 69.371857][ T4031] RAX: ffffffff84b5a7c4 RBX: ffff88810acf97c0 RCX: ffff888124f11080 [ 69.379893][ T4031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888118141ec0 [ 69.387918][ T4031] RBP: 0000000000000040 R08: 000188810acfa5d7 R09: 0000000000000000 [ 69.395914][ T4031] R10: ffff888118141f40 R11: 0001888118141f3f R12: ffffffff86c8b7c0 [ 69.404233][ T4031] R13: ffff88810acf97e8 R14: ffff88810acfa5d0 R15: ffff888118141ec0 [ 69.412837][ T4031] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 69.422412][ T4031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.429366][ T4031] CR2: 00007ffe7eae7ff8 CR3: 0000000129972000 CR4: 00000000003506f0 [ 69.437510][ T4031] Call Trace: [ 69.441058][ T4031] [ 69.444387][ T4031] xfrm_net_exit+0x2d/0x60 [ 69.449403][ T4031] ops_undo_list+0x278/0x410 [ 69.454279][ T4031] cleanup_net+0x2de/0x4d0 [ 69.458847][ T4031] process_scheduled_works+0x4cb/0x9d0 [ 69.464340][ T4031] worker_thread+0x582/0x770 [ 69.469219][ T4031] kthread+0x489/0x510 [ 69.473692][ T4031] ? finish_task_switch+0xad/0x2b0 [ 69.479826][ T4031] ? __pfx_worker_thread+0x10/0x10 [ 69.485198][ T4031] ? __pfx_kthread+0x10/0x10 [ 69.490146][ T4031] ret_from_fork+0xda/0x150 [ 69.495324][ T4031] ? __pfx_kthread+0x10/0x10 [ 69.504392][ T4031] ret_from_fork_asm+0x1a/0x30 [ 69.510916][ T4031] [ 69.515327][ T4031] ---[ end trace 0000000000000000 ]--- [ 69.532468][ T5224] hsr_slave_0: entered promiscuous mode [ 69.539500][ T5224] hsr_slave_1: entered promiscuous mode [ 69.545652][ T5224] debugfs: 'hsr0' already exists in 'hsr' [ 69.552752][ T5224] Cannot create hsr debugfs directory [ 69.584573][ T5278] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 69.604218][ T5278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.610834][ T5283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5283 comm=syz.3.670 [ 69.618461][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 69.645721][ T5278] bond0 (unregistering): Released all slaves [ 69.711094][ T5224] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.749253][ T5224] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.764206][ T5224] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.775133][ T5224] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.814099][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.826878][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.836767][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.844308][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.862042][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.869231][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.952659][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.965199][ T5308] loop4: detected capacity change from 0 to 128 [ 69.973043][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 69.973089][ T29] audit: type=1326 audit(1755025855.847:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0c4812ebe9 code=0x7ffc0000 [ 70.005946][ T5308] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 70.014532][ T5308] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.674'. [ 70.025801][ T29] audit: type=1326 audit(1755025855.884:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0c4812ebe9 code=0x7ffc0000 [ 70.050498][ T29] audit: type=1326 audit(1755025855.903:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0c4812ebe9 code=0x7ffc0000 [ 70.075182][ T29] audit: type=1326 audit(1755025855.949:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0c4812ebe9 code=0x7ffc0000 [ 70.099454][ T29] audit: type=1326 audit(1755025855.967:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0c4812ebe9 code=0x7ffc0000 [ 70.145892][ T29] audit: type=1326 audit(1755025855.995:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0c4812ebe9 code=0x7ffc0000 [ 70.169940][ T29] audit: type=1326 audit(1755025855.995:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0c4812ebe9 code=0x7ffc0000 [ 70.179327][ T5321] loop4: detected capacity change from 0 to 512 [ 70.195086][ T29] audit: type=1326 audit(1755025856.032:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0c4812ebe9 code=0x7ffc0000 [ 70.209436][ T5321] EXT4-fs: Ignoring removed nobh option [ 70.246776][ T29] audit: type=1326 audit(1755025856.060:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0c4812ebe9 code=0x7ffc0000 [ 70.252668][ T5224] veth0_vlan: entered promiscuous mode [ 70.270675][ T29] audit: type=1326 audit(1755025856.087:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0c4812ebe9 code=0x7ffc0000 [ 70.308052][ T5224] veth1_vlan: entered promiscuous mode [ 70.326062][ T5224] veth0_macvtap: entered promiscuous mode [ 70.336103][ T5224] veth1_macvtap: entered promiscuous mode [ 70.348065][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.360543][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.372057][ T4077] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.383490][ T4077] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.393120][ T4077] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.403104][ T4077] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.465495][ T5331] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.510871][ T5335] bridge_slave_0: left allmulticast mode [ 70.518566][ T5335] bridge_slave_0: left promiscuous mode [ 70.524918][ T5335] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.533453][ T5335] bridge_slave_1: left allmulticast mode [ 70.539591][ T5335] bridge_slave_1: left promiscuous mode [ 70.545827][ T5335] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.554403][ T5335] bond0: (slave bond_slave_0): Releasing backup interface [ 70.562982][ T5335] bond0: (slave bond_slave_1): Releasing backup interface [ 70.573485][ T5335] team0: Port device team_slave_0 removed [ 70.580426][ T5335] team0: Port device team_slave_1 removed [ 70.586731][ T5335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.594953][ T5335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.604090][ T5335] bond1: (slave bridge1): Removing an active aggregator [ 70.611620][ T5335] bond1: (slave bridge1): Releasing backup interface [ 70.620773][ T5335] bridge1: left promiscuous mode [ 70.626006][ T5335] bridge1: left allmulticast mode [ 70.641923][ T5331] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.752177][ T5331] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.806612][ T5331] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.893186][ T5357] loop1: detected capacity change from 0 to 1024 [ 70.912744][ T5357] EXT4-fs: Invalid want_extra_isize 1914 [ 70.923982][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.932432][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.962404][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.974800][ T5355] loop5: detected capacity change from 0 to 32768 [ 70.989030][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.050226][ T5372] 9pnet: p9_errstr2errno: server reported unknown error [ 71.175647][ T5392] loop5: detected capacity change from 0 to 128 [ 71.183040][ T5392] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615' [ 71.203246][ T5394] netlink: '+}[@': attribute type 13 has an invalid length. [ 71.247145][ T5394] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 71.258226][ T5394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.469400][ T5418] loop4: detected capacity change from 0 to 164 [ 71.818945][ T5453] loop4: detected capacity change from 0 to 1024 [ 71.825795][ T5453] EXT4-fs: Ignoring removed nobh option [ 71.831556][ T5453] EXT4-fs: Ignoring removed nobh option [ 71.837843][ T5453] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 71.848136][ T5453] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.731: inode #4294967295: comm syz.4.731: iget: illegal inode # [ 71.862357][ T5453] EXT4-fs (loop4): no journal found [ 71.867620][ T5453] EXT4-fs (loop4): can't get journal size [ 71.874207][ T5453] EXT4-fs (loop4): failed to initialize system zone (-22) [ 71.882407][ T5453] EXT4-fs (loop4): mount failed [ 71.952511][ T5456] loop4: detected capacity change from 0 to 164 [ 71.962879][ T5456] bio_check_eod: 97 callbacks suppressed [ 71.962968][ T5456] syz.4.732: attempt to access beyond end of device [ 71.962968][ T5456] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 71.983169][ T5456] syz.4.732: attempt to access beyond end of device [ 71.983169][ T5456] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 72.012669][ T5458] tipc: Failed to remove unknown binding: 66,1,1/1:3725167561/3725167563 [ 72.043337][ T5460] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 72.163161][ T5464] loop4: detected capacity change from 0 to 128 [ 72.171969][ T5464] EXT4-fs mount: 14 callbacks suppressed [ 72.171987][ T5464] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.190446][ T5464] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.246701][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.271577][ T5468] program syz.4.737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.370887][ T5478] veth0_to_team: entered promiscuous mode [ 72.441348][ T5482] netlink: 'syz.4.744': attribute type 2 has an invalid length. [ 72.459320][ T5485] netlink: 168 bytes leftover after parsing attributes in process `syz.1.746'. [ 72.460452][ T5486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 72.498314][ T5488] bond_slave_1: mtu less than device minimum [ 72.512879][ T5486] vlan2: entered allmulticast mode [ 72.518182][ T5486] bridge0: entered allmulticast mode [ 72.524620][ T5486] bridge1: port 1(vlan2) entered blocking state [ 72.531764][ T5486] bridge1: port 1(vlan2) entered disabled state [ 72.539056][ T5486] vlan2: entered promiscuous mode [ 72.544314][ T5486] bridge0: entered promiscuous mode [ 72.833983][ T5519] loop0: detected capacity change from 0 to 512 [ 72.852533][ T5519] EXT4-fs (loop0): too many log groups per flexible block group [ 72.860337][ T5519] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 72.863041][ T5523] syz_tun: entered allmulticast mode [ 72.867525][ T5519] EXT4-fs (loop0): mount failed [ 72.890057][ T5519] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 72.896998][ T5519] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.904753][ T5519] vhci_hcd vhci_hcd.0: Device attached [ 72.912846][ T5528] vhci_hcd: connection closed [ 72.949013][ T4031] vhci_hcd: stop threads [ 72.957991][ T4031] vhci_hcd: release socket [ 72.962519][ T4031] vhci_hcd: disconnect device [ 73.361136][ T5556] bridge: RTM_NEWNEIGH with invalid ether address [ 73.380476][ T5558] loop3: detected capacity change from 0 to 128 [ 73.484622][ T5564] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.546571][ T5564] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.590252][ T5564] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.654974][ T5564] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.725315][ T4077] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.736827][ T4077] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.752821][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.766985][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.799504][ T5566] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.814144][ T5570] netlink: 'syz.0.779': attribute type 10 has an invalid length. [ 73.822589][ T5570] netlink: 40 bytes leftover after parsing attributes in process `syz.0.779'. [ 73.838681][ T5568] loop4: detected capacity change from 0 to 164 [ 73.840106][ T5570] team0: Port device geneve1 added [ 73.862977][ T5568] Unable to read rock-ridge attributes [ 73.909642][ T5566] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.971539][ T5566] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.992735][ T5568] Unable to read rock-ridge attributes [ 74.003506][ T5568] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 74.045835][ T5566] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.085714][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.097965][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.109497][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.122063][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.376607][ T5605] IPv4: Oversized IP packet from 127.202.26.0 [ 74.675511][ T5586] loop5: detected capacity change from 0 to 1024 [ 74.707970][ T5586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.709716][ T5615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.797'. [ 74.725554][ T5586] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.746069][ T5615] netlink: 'syz.0.797': attribute type 10 has an invalid length. [ 74.754444][ T5615] netlink: 55 bytes leftover after parsing attributes in process `syz.0.797'. [ 75.017064][ T5619] loop4: detected capacity change from 0 to 2048 [ 75.027195][ T5619] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 75.092485][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.271916][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 75.283736][ T5643] netlink: 32 bytes leftover after parsing attributes in process `syz.4.811'. [ 75.312173][ T5645] loop4: detected capacity change from 0 to 512 [ 75.324816][ T5645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.349658][ T5645] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.498572][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 75.498588][ T29] audit: type=1400 audit(1755025860.951:2027): avc: denied { ioctl } for pid=5644 comm="syz.4.812" path="/225/file1/file1" dev="loop4" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.546956][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.576746][ T29] audit: type=1400 audit(1755025861.016:2028): avc: denied { name_bind } for pid=5651 comm="syz.3.815" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 75.642110][ T29] audit: type=1326 audit(1755025861.081:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2468ebe9 code=0x7ffc0000 [ 75.665875][ T29] audit: type=1326 audit(1755025861.081:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae2468ebe9 code=0x7ffc0000 [ 75.690359][ T29] audit: type=1326 audit(1755025861.081:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2468ebe9 code=0x7ffc0000 [ 75.714279][ T29] audit: type=1326 audit(1755025861.081:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae2468ebe9 code=0x7ffc0000 [ 75.738329][ T29] audit: type=1326 audit(1755025861.081:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2468ebe9 code=0x7ffc0000 [ 75.762798][ T29] audit: type=1326 audit(1755025861.081:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fae2468ebe9 code=0x7ffc0000 [ 75.786945][ T29] audit: type=1326 audit(1755025861.081:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2468ebe9 code=0x7ffc0000 [ 75.811386][ T29] audit: type=1326 audit(1755025861.081:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fae2468ebe9 code=0x7ffc0000 [ 75.864188][ T5664] tipc: Failed to remove unknown binding: 66,1,1/1:3743688217/3743688219 [ 75.873316][ T5664] tipc: Failed to remove unknown binding: 66,1,1/1:3743688217/3743688219 [ 75.882236][ T5664] tipc: Failed to remove unknown binding: 66,1,1/1:3743688217/3743688219 [ 75.931449][ T5674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5674 comm=syz.3.824 [ 76.012264][ T5682] all: renamed from lo [ 76.345259][ T5697] loop1: detected capacity change from 0 to 512 [ 76.404977][ T5697] loop1: detected capacity change from 512 to 64 [ 76.413103][ T5698] FAT-fs (loop1): Directory bread(block 34) failed [ 76.427383][ T5698] FAT-fs (loop1): Directory bread(block 35) failed [ 76.436073][ T5698] FAT-fs (loop1): Directory bread(block 36) failed [ 76.445070][ T5698] FAT-fs (loop1): Directory bread(block 37) failed [ 76.453206][ T5698] FAT-fs (loop1): Directory bread(block 38) failed [ 76.461286][ T5698] FAT-fs (loop1): Directory bread(block 39) failed [ 76.470331][ T5698] FAT-fs (loop1): Directory bread(block 40) failed [ 76.478606][ T5698] FAT-fs (loop1): Directory bread(block 41) failed [ 76.607220][ T3300] FAT-fs (loop1): Directory bread(block 34) failed [ 76.615776][ T3300] FAT-fs (loop1): Directory bread(block 35) failed [ 76.633828][ T3300] syz_tun (unregistering): left allmulticast mode [ 76.800437][ T5700] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 77.223710][ T5717] sch_fq: defrate 0 ignored. [ 77.606243][ T5740] rdma_op ffff888104e61580 conn xmit_rdma 0000000000000000 [ 77.906166][ T5759] loop4: detected capacity change from 0 to 1024 [ 77.936457][ T5759] EXT4-fs: Ignoring removed nobh option [ 77.980172][ T5759] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.032421][ T5759] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.866: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 78.074869][ T5759] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.866: couldn't read orphan inode 11 (err -117) [ 78.107787][ T5759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.143872][ T5759] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.866: Invalid block bitmap block 0 in block_group 0 [ 78.173673][ T4077] bond0 (unregistering): Released all slaves [ 78.183319][ T4077] bond1 (unregistering): Released all slaves [ 78.193345][ T5759] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.866: Failed to acquire dquot type 0 [ 78.264685][ T4031] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm kworker/u8:24: Invalid inode table block 8589934593 in block_group 0 [ 78.269976][ T4077] tipc: Disabling bearer [ 78.284128][ T4077] tipc: Left network mode [ 78.302457][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.320947][ T4077] hsr_slave_0: left promiscuous mode [ 78.329027][ T4077] hsr_slave_1: left promiscuous mode [ 78.490194][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 78.622131][ T5749] loop3: detected capacity change from 0 to 1024 [ 78.661920][ T5749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.675405][ T5749] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.988944][ T5801] loop5: detected capacity change from 0 to 128 [ 79.010437][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.019108][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.049647][ T5761] bridge_slave_0: entered allmulticast mode [ 79.062471][ T5761] bridge_slave_0: entered promiscuous mode [ 79.076733][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.084430][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.092187][ T5761] bridge_slave_1: entered allmulticast mode [ 79.099048][ T5761] bridge_slave_1: entered promiscuous mode [ 79.116881][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.117115][ T5801] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.127470][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.164366][ T5761] team0: Port device team_slave_0 added [ 79.171414][ T5761] team0: Port device team_slave_1 added [ 79.180685][ T5801] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.238232][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.252217][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.259795][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.287118][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.309260][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.316269][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.342588][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.388158][ T5224] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.407837][ T5761] hsr_slave_0: entered promiscuous mode [ 79.422142][ T5761] hsr_slave_1: entered promiscuous mode [ 79.434620][ T5808] netlink: 'syz.4.878': attribute type 9 has an invalid length. [ 79.443846][ T5761] debugfs: 'hsr0' already exists in 'hsr' [ 79.450365][ T5761] Cannot create hsr debugfs directory [ 79.606122][ T5761] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.627969][ T5761] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.647656][ T5761] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.668724][ T5761] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.708469][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.715717][ T5761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.723125][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.730395][ T5761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.837742][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.865716][ T2070] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.875535][ T2070] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.903647][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.933948][ T4054] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.941074][ T4054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.963521][ T4054] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.970641][ T4054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.127154][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.352305][ T5831] vlan2: entered allmulticast mode [ 80.372164][ T5831] dummy0: entered allmulticast mode [ 80.422327][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 80.450981][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.515122][ T5761] veth0_vlan: entered promiscuous mode [ 80.554144][ T5845] netlink: 96 bytes leftover after parsing attributes in process `syz.3.883'. [ 80.565427][ T5761] veth1_vlan: entered promiscuous mode [ 80.606512][ T5761] veth0_macvtap: entered promiscuous mode [ 80.620476][ T5761] veth1_macvtap: entered promiscuous mode [ 80.645624][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.658564][ T5857] syz_tun: entered allmulticast mode [ 80.666725][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.680006][ T5857] dvmrp1: entered allmulticast mode [ 80.696434][ T5856] syz_tun: left allmulticast mode [ 80.714090][ T4029] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.732203][ T4029] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.748792][ T4029] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.763853][ T4029] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.921066][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.893'. [ 80.930631][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.940876][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.970620][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 80.970635][ T29] audit: type=1326 audit(1755025866.000:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62324ebe9 code=0x7ffc0000 [ 81.001487][ T29] audit: type=1326 audit(1755025866.000:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62324ebe9 code=0x7ffc0000 [ 81.025662][ T29] audit: type=1326 audit(1755025866.000:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff62324ebe9 code=0x7ffc0000 [ 81.051334][ T29] audit: type=1326 audit(1755025866.000:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62324ebe9 code=0x7ffc0000 [ 81.077431][ T29] audit: type=1326 audit(1755025866.000:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff62324ebe9 code=0x7ffc0000 [ 81.102121][ T29] audit: type=1326 audit(1755025866.000:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62324ebe9 code=0x7ffc0000 [ 81.127672][ T29] audit: type=1326 audit(1755025866.000:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62324ebe9 code=0x7ffc0000 [ 81.153417][ T29] audit: type=1326 audit(1755025866.000:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff62324ebe9 code=0x7ffc0000 [ 81.180588][ T29] audit: type=1326 audit(1755025866.010:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff62324ec23 code=0x7ffc0000 [ 81.204049][ T29] audit: type=1326 audit(1755025866.010:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff62324ec23 code=0x7ffc0000 [ 81.686000][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.905'. [ 81.696095][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.703616][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.725408][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.733419][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.965796][ T5887] rdma_op ffff88812a4f0180 conn xmit_rdma 0000000000000000 [ 82.101700][ T5894] syz_tun: entered allmulticast mode [ 82.111828][ T5894] dvmrp1: entered allmulticast mode [ 82.119821][ T5893] syz_tun: left allmulticast mode [ 82.157369][ T5896] vlan3: entered allmulticast mode [ 82.163014][ T5896] dummy0: entered allmulticast mode [ 82.165389][ T5880] loop4: detected capacity change from 0 to 1024 [ 82.191711][ T5880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.204836][ T5880] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.261541][ T5900] loop3: detected capacity change from 0 to 2048 [ 82.360926][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.903'. [ 82.370364][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.903'. [ 82.477871][ T5912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.908'. [ 82.497543][ T5912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.506678][ T5912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.516074][ T5912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.908'. [ 82.536747][ T5915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.909'. [ 82.577085][ T5920] rdma_op ffff88812b4add80 conn xmit_rdma 0000000000000000 [ 82.610763][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.636489][ T5926] syzkaller1: entered promiscuous mode [ 82.642154][ T5926] syzkaller1: entered allmulticast mode [ 82.791707][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 82.832954][ T5936] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 82.926825][ T5944] netlink: 'syz.0.922': attribute type 9 has an invalid length. [ 82.934951][ T5944] netlink: 'syz.0.922': attribute type 9 has an invalid length. [ 83.098108][ T5956] bridge0: port 3(batadv1) entered blocking state [ 83.104860][ T5956] bridge0: port 3(batadv1) entered disabled state [ 83.122432][ T5956] batadv1: entered allmulticast mode [ 83.134185][ T5956] batadv1: entered promiscuous mode [ 83.166180][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.205946][ T5968] vlan0: entered allmulticast mode [ 83.212994][ T5968] dummy0: entered allmulticast mode [ 83.310124][ T5972] netlink: 'syz.5.934': attribute type 9 has an invalid length. [ 83.356917][ T5974] loop3: detected capacity change from 0 to 2048 [ 83.366296][ T5976] loop5: detected capacity change from 0 to 512 [ 83.376825][ T5974] EXT4-fs: inline encryption not supported [ 83.384881][ T5976] EXT4-fs (loop5): too many log groups per flexible block group [ 83.392766][ T5976] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 83.413002][ T5976] EXT4-fs (loop5): mount failed [ 83.424247][ T5974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.477980][ T5974] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.936: bg 0: block 234: padding at end of block bitmap is not set [ 83.498948][ T5974] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 83.512131][ T5974] EXT4-fs (loop3): This should not happen!! Data will be lost [ 83.512131][ T5974] [ 83.552456][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.570784][ T5994] ip6gre1: entered allmulticast mode [ 83.642592][ T4029] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 83.652131][ T4029] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 83.688217][ T6005] loop3: detected capacity change from 0 to 512 [ 83.696417][ T6005] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 83.706385][ T6005] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 83.714771][ T6005] System zones: 1-12 [ 83.729658][ T6005] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.945: corrupted in-inode xattr: e_value size too large [ 83.744226][ T6009] loop5: detected capacity change from 0 to 1024 [ 83.755929][ T6005] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.945: couldn't read orphan inode 15 (err -117) [ 83.771871][ T6005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.795420][ T6009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.797052][ T6005] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.945: Unrecognised inode hash code 4 [ 83.821507][ T6005] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.945: Corrupt directory, running e2fsck is recommended [ 83.829613][ T6009] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #14: comm syz.5.947: attempt to clear invalid blocks 1886221359 len 1 [ 83.852128][ T6013] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 83.877392][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.909314][ T6018] netlink: 'syz.3.951': attribute type 9 has an invalid length. [ 83.917814][ T6019] loop4: detected capacity change from 0 to 512 [ 83.926630][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.937545][ T6019] EXT4-fs (loop4): too many log groups per flexible block group [ 83.945634][ T6019] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 83.952997][ T6019] EXT4-fs (loop4): mount failed [ 83.986115][ T6025] vlan2: entered allmulticast mode [ 83.991456][ T6025] dummy0: entered allmulticast mode [ 84.055082][ T6032] loop5: detected capacity change from 0 to 2048 [ 84.062197][ T6032] EXT4-fs: inline encryption not supported [ 84.077341][ T6032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.114122][ T6032] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.956: bg 0: block 234: padding at end of block bitmap is not set [ 84.129081][ T6032] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 84.141466][ T6032] EXT4-fs (loop5): This should not happen!! Data will be lost [ 84.141466][ T6032] [ 84.180132][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.280934][ T6045] loop5: detected capacity change from 0 to 512 [ 84.289963][ T6045] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 84.314766][ T6045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 84.328413][ T6045] System zones: 1-12 [ 84.332989][ T6045] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.961: corrupted in-inode xattr: e_value size too large [ 84.354168][ T6045] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.961: couldn't read orphan inode 15 (err -117) [ 84.371760][ T6045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.397797][ T6045] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.961: Unrecognised inode hash code 4 [ 84.409435][ T6045] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.961: Corrupt directory, running e2fsck is recommended [ 84.424476][ T6052] loop3: detected capacity change from 0 to 512 [ 84.438062][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.451794][ T6052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.468983][ T6052] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.589429][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.632293][ T6059] loop3: detected capacity change from 0 to 512 [ 84.642857][ T6059] EXT4-fs (loop3): too many log groups per flexible block group [ 84.651648][ T6059] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 84.659395][ T6059] EXT4-fs (loop3): mount failed [ 85.085681][ T6095] bridge0: port 3(batadv1) entered blocking state [ 85.092511][ T6095] bridge0: port 3(batadv1) entered disabled state [ 85.099579][ T6095] batadv1: entered allmulticast mode [ 85.107743][ T6095] batadv1: entered promiscuous mode [ 85.116756][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.124171][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.135021][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.142892][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.239375][ T6102] loop4: detected capacity change from 0 to 1024 [ 85.265683][ T6102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.293360][ T6102] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.984: attempt to clear invalid blocks 1886221359 len 1 [ 85.354745][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.621253][ T6124] loop3: detected capacity change from 0 to 512 [ 85.629657][ T6124] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm gtp: corrupted in-inode xattr: invalid ea_ino [ 85.639820][ T4046] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 85.643424][ T6124] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 85.652470][ T4046] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 85.665474][ T6124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.776524][ T6124] loop3: detected capacity change from 512 to 64 [ 85.827279][ T3310] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 85.947300][ T3770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.198432][ T6143] chnl_net:caif_netlink_parms(): no params data found [ 86.212744][ T6159] netlink: 'syz.5.1003': attribute type 1 has an invalid length. [ 86.228082][ T6159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.265175][ T6159] __nla_validate_parse: 8 callbacks suppressed [ 86.265219][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1003'. [ 86.289537][ T6159] bond1 (unregistering): Released all slaves [ 86.326323][ T6143] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.333869][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.341528][ T6143] bridge_slave_0: entered allmulticast mode [ 86.348286][ T6143] bridge_slave_0: entered promiscuous mode [ 86.358957][ T6143] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.366264][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.374492][ T6143] bridge_slave_1: entered allmulticast mode [ 86.381738][ T6143] bridge_slave_1: entered promiscuous mode [ 86.394572][ T56] batadv1: left allmulticast mode [ 86.399647][ T56] batadv1: left promiscuous mode [ 86.405212][ T56] bridge0: port 3(batadv1) entered disabled state [ 86.414738][ T56] bridge_slave_1: left allmulticast mode [ 86.420702][ T56] bridge_slave_1: left promiscuous mode [ 86.426365][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.436866][ T56] bridge_slave_0: left allmulticast mode [ 86.442949][ T56] bridge_slave_0: left promiscuous mode [ 86.449840][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.470942][ T56] vlan2: left promiscuous mode [ 86.475776][ T56] bridge0: left promiscuous mode [ 86.481158][ T56] bridge1: port 1(vlan2) entered disabled state [ 86.489134][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1009'. [ 86.524107][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 86.524121][ T29] audit: type=1400 audit(1755025871.132:2416): avc: denied { write } for pid=6182 comm="syz.4.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.529833][ T56] dvmrp1 (unregistering): left allmulticast mode [ 86.574212][ T29] audit: type=1326 audit(1755025871.169:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.6.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 86.599525][ T29] audit: type=1326 audit(1755025871.169:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.6.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 86.709922][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.719936][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.729149][ T56] bond0 (unregistering): Released all slaves [ 86.743806][ T6143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.755042][ T29] audit: type=1326 audit(1755025871.335:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.6.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 86.780602][ T29] audit: type=1326 audit(1755025871.335:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.6.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 86.809526][ T56] tipc: Left network mode [ 86.820410][ T6194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6194 comm=syz.4.1016 [ 86.821347][ T6143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.885878][ T6143] team0: Port device team_slave_0 added [ 86.899660][ T56] hsr_slave_0: left promiscuous mode [ 86.907720][ T56] hsr_slave_1: left promiscuous mode [ 86.944017][ T56] team0 (unregistering): Port device team_slave_1 removed [ 86.956067][ T56] team0 (unregistering): Port device team_slave_0 removed [ 87.013649][ T6143] team0: Port device team_slave_1 added [ 87.024130][ T6205] loop4: detected capacity change from 0 to 256 [ 87.039748][ T29] audit: type=1326 audit(1755025871.603:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 87.069083][ T29] audit: type=1326 audit(1755025871.603:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 87.093070][ T29] audit: type=1326 audit(1755025871.603:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 87.117628][ T29] audit: type=1326 audit(1755025871.603:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 87.141233][ T29] audit: type=1326 audit(1755025871.603:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 87.166753][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.173715][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.200066][ T6143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.213392][ T6209] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.225377][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.232503][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.258644][ T6143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.289153][ T6143] hsr_slave_0: entered promiscuous mode [ 87.295601][ T6143] hsr_slave_1: entered promiscuous mode [ 87.302144][ T6143] debugfs: 'hsr0' already exists in 'hsr' [ 87.307987][ T6143] Cannot create hsr debugfs directory [ 87.339110][ T6209] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.397377][ T6209] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.449618][ T6143] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 87.459988][ T6143] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 87.480358][ T6143] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 87.493128][ T6209] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.505202][ T6143] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 87.559898][ T6143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.579403][ T4022] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.604289][ T4035] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.621832][ T6143] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.632790][ T4077] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.644376][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.651663][ T6220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.681224][ T4077] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.695701][ T4062] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.702883][ T4062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.784009][ T6222] loop4: detected capacity change from 0 to 1024 [ 87.812484][ T6222] EXT4-fs: Invalid want_extra_isize 1914 [ 87.859631][ T6143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.261885][ T6143] veth0_vlan: entered promiscuous mode [ 88.288131][ T6143] veth1_vlan: entered promiscuous mode [ 88.320775][ T6143] veth0_macvtap: entered promiscuous mode [ 88.335092][ T6143] veth1_macvtap: entered promiscuous mode [ 88.359577][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.359677][ T6261] loop4: detected capacity change from 0 to 2368 [ 88.375467][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.387869][ T4069] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.415698][ T4069] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.445852][ T4069] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.482040][ T4069] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.500600][ T6272] loop7: detected capacity change from 0 to 2048 [ 88.520726][ T6274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6274 comm=syz.6.1038 [ 88.521148][ T6272] EXT4-fs: inline encryption not supported [ 88.552691][ T6272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.618125][ T6272] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1001: bg 0: block 234: padding at end of block bitmap is not set [ 88.640865][ T6272] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 88.654088][ T6272] EXT4-fs (loop7): This should not happen!! Data will be lost [ 88.654088][ T6272] [ 88.699879][ T6143] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.997040][ T6302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1048'. [ 89.041709][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.075731][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.095497][ T6302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1048'. [ 89.448191][ T6295] loop6: detected capacity change from 0 to 32768 [ 89.729294][ T6315] veth0_to_team: entered promiscuous mode [ 89.812009][ T6291] loop7: detected capacity change from 0 to 1024 [ 89.843309][ T6291] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.866578][ T6291] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.994022][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1056'. [ 90.016670][ T6326] vlan2: entered allmulticast mode [ 90.021825][ T6326] bridge0: entered allmulticast mode [ 90.028173][ T6326] bridge2: port 1(vlan2) entered blocking state [ 90.034643][ T6326] bridge2: port 1(vlan2) entered disabled state [ 90.043219][ T6326] vlan2: entered promiscuous mode [ 90.048633][ T6326] bridge0: entered promiscuous mode [ 90.199175][ T6335] tipc: Failed to remove unknown binding: 66,1,1/0:3646217006/3646217008 [ 90.248187][ T6143] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.372325][ T6351] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1063'. [ 90.426726][ T6353] syzkaller1: entered promiscuous mode [ 90.432406][ T6353] syzkaller1: entered allmulticast mode [ 90.557408][ T6363] program syz.5.1070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.580246][ T6366] loop5: detected capacity change from 0 to 512 [ 90.599770][ T6366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.613972][ T6366] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.680178][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.862386][ T6384] loop5: detected capacity change from 0 to 164 [ 90.878147][ T6384] Unable to read rock-ridge attributes [ 91.015645][ T6384] Unable to read rock-ridge attributes [ 91.024199][ T6384] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 91.144467][ T6377] loop6: detected capacity change from 0 to 1024 [ 91.162320][ T6377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.174618][ T6377] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.412289][ T5761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.520960][ T6398] loop6: detected capacity change from 0 to 512 [ 91.528049][ T6398] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.535373][ T6398] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 91.547613][ T6398] EXT4-fs (loop6): 1 truncate cleaned up [ 91.579957][ T6398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.019446][ T6427] netlink: 'syz.4.1094': attribute type 10 has an invalid length. [ 92.028422][ T6427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1094'. [ 92.120594][ T6427] team0: Port device geneve1 added [ 92.224526][ T6418] Set syz1 is full, maxelem 65536 reached [ 92.335511][ T6440] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 92.347553][ T6440] hsr_slave_0: left promiscuous mode [ 92.368938][ T6440] hsr_slave_1: left promiscuous mode [ 92.441144][ T6445] loop5: detected capacity change from 0 to 2368 [ 92.450372][ T5761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.473157][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 92.473173][ T29] audit: type=1326 audit(1755025876.615:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.6.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 92.504217][ T29] audit: type=1326 audit(1755025876.615:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.6.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 92.530368][ T29] audit: type=1326 audit(1755025876.670:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.6.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 92.554570][ T29] audit: type=1326 audit(1755025876.670:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.6.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 92.579263][ T29] audit: type=1326 audit(1755025876.670:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.6.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 92.603441][ T29] audit: type=1326 audit(1755025876.670:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.6.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 92.629806][ T29] audit: type=1326 audit(1755025876.670:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.6.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 92.653465][ T29] audit: type=1326 audit(1755025876.670:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.6.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 92.677563][ T29] audit: type=1326 audit(1755025876.689:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.6.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 92.704023][ T29] audit: type=1326 audit(1755025876.809:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.6.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140411ebe9 code=0x7ffc0000 [ 92.756827][ T6455] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1108'. [ 92.773672][ T6455] loop7: detected capacity change from 0 to 1024 [ 92.780954][ T6455] EXT4-fs: Ignoring removed oldalloc option [ 92.787711][ T6455] EXT4-fs: Ignoring removed orlov option [ 92.810054][ T6455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.073128][ T6471] netlink: 'syz.6.1113': attribute type 13 has an invalid length. [ 93.138534][ T6471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.200499][ T6475] IPv4: Oversized IP packet from 127.202.26.0 [ 93.509726][ T6494] loop4: detected capacity change from 0 to 512 [ 93.546534][ T6494] EXT4-fs (loop4): too many log groups per flexible block group [ 93.554754][ T6494] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 93.585429][ T6494] EXT4-fs (loop4): mount failed [ 93.602395][ T6494] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 93.609197][ T6494] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 93.617298][ T6494] vhci_hcd vhci_hcd.0: Device attached [ 93.625857][ T6497] vhci_hcd: connection closed [ 93.626106][ T4026] vhci_hcd: stop threads [ 93.636019][ T4026] vhci_hcd: release socket [ 93.640444][ T4026] vhci_hcd: disconnect device [ 93.875904][ T6506] tipc: Failed to remove unknown binding: 66,1,1/0:2772650969/2772650971 [ 93.886196][ T6506] tipc: Failed to remove unknown binding: 66,1,1/0:2772650969/2772650971 [ 93.896319][ T6506] tipc: Failed to remove unknown binding: 66,1,1/0:2772650969/2772650971 [ 93.929325][ T6510] all: renamed from lo (while UP) [ 94.228525][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 94.252793][ T6526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1136'. [ 94.501155][ T6538] tipc: Failed to remove unknown binding: 66,1,1/1:2992502225/2992502227 [ 94.513596][ T6535] netlink: 'syz.0.1140': attribute type 13 has an invalid length. [ 94.556047][ T6538] tipc: Failed to remove unknown binding: 66,1,1/1:2992502225/2992502227 [ 94.565808][ T6538] tipc: Failed to remove unknown binding: 66,1,1/1:2992502225/2992502227 [ 94.601320][ T6535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.723149][ T6143] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.815379][ T6563] wg2: entered promiscuous mode [ 94.820475][ T6563] wg2: entered allmulticast mode [ 94.860002][ T6570] loop6: detected capacity change from 0 to 128 [ 94.894109][ T6570] syz.6.1157: attempt to access beyond end of device [ 94.894109][ T6570] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 94.946396][ T6578] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1161'. [ 95.022500][ T6581] loop6: detected capacity change from 0 to 512 [ 95.052571][ T6581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.066034][ T6581] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.091777][ T5761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.644830][ T6595] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1166'. [ 95.756571][ T3396] IPVS: starting estimator thread 0... [ 95.849563][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'. [ 95.863254][ T6618] IPVS: using max 2976 ests per chain, 148800 per kthread [ 95.902316][ T6646] netlink: 'syz.4.1183': attribute type 13 has an invalid length. [ 95.907707][ T6649] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 95.923430][ T6646] gretap0: refused to change device tx_queue_len [ 95.930464][ T6646] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 95.937326][ T6652] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1185'. [ 95.957110][ T6649] batadv1: left allmulticast mode [ 95.962634][ T6649] batadv1: left promiscuous mode [ 95.967840][ T6649] bridge0: port 3(batadv1) entered disabled state [ 95.975516][ T6649] bridge_slave_1: left allmulticast mode [ 95.981186][ T6649] bridge_slave_1: left promiscuous mode [ 95.987418][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.003245][ T6649] bridge_slave_0: left allmulticast mode [ 96.009190][ T6649] bridge_slave_0: left promiscuous mode [ 96.015216][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.097102][ T6661] tipc: Started in network mode [ 96.102665][ T6661] tipc: Node identity 8e5d1630e71e, cluster identity 4711 [ 96.110355][ T6661] tipc: Enabled bearer , priority 0 [ 96.119179][ T6660] tipc: Resetting bearer [ 96.143464][ T6660] tipc: Disabling bearer [ 96.207293][ T6675] loop4: detected capacity change from 0 to 1024 [ 96.207596][ T6669] hub 6-0:1.0: USB hub found [ 96.222635][ T6669] hub 6-0:1.0: 8 ports detected [ 96.224049][ T6675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.261147][ T6680] netlink: zone id is out of range [ 96.297244][ T6675] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 96.320638][ T3797] IPVS: starting estimator thread 0... [ 96.335288][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.405544][ T6704] loop4: detected capacity change from 0 to 1024 [ 96.413606][ T6704] ext4: Unknown parameter 'uid<00000000000000000000' [ 96.416356][ T6691] IPVS: using max 2976 ests per chain, 148800 per kthread [ 96.539571][ T6720] loop5: detected capacity change from 0 to 1024 [ 96.568158][ T6720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.603663][ T6720] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 96.613675][ T6726] netlink: 'syz.4.1219': attribute type 10 has an invalid length. [ 96.641791][ T6726] team0: Port device dummy0 added [ 96.652206][ T3797] IPVS: starting estimator thread 0... [ 96.670643][ T6726] netlink: 'syz.4.1219': attribute type 10 has an invalid length. [ 96.685341][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.699323][ T6726] team0: Port device dummy0 removed [ 96.706990][ T6726] dummy0: entered promiscuous mode [ 96.733083][ T6726] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 96.752097][ T6730] IPVS: using max 2976 ests per chain, 148800 per kthread [ 96.810603][ T6737] loop4: detected capacity change from 0 to 512 [ 96.840008][ T6737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.853967][ T6737] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.910454][ T6743] netem: change failed [ 96.986648][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.069803][ T6751] syzkaller1: entered promiscuous mode [ 97.075650][ T6751] syzkaller1: entered allmulticast mode [ 97.210819][ T6757] loop6: detected capacity change from 0 to 1024 [ 97.220744][ T6757] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.237990][ T6757] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 97.251849][ T1092] IPVS: starting estimator thread 0... [ 97.267124][ T5761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.302562][ T6761] loop6: detected capacity change from 0 to 2048 [ 97.331235][ T6761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.358414][ T6759] IPVS: using max 3072 ests per chain, 153600 per kthread [ 97.358685][ T6761] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 97.378776][ T6761] EXT4-fs (loop6): This should not happen!! Data will be lost [ 97.378776][ T6761] [ 97.388673][ T6761] EXT4-fs (loop6): Total free blocks count 0 [ 97.394705][ T6761] EXT4-fs (loop6): Free/Dirty block details [ 97.401484][ T6761] EXT4-fs (loop6): free_blocks=0 [ 97.406831][ T6761] EXT4-fs (loop6): dirty_blocks=0 [ 97.412296][ T6761] EXT4-fs (loop6): Block reservation details [ 97.418536][ T6761] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 97.491234][ T5761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.830003][ T6806] __nla_validate_parse: 1 callbacks suppressed [ 97.830019][ T6806] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 97.846281][ T6806] bridge_slave_1: left allmulticast mode [ 97.852314][ T6806] bridge_slave_1: left promiscuous mode [ 97.858501][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.869452][ T6806] bridge_slave_0: left allmulticast mode [ 97.875786][ T6806] bridge_slave_0: left promiscuous mode [ 97.881831][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.966009][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 98.325999][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 98.326014][ T29] audit: type=1326 audit(1755025882.005:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 98.356357][ T29] audit: type=1326 audit(1755025882.005:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 98.380469][ T29] audit: type=1326 audit(1755025882.014:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 98.404190][ T29] audit: type=1326 audit(1755025882.014:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 98.428146][ T29] audit: type=1326 audit(1755025882.014:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 98.453138][ T29] audit: type=1326 audit(1755025882.014:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 98.477350][ T29] audit: type=1326 audit(1755025882.014:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 98.502408][ T29] audit: type=1326 audit(1755025882.014:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 98.526785][ T29] audit: type=1326 audit(1755025882.014:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 98.550795][ T29] audit: type=1326 audit(1755025882.014:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1aaebe9 code=0x7ffc0000 [ 98.578238][ T6830] netlink: 'syz.5.1272': attribute type 10 has an invalid length. [ 98.603622][ T6830] team0: Port device dummy0 added [ 98.622135][ T6830] netlink: 'syz.5.1272': attribute type 10 has an invalid length. [ 98.648717][ T6830] team0: Port device dummy0 removed [ 98.656576][ T6833] netlink: 'syz.7.1263': attribute type 10 has an invalid length. [ 98.666932][ T6833] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1263'. [ 98.683142][ T6833] dummy0: entered promiscuous mode [ 98.697812][ T6833] bridge0: port 3(dummy0) entered blocking state [ 98.708224][ T6833] bridge0: port 3(dummy0) entered disabled state [ 98.718225][ T6833] dummy0: entered allmulticast mode [ 98.736263][ T6833] bridge0: port 3(dummy0) entered blocking state [ 98.743272][ T6833] bridge0: port 3(dummy0) entered forwarding state [ 98.781606][ T6841] loop5: detected capacity change from 0 to 1024 [ 98.784550][ T6843] tipc: Enabling of bearer rejected, failed to enable media [ 98.802009][ T6841] EXT4-fs: Ignoring removed oldalloc option [ 98.808803][ T6841] EXT4-fs: Ignoring removed nobh option [ 98.835205][ T6847] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1271'. [ 98.847161][ T6841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.880876][ T6852] loop7: detected capacity change from 0 to 1024 [ 98.889768][ T6852] EXT4-fs: Ignoring removed orlov option [ 98.898901][ T6852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.023711][ T6841] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1269: Allocating blocks 497-513 which overlap fs metadata [ 99.038825][ T6841] EXT4-fs (loop5): pa ffff8881071c17e0: logic 256, phys. 385, len 8 [ 99.047423][ T6841] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 99.150264][ T6875] netlink: 'syz.0.1282': attribute type 30 has an invalid length. [ 99.159396][ T6873] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.192123][ T6877] loop6: detected capacity change from 0 to 2048 [ 99.204223][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.222462][ T6877] Alternate GPT is invalid, using primary GPT. [ 99.228871][ T6877] loop6: p1 p2 p3 [ 99.233031][ T6873] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.245750][ T6143] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.299598][ T6873] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.407691][ T6873] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.474983][ T6899] loop7: detected capacity change from 0 to 512 [ 99.484091][ T6900] netlink: 'syz.5.1294': attribute type 10 has an invalid length. [ 99.493299][ T6900] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1294'. [ 99.495932][ T6899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.504837][ T6900] dummy0: entered promiscuous mode [ 99.519589][ T6899] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.545323][ T6900] bridge0: port 3(dummy0) entered blocking state [ 99.552548][ T6900] bridge0: port 3(dummy0) entered disabled state [ 99.578271][ T6900] bridge0: port 3(dummy0) entered blocking state [ 99.580991][ T6899] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1295'. [ 99.585163][ T6900] bridge0: port 3(dummy0) entered forwarding state [ 99.620161][ T6899] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 99.640599][ T4047] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.687442][ T4047] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.715034][ T6899] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.1295: corrupted inode contents [ 99.754646][ T4047] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.769408][ T6899] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.1295: mark_inode_dirty error [ 99.782080][ T4047] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.791610][ T6899] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.1295: corrupted inode contents [ 99.849189][ T6143] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.889606][ T6918] netlink: 'syz.7.1300': attribute type 30 has an invalid length. [ 99.932951][ T6920] loop5: detected capacity change from 0 to 2048 [ 99.987841][ T6924] syzkaller1: entered promiscuous mode [ 99.993716][ T6924] syzkaller1: entered allmulticast mode [ 100.003887][ T6920] Alternate GPT is invalid, using primary GPT. [ 100.010874][ T6920] loop5: p1 p2 p3 [ 100.175717][ T6950] netlink: 'syz.5.1314': attribute type 30 has an invalid length. [ 100.209396][ T6953] program syz.7.1317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.325445][ T6963] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1320'. [ 100.397131][ T6969] bond_slave_1: mtu less than device minimum [ 100.504387][ T6981] loop6: detected capacity change from 0 to 512 [ 100.512659][ T6981] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 100.580020][ T6987] netlink: 'syz.4.1332': attribute type 30 has an invalid length. [ 100.712530][ T7001] loop7: detected capacity change from 0 to 512 [ 100.721015][ T7001] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.733201][ T7001] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 100.745218][ T7001] EXT4-fs (loop7): 1 truncate cleaned up [ 100.752555][ T7001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.808942][ T7007] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.883968][ T7007] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.988846][ T7007] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.057499][ T7007] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.140439][ T6219] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.161980][ T6219] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.177743][ T6219] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.195842][ T6219] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.535897][ T7027] loop6: detected capacity change from 0 to 512 [ 101.566682][ T7027] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.591102][ T7027] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.643776][ T7027] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1348'. [ 101.665364][ T7027] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1348: corrupted inode contents [ 101.680374][ T6143] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.690214][ T7027] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1348: mark_inode_dirty error [ 101.705830][ T7027] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1348: corrupted inode contents [ 101.742088][ T7037] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 101.753492][ T5761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.796710][ T7041] netlink: 'syz.6.1349': attribute type 30 has an invalid length. [ 101.819459][ T7037] bond0: (slave veth5): Enslaving as an active interface with a down link [ 101.846452][ T7037] bond0: entered promiscuous mode [ 101.851813][ T7037] bond0: entered allmulticast mode [ 101.857598][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.233799][ T7058] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1359'. [ 102.263106][ T7060] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.312535][ T7060] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.366334][ T7060] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.434196][ T7060] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.512915][ T4040] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.529967][ T4040] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.541760][ T4040] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.551042][ T4040] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.613970][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1364'. [ 102.924578][ T7093] loop4: detected capacity change from 0 to 1024 [ 102.987873][ T7093] EXT4-fs: Ignoring removed orlov option [ 103.125291][ T7107] program syz.6.1389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.293493][ T7118] loop4: detected capacity change from 0 to 512 [ 103.307950][ T7118] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.321303][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1382'. [ 103.332234][ T7118] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1382: corrupted inode contents [ 103.345905][ T7118] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1382: mark_inode_dirty error [ 103.360308][ T7118] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1382: corrupted inode contents [ 103.451990][ T7137] loop5: detected capacity change from 0 to 1024 [ 103.458910][ T7137] EXT4-fs: Ignoring removed orlov option [ 103.720281][ T7143] bond1: (slave veth3): Enslaving as an active interface with a down link [ 103.740986][ T7145] bond1: entered promiscuous mode [ 103.746372][ T7145] bond1: entered allmulticast mode [ 103.791493][ T7145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.935438][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 103.935468][ T29] audit: type=1326 audit(1755025887.192:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 103.967679][ T29] audit: type=1326 audit(1755025887.192:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 103.991301][ T29] audit: type=1326 audit(1755025887.192:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 104.016078][ T29] audit: type=1326 audit(1755025887.192:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 104.043615][ T29] audit: type=1326 audit(1755025887.192:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 104.082501][ T29] audit: type=1326 audit(1755025887.202:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 104.109350][ T29] audit: type=1326 audit(1755025887.202:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 104.135030][ T29] audit: type=1326 audit(1755025887.202:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 104.159518][ T29] audit: type=1326 audit(1755025887.275:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 104.183478][ T29] audit: type=1326 audit(1755025887.275:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139060ebe9 code=0x7ffc0000 [ 104.230477][ T7156] program syz.5.1396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.257157][ T7135] loop6: detected capacity change from 0 to 512 [ 104.317034][ T7135] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.362751][ T7162] loop5: detected capacity change from 0 to 512 [ 104.391983][ T7162] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.410529][ T7162] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1399'. [ 104.421069][ T7162] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1399: corrupted inode contents [ 104.433866][ T7162] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1399: mark_inode_dirty error [ 104.446255][ T7162] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1399: corrupted inode contents [ 104.559603][ T7180] syzkaller0: entered promiscuous mode [ 104.565863][ T7180] syzkaller0: entered allmulticast mode [ 104.640438][ T7195] validate_nla: 3 callbacks suppressed [ 104.640458][ T7195] netlink: 'syz.4.1410': attribute type 30 has an invalid length. [ 104.959660][ T7217] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.033939][ T7217] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.090067][ T7217] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.152753][ T7228] netlink: 'syz.5.1426': attribute type 30 has an invalid length. [ 105.196043][ T7217] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.273803][ T4044] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.295157][ T4044] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.316257][ T7231] netlink: 'syz.5.1427': attribute type 1 has an invalid length. [ 105.319236][ T4044] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.346592][ T4044] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.390389][ T7231] bond1: (slave veth5): Enslaving as an active interface with a down link [ 105.433809][ T7231] bond1: entered promiscuous mode [ 105.438934][ T7231] bond1: entered allmulticast mode [ 105.462343][ T7231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.518835][ T7238] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.583578][ T7238] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.638333][ T7238] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.682703][ T7238] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.734799][ T6219] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.750780][ T6219] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.766893][ T6219] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.792037][ T6219] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.845183][ T7255] loop5: detected capacity change from 0 to 512 [ 105.853223][ T7255] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.860332][ T7255] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 105.872859][ T7255] EXT4-fs (loop5): 1 truncate cleaned up [ 105.879060][ T7255] EXT4-fs mount: 10 callbacks suppressed [ 105.879075][ T7255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.917387][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.939539][ T7258] loop5: detected capacity change from 0 to 164 [ 105.949211][ T7258] wÞ¡ÿ: attempt to access beyond end of device [ 105.949211][ T7258] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 105.963889][ T7258] wÞ¡ÿ: attempt to access beyond end of device [ 105.963889][ T7258] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 106.177760][ T7266] netlink: 'syz.5.1439': attribute type 3 has an invalid length. [ 106.187027][ T7266] netlink: 'syz.5.1439': attribute type 3 has an invalid length. [ 106.482975][ T7278] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.525955][ T7278] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.590607][ T7278] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.637874][ T7288] loop6: detected capacity change from 0 to 512 [ 106.648552][ T7278] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.655154][ T7288] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.1449: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 106.677964][ T7288] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.1449: Bad quota inode: 3, type: 0 [ 106.689914][ T7288] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 106.705182][ T7288] EXT4-fs (loop6): mount failed [ 106.752660][ T4040] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.776969][ T4040] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.785954][ T4040] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.803845][ T4040] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.832992][ T7297] netlink: 'syz.6.1451': attribute type 3 has an invalid length. [ 106.844131][ T7297] netlink: 'syz.6.1451': attribute type 3 has an invalid length. [ 106.859569][ T7300] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1452'. [ 106.868859][ T7300] 0ªX¹¦À: renamed from caif0 [ 106.885176][ T7300] 0ªX¹¦À: entered allmulticast mode [ 106.890614][ T7300] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 106.911550][ T7304] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 106.940395][ T7308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1456'. [ 107.007089][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1459'. [ 107.023897][ T4040] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.047882][ T4040] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.058484][ T4040] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.067301][ T4040] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.076210][ T7318] netlink: 'syz.7.1462': attribute type 10 has an invalid length. [ 107.089938][ T7321] netlink: 'syz.4.1461': attribute type 13 has an invalid length. [ 107.092168][ T7318] bridge0: port 3(dummy0) entered disabled state [ 107.108742][ T7318] dummy0: left allmulticast mode [ 107.119336][ T7323] loop6: detected capacity change from 0 to 164 [ 107.132631][ T7324] netlink: 'syz.7.1462': attribute type 10 has an invalid length. [ 107.138147][ T7318] dummy0: left promiscuous mode [ 107.145646][ T7318] bridge0: port 3(dummy0) entered disabled state [ 107.162834][ T7323] wÞ¡ÿ: attempt to access beyond end of device [ 107.162834][ T7323] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 107.179098][ T7323] wÞ¡ÿ: attempt to access beyond end of device [ 107.179098][ T7323] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 107.211937][ T7318] team0: Port device dummy0 added [ 107.229482][ T7321] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 107.247848][ T7324] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.258774][ T7324] team0: Failed to send options change via netlink (err -105) [ 107.268227][ T7324] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.279097][ T7324] team0: Port device dummy0 removed [ 107.287747][ T7324] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 107.333659][ T7340] loop5: detected capacity change from 0 to 1024 [ 107.348617][ T7340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.348810][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1469'. [ 107.375698][ T7334] syzkaller0: entered promiscuous mode [ 107.381416][ T7334] syzkaller0: entered allmulticast mode [ 107.402733][ T5224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.479166][ T7355] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.545939][ T7355] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.599799][ T7355] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.664381][ T7355] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.744517][ T4044] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.754485][ T7372] loop6: detected capacity change from 0 to 1024 [ 107.772960][ T7372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.810843][ T5761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.851536][ T4044] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.885920][ T4044] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.913725][ T4044] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.012287][ T7390] syzkaller0: entered promiscuous mode [ 108.017910][ T7390] syzkaller0: entered allmulticast mode [ 108.200715][ T7411] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.210684][ T7411] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.304546][ T7411] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.314786][ T7411] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.400398][ T7411] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.410790][ T7411] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.465863][ T7411] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.476280][ T7411] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.492952][ T7420] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1501'. [ 108.502587][ T7420] 0ªX¹¦À: renamed from caif0 [ 108.513497][ T7420] 0ªX¹¦À: entered allmulticast mode [ 108.518999][ T7420] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 108.574881][ T4047] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.583635][ T4047] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.593655][ T7425] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.606172][ T4047] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.614730][ T4047] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.623323][ T4047] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.631885][ T4047] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.640765][ T4047] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.649138][ T4047] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.659599][ T7425] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.700746][ T7434] loop6: detected capacity change from 0 to 512 [ 108.707810][ T7434] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.715424][ T7434] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 108.727565][ T7425] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.741383][ T7434] EXT4-fs (loop6): 1 truncate cleaned up [ 108.747878][ T7434] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.811853][ T7425] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.096848][ T7444] ================================================================== [ 109.105498][ T7444] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 109.113775][ T7444] [ 109.116188][ T7444] write to 0xffffea0004308758 of 8 bytes by task 7434 on cpu 1: [ 109.124343][ T7444] __filemap_remove_folio+0x1a5/0x2a0 [ 109.130095][ T7444] folio_unmap_invalidate+0x1dd/0x360 [ 109.135483][ T7444] invalidate_inode_pages2_range+0x27c/0x3d0 [ 109.141828][ T7444] filemap_invalidate_pages+0x16d/0x1a0 [ 109.147523][ T7444] kiocb_invalidate_pages+0x6e/0x80 [ 109.153127][ T7444] __iomap_dio_rw+0x5d4/0x1250 [ 109.158598][ T7444] iomap_dio_rw+0x40/0x90 [ 109.163044][ T7444] ext4_file_write_iter+0xad9/0xf00 [ 109.168798][ T7444] iter_file_splice_write+0x666/0x9e0 [ 109.174793][ T7444] direct_splice_actor+0x153/0x2a0 [ 109.179921][ T7444] splice_direct_to_actor+0x30f/0x680 [ 109.185310][ T7444] do_splice_direct+0xda/0x150 [ 109.190379][ T7444] do_sendfile+0x380/0x650 [ 109.194903][ T7444] __x64_sys_sendfile64+0x105/0x150 [ 109.200415][ T7444] x64_sys_call+0x2bb0/0x2ff0 [ 109.205913][ T7444] do_syscall_64+0xd2/0x200 [ 109.210995][ T7444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.216971][ T7444] [ 109.219299][ T7444] read to 0xffffea0004308758 of 8 bytes by task 7444 on cpu 0: [ 109.227381][ T7444] folio_mapping+0xa1/0x120 [ 109.231985][ T7444] folio_wait_writeback+0x43/0x140 [ 109.237117][ T7444] file_write_and_wait_range+0x20b/0x2c0 [ 109.242944][ T7444] generic_buffers_fsync_noflush+0x45/0x120 [ 109.249551][ T7444] ext4_sync_file+0x1ab/0x690 [ 109.254694][ T7444] vfs_fsync_range+0x10d/0x130 [ 109.259854][ T7444] ext4_buffered_write_iter+0x34f/0x3c0 [ 109.265780][ T7444] ext4_file_write_iter+0xdbf/0xf00 [ 109.271165][ T7444] iter_file_splice_write+0x666/0x9e0 [ 109.276922][ T7444] direct_splice_actor+0x153/0x2a0 [ 109.282773][ T7444] splice_direct_to_actor+0x30f/0x680 [ 109.288416][ T7444] do_splice_direct+0xda/0x150 [ 109.293283][ T7444] do_sendfile+0x380/0x650 [ 109.297713][ T7444] __x64_sys_sendfile64+0x105/0x150 [ 109.302936][ T7444] x64_sys_call+0x2bb0/0x2ff0 [ 109.308074][ T7444] do_syscall_64+0xd2/0x200 [ 109.312769][ T7444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.318759][ T7444] [ 109.321091][ T7444] value changed: 0xffff888107239c90 -> 0x0000000000000000 [ 109.328289][ T7444] [ 109.330624][ T7444] Reported by Kernel Concurrency Sanitizer on: [ 109.337047][ T7444] CPU: 0 UID: 0 PID: 7444 Comm: syz.6.1508 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 109.351652][ T7444] Tainted: [W]=WARN [ 109.355465][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.365527][ T7444] ================================================================== [ 109.680488][ T5761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.222814][ T4044] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.234509][ T4044] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.247065][ T4044] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.258414][ T4044] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0