last executing test programs: 36.403488993s ago: executing program 1 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x3700000e) setns(r4, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 35.456777957s ago: executing program 1 (id=368): syz_genetlink_get_family_id$nfc(&(0x7f0000001100), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e25, 0x400, @remote, 0x2}, 0x1c) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 35.293317382s ago: executing program 1 (id=370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, 0x0}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 35.157179074s ago: executing program 1 (id=372): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000001480)="$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") syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) lgetxattr(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) 34.8589912s ago: executing program 1 (id=377): close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 34.201577538s ago: executing program 1 (id=384): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 34.168242091s ago: executing program 32 (id=384): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 28.014251745s ago: executing program 2 (id=438): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = getpid() syz_pidfd_open(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 27.620271999s ago: executing program 2 (id=443): r0 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40222}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r0, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) io_uring_enter(r0, 0x47f8, 0x1e43, 0x2000000000000000, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) 27.173380439s ago: executing program 2 (id=451): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 27.006057574s ago: executing program 2 (id=453): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000001480)="$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") syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) lgetxattr(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) 26.801621322s ago: executing program 2 (id=456): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x0, 0x10}}}, 0x7b}, 0x1, 0xf0ffffffffffff, 0x0, 0x4084}, 0x0) 24.661886421s ago: executing program 2 (id=486): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000068a1f396850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 24.581167298s ago: executing program 33 (id=486): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000068a1f396850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.707200932s ago: executing program 4 (id=820): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x4, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006f40), 0x2002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) 3.571402034s ago: executing program 4 (id=826): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000280)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x10) accept4(r0, 0x0, 0x0, 0x400000000000000) 3.497592131s ago: executing program 4 (id=828): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x57) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 3.427063737s ago: executing program 4 (id=829): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x10000, 0x0) 2.517626018s ago: executing program 4 (id=843): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000300)={@private1={0xfc, 0x1, '\x00', 0x1}, r3}, 0x14) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.49276498s ago: executing program 4 (id=844): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x3, 0x0, 0x2007) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="59bb28bd7000010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="a6ea76d5fdf272da0492ef7c54ea0dcd879ceeb00b8149617f1973239be8537cfd28d9fa119907"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) 2.244876652s ago: executing program 6 (id=846): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000540)={[{@session={'session', 0x3d, 0x26}}, {@uid}, {@unhide}, {@hide}, {@gid}, {@map_acorn}, {@nocompress}, {@nojoliet}, {@nojoliet}, {@map_off}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2, 0xa2f, &(0x7f0000000600)="$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") socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 1.381702488s ago: executing program 6 (id=858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x308}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 1.287631547s ago: executing program 0 (id=862): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 1.204684733s ago: executing program 6 (id=863): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2000000004}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mm_page_free\x00', r1, 0x0, 0x800000}, 0x18) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) unshare(0x62040200) 1.193882325s ago: executing program 0 (id=873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB], 0x48) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @remote}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r4, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0xe0ffff00000000, 0x0, 0x4000000}, 0x20048054) 1.099428683s ago: executing program 6 (id=866): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) 1.027043049s ago: executing program 0 (id=867): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3272a6bc}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068e000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x200c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x100, 0x4}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) 942.828717ms ago: executing program 0 (id=869): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 922.071189ms ago: executing program 0 (id=870): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = getpid() r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 863.002134ms ago: executing program 5 (id=872): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 826.848287ms ago: executing program 5 (id=874): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00&\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lsm_set_self_attr(0x67, 0x0, 0x0, 0x0) 721.837816ms ago: executing program 5 (id=875): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) 540.620242ms ago: executing program 3 (id=877): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc57, &(0x7f0000000080)={[{@fat=@flush}, {@uni_xlate}, {@numtail}, {@shortname_lower}, {@utf8}, {@numtail}, {@uni_xlate}, {@fat=@dos1xfloppy}, {}, {@shortname_winnt}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@numtail}, {@shortname_lower}, {@shortname_lower}]}, 0xf5, 0x2e6, &(0x7f0000000540)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x13, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403e, 0x81, 0x800, 0x9, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0xfffffffc, 0x800}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) memfd_create(0x0, 0x2) 470.970208ms ago: executing program 3 (id=878): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 470.375918ms ago: executing program 3 (id=879): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000140)=0xba, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff22}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 453.70225ms ago: executing program 0 (id=880): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000040)='./file0\x00', 0x220c000, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x31f, &(0x7f00000004c0)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x29000000, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x542) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 296.885954ms ago: executing program 5 (id=881): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffbff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 210.255952ms ago: executing program 5 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 145.274347ms ago: executing program 3 (id=883): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x2, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000540)=0x140, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) 124.436699ms ago: executing program 6 (id=884): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 63.887345ms ago: executing program 3 (id=885): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x18b743, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 63.152035ms ago: executing program 3 (id=886): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0x9, 0x563cd996}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x840000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 3.9223ms ago: executing program 6 (id=887): socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@mblk_io_submit}, {@quota}]}, 0x2, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x8) pwrite64(r1, &(0x7f0000000100), 0x0, 0xe7c) r2 = syz_open_dev$evdev(0x0, 0x2, 0xc0082) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000700)=0xfffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 0s ago: executing program 5 (id=888): r0 = fsopen(&(0x7f00000002c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xce) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x10) fchdir(r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) kernel console output (not intermixed with test programs): ted capacity change from 0 to 512 [ 48.391155][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.428783][ T3826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.508418][ T3826] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.563431][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.593090][ T3832] loop0: detected capacity change from 0 to 164 [ 48.626946][ T3826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.784338][ T3846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 48.804591][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'. [ 48.870418][ T3856] batman_adv: batadv0: Adding interface: vlan2 [ 48.876816][ T3856] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.902248][ T3856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.912758][ T3856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.922688][ T3856] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 48.975216][ T3860] syzkaller0: entered promiscuous mode [ 48.980767][ T3860] syzkaller0: entered allmulticast mode [ 49.176151][ T3865] loop3: detected capacity change from 0 to 1024 [ 49.195921][ T3865] EXT4-fs: Ignoring removed orlov option [ 49.235928][ T3863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.134'. [ 49.246462][ T3865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.542174][ T3863] syz.2.134 (3863) used greatest stack depth: 9672 bytes left [ 49.835055][ T3878] loop2: detected capacity change from 0 to 512 [ 49.864849][ T3878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.864978][ T3878] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.038237][ T3889] loop1: detected capacity change from 0 to 1024 [ 50.102463][ T3889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.144614][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.210539][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 50.210556][ T29] audit: type=1400 audit(1767660380.922:566): avc: denied { setopt } for pid=3896 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.263392][ T29] audit: type=1400 audit(1767660380.922:567): avc: denied { listen } for pid=3896 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.283010][ T29] audit: type=1400 audit(1767660380.972:568): avc: denied { accept } for pid=3896 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.359746][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 50.374807][ T3889] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.142: Allocating blocks 449-513 which overlap fs metadata [ 50.398871][ T29] audit: type=1400 audit(1767660381.052:569): avc: denied { append } for pid=3876 comm="syz.2.139" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.431023][ T3888] EXT4-fs (loop1): pa ffff88810074e1c0: logic 48, phys. 177, len 21 [ 50.439114][ T3888] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4 [ 50.472799][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.518037][ T3910] loop3: detected capacity change from 0 to 512 [ 50.539484][ T3910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c098, mo2=0002] [ 50.547736][ T3910] System zones: 1-2, 4-12, 8-8 [ 50.554602][ T3913] loop2: detected capacity change from 0 to 1024 [ 50.561451][ T3913] ext4: Unknown parameter 'obj_user' [ 50.569084][ T3910] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.150: invalid indirect mapped block 256 (level 2) [ 50.586254][ T3910] EXT4-fs (loop3): 2 truncates cleaned up [ 50.593886][ T3910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.628952][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.658257][ T3910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 50.667296][ T3910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 50.717337][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.768158][ T29] audit: type=1400 audit(1767660381.482:570): avc: denied { mount } for pid=3919 comm="syz.2.153" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.893957][ T3930] netlink: 14 bytes leftover after parsing attributes in process `syz.2.154'. [ 50.909192][ T29] audit: type=1326 audit(1767660381.622:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 50.938325][ T29] audit: type=1326 audit(1767660381.652:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 50.962746][ T29] audit: type=1326 audit(1767660381.652:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 50.986443][ T29] audit: type=1326 audit(1767660381.652:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 51.009960][ T29] audit: type=1326 audit(1767660381.652:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 51.038779][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.051669][ T3916] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.074863][ T3930] bond0 (unregistering): Released all slaves [ 51.183102][ T3916] syz.1.151: attempt to access beyond end of device [ 51.183102][ T3916] loop1: rw=8388608, sector=17179852721, nr_sectors = 1 limit=512 [ 51.204754][ T3916] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 51.212960][ T3916] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 51.388254][ T3965] netlink: 'syz.1.161': attribute type 1 has an invalid length. [ 51.405936][ T3965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 52.535265][ T4072] xt_ecn: cannot match TCP bits for non-tcp packets [ 52.574920][ T4074] set_capacity_and_notify: 1 callbacks suppressed [ 52.574941][ T4074] loop3: detected capacity change from 0 to 128 [ 52.689520][ T4082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.177'. [ 52.757315][ T4074] syz.3.174: attempt to access beyond end of device [ 52.757315][ T4074] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 52.800358][ T4074] syz.3.174: attempt to access beyond end of device [ 52.800358][ T4074] loop3: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 52.848699][ T4074] syz.3.174: attempt to access beyond end of device [ 52.848699][ T4074] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 53.009934][ T4074] syz.3.174: attempt to access beyond end of device [ 53.009934][ T4074] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 53.064873][ T4074] syz.3.174: attempt to access beyond end of device [ 53.064873][ T4074] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 53.090327][ T4074] syz.3.174: attempt to access beyond end of device [ 53.090327][ T4074] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 53.111692][ T4074] syz.3.174: attempt to access beyond end of device [ 53.111692][ T4074] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 53.123267][ T4090] __nla_validate_parse: 1 callbacks suppressed [ 53.123318][ T4090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 53.135814][ T4074] syz.3.174: attempt to access beyond end of device [ 53.135814][ T4074] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 53.156125][ T4090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'. [ 53.171757][ T4074] syz.3.174: attempt to access beyond end of device [ 53.171757][ T4074] loop3: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 54.186554][ T4123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 54.230497][ T4123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.193'. [ 54.348964][ T4130] gretap0 speed is unknown, defaulting to 1000 [ 54.361905][ T4128] loop3: detected capacity change from 0 to 512 [ 54.376438][ T4130] gretap0 speed is unknown, defaulting to 1000 [ 54.383947][ T4128] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.397053][ T4128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.405822][ T4130] gretap0 speed is unknown, defaulting to 1000 [ 54.443739][ T4132] process 'syz.2.196' launched '/dev/fd/9' with NULL argv: empty string added [ 54.467045][ T4128] EXT4-fs (loop3): 1 truncate cleaned up [ 54.477481][ T4130] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.493129][ T4130] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 54.512974][ T4128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.536762][ T4109] syz.1.187 (4109) used greatest stack depth: 7448 bytes left [ 54.548186][ T4130] gretap0 speed is unknown, defaulting to 1000 [ 54.572037][ T4130] gretap0 speed is unknown, defaulting to 1000 [ 54.602633][ T4130] gretap0 speed is unknown, defaulting to 1000 [ 54.638808][ T4130] gretap0 speed is unknown, defaulting to 1000 [ 54.671900][ T4130] gretap0 speed is unknown, defaulting to 1000 [ 54.710059][ T4139] 9p: Unknown access argument 18446744073709551615: -34 [ 54.744904][ T4143] tipc: Started in network mode [ 54.749824][ T4143] tipc: Node identity ac14140f, cluster identity 4711 [ 54.807704][ T4143] tipc: New replicast peer: 255.255.255.255 [ 54.814127][ T4143] tipc: Enabled bearer , priority 10 [ 54.890118][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.903851][ T4152] netlink: 9 bytes leftover after parsing attributes in process `syz.4.202'. [ 54.919102][ T4154] loop1: detected capacity change from 0 to 512 [ 54.945109][ T4154] ------------[ cut here ]------------ [ 54.950618][ T4154] EA inode 11 i_nlink=2 [ 54.950634][ T4154] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.1.198/4154 [ 54.965767][ T4154] Modules linked in: [ 54.969708][ T4154] CPU: 1 UID: 0 PID: 4154 Comm: syz.1.198 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.979457][ T4154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.989576][ T4154] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 54.996347][ T4154] Code: d1 e2 9c ff 4c 8d 2d 6a f0 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 ac ac ba 03 66 66 66 2e 0f 1f 84 [ 55.016409][ T4154] RSP: 0018:ffffc90000ee35a0 EFLAGS: 00010246 [ 55.022743][ T4154] RAX: ffff88813c3fed90 RBX: ffff88811bc1d348 RCX: ffffffff81bb1d5b [ 55.030769][ T4154] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0db0 [ 55.038858][ T4154] RBP: 000000000000000b R08: 000188811bc1d2fb R09: 0000000000000000 [ 55.047085][ T4154] R10: ffffc90000ee34d0 R11: 0001c90000ee34d0 R12: ffff88811bc1d2f8 [ 55.055131][ T4154] R13: ffffffff86dc0db0 R14: ffff88811bc1d2b0 R15: 0000000000000001 [ 55.063199][ T4154] FS: 00007f2deacd26c0(0000) GS:ffff8882aeec5000(0000) knlGS:0000000000000000 [ 55.072210][ T4154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.078912][ T4154] CR2: 00007f2dec6b2a60 CR3: 0000000134b3a000 CR4: 00000000003506f0 [ 55.086994][ T4154] Call Trace: [ 55.090334][ T4154] [ 55.093456][ T4154] ext4_xattr_set_entry+0x77f/0x1020 [ 55.098887][ T4154] ext4_xattr_ibody_set+0x184/0x3c0 [ 55.104227][ T4154] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 55.110127][ T4154] __ext4_expand_extra_isize+0x246/0x280 [ 55.115866][ T4154] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 55.121530][ T4154] ext4_evict_inode+0x7c4/0xd40 [ 55.126506][ T4154] ? __pfx_ext4_evict_inode+0x10/0x10 [ 55.131989][ T4154] evict+0x2af/0x510 [ 55.135957][ T4154] ? __dquot_initialize+0x146/0x7c0 [ 55.141245][ T4154] iput+0x4bd/0x650 [ 55.145129][ T4154] ext4_process_orphan+0x1a9/0x1c0 [ 55.150333][ T4154] ext4_orphan_cleanup+0x6a8/0xa00 [ 55.155526][ T4154] ext4_fill_super+0x3411/0x37a0 [ 55.160509][ T4154] ? set_blocksize+0x1a8/0x310 [ 55.165423][ T4154] ? sb_set_blocksize+0xfc/0x170 [ 55.170452][ T4154] ? setup_bdev_super+0x30e/0x370 [ 55.175594][ T4154] ? __pfx_ext4_fill_super+0x10/0x10 [ 55.180930][ T4154] get_tree_bdev_flags+0x291/0x300 [ 55.186169][ T4154] ? __pfx_ext4_fill_super+0x10/0x10 [ 55.191537][ T4154] get_tree_bdev+0x1f/0x30 [ 55.195986][ T4154] ext4_get_tree+0x1c/0x30 [ 55.200465][ T4154] vfs_get_tree+0x57/0x1d0 [ 55.204961][ T4154] do_new_mount+0x24d/0x6a0 [ 55.209502][ T4154] path_mount+0x4ab/0xb80 [ 55.213912][ T4154] ? user_path_at+0xbf/0x130 [ 55.218544][ T4154] __se_sys_mount+0x28c/0x2e0 [ 55.223301][ T4154] __x64_sys_mount+0x67/0x80 [ 55.228017][ T4154] x64_sys_call+0x2cca/0x3000 [ 55.232908][ T4154] do_syscall_64+0xca/0x2b0 [ 55.237513][ T4154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.243532][ T4154] RIP: 0033:0x7f2dec6d0eea [ 55.248240][ T4154] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.267979][ T4154] RSP: 002b:00007f2deacd1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 55.276481][ T4154] RAX: ffffffffffffffda RBX: 00007f2deacd1ef0 RCX: 00007f2dec6d0eea [ 55.284540][ T4154] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f2deacd1eb0 [ 55.292625][ T4154] RBP: 0000200000000180 R08: 00007f2deacd1ef0 R09: 0000000000800700 [ 55.300639][ T4154] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 55.308749][ T4154] R13: 00007f2deacd1eb0 R14: 000000000000046f R15: 000000000000002c [ 55.316793][ T4154] [ 55.319831][ T4154] ---[ end trace 0000000000000000 ]--- [ 55.345088][ T29] kauditd_printk_skb: 703 callbacks suppressed [ 55.345106][ T29] audit: type=1326 audit(1767660386.052:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 55.374841][ T29] audit: type=1326 audit(1767660386.052:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 55.398565][ T29] audit: type=1326 audit(1767660386.052:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 55.422340][ T29] audit: type=1326 audit(1767660386.052:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 55.445870][ T29] audit: type=1326 audit(1767660386.052:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 55.463466][ T4154] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.198: iget: bad extra_isize 90 (inode size 256) [ 55.469200][ T29] audit: type=1326 audit(1767660386.052:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 55.469235][ T29] audit: type=1326 audit(1767660386.052:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 55.469354][ T29] audit: type=1326 audit(1767660386.052:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 55.552987][ T29] audit: type=1326 audit(1767660386.052:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 55.576334][ T29] audit: type=1326 audit(1767660386.052:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 55.603932][ T4154] EXT4-fs (loop1): Remounting filesystem read-only [ 55.610687][ T4154] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 55.620405][ T4154] EXT4-fs (loop1): 1 orphan inode deleted [ 55.628133][ T4154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.640801][ T4154] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.714194][ T4175] loop4: detected capacity change from 0 to 1024 [ 55.732084][ T4175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.780924][ T4175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.941613][ T3378] tipc: Node number set to 2886997007 [ 56.567642][ T4250] siw: device registration error -23 [ 56.582236][ T4252] loop2: detected capacity change from 0 to 1024 [ 56.599409][ T4252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.624682][ T4252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.825871][ T4269] hub 1-0:1.0: USB hub found [ 56.836811][ T4269] hub 1-0:1.0: 8 ports detected [ 57.231148][ T4190] syz.4.205 (4190) used greatest stack depth: 7072 bytes left [ 57.273699][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.285195][ T4297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 57.771817][ T4327] loop0: detected capacity change from 0 to 512 [ 57.822504][ T4327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.861887][ T4327] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.882905][ T4327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.973553][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.214038][ T4361] netlink: 'syz.3.224': attribute type 9 has an invalid length. [ 58.690519][ T4374] loop3: detected capacity change from 0 to 512 [ 58.714390][ T4376] loop0: detected capacity change from 0 to 512 [ 58.723181][ T4376] ext4: Unknown parameter 'fowner' [ 58.732559][ T4374] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.765538][ T4374] EXT4-fs (loop3): 1 truncate cleaned up [ 58.771827][ T4374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.843316][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.086010][ T3485] IPVS: starting estimator thread 0... [ 59.184289][ T4392] IPVS: using max 1728 ests per chain, 86400 per kthread [ 59.363745][ T4400] syzkaller0: entered promiscuous mode [ 59.369296][ T4400] syzkaller0: entered allmulticast mode [ 59.628041][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 59.637548][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 59.760371][ T4417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 59.772500][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.811363][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.010792][ T4427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 60.041335][ T4429] netlink: 'syz.0.250': attribute type 29 has an invalid length. [ 60.056034][ T4427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 60.069439][ T4429] netlink: 'syz.0.250': attribute type 29 has an invalid length. [ 60.092187][ T4429] netlink: 500 bytes leftover after parsing attributes in process `syz.0.250'. [ 60.107955][ T4429] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 60.185926][ T4434] netlink: 'syz.4.252': attribute type 29 has an invalid length. [ 60.779950][ T4461] gretap0 speed is unknown, defaulting to 1000 [ 60.895008][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 60.895025][ T29] audit: type=1326 audit(1767660391.612:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5506bcf749 code=0x7ffc0000 [ 61.130222][ T29] audit: type=1326 audit(1767660391.642:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5506bcf749 code=0x7ffc0000 [ 61.153635][ T29] audit: type=1326 audit(1767660391.642:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5506bcf749 code=0x7ffc0000 [ 61.177042][ T29] audit: type=1326 audit(1767660391.642:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5506bcf783 code=0x7ffc0000 [ 61.200334][ T29] audit: type=1326 audit(1767660391.652:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5506bcf783 code=0x7ffc0000 [ 61.223616][ T29] audit: type=1326 audit(1767660391.652:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5506bcf749 code=0x7ffc0000 [ 61.247490][ T29] audit: type=1326 audit(1767660391.652:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5506bcf749 code=0x7ffc0000 [ 61.270964][ T29] audit: type=1326 audit(1767660391.652:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5506bcf749 code=0x7ffc0000 [ 61.294352][ T29] audit: type=1326 audit(1767660391.652:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5506bcf749 code=0x7ffc0000 [ 61.317725][ T29] audit: type=1326 audit(1767660391.672:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5506bcf749 code=0x7ffc0000 [ 61.564918][ T4475] netlink: 96 bytes leftover after parsing attributes in process `syz.0.265'. [ 61.742542][ T4480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.266'. [ 61.767802][ T4480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 62.144294][ T4501] gretap0 speed is unknown, defaulting to 1000 [ 62.363135][ T4509] netlink: 32 bytes leftover after parsing attributes in process `syz.1.278'. [ 62.437267][ T4511] syzkaller0: entered promiscuous mode [ 62.442947][ T4511] syzkaller0: entered allmulticast mode [ 62.681249][ T4519] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 62.909373][ T4539] loop2: detected capacity change from 0 to 512 [ 62.930542][ T4540] geneve2: entered promiscuous mode [ 62.935969][ T4540] geneve2: entered allmulticast mode [ 62.944517][ T4539] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.953687][ T4539] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.981187][ T4536] loop3: detected capacity change from 0 to 8192 [ 63.040435][ T4536] loop3: p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 63.041225][ T4536] loop3: p3 start 5963520 is beyond EOD, truncated [ 63.142482][ T4539] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.290: Allocating blocks 41-42 which overlap fs metadata [ 63.158854][ T4539] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.290: Allocating blocks 41-42 which overlap fs metadata [ 63.174599][ T4539] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.290: Failed to acquire dquot type 1 [ 63.186586][ T4539] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 63.201929][ T4539] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.290: corrupted inode contents [ 63.214067][ T4539] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.290: mark_inode_dirty error [ 63.226001][ T4539] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.290: corrupted inode contents [ 63.241315][ T4539] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.290: mark_inode_dirty error [ 63.256988][ T4549] loop4: detected capacity change from 0 to 512 [ 63.271921][ T4549] EXT4-fs: Ignoring removed nobh option [ 63.279471][ T4549] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 63.289719][ T4539] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.290: corrupted inode contents [ 63.303950][ T4549] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.293: invalid indirect mapped block 256 (level 1) [ 63.339847][ T4554] 9p: Unknown access argument 18446744073709551615: -34 [ 63.348816][ T4549] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.293: invalid indirect mapped block 2683928664 (level 1) [ 63.349643][ T4539] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 63.382950][ T4549] EXT4-fs (loop4): 1 truncate cleaned up [ 63.392098][ T4539] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.290: corrupted inode contents [ 63.394674][ T4549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.417182][ T4539] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.290: mark_inode_dirty error [ 63.435572][ T4548] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.293: Invalid block bitmap block 3 in block_group 0 [ 63.449172][ T4548] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 63.458204][ T4548] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.293: invalid indirect mapped block 2683928664 (level 1) [ 63.495025][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.530255][ T4539] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 63.598869][ T4539] EXT4-fs (loop2): 1 truncate cleaned up [ 63.607948][ T4561] loop0: detected capacity change from 0 to 512 [ 63.654728][ T4561] /dev/loop0: Can't open blockdev [ 63.663397][ T4539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.706394][ T4563] gretap0 speed is unknown, defaulting to 1000 [ 63.963951][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.103959][ T4585] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.303692][ T4585] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.389307][ T4593] netlink: 'syz.2.301': attribute type 29 has an invalid length. [ 64.444229][ T4595] gretap0 speed is unknown, defaulting to 1000 [ 64.566871][ T4585] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.651123][ T4597] netlink: 'syz.2.301': attribute type 29 has an invalid length. [ 64.680962][ T4585] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.682314][ T4593] __nla_validate_parse: 5 callbacks suppressed [ 64.682352][ T4593] netlink: 500 bytes leftover after parsing attributes in process `syz.2.301'. [ 64.728952][ T4593] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 64.748110][ T4599] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 64.781216][ T4599] bond1: entered promiscuous mode [ 64.786440][ T4599] bond1: entered allmulticast mode [ 64.810899][ T4021] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.823084][ T4577] udevd[4577]: inotify_add_watch(7, /dev/loop3p26, 10) failed: No such file or directory [ 64.834323][ T4575] udevd[4575]: inotify_add_watch(7, /dev/loop3p21, 10) failed: No such file or directory [ 64.845914][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p29, 10) failed: No such file or directory [ 64.847399][ T4579] udevd[4579]: inotify_add_watch(7, /dev/loop3p30, 10) failed: No such file or directory [ 64.865102][ T4021] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.869369][ T4580] udevd[4580]: inotify_add_watch(7, /dev/loop3p22, 10) failed: No such file or directory [ 64.885013][ T4566] udevd[4566]: inotify_add_watch(7, /dev/loop3p23, 10) failed: No such file or directory [ 64.895838][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 64.896724][ T4573] udevd[4573]: inotify_add_watch(7, /dev/loop3p24, 10) failed: No such file or directory [ 64.915648][ T4571] udevd[4571]: inotify_add_watch(7, /dev/loop3p27, 10) failed: No such file or directory [ 64.916319][ T3531] udevd[3531]: inotify_add_watch(7, /dev/loop3p25, 10) failed: No such file or directory [ 64.936182][ T4572] udevd[4572]: inotify_add_watch(7, /dev/loop3p20, 10) failed: No such file or directory [ 64.971805][ T4045] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.981108][ T4045] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.991684][ T4602] netlink: 24 bytes leftover after parsing attributes in process `syz.2.306'. [ 65.127665][ T4599] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 65.178996][ T4603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.305'. [ 65.262980][ T4599] bond1: (slave bridge2): making interface the new active one [ 65.270542][ T4599] bridge2: entered promiscuous mode [ 65.275959][ T4599] bridge2: entered allmulticast mode [ 65.424740][ T4599] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 65.486961][ T4603] bond1: left promiscuous mode [ 65.491933][ T4603] bridge2: left promiscuous mode [ 65.497013][ T4603] bond1: left allmulticast mode [ 65.501943][ T4603] bridge2: left allmulticast mode [ 65.578715][ T4603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.902288][ T29] kauditd_printk_skb: 1397 callbacks suppressed [ 65.902303][ T29] audit: type=1326 audit(1767660396.622:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3303065e7 code=0x7ffc0000 [ 65.931940][ T29] audit: type=1326 audit(1767660396.622:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe330342005 code=0x7ffc0000 [ 66.005621][ T4622] 9p: Unknown access argument 18446744073709551615: -34 [ 66.018715][ T29] audit: type=1326 audit(1767660396.622:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3302ab829 code=0x7ffc0000 [ 66.042147][ T29] audit: type=1326 audit(1767660396.622:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 66.065567][ T29] audit: type=1326 audit(1767660396.632:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3303065e7 code=0x7ffc0000 [ 66.088867][ T29] audit: type=1326 audit(1767660396.632:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3302ab829 code=0x7ffc0000 [ 66.112140][ T29] audit: type=1326 audit(1767660396.632:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 66.135483][ T29] audit: type=1326 audit(1767660396.652:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3303065e7 code=0x7ffc0000 [ 66.158752][ T29] audit: type=1326 audit(1767660396.652:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3302ab829 code=0x7ffc0000 [ 66.182181][ T29] audit: type=1326 audit(1767660396.652:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 66.348622][ T4627] gretap0 speed is unknown, defaulting to 1000 [ 66.483229][ T4632] loop2: detected capacity change from 0 to 512 [ 66.641114][ T4632] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.312: iget: bad extra_isize 90 (inode size 256) [ 66.663642][ T4637] loop3: detected capacity change from 0 to 256 [ 66.740356][ T4632] EXT4-fs (loop2): Remounting filesystem read-only [ 66.771890][ T4632] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 66.811803][ T4632] EXT4-fs (loop2): 1 orphan inode deleted [ 66.832960][ T4632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.908287][ T4635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 66.917323][ T4635] netem: change failed [ 66.926360][ T4632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.960027][ T4648] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.998397][ T4650] netlink: 'syz.0.323': attribute type 39 has an invalid length. [ 67.118914][ T4657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.326'. [ 67.193435][ T4664] loop2: detected capacity change from 0 to 1024 [ 67.204071][ T4664] EXT4-fs: Ignoring removed oldalloc option [ 67.210081][ T4664] EXT4-fs: Ignoring removed bh option [ 67.224442][ T4664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.246209][ T4664] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 67.261222][ T4664] EXT4-fs (loop2): Remounting filesystem read-only [ 67.289489][ T4670] loop4: detected capacity change from 0 to 1024 [ 67.296374][ T4670] EXT4-fs: Ignoring removed orlov option [ 67.306419][ T4670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.319991][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.357907][ T4673] gretap0 speed is unknown, defaulting to 1000 [ 67.581316][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.681482][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 67.720100][ T4689] team0: Port device team_slave_1 removed [ 67.872713][ T4697] gretap0 speed is unknown, defaulting to 1000 [ 67.896904][ T4699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 67.907560][ T4699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'. [ 68.074940][ T4713] gretap0 speed is unknown, defaulting to 1000 [ 68.362069][ T4739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4739 comm=syz.2.352 [ 68.767857][ T4757] gretap0 speed is unknown, defaulting to 1000 [ 68.982869][ T4762] gretap0 speed is unknown, defaulting to 1000 [ 68.989258][ T4760] loop3: detected capacity change from 0 to 2048 [ 69.266997][ T4765] loop2: detected capacity change from 0 to 1024 [ 69.292755][ T4765] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.304585][ T4765] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 69.347636][ T4765] JBD2: no valid journal superblock found [ 69.356918][ T4765] EXT4-fs (loop2): Could not load journal inode [ 69.394685][ T4760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.421408][ T4765] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 69.447516][ T4760] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.702210][ T4780] loop4: detected capacity change from 0 to 512 [ 69.709043][ T4771] loop2: detected capacity change from 0 to 8192 [ 69.752373][ T4780] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.802649][ T4780] EXT4-fs (loop4): 1 truncate cleaned up [ 69.811844][ T4780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.851944][ T4788] team0: Port device vlan2 added [ 70.031446][ T4797] loop1: detected capacity change from 0 to 256 [ 70.051309][ T4797] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.084889][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.093777][ T4799] gretap0 speed is unknown, defaulting to 1000 [ 70.105911][ T4774] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.361: bg 0: block 345: padding at end of block bitmap is not set [ 70.130844][ T4797] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.161844][ T4774] EXT4-fs (loop3): Remounting filesystem read-only [ 70.168478][ T4039] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 70.190486][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 70.285002][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.292945][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.313737][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.321224][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.328821][ T3319] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 70.336634][ T3319] FAT-fs (loop1): Filesystem has been set read-only [ 70.404035][ T4810] loop2: detected capacity change from 0 to 1024 [ 70.414707][ T3319] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 70.423357][ T4810] EXT4-fs: Ignoring removed orlov option [ 70.451828][ T4810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.489013][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.634734][ T4816] loop3: detected capacity change from 0 to 1024 [ 70.655506][ T4816] EXT4-fs: Ignoring removed oldalloc option [ 70.661544][ T4816] EXT4-fs: Ignoring removed bh option [ 70.703682][ T4816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.758442][ T4816] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 70.818556][ T4816] EXT4-fs (loop3): Remounting filesystem read-only [ 70.863861][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.928205][ T4039] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.004942][ T4826] gretap0 speed is unknown, defaulting to 1000 [ 71.026625][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.113659][ T4039] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.183908][ T4039] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.232101][ T4851] 9p: Unknown access argument 18446744073709551615: -34 [ 71.274759][ T29] kauditd_printk_skb: 815 callbacks suppressed [ 71.274774][ T29] audit: type=1400 audit(1767660401.992:3532): avc: denied { mount } for pid=4852 comm="syz.4.389" name="/" dev="configfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 71.337491][ T4039] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.358509][ T29] audit: type=1400 audit(1767660402.022:3533): avc: denied { search } for pid=4852 comm="syz.4.389" name="/" dev="configfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.380694][ T29] audit: type=1400 audit(1767660402.022:3534): avc: denied { search } for pid=4852 comm="syz.4.389" name="/" dev="configfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.402900][ T29] audit: type=1400 audit(1767660402.022:3535): avc: denied { read open } for pid=4852 comm="syz.4.389" path="/" dev="configfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.438670][ T4860] loop3: detected capacity change from 0 to 512 [ 71.453180][ T4860] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.388: iget: bad extra_isize 90 (inode size 256) [ 71.468601][ T4836] gretap0 speed is unknown, defaulting to 1000 [ 71.470466][ T4860] EXT4-fs (loop3): Remounting filesystem read-only [ 71.481539][ T4860] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 71.490786][ T4860] EXT4-fs (loop3): 1 orphan inode deleted [ 71.497193][ T4860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.509985][ T4860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.584746][ T4039] bridge_slave_1: left allmulticast mode [ 71.590626][ T4039] bridge_slave_1: left promiscuous mode [ 71.596511][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.606515][ T29] audit: type=1400 audit(1767660402.322:3536): avc: denied { read } for pid=3043 comm="dhcpcd" name="n28" dev="tmpfs" ino=3290 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.628347][ T29] audit: type=1400 audit(1767660402.322:3537): avc: denied { open } for pid=3043 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=3290 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.652433][ T4039] bridge_slave_0: left allmulticast mode [ 71.658240][ T4039] bridge_slave_0: left promiscuous mode [ 71.663976][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.774619][ T4867] loop0: detected capacity change from 0 to 512 [ 71.802654][ T29] audit: type=1400 audit(1767660402.322:3538): avc: denied { getattr } for pid=3043 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=3290 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.828123][ T4867] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.842741][ T4039] bond1 (unregistering): (slave bridge2): Releasing active interface [ 71.863313][ T4869] loop3: detected capacity change from 0 to 1024 [ 71.875633][ T4869] EXT4-fs: Ignoring removed orlov option [ 71.878659][ T4867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.913299][ T4869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.927922][ T4039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.937948][ T4867] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.956598][ T4039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.974639][ T4039] bond0 (unregistering): Released all slaves [ 71.990533][ T4039] bond1 (unregistering): Released all slaves [ 72.054356][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.076318][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.084036][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.127104][ T4039] veth1_macvtap: left promiscuous mode [ 72.136646][ T4039] veth0_macvtap: left promiscuous mode [ 72.155140][ T4039] veth1_vlan: left promiscuous mode [ 72.169281][ T4039] veth0_vlan: left promiscuous mode [ 72.247402][ T29] audit: type=1400 audit(1767660402.962:3539): avc: denied { create } for pid=4877 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.360361][ T29] audit: type=1400 audit(1767660402.982:3540): avc: denied { write } for pid=4877 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth3.link" dev="tmpfs" ino=3353 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.386628][ T29] audit: type=1400 audit(1767660402.982:3541): avc: denied { append } for pid=4877 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" dev="tmpfs" ino=3353 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.428747][ T4039] team0 (unregistering): Port device team_slave_1 removed [ 72.464601][ T4039] team0 (unregistering): Port device team_slave_0 removed [ 72.551876][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.588203][ T4836] chnl_net:caif_netlink_parms(): no params data found [ 72.649604][ T4904] Cannot find set identified by id 0 to match [ 72.760524][ T4836] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.767696][ T4836] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.783249][ T4836] bridge_slave_0: entered allmulticast mode [ 72.790009][ T4836] bridge_slave_0: entered promiscuous mode [ 72.798014][ T4836] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.805353][ T4836] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.813616][ T4836] bridge_slave_1: entered allmulticast mode [ 72.820723][ T4836] bridge_slave_1: entered promiscuous mode [ 72.849274][ T4836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.879174][ T4836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.918634][ T4929] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 72.942253][ T4836] team0: Port device team_slave_0 added [ 72.958851][ T4836] team0: Port device team_slave_1 added [ 72.975655][ T4929] team0: Device dummy0 is already a lower device of the team interface [ 73.000050][ T4938] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 73.040121][ T4943] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.040230][ T4942] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.069510][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.076869][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.102954][ T4836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.132661][ T4942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.167569][ T4938] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 73.176873][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.183924][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.210092][ T4836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.315749][ T4943] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.560222][ T4960] cgroup: fork rejected by pids controller in /syz0 [ 73.574411][ T4943] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.588198][ T4836] hsr_slave_0: entered promiscuous mode [ 74.094807][ T6506] netlink: 'syz.0.409': attribute type 7 has an invalid length. [ 74.102536][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 74.144946][ T4836] hsr_slave_1: entered promiscuous mode [ 74.150923][ T4836] debugfs: 'hsr0' already exists in 'hsr' [ 74.156727][ T4836] Cannot create hsr debugfs directory [ 74.172998][ T5490] gretap0 speed is unknown, defaulting to 1000 [ 74.222643][ T4943] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.376196][ T4036] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.396390][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 74.446649][ T4036] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.455161][ T6515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.474802][ T6515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.505630][ T4036] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.544082][ T4036] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.587393][ T4836] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.617013][ T4836] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.642442][ T4836] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.672260][ T4836] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.752253][ T6532] gretap0 speed is unknown, defaulting to 1000 [ 74.826085][ T4836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.866625][ T4836] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.899835][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.907119][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.930375][ T4021] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.937725][ T4021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.030261][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.145822][ T4836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.207281][ T6568] set_capacity_and_notify: 1 callbacks suppressed [ 75.207299][ T6568] loop4: detected capacity change from 0 to 512 [ 75.234043][ T6568] EXT4-fs: Ignoring removed nobh option [ 75.252317][ T3004] udevd[3004]: worker [3307] terminated by signal 33 (Unknown signal 33) [ 75.261192][ T6568] EXT4-fs: old and new quota format mixing [ 75.269688][ T3004] udevd[3004]: worker [3307] failed while handling '/devices/virtual/block/loop4' [ 75.350830][ T4836] veth0_vlan: entered promiscuous mode [ 75.368344][ T4836] veth1_vlan: entered promiscuous mode [ 75.393262][ T4836] veth0_macvtap: entered promiscuous mode [ 75.401086][ T4836] veth1_macvtap: entered promiscuous mode [ 75.438679][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.460040][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.500239][ T4033] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.539264][ T4033] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.567182][ T4033] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.588134][ T4033] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.949382][ T6606] loop5: detected capacity change from 0 to 1024 [ 75.976246][ T6606] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 75.987326][ T6606] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 76.044134][ T6606] JBD2: no valid journal superblock found [ 76.049900][ T6606] EXT4-fs (loop5): Could not load journal inode [ 76.189883][ T6593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6593 comm=syz.4.427 [ 76.232990][ T6616] netlink: 'syz.2.433': attribute type 13 has an invalid length. [ 76.438612][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.445824][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.471938][ T6616] batman_adv: batadv0: Interface deactivated: dummy0 [ 76.536244][ T6616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.570085][ T6616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.705121][ T6644] capability: warning: `syz.3.435' uses deprecated v2 capabilities in a way that may be insecure [ 76.878832][ T6621] gretap0 speed is unknown, defaulting to 1000 [ 76.885119][ T6621] syz1: Port: 1 Link DOWN [ 76.910979][ T6641] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 76.925164][ T4039] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.964274][ T6644] gretap0 speed is unknown, defaulting to 1000 [ 76.972275][ T4039] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.986980][ T4039] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.054810][ T4039] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.167735][ T6652] loop2: detected capacity change from 0 to 1024 [ 77.235515][ T6652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.347879][ T6652] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.371561][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 77.371578][ T29] audit: type=1400 audit(1767660408.082:3567): avc: denied { remount } for pid=6651 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.405401][ T6652] EXT4-fs (loop2): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 77.496704][ T6649] net_ratelimit: 12 callbacks suppressed [ 77.496718][ T6649] Set syz1 is full, maxelem 65536 reached [ 77.519677][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.582207][ T6663] loop5: detected capacity change from 0 to 1024 [ 77.590251][ T6668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.444'. [ 77.612051][ T6663] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.623168][ T6663] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.649215][ T6663] JBD2: no valid journal superblock found [ 77.655287][ T6663] EXT4-fs (loop5): Could not load journal inode [ 77.985721][ T6687] loop5: detected capacity change from 0 to 764 [ 78.014880][ T6687] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 78.047897][ T29] audit: type=1400 audit(1767660408.762:3568): avc: denied { wake_alarm } for pid=6686 comm="syz.5.450" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.153031][ T6693] loop2: detected capacity change from 0 to 256 [ 78.164135][ T6693] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.192073][ T6693] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.232405][ T6695] capability: warning: `syz.3.454' uses 32-bit capabilities (legacy support in use) [ 78.338222][ T6700] loop3: detected capacity change from 0 to 512 [ 78.347674][ T3314] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 78.355448][ T3314] FAT-fs (loop2): Filesystem has been set read-only [ 78.377288][ T6700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.390797][ T3314] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 78.398852][ T6700] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.476322][ T29] audit: type=1400 audit(1767660409.192:3569): avc: denied { create } for pid=6699 comm="syz.3.455" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 78.528323][ T29] audit: type=1400 audit(1767660409.222:3570): avc: denied { rename } for pid=6699 comm="syz.3.455" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.550579][ T29] audit: type=1400 audit(1767660409.222:3571): avc: denied { reparent } for pid=6699 comm="syz.3.455" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.572983][ T29] audit: type=1400 audit(1767660409.222:3572): avc: denied { add_name } for pid=6699 comm="syz.3.455" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 78.651275][ T6705] netlink: 256 bytes leftover after parsing attributes in process `syz.0.457'. [ 78.700860][ T29] audit: type=1326 audit(1767660409.412:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 78.724493][ T29] audit: type=1326 audit(1767660409.412:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 78.748536][ T29] audit: type=1326 audit(1767660409.412:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 78.771935][ T29] audit: type=1326 audit(1767660409.412:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe33030f749 code=0x7ffc0000 [ 79.016404][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.042149][ T6727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6727 comm=syz.0.462 [ 79.106998][ T6733] netlink: 'syz.4.468': attribute type 13 has an invalid length. [ 79.154119][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.161458][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.278230][ T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.288735][ T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.307283][ T37] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.321025][ T37] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.374971][ T6742] netlink: 'syz.5.481': attribute type 1 has an invalid length. [ 79.388931][ T6744] loop4: detected capacity change from 0 to 1024 [ 79.414002][ T6744] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.424969][ T6744] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.436062][ T6744] JBD2: no valid journal superblock found [ 79.442275][ T6744] EXT4-fs (loop4): Could not load journal inode [ 79.473445][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.481'. [ 79.485156][ T6742] bridge_slave_1: left allmulticast mode [ 79.490877][ T6742] bridge_slave_1: left promiscuous mode [ 79.496651][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.505791][ T6742] bridge_slave_0: left allmulticast mode [ 79.511702][ T6742] bridge_slave_0: left promiscuous mode [ 79.517461][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.770144][ T6752] gretap0 speed is unknown, defaulting to 1000 [ 80.145517][ T6765] vhci_hcd vhci_hcd.3: default hub control req: 000a v0009 i0001 l0 [ 80.295200][ T6769] loop0: detected capacity change from 0 to 2048 [ 80.334257][ T6769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.352052][ T6769] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.526252][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 80.535843][ T6782] netlink: 348 bytes leftover after parsing attributes in process `syz.3.487'. [ 80.545640][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 80.555100][ T6782] netlink: 348 bytes leftover after parsing attributes in process `syz.3.487'. [ 80.580395][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 80.619799][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 80.633670][ T6782] netlink: 348 bytes leftover after parsing attributes in process `syz.3.487'. [ 80.858796][ T4036] bridge_slave_1: left allmulticast mode [ 80.864852][ T4036] bridge_slave_1: left promiscuous mode [ 80.870602][ T4036] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.877957][ T6777] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.483: bg 0: block 345: padding at end of block bitmap is not set [ 80.902532][ T6777] EXT4-fs (loop0): Remounting filesystem read-only [ 80.909240][ T4039] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 80.936638][ T4036] bridge_slave_0: left allmulticast mode [ 80.942374][ T4036] bridge_slave_0: left promiscuous mode [ 80.948203][ T4036] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.979709][ T6805] loop3: detected capacity change from 0 to 128 [ 81.079156][ T6815] loop5: detected capacity change from 0 to 512 [ 81.102002][ T6815] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 81.113649][ T6815] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 81.123874][ T6815] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.495: Corrupt directory, running e2fsck is recommended [ 81.141996][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.146572][ T6815] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 81.169555][ T6815] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.495: corrupted in-inode xattr: e_name out of bounds [ 81.183660][ T6815] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.495: couldn't read orphan inode 15 (err -117) [ 81.196293][ T6815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.236390][ T4036] hsr_slave_0: left promiscuous mode [ 81.250062][ T4036] hsr_slave_1: left promiscuous mode [ 81.252127][ T6815] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 81.277619][ T4036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.310069][ T4036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.320679][ T4036] batman_adv: batadv0: Removing interface: dummy0 [ 81.344010][ T4036] batman_adv: batadv0: Removing interface: vlan2 [ 81.450935][ T4036] team0 (unregistering): Port device team_slave_1 removed [ 81.491021][ T4036] team0 (unregistering): Port device team_slave_0 removed [ 81.575588][ T6828] tipc: Started in network mode [ 81.580737][ T6828] tipc: Node identity 84e, cluster identity 4711 [ 81.587265][ T6828] tipc: Node number set to 2126 [ 81.600194][ T6821] Set syz1 is full, maxelem 65536 reached [ 81.627216][ T4836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.712932][ T6842] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 81.773663][ T6846] xt_hashlimit: size too large, truncated to 1048576 [ 81.780454][ T6846] xt_hashlimit: max too large, truncated to 1048576 [ 81.793598][ T6846] loop3: detected capacity change from 0 to 512 [ 81.800492][ T6846] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.813526][ T6846] EXT4-fs (loop3): 1 truncate cleaned up [ 81.820753][ T6846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.893795][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.022861][ T6795] chnl_net:caif_netlink_parms(): no params data found [ 82.150976][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.158289][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.207474][ T6795] bridge_slave_0: entered allmulticast mode [ 82.222281][ T6795] bridge_slave_0: entered promiscuous mode [ 82.236414][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.243659][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.252776][ T6795] bridge_slave_1: entered allmulticast mode [ 82.259544][ T6795] bridge_slave_1: entered promiscuous mode [ 82.286246][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.305917][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.350565][ T6795] team0: Port device team_slave_0 added [ 82.365408][ T6795] team0: Port device team_slave_1 added [ 82.406571][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.413717][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.439722][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.496116][ T6896] loop9: detected capacity change from 0 to 7 [ 82.507437][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.514591][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.540796][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.561795][ T6896] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.569837][ T6896] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.577763][ T6896] loop9: unable to read partition table [ 82.601589][ T6896] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 82.601589][ T6896] ) failed (rc=-5) [ 82.620442][ T4572] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.648633][ T4572] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.659942][ T6795] hsr_slave_0: entered promiscuous mode [ 82.666046][ T4572] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.682153][ T6795] hsr_slave_1: entered promiscuous mode [ 82.688294][ T6795] debugfs: 'hsr0' already exists in 'hsr' [ 82.694154][ T6795] Cannot create hsr debugfs directory [ 82.700371][ T4572] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.711729][ T4572] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.912592][ T6795] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 82.931912][ T6795] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 82.943839][ T6795] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 82.957269][ T6795] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 82.977511][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 82.977524][ T29] audit: type=1400 audit(1767660413.692:3641): avc: denied { read } for pid=6917 comm="syz.3.512" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.006500][ T29] audit: type=1400 audit(1767660413.692:3642): avc: denied { open } for pid=6917 comm="syz.3.512" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.047137][ T29] audit: type=1400 audit(1767660413.752:3643): avc: denied { ioctl } for pid=6917 comm="syz.3.512" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.082751][ T6924] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.156966][ T6934] __nla_validate_parse: 8 callbacks suppressed [ 83.157042][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.516'. [ 83.180406][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.211075][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.222807][ T3992] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.229930][ T3992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.253363][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.517'. [ 83.274848][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.281961][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.307500][ T6924] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.428912][ T6924] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.469857][ T6949] loop5: detected capacity change from 0 to 512 [ 83.505045][ T6949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.537253][ T6949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.564493][ T6924] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.582774][ T6949] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.656818][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.712720][ T6949] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.521: corrupted inode contents [ 83.728766][ T6949] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #18: comm syz.5.521: mark_inode_dirty error [ 83.746577][ T6949] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.521: corrupted inode contents [ 83.759676][ T6958] loop4: detected capacity change from 0 to 8192 [ 83.766495][ T6949] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #18: comm syz.5.521: mark_inode_dirty error [ 83.788406][ T4021] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.797541][ T4021] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.813583][ T6949] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #18: comm syz.5.521: mark inode dirty (error -117) [ 83.861850][ T4021] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.882644][ T6949] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 83.892004][ T4021] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.945867][ T4836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.961113][ T29] audit: type=1400 audit(1767660414.672:3644): avc: denied { connect } for pid=6957 comm="syz.4.523" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.144881][ T6976] loop5: detected capacity change from 0 to 2048 [ 84.177894][ T6981] bridge0: entered promiscuous mode [ 84.192035][ T6983] netlink: 'syz.4.528': attribute type 13 has an invalid length. [ 84.202902][ T6981] bridge0: left promiscuous mode [ 84.237662][ T6976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.266393][ T6795] veth0_vlan: entered promiscuous mode [ 84.274541][ T6795] veth1_vlan: entered promiscuous mode [ 84.287916][ T6795] veth0_macvtap: entered promiscuous mode [ 84.343737][ T6795] veth1_macvtap: entered promiscuous mode [ 84.358572][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.375902][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.395846][ T4036] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.410850][ T4036] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.438846][ T4036] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.451762][ T4036] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.462665][ T6968] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 84.478191][ T29] audit: type=1400 audit(1767660415.202:3645): avc: denied { write } for pid=6994 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.539983][ T6997] netlink: 64 bytes leftover after parsing attributes in process `syz.4.534'. [ 84.558456][ T6968] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 8 with error 28 [ 84.570858][ T6968] EXT4-fs (loop5): This should not happen!! Data will be lost [ 84.570858][ T6968] [ 84.580733][ T6968] EXT4-fs (loop5): Total free blocks count 0 [ 84.586784][ T6968] EXT4-fs (loop5): Free/Dirty block details [ 84.592749][ T6968] EXT4-fs (loop5): free_blocks=2415919504 [ 84.598520][ T6968] EXT4-fs (loop5): dirty_blocks=16 [ 84.603777][ T6968] EXT4-fs (loop5): Block reservation details [ 84.609784][ T6968] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 84.633265][ T7001] loop6: detected capacity change from 0 to 1024 [ 84.640185][ T7001] EXT4-fs: Ignoring removed bh option [ 84.678046][ T4836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.678073][ T7001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.730222][ T7001] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 84.796272][ T7001] EXT4-fs (loop6): Remounting filesystem read-only [ 84.803437][ T7001] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 84.831406][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 84.857626][ T6795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.878303][ T7011] ip6gre1: entered allmulticast mode [ 84.921310][ T7015] sch_fq: defrate 4294967295 ignored. [ 85.176443][ T7024] loop6: detected capacity change from 0 to 2048 [ 85.236345][ T7024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.250735][ T7024] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.566039][ T29] audit: type=1326 audit(1767660416.282:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 85.589849][ T29] audit: type=1326 audit(1767660416.282:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 85.631691][ T29] audit: type=1326 audit(1767660416.332:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 85.655001][ T29] audit: type=1326 audit(1767660416.332:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 85.678695][ T29] audit: type=1326 audit(1767660416.332:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 85.923059][ T7051] netlink: 92 bytes leftover after parsing attributes in process `syz.0.545'. [ 85.932693][ T7031] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.540: bg 0: block 345: padding at end of block bitmap is not set [ 86.007069][ T7031] EXT4-fs (loop6): Remounting filesystem read-only [ 86.015324][ T4033] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 86.031201][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.544'. [ 86.120863][ T7054] Dead loop on virtual device ip6_vti0, fix it urgently! [ 86.128199][ T7054] Dead loop on virtual device ip6_vti0, fix it urgently! [ 86.135415][ T7054] Dead loop on virtual device ip6_vti0, fix it urgently! [ 86.142873][ T7054] Dead loop on virtual device ip6_vti0, fix it urgently! [ 86.150169][ T7054] Dead loop on virtual device ip6_vti0, fix it urgently! [ 86.157523][ T7054] Dead loop on virtual device ip6_vti0, fix it urgently! [ 86.276046][ T6795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.439450][ T7090] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=7090 comm=syz.3.555 [ 86.530088][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.556'. [ 86.650495][ T7105] loop3: detected capacity change from 0 to 1024 [ 86.663453][ T7105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 86.683273][ T7105] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.698494][ T7110] netlink: 'syz.6.561': attribute type 1 has an invalid length. [ 86.706803][ T7106] loop4: detected capacity change from 0 to 2048 [ 86.724633][ T7105] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.560: Freeing blocks not in datazone - block = 0, count = 16 [ 86.739506][ T7105] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.560: bg 0: block 112: padding at end of block bitmap is not set [ 86.745811][ T7110] ip6gretap0: entered allmulticast mode [ 86.758746][ T7105] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 35 with error 28 [ 86.771883][ T7105] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.771883][ T7105] [ 86.774662][ T7106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.781710][ T7105] EXT4-fs (loop3): Total free blocks count 0 [ 86.781729][ T7105] EXT4-fs (loop3): Free/Dirty block details [ 86.806118][ T7105] EXT4-fs (loop3): free_blocks=0 [ 86.811108][ T7105] EXT4-fs (loop3): dirty_blocks=64 [ 86.816440][ T7105] EXT4-fs (loop3): Block reservation details [ 86.822522][ T7105] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 86.872590][ T4033] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 86.971131][ T7100] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 86.986514][ T7100] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 160 with max blocks 22 with error 28 [ 86.999101][ T7100] EXT4-fs (loop4): This should not happen!! Data will be lost [ 86.999101][ T7100] [ 87.008899][ T7100] EXT4-fs (loop4): Total free blocks count 0 [ 87.015115][ T7100] EXT4-fs (loop4): Free/Dirty block details [ 87.021068][ T7100] EXT4-fs (loop4): free_blocks=2415919504 [ 87.027034][ T7100] EXT4-fs (loop4): dirty_blocks=32 [ 87.032280][ T7100] EXT4-fs (loop4): Block reservation details [ 87.038354][ T7100] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 87.057334][ T7125] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 87.103211][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.477336][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.573'. [ 87.486316][ T7166] netlink: 36 bytes leftover after parsing attributes in process `syz.5.573'. [ 87.591264][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.579'. [ 87.825930][ T7194] syz.3.583 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.859976][ T7198] loop3: detected capacity change from 0 to 164 [ 87.870151][ T7198] iso9660: Unknown parameter 'unhide6a5s' [ 87.879138][ T7198] netlink: 'syz.3.585': attribute type 30 has an invalid length. [ 87.980798][ T7203] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7203 comm=syz.5.587 [ 88.000982][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 88.000999][ T29] audit: type=1400 audit(1767660418.712:4205): avc: denied { bind } for pid=7204 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.026513][ T29] audit: type=1400 audit(1767660418.712:4206): avc: denied { name_bind } for pid=7204 comm="syz.3.588" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.049977][ T29] audit: type=1400 audit(1767660418.712:4207): avc: denied { node_bind } for pid=7204 comm="syz.3.588" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 88.098677][ T7209] netlink: 'syz.3.590': attribute type 13 has an invalid length. [ 88.286637][ T7217] netlink: 'syz.5.593': attribute type 4 has an invalid length. [ 88.357855][ T29] audit: type=1326 audit(1767660419.072:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.5.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 88.452025][ T29] audit: type=1326 audit(1767660419.072:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.5.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 88.475459][ T29] audit: type=1326 audit(1767660419.142:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.5.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 88.498776][ T29] audit: type=1326 audit(1767660419.142:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.5.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 88.522368][ T29] audit: type=1326 audit(1767660419.142:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.5.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 88.554478][ T29] audit: type=1326 audit(1767660419.272:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.5.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 88.578114][ T29] audit: type=1326 audit(1767660419.272:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.5.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 88.753228][ T7236] loop6: detected capacity change from 0 to 1024 [ 88.793432][ T7236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.815687][ T7236] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.856301][ T7236] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.600: Freeing blocks not in datazone - block = 0, count = 16 [ 88.891931][ T7236] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.600: bg 0: block 112: padding at end of block bitmap is not set [ 88.906591][ T7236] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 35 with error 28 [ 88.919071][ T7236] EXT4-fs (loop6): This should not happen!! Data will be lost [ 88.919071][ T7236] [ 88.928779][ T7236] EXT4-fs (loop6): Total free blocks count 0 [ 88.934985][ T7236] EXT4-fs (loop6): Free/Dirty block details [ 88.940910][ T7236] EXT4-fs (loop6): free_blocks=0 [ 88.946026][ T7236] EXT4-fs (loop6): dirty_blocks=64 [ 88.951237][ T7236] EXT4-fs (loop6): Block reservation details [ 88.957276][ T7236] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 88.976960][ T4045] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 89.055718][ T7254] bridge: RTM_NEWNEIGH with invalid ether address [ 89.203045][ T7264] 9p: Unknown access argument 18446744073709551615: -34 [ 89.303823][ T7274] __nla_validate_parse: 2 callbacks suppressed [ 89.303842][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'. [ 89.319194][ T7274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.615'. [ 89.364813][ T7274] bridge0: port 3(vlan3) entered blocking state [ 89.371430][ T7274] bridge0: port 3(vlan3) entered disabled state [ 89.408405][ T7279] netlink: 24 bytes leftover after parsing attributes in process `syz.5.616'. [ 89.421745][ T7274] vlan3: entered allmulticast mode [ 89.426957][ T7274] bridge0: entered allmulticast mode [ 89.484020][ T7280] loop6: detected capacity change from 0 to 512 [ 89.501389][ T7274] vlan3: left allmulticast mode [ 89.506371][ T7274] bridge0: left allmulticast mode [ 89.536599][ T7280] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.611: iget: bad extra_isize 90 (inode size 256) [ 89.573428][ T7280] EXT4-fs (loop6): Remounting filesystem read-only [ 89.623465][ T7285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.617'. [ 89.648134][ T7280] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 89.657301][ T7280] EXT4-fs (loop6): 1 orphan inode deleted [ 89.663736][ T7280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.678495][ T7280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.705085][ T7285] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7285 comm=syz.3.617 [ 89.828099][ T7291] loop0: detected capacity change from 0 to 2048 [ 89.915208][ T7291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.981286][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.628'. [ 90.019167][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.628'. [ 90.043818][ T7310] team0: Port device team_slave_1 removed [ 90.088098][ T7318] netlink: 'syz.5.632': attribute type 12 has an invalid length. [ 90.103203][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.631'. [ 90.163878][ T7320] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7320 comm=syz.4.631 [ 90.185363][ T7286] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 90.224531][ T7286] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 224 with max blocks 2 with error 28 [ 90.237092][ T7286] EXT4-fs (loop0): This should not happen!! Data will be lost [ 90.237092][ T7286] [ 90.247140][ T7286] EXT4-fs (loop0): Total free blocks count 0 [ 90.253273][ T7286] EXT4-fs (loop0): Free/Dirty block details [ 90.259233][ T7286] EXT4-fs (loop0): free_blocks=2415919504 [ 90.265049][ T7286] EXT4-fs (loop0): dirty_blocks=16 [ 90.270184][ T7286] EXT4-fs (loop0): Block reservation details [ 90.276290][ T7286] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 90.307773][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.362288][ T7334] vlan2: entered allmulticast mode [ 90.397843][ T7334] dummy0: entered allmulticast mode [ 90.492068][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 90.578514][ T7346] netlink: 96 bytes leftover after parsing attributes in process `syz.0.640'. [ 90.894050][ T7356] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 90.945529][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 91.231851][ T4045] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.446930][ T7360] Set syz1 is full, maxelem 65536 reached [ 91.561233][ T7371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.183417][ T7366] loop3: detected capacity change from 0 to 512 [ 92.199509][ T7366] EXT4-fs: Ignoring removed i_version option [ 92.209661][ T7366] EXT4-fs (loop3): orphan cleanup on readonly fs [ 92.240231][ T7366] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.647: EA inode hash validation failed [ 92.257306][ T7366] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.270703][ T7366] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.647: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 92.286359][ T7366] EXT4-fs (loop3): Remounting filesystem read-only [ 92.292937][ T7366] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.3.647: ea_inode dec ref err=-117 [ 92.310162][ T7366] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 92.319438][ T7366] EXT4-fs (loop3): 1 orphan inode deleted [ 92.326694][ T7366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 92.620922][ T7385] loop5: detected capacity change from 0 to 1024 [ 92.632800][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.642807][ T7385] EXT4-fs: inline encryption not supported [ 92.648781][ T7385] EXT4-fs: Ignoring removed orlov option [ 92.690639][ T7385] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 92.724491][ T7385] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84cc018, mo2=0002] [ 92.751006][ T7385] System zones: 0-1, 3-12 [ 92.770464][ T7385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.824392][ T7385] netlink: 'syz.5.656': attribute type 4 has an invalid length. [ 92.897319][ T7396] netlink: 'syz.5.656': attribute type 4 has an invalid length. [ 92.926293][ T4836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.180089][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 93.180106][ T29] audit: type=1326 audit(1767660423.892:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 93.227791][ T29] audit: type=1326 audit(1767660423.932:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 93.251427][ T29] audit: type=1326 audit(1767660423.932:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 93.261658][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.275359][ T29] audit: type=1326 audit(1767660423.932:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 93.304510][ T29] audit: type=1326 audit(1767660423.932:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 93.327920][ T29] audit: type=1326 audit(1767660423.932:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 93.351242][ T29] audit: type=1326 audit(1767660423.932:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 93.374637][ T29] audit: type=1326 audit(1767660423.932:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd2c09bf749 code=0x7ffc0000 [ 93.398028][ T29] audit: type=1326 audit(1767660423.932:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd2c09bf783 code=0x7ffc0000 [ 93.421204][ T29] audit: type=1326 audit(1767660423.932:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd2c09bf783 code=0x7ffc0000 [ 93.679181][ T7431] netlink: '+@': attribute type 4 has an invalid length. [ 93.842604][ T7449] loop6: detected capacity change from 0 to 1764 [ 93.933665][ T7454] loop6: detected capacity change from 0 to 512 [ 93.972662][ T7454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.042315][ T7459] syzkaller0: entered allmulticast mode [ 94.062131][ T7459] syzkaller0: entered promiscuous mode [ 94.081322][ T6795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.092148][ T7459] syzkaller0 (unregistering): left allmulticast mode [ 94.098876][ T7459] syzkaller0 (unregistering): left promiscuous mode [ 94.353070][ T7485] bridge: RTM_NEWNEIGH with invalid ether address [ 94.387405][ T7487] loop6: detected capacity change from 0 to 256 [ 94.395362][ T7487] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.410233][ T7487] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.485879][ T7489] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 94.486530][ T7493] netlink: 'syz.5.688': attribute type 1 has an invalid length. [ 94.508451][ T7493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.526506][ T7493] macvlan2: entered promiscuous mode [ 94.531934][ T7493] macvlan2: entered allmulticast mode [ 94.538658][ T7493] bond1: entered promiscuous mode [ 94.544237][ T7493] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.552733][ T7493] bond1: left promiscuous mode [ 94.598649][ T7501] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -26339, delta: 1 [ 94.607618][ T7501] ref_ctr increment failed for inode: 0xa6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811b0ca1c0 [ 94.808024][ T7520] netlink: 'syz.6.691': attribute type 1 has an invalid length. [ 94.962443][ T7524] __nla_validate_parse: 1 callbacks suppressed [ 94.962459][ T7524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.693'. [ 95.014119][ T7529] netlink: 'syz.4.695': attribute type 30 has an invalid length. [ 96.017555][ T7596] mmap: syz.0.707 (7596) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.041071][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.708'. [ 96.197666][ T7598] netlink: 40 bytes leftover after parsing attributes in process `syz.4.709'. [ 96.263540][ T7598] ip6gre1: entered promiscuous mode [ 96.268818][ T7598] ip6gre1: entered allmulticast mode [ 96.307138][ T7558] Set syz1 is full, maxelem 65536 reached [ 96.557720][ T7607] syz.4.712 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 96.571818][ T7607] CPU: 0 UID: 0 PID: 7607 Comm: syz.4.712 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.571888][ T7607] Tainted: [W]=WARN [ 96.571897][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.571954][ T7607] Call Trace: [ 96.571961][ T7607] [ 96.571971][ T7607] __dump_stack+0x1d/0x30 [ 96.572024][ T7607] dump_stack_lvl+0x95/0xd0 [ 96.572046][ T7607] dump_stack+0x15/0x1b [ 96.572065][ T7607] dump_header+0x81/0x240 [ 96.572084][ T7607] oom_kill_process+0x295/0x350 [ 96.572112][ T7607] out_of_memory+0x97b/0xb80 [ 96.572161][ T7607] try_charge_memcg+0x610/0xa10 [ 96.572209][ T7607] obj_cgroup_charge_pages+0xa6/0x150 [ 96.572280][ T7607] __memcg_kmem_charge_page+0x9f/0x170 [ 96.572460][ T7607] __alloc_frozen_pages_noprof+0x18f/0x360 [ 96.572501][ T7607] alloc_pages_mpol+0xb3/0x260 [ 96.572540][ T7607] alloc_pages_noprof+0x90/0x130 [ 96.572586][ T7607] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 96.572660][ T7607] __kvmalloc_node_noprof+0x492/0x6b0 [ 96.572686][ T7607] ? ip_set_alloc+0x24/0x30 [ 96.572792][ T7607] ? ip_set_alloc+0x24/0x30 [ 96.572825][ T7607] ? __kmalloc_cache_noprof+0x3e5/0x4c0 [ 96.572857][ T7607] ip_set_alloc+0x24/0x30 [ 96.572919][ T7607] hash_netiface_create+0x282/0x740 [ 96.572959][ T7607] ? __pfx_hash_netiface_create+0x10/0x10 [ 96.572994][ T7607] ip_set_create+0x3cc/0x970 [ 96.573057][ T7607] ? __nla_parse+0x40/0x60 [ 96.573090][ T7607] nfnetlink_rcv_msg+0x4c6/0x590 [ 96.573158][ T7607] netlink_rcv_skb+0x123/0x220 [ 96.573246][ T7607] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 96.573289][ T7607] nfnetlink_rcv+0x167/0x16c0 [ 96.573363][ T7607] ? trace_event_reg+0xe0/0x190 [ 96.573478][ T7607] ? perf_trace_add+0x176/0x1a0 [ 96.573509][ T7607] ? event_sched_in+0x675/0x750 [ 96.573531][ T7607] ? perf_tp_event+0x9b3/0x9f0 [ 96.573565][ T7607] ? visit_groups_merge+0xf7e/0xfd0 [ 96.573648][ T7607] ? perf_swevent_event+0x22f/0x450 [ 96.573675][ T7607] ? tracing_gen_ctx_irq_test+0xe5/0x120 [ 96.573738][ T7607] ? should_fail_ex+0x30/0x280 [ 96.573767][ T7607] ? selinux_nlmsg_lookup+0x99/0x890 [ 96.573855][ T7607] ? __rcu_read_unlock+0x34/0x70 [ 96.573873][ T7607] ? __netlink_lookup+0x266/0x2a0 [ 96.573916][ T7607] netlink_unicast+0x5c0/0x690 [ 96.574045][ T7607] netlink_sendmsg+0x58b/0x6b0 [ 96.574086][ T7607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.574120][ T7607] __sock_sendmsg+0x145/0x180 [ 96.574144][ T7607] ____sys_sendmsg+0x31e/0x4a0 [ 96.574217][ T7607] ___sys_sendmsg+0x17b/0x1d0 [ 96.574271][ T7607] __x64_sys_sendmsg+0xd4/0x160 [ 96.574311][ T7607] x64_sys_call+0x17ba/0x3000 [ 96.574381][ T7607] do_syscall_64+0xca/0x2b0 [ 96.574423][ T7607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.574445][ T7607] RIP: 0033:0x7fe33030f749 [ 96.574460][ T7607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.574482][ T7607] RSP: 002b:00007fe32ed6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.574634][ T7607] RAX: ffffffffffffffda RBX: 00007fe330565fa0 RCX: 00007fe33030f749 [ 96.574648][ T7607] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 96.574660][ T7607] RBP: 00007fe330393f91 R08: 0000000000000000 R09: 0000000000000000 [ 96.574672][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.574685][ T7607] R13: 00007fe330566038 R14: 00007fe330565fa0 R15: 00007ffd7797a1a8 [ 96.574737][ T7607] [ 96.574747][ T7607] memory: usage 307200kB, limit 307200kB, failcnt 913 [ 96.827810][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.711'. [ 96.829868][ T7607] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 96.829889][ T7607] kmem: usage 303092kB, limit 9007199254740988kB, failcnt 0 [ 96.834474][ T7603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.711'. [ 96.840336][ T7607] Memory cgroup stats for /syz4 [ 96.844825][ T7603] netlink: 196 bytes leftover after parsing attributes in process `syz.3.711'. [ 96.864452][ T7607] : [ 96.932224][ T7607] cache 4198400 [ 96.939546][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.711'. [ 96.946890][ T7607] rss 4096 [ 96.946900][ T7607] shmem 4194304 [ 96.946909][ T7607] mapped_file 4096 [ 96.962596][ T7603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.711'. [ 96.969618][ T7607] dirty 0 [ 96.972812][ T7603] netlink: 196 bytes leftover after parsing attributes in process `syz.3.711'. [ 96.975532][ T7607] writeback 0 [ 96.975543][ T7607] workingset_refault_anon 1353 [ 97.024014][ T7607] workingset_refault_file 1807 [ 97.029141][ T7607] swap 180224 [ 97.032487][ T7607] swapcached 8192 [ 97.036184][ T7607] pgpgin 86190 [ 97.039564][ T7607] pgpgout 85163 [ 97.043122][ T7607] pgfault 92644 [ 97.046591][ T7607] pgmajfault 257 [ 97.050143][ T7607] inactive_anon 0 [ 97.053833][ T7607] active_anon 8192 [ 97.057581][ T7607] inactive_file 0 [ 97.061257][ T7607] active_file 4096 [ 97.065048][ T7607] unevictable 4194304 [ 97.069125][ T7607] hierarchical_memory_limit 314572800 [ 97.074552][ T7607] hierarchical_memsw_limit 9223372036854771712 [ 97.080801][ T7607] total_cache 4198400 [ 97.084946][ T7607] total_rss 4096 [ 97.088517][ T7607] total_shmem 4194304 [ 97.092591][ T7607] total_mapped_file 4096 [ 97.096855][ T7607] total_dirty 0 [ 97.100329][ T7607] total_writeback 0 [ 97.104245][ T7607] total_workingset_refault_anon 1353 [ 97.109569][ T7607] total_workingset_refault_file 1807 [ 97.114948][ T7607] total_swap 180224 [ 97.118772][ T7607] total_swapcached 8192 [ 97.122977][ T7607] total_pgpgin 86190 [ 97.127040][ T7607] total_pgpgout 85163 [ 97.131294][ T7607] total_pgfault 92644 [ 97.135420][ T7607] total_pgmajfault 257 [ 97.139499][ T7607] total_inactive_anon 0 [ 97.143706][ T7607] total_active_anon 8192 [ 97.147960][ T7607] total_inactive_file 0 [ 97.152160][ T7607] total_active_file 4096 [ 97.156444][ T7607] total_unevictable 4194304 [ 97.161020][ T7607] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.712,pid=7606,uid=0 [ 97.175684][ T7607] Memory cgroup out of memory: Killed process 7606 (syz.4.712) total-vm:95884kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 97.305753][ T6635] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.322223][ T6635] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.364061][ T7630] loop6: detected capacity change from 0 to 2048 [ 97.393669][ T7630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.456558][ T7634] fido_id[7634]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.494890][ T6795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.566685][ T7655] netlink: 96 bytes leftover after parsing attributes in process `syz.4.727'. [ 97.873516][ T7686] netlink: 'syz.3.739': attribute type 13 has an invalid length. [ 97.913731][ T7686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.925110][ T7686] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.938497][ T7686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.207407][ T7720] syzkaller0: entered allmulticast mode [ 98.213551][ T7720] syzkaller0: entered promiscuous mode [ 98.226539][ T7720] syzkaller0 (unregistering): left allmulticast mode [ 98.233431][ T7720] syzkaller0 (unregistering): left promiscuous mode [ 98.341338][ T7730] loop5: detected capacity change from 0 to 128 [ 98.353200][ T7730] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.384199][ T7730] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.438745][ T4836] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.608663][ T29] kauditd_printk_skb: 968 callbacks suppressed [ 98.608679][ T29] audit: type=1400 audit(1767660429.292:5318): avc: denied { ioctl } for pid=7742 comm="syz.0.761" path="socket:[15360]" dev="sockfs" ino=15360 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.639869][ T29] audit: type=1400 audit(1767660429.292:5319): avc: denied { execute } for pid=7742 comm="syz.0.761" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.703900][ T29] audit: type=1326 audit(1767660429.412:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 98.727348][ T29] audit: type=1326 audit(1767660429.412:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 98.750844][ T29] audit: type=1326 audit(1767660429.412:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 98.774278][ T29] audit: type=1326 audit(1767660429.412:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 98.797709][ T29] audit: type=1326 audit(1767660429.412:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 98.868543][ T7739] Set syz1 is full, maxelem 65536 reached [ 98.874440][ T29] audit: type=1326 audit(1767660429.552:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 98.897890][ T29] audit: type=1326 audit(1767660429.552:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 98.921294][ T29] audit: type=1326 audit(1767660429.552:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 98.970163][ T7757] loop4: detected capacity change from 0 to 512 [ 99.011287][ T7757] EXT4-fs: Ignoring removed i_version option [ 99.025622][ T7757] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.032645][ T7757] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.764: EA inode hash validation failed [ 99.058218][ T7757] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.764: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 99.097433][ T7757] EXT4-fs (loop4): Remounting filesystem read-only [ 99.104121][ T7757] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.4.764: ea_inode dec ref err=-117 [ 99.117011][ T7757] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 99.126113][ T7757] EXT4-fs (loop4): 1 orphan inode deleted [ 99.132501][ T7757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.199343][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.241375][ T7768] netlink: 'syz.3.771': attribute type 39 has an invalid length. [ 99.354684][ T7779] loop4: detected capacity change from 0 to 512 [ 99.375752][ T7779] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.392127][ T7781] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=7781 comm=syz.3.776 [ 99.413992][ T7779] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.774: Allocating blocks 41-42 which overlap fs metadata [ 99.428358][ T7779] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.774: Allocating blocks 41-42 which overlap fs metadata [ 99.453079][ T7779] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.774: Failed to acquire dquot type 1 [ 99.471395][ T7779] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 99.487035][ T7779] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.774: corrupted inode contents [ 99.499495][ T7779] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.774: mark_inode_dirty error [ 99.517884][ T7779] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.774: corrupted inode contents [ 99.544258][ T7779] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.774: mark_inode_dirty error [ 99.556359][ T7779] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.774: corrupted inode contents [ 99.569060][ T7779] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 99.578625][ T7779] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.774: corrupted inode contents [ 99.592755][ T7779] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.774: mark_inode_dirty error [ 99.604311][ T7779] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 99.613883][ T7779] EXT4-fs (loop4): 1 truncate cleaned up [ 99.620306][ T7779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.656022][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.756403][ T7804] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.806935][ T7804] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.852210][ T7804] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.875604][ T7818] netlink: 'syz.0.788': attribute type 12 has an invalid length. [ 99.916718][ T7804] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.919185][ T7828] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=7828 comm=syz.0.790 [ 99.983961][ T4021] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.012098][ T4021] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.039627][ T4021] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.060195][ T4021] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.161325][ T7845] loop5: detected capacity change from 0 to 128 [ 100.198289][ T7840] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 100.383095][ T7822] Set syz1 is full, maxelem 65536 reached [ 100.399996][ T7855] __nla_validate_parse: 1 callbacks suppressed [ 100.400010][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 100.552038][ T7863] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=7863 comm=syz.5.802 [ 100.600909][ T7866] netlink: 'syz.3.803': attribute type 10 has an invalid length. [ 100.608819][ T7866] netlink: 40 bytes leftover after parsing attributes in process `syz.3.803'. [ 100.659052][ T7866] team0: Failed to send options change via netlink (err -105) [ 100.666627][ T7866] team0: Port device geneve1 added [ 100.683180][ T887] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.693179][ T887] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.722954][ T887] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.746745][ T887] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.824804][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 100.862461][ T7884] team0: Port device team_slave_1 removed [ 101.206727][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 101.250832][ T7901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.441654][ T7915] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.470132][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 101.524016][ T7915] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.603050][ T7915] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.699459][ T7915] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.813469][ T4036] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.835490][ T4009] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.852558][ T4009] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.889970][ T4009] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.006906][ T7950] netlink: 220 bytes leftover after parsing attributes in process `syz.3.834'. [ 102.276983][ T7967] 8021q: VLANs not supported on ipvlan0 [ 102.591894][ T7972] netlink: '+}[@': attribute type 1 has an invalid length. [ 102.612808][ T7972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.665053][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.804844][ T7978] syz.6.845 uses obsolete (PF_INET,SOCK_PACKET) [ 102.909962][ T7981] netlink: 'syz.6.846': attribute type 10 has an invalid length. [ 102.917803][ T7981] netlink: 40 bytes leftover after parsing attributes in process `syz.6.846'. [ 102.939442][ T7981] team0: Port device geneve1 added [ 102.959491][ T7981] loop6: detected capacity change from 0 to 1764 [ 103.057981][ T7983] netlink: 64 bytes leftover after parsing attributes in process `syz.0.847'. [ 103.082868][ T7985] netlink: 'syz.3.848': attribute type 12 has an invalid length. [ 103.204571][ T7995] IPv6: Can't replace route, no match found [ 103.285102][ T8002] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.353217][ T8002] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.393499][ T8002] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.429288][ T8000] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.854'. [ 103.438670][ T8000] netlink: zone id is out of range [ 103.443926][ T8000] netlink: zone id is out of range [ 103.449313][ T8000] netlink: zone id is out of range [ 103.451099][ T8002] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.469585][ T8000] netlink: set zone limit has 8 unknown bytes [ 103.480274][ T8009] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 103.776369][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.6.858'. [ 103.795108][ T8017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.812487][ T8020] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8020 comm=syz.0.861 [ 103.814729][ T8017] macvlan2: entered promiscuous mode [ 103.830506][ T8017] macvlan2: entered allmulticast mode [ 103.837483][ T8017] bond1: (slave macvlan2): Opening slave failed [ 103.919304][ T101] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.932122][ T101] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.950996][ T101] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.963486][ T101] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.981784][ T8026] veth0: entered promiscuous mode [ 104.228231][ T8043] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.285452][ T8043] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.319899][ T29] kauditd_printk_skb: 489 callbacks suppressed [ 104.319916][ T29] audit: type=1326 audit(1767660435.032:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.5.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 104.356711][ T8043] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.367909][ T29] audit: type=1326 audit(1767660435.032:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.5.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 104.391649][ T29] audit: type=1326 audit(1767660435.032:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.5.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 104.415317][ T29] audit: type=1326 audit(1767660435.032:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.5.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 104.439098][ T29] audit: type=1326 audit(1767660435.032:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.5.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 104.466735][ T8051] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.493635][ T8043] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.553511][ T8051] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.600888][ T101] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.620365][ T101] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.629471][ T101] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.643609][ T8051] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.670704][ T101] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.702072][ T3537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.709379][ T8051] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.748906][ T8065] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 104.768743][ T4013] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.780816][ T101] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.796686][ T101] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.805085][ T101] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.847905][ T29] audit: type=1326 audit(1767660435.562:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 104.888075][ T29] audit: type=1326 audit(1767660435.592:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 104.911622][ T29] audit: type=1326 audit(1767660435.592:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 104.935079][ T29] audit: type=1326 audit(1767660435.592:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 104.958611][ T29] audit: type=1326 audit(1767660435.592:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c5f3f749 code=0x7ffc0000 [ 105.026445][ T8075] netlink: 'syz.6.884': attribute type 30 has an invalid length. [ 105.103187][ T8083] loop6: detected capacity change from 0 to 1024 [ 105.111807][ T8080] ================================================================== [ 105.120138][ T8080] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 105.120572][ T8083] EXT4-fs: inline encryption not supported [ 105.126799][ T8080] [ 105.126806][ T8080] write to 0xffff888109ec29f0 of 120 bytes by interrupt on cpu 0: [ 105.126828][ T8080] __bpf_get_stackid+0x737/0x7d0 [ 105.147763][ T8080] bpf_get_stackid+0xf3/0x130 [ 105.152483][ T8080] bpf_get_stackid_raw_tp+0xf6/0x120 [ 105.157806][ T8080] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 105.163280][ T8080] bpf_trace_run2+0x107/0x1d0 [ 105.167992][ T8080] __traceiter_kfree+0x2e/0x50 [ 105.172779][ T8080] kfree+0x353/0x3c0 [ 105.177034][ T8080] __bpf_prog_put_noref+0xac/0x230 [ 105.182185][ T8080] bpf_prog_put_deferred+0x1c8/0x1e0 [ 105.187506][ T8080] bpf_link_defer_dealloc_rcu_gp+0x199/0x1a0 [ 105.193508][ T8080] rcu_core+0x544/0xc40 [ 105.197693][ T8080] rcu_core_si+0xd/0x20 [ 105.201892][ T8080] handle_softirqs+0xba/0x290 [ 105.206629][ T8080] run_ksoftirqd+0x1c/0x30 [ 105.211072][ T8080] smpboot_thread_fn+0x32b/0x530 [ 105.216059][ T8080] kthread+0x489/0x510 [ 105.220162][ T8080] ret_from_fork+0x149/0x290 [ 105.224785][ T8080] ret_from_fork_asm+0x1a/0x30 [ 105.229678][ T8080] [ 105.232045][ T8080] read to 0xffff888109ec2a30 of 8 bytes by task 8080 on cpu 1: [ 105.239623][ T8080] bcmp+0x23/0x90 [ 105.243269][ T8080] __bpf_get_stackid+0x382/0x7d0 [ 105.248232][ T8080] bpf_get_stackid+0xf3/0x130 [ 105.252936][ T8080] bpf_get_stackid_raw_tp+0xf6/0x120 [ 105.258242][ T8080] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 105.263716][ T8080] bpf_trace_run2+0x107/0x1d0 [ 105.268434][ T8080] __traceiter_kfree+0x2e/0x50 [ 105.273219][ T8080] kfree+0x353/0x3c0 [ 105.277124][ T8080] hash_ip4_ahash_destroy+0x1b7/0x220 [ 105.282520][ T8080] hash_ip4_destroy+0x48/0x170 [ 105.287343][ T8080] _destroy_all_sets+0x195/0x220 [ 105.292303][ T8080] ip_set_destroy+0x2ae/0x3e0 [ 105.297011][ T8080] nfnetlink_rcv_msg+0x4c6/0x590 [ 105.301967][ T8080] netlink_rcv_skb+0x123/0x220 [ 105.306758][ T8080] nfnetlink_rcv+0x167/0x16c0 [ 105.311454][ T8080] netlink_unicast+0x5c0/0x690 [ 105.316241][ T8080] netlink_sendmsg+0x58b/0x6b0 [ 105.321036][ T8080] __sock_sendmsg+0x145/0x180 [ 105.325725][ T8080] ____sys_sendmsg+0x31e/0x4a0 [ 105.330538][ T8080] ___sys_sendmsg+0x17b/0x1d0 [ 105.335240][ T8080] __x64_sys_sendmsg+0xd4/0x160 [ 105.340110][ T8080] x64_sys_call+0x17ba/0x3000 [ 105.344804][ T8080] do_syscall_64+0xca/0x2b0 [ 105.349333][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.355243][ T8080] [ 105.357598][ T8080] value changed: 0xffffffff84809aa6 -> 0xffffffff8149095d [ 105.364720][ T8080] [ 105.367062][ T8080] Reported by Kernel Concurrency Sanitizer on: [ 105.373228][ T8080] CPU: 1 UID: 0 PID: 8080 Comm: syz.3.886 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 105.384454][ T8080] Tainted: [W]=WARN [ 105.388271][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.398338][ T8080] ================================================================== [ 105.409892][ T8083] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.563399][ T8083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.664433][ T8090] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 105.871861][ T8083] loop6: detected capacity change from 1024 to 64 [ 105.891156][ T6795] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.904778][ T6795] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.918536][ T6795] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.932159][ T6795] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.946001][ T6795] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.959640][ T6795] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.973215][ T6795] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 105.988032][ T6795] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 106.001673][ T6795] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 106.015181][ T6795] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 106.182325][ T53] bio_check_eod: 99 callbacks suppressed [ 106.182339][ T53] kworker/u8:4: attempt to access beyond end of device [ 106.182339][ T53] loop6: rw=1, sector=226, nr_sectors = 2 limit=64 [ 106.201426][ T53] EXT4-fs (loop6): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 106.214098][ T53] Buffer I/O error on device loop6, logical block 113 [ 106.222072][ T6795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.232410][ T8084] kmmpd-loop6: attempt to access beyond end of device [ 106.232410][ T8084] loop6: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 106.246407][ T8084] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 107.269227][ T4013] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.314751][ T4013] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.374197][ T4013] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.434294][ T4013] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.529276][ T4013] bridge_slave_1: left allmulticast mode [ 107.535038][ T4013] bridge_slave_1: left promiscuous mode [ 107.540790][ T4013] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.549047][ T4013] bridge_slave_0: left allmulticast mode [ 107.554819][ T4013] bridge_slave_0: left promiscuous mode [ 107.560491][ T4013] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.598671][ T4013] ip6gretap0 (unregistering): left allmulticast mode [ 107.620669][ T4013] team0: Port device geneve1 removed [ 107.654168][ T4013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.664365][ T4013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.674195][ T4013] bond0 (unregistering): Released all slaves [ 107.683557][ T4013] bond1 (unregistering): Released all slaves [ 107.736172][ T4013] hsr_slave_0: left promiscuous mode [ 107.742390][ T4013] hsr_slave_1: left promiscuous mode [ 107.748162][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.755639][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.763673][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.771110][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.783983][ T4013] veth1_macvtap: left promiscuous mode [ 107.789495][ T4013] veth0_macvtap: left promiscuous mode [ 107.795398][ T4013] veth1_vlan: left promiscuous mode [ 107.800681][ T4013] veth0_vlan: left promiscuous mode [ 107.919756][ T4013] team0 (unregistering): Port device team_slave_0 removed