last executing test programs: 4m11.759085109s ago: executing program 2 (id=520): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xedf}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000380), &(0x7f00000005c0)=r4}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000030101030041fdc21ff655bddc00e5ff3902a492abc764662c08072f24da9578dc3d45c6803924670b47939aa3405a45641468a06a0bc0"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x200000000000026f, &(0x7f0000000540)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r1, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x3}, 0x18) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) mincore(&(0x7f0000854000/0x1000)=nil, 0x1000, &(0x7f0000000300)=""/86) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xec}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r9], 0x50) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000}, 0x18) 4m11.560433933s ago: executing program 2 (id=523): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xedf}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000380), &(0x7f00000005c0)=r4}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000030101030041fdc21ff655bddc00e5ff3902a492abc764662c08072f24da9578dc3d45c6803924670b47939aa3405a45641468a06a0bc0"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x200000000000026f, &(0x7f0000000540)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r1, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x3}, 0x18) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) mincore(&(0x7f0000854000/0x1000)=nil, 0x1000, &(0x7f0000000300)=""/86) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xec}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r9], 0x50) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000}, 0x18) 4m11.352824456s ago: executing program 2 (id=528): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = inotify_init1(0x80000) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = dup(r1) inotify_rm_watch(r3, r2) 4m11.310014327s ago: executing program 2 (id=530): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r0 = getpgrp(0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './mnt'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448de, &(0x7f0000000300)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4m10.996273613s ago: executing program 2 (id=535): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x2, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = io_uring_setup(0x77da, &(0x7f0000000240)={0x0, 0xdb5e, 0x40, 0x0, 0x12f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 4m10.389511784s ago: executing program 2 (id=542): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000621) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m10.321252626s ago: executing program 32 (id=542): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000621) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.122758426s ago: executing program 0 (id=4423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600001785000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000047c0), 0x401, 0x0) 5.061156927s ago: executing program 0 (id=4424): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={{0x0, 0x2710}}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x603f) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) connect$can_bcm(r4, &(0x7f00000002c0)={0x1d, r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 5.007911788s ago: executing program 0 (id=4425): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x204, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1b8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1a0, 0x1, [@m_simple={0x164, 0x1e, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x97, 0x3, 'K\xea\x19Q\xab\x1b\\7\xf0P\xfa\xc0\xa9\x1d|\xdbH\xb22%\xf7\x14x\xddD\x96.\x15\xfdA\xba\xb4\xc6\xbb\'\xe7+\x9c\x80\x1e\xafQ\xe5\xa4<*\xbc\xe3\xb8\xb0?\xdc\x7f\xcd\x99j\'\xfc\x99\xb3\x9a\x9c\xd1\xbeD\x12.!\xf7\xad|\x0f\xde\xf1lt7v\xc1}\x1e\v\xa4?\xc5K t\x8b\xbe\x1b|\x87K\xd2\x1a0-\xb0\xbf\xbbv\x91\xe2G\xab\x05J\xc0G\xcd\x8aI\xa0\x99\xb2k\xe60S\xb2\xe0\xaf\xd0\x10\xec\x1bS%>\x9aa\x95)M\xc3\xefK[PV\x91=\xe9\x8f0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={{0x0, 0x2710}}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x603f) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) connect$can_bcm(r5, &(0x7f00000002c0)={0x1d, r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3.740583061s ago: executing program 0 (id=4432): socket$kcm(0x10, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000000380)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.25339282s ago: executing program 3 (id=4440): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.929646356s ago: executing program 0 (id=4441): socket$kcm(0x10, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000000380)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.317456947s ago: executing program 3 (id=4447): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7f0, &(0x7f0000001d80)="$eJzs3U9sHFcZAPBvXbsJLoqqUqUhStNJWqRUSt31unWxemi367Ezrb1r7a5RIkBt1DhVFKetWiqoD6S5tICKECeOhWtvXBAICSQOwAmJHrhwq9QTKggkBEJIRjO76/jPru00cRLa38+K53n2m/e+N57Mt2N7ZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiFJtulweL8VcVl88nWwxFBHJvd3Y+S0Pr66urnZavf5+vWGxzbgRpfxf7N8fhzqrDt179eGD+afjcaTz1ZHYny/2x8pdB+9+8gvDQ73ttyZ83Y7tMq4U8Vae1MWzy8tLr+1BIjfR93653aPD/Vb+u/i+z6b1rNXI5quzaZK1GsnU5GT50VMzrWQmm0tbZ1rtdD6pNdNqu9FMTtQeTsanpiaSdOxMY7E+O12dS3srn3ikUi5PJs+OXY6IVqP+6LNjrdqpbG4uq88WMZXyNyOPeSKpTTefy9pJO63OJ8n5C8tLEzvNLg8a37J2JD+yC0ceuvujNz78x4Wl/IAc1Empe2BWxscrlfHJx6cef6JcHq6UKxtXlDeJtYgYisgj9uSg5fYxFIOPosKNOXHDDTDUrf8xF1nUYzFOR9LnYyRqMR3NaMR8/vWfRrZEdPXq/5ce/esftht3ff3vVflDVx8+HEX9P9r56uig+t831xv5MdTNZ9Djr8ebsRIX42wsx3IsxWt7ntF1fgztOvLY53cRNRtp1COLVjQii/moFmuS7pokpmIyJqMcz8epmIlWJDETWcxFGq04E61oR1ocUbVoRhrVaEcjmpHEiajFw5HEeEzFVExEEmmMxZloxGLUYzamo1r0cj4uFPt9YlNeB7/9wi9e+uNH7+XttaDxbSZSyp/M5UF/3yZoS7nfff1fjW6E+v9Zd4PP4PDJrfbqPwAAAPCpVSp++p5f/4/E/UVrJptLv3qr0wIAAABuoOI3/0fyxUjeuj9K+fV/uU/kBzc9NwAAAODGKBWvsStFxGg80Gn1Xi7V74cAAAAAwP+h4vf/R/PFaMTlYoXrfwAAAPiU+c6ge+x/2LvHbmthX+lXf4tmc6R0ZeH0Q6VL1TyueumOznbdxVfWemzPHC7tj04nRV+Twyt3lSJiuJYeKfXufvnffZ3lx8Xnw8Nrmw+6139pUwJrW9yxeUp5AgdWNiVwsBj43TjWiTl2rrMc7ibavSPx6EwWb0U05p4sbomY/2u/8fKFb0Ux/e/W5w+U4vyF5aWxF19ZPlfkciXv5cql7g0Ut9xHsX8uxYir3T0Q9/ef8UjxQozuuKOdccvrvwFDTxebD20/Zmn9mG/H8U7M8dHOcnRlw/z352OOjz05HtXqgaF2err9xuq62XezGL/Omb8dD3ZiHjzxYGfRJ4vKhixe3ppFZX0W3Z2ww77YMYuR7oH13rHLp//520Ypndgpi4lNWey/xiwAbpXzxV1/rlahzxVV6D+rHXn9v1p3k05AV/csd99aV/lZrlcGNp3lzsfaI73t19W64dhS3Tc/vYhNoww4o5/oxJzoPJ8YPtynrpT7nNFfvfDq77pn9Mfe/9GPv3709z/95NXt/Xi4E9NdxD2/GVBj8zl/vz4/2uv09FPdxk8Gjtuaq5RiJOKOb1x6NQ6+/ubKIxcunX1p6aWllyuVicnyY+Xy45UYKZ4qdBdqDwB97PweOztGlB7bfFV9bmPdvWftTwrG4sV4JZbjXJwsXm0QEQ/073V03Z8hnIzjUVwsD7hqHV33Di8nd7i2HFmLrWyNLcWAfifW7bH7flgs/rWH3xQA2GPHd6jDu6n/J3e47t5YyzddHcfgWt7Pl/d0bwDAZ0Pa/Lg02n6n1GxmC8+PT02NV9un0qTZqD2XNLPp2TTJ6u20WTtVrc+myUKz0W7Uej84nk5bSWtxYaHRbCczjWay0Ghlp4t3fk+6b/3eSuer9XZWay3MpdVWmtQa9Xa11k6ms1YtWbjzmbmsdSptFhu3FtJaNpPVqu2sUU9ajcVmLR1LklaaJguLvcBsOq23s5ksb9aThWY2X21eiYi5xfk0mU5btWa20G40v5h3WGtEMVZWn2k054tux7ZO/y83e38DwO3g9TdXLp5dXl56bWPjQGxes6kxHEXjz9vF9Bq3eo4AwEaqNAAAAAAAAAAAAAAA3P62vlwvX7vjS/r6NfbFtW+1L65piOts5FPrrnn3Z197cdBM74yIm5LP3jby6d0GaexBo7T7eb3w1FMXB8U8c/nQqd310/9/Sr+Xur5zIOLOn/+gs+bpm7VbPrh6YF/L5qulbWJu7XkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPr5XwAAAP//1fJR+w==") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) rt_sigpending(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000002580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x12b4, 0xc, 0xa, 0x901, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1298, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "7fbcb3f484eca8de17526cc0c4771da752817d67aba3b76cbac7be1649afaa49a1178f0532af85f33fdbade397e25981c5f71131204692ecae727f7238f11dfcfd2e6f30a7c3da499a50d719509bfa85642179b6a2a9d68f485fa3315c2092e513ded970c2bfe7994e139cfcceb32f174e40cebc77d0621861d2c1e7f2d48285cf70fc7b53ca251987a90f35155ab4ecbbe2043ce46be305b1ade34a897889e4bddbfd7a8e6b339cd7465b5b2dd54e76e2d3f5c60f6f0c855c1bf3c5b452a05d59d1312c34fbf35b2bbf88de84e52ea9ad2566"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7, 0x1, "f30814"}, @NFTA_DATA_VALUE={0x65, 0x1, "b7020caac784b23c86a8676d388ad2417105e3b434a59f16c29bed4ab680050c7cff6f2604d44f34e45c9021d64f746dd417ff1a8de468229731781605e8e7412593f986be306cf047748b5c68629977dbaf003069f12174bdf9b75111be0e26fe"}]}]}, {0x10f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x65, 0x1, "f793e08bced7e0efb71ec86a5e2b11d85910887ba2cf1dad912180edda8262926866509af7a58923669969972561143eef03c83eb872daeecb3ae3409a94d4d01b7c9baed83844da9e394552915df9e4e4c63a48533037f7bf542007af4e3c5178"}, @NFTA_DATA_VALUE={0x1004, 0x1, "3488030f6fa47332f90712cfa6d530e71e4c6c5f9ca90f81438e358270d4f9643f8b8ea9b8f5cf3f141300fec10958e2b1aca56aaea4be1b33a4d920545c7cbbdd294004bedb147483416acbd1a8cbd50f5ee7c58c44a8c662af7261237628333e2648c42ac369cac13699c2712cddb868fcd75c287fbfb028dbecd17b6ecfc01bbc87b2b4a2b2f5a691026e70315d07b5d7198d1077aae5a2f31adb94fd3feb19fbfb388beab500ea34c2037fbd614c7f4f2d3e92974410fa3e17763e0afdb57d8d073ba070e4c75cd48ae8eabeafeb8cd5e0d80ba9fbda79d26a56e8c09c76cb5660b29d94f623eb862823c5816a4876ffd9ead86e6242fe79bdadd6e48944123bcb596f49905dfc93b6ddc9b7230009eb8a0fba3629256e80b07a3cdf6002298f524f14d04eae97052a22cd2755fe71bb8afecfbdca1f73f870911f9859cc5086c4a4853c89263dcbd65136594564fd02bd398a7c0b8065cab5f6283a0b644dea0ee8f6f535ca3b20a929b23534365a3c3c8627af10bfb47648f7d1b2c6fa58a0fbf62703d7b7a6b14defcc7253e7cffe34d0da7ab374ed3a728e3d47124dbed39f83ec3b89833eb37b967e641aec7d3b7ce9120d4d476850845cfb254784b318b8c564f4ac83fffd06562fb0e5eb80b77047d53544b4e3d87039c122038a8ac61b326969a2dfbf400db2a918f793361f766762ebd1479b658d5ca05424bbfa26273d92112344fe46e17933a98e21853e6d2fb7da8a7123302bd42f5b72c7b4aefc40af69f073b14082426c058551a53720ef05ccfa8e5bb767e8ffad514983c3d9fe14194112209bfd0b41b10d00fa6378fbc3df4514c86b5c531c860279ec01122cdefdae058877995ccb582229b0b94aaa910576795970a21afeac9973c2e9e5f57cf7ee24d3b5740901299578a7fe0ba99be61e0a5b7fd1a14c492d31111002f2acefef36b557054437081d21aca6992bc89401eb32b0149f0ca6985813c5ffa6ad7cd70f7d0112f589d8ddaf808a74e14423a4d45eeccf82c4fe7100a7086925e9882beb45e647e06b1f2ab961a3542baa144e45d3d91ca2b0e903118f3157025217ecbb7b5d680d1a01a0a40b2865b9d5d6211d8215bd2083305e0baf8c7a0d9f9ca1e646ae191593de47fe9c948707eaab446a461b966b02097c51a806eabd84fbf0e51583db2c6969f6c7495daeb16d765b3f8bde49d3efcaf5203cc5bce744533d41a87e49260a3f860c657711cc6207231d8538f1d63b2c5b4bb902095f7bdfb30e7e83926f4254ab0a2e4de7b5b24616621c434693a15af6e5fe6ba391e6240d5cd532d108fb91ad2b34ce4a8c6fb76f54016a4d2e7e426c6a0cba8e8f21fe5f3c0cdcdac7d540ddf2954f4c2656bd3b8c85c5f9e4a750d3364f7c809ce41cda4a85acdb9bf418e541ffdbd8449f9dfc1825b87484287d6ce98d0027406633978df84e6f9a06cad6814d0b1b6a0f9f5e540c00ba6432618653bdc3edc9ad815a201b896cecd0691cdfc320d34f43e45085bfb6e7da389769d1c5b7c7f1718d8a03aa53ce4083fa9db2701f6d4ca955438b4aa3e07b818e24f0ee709a40c290bb59866d577d7c7dec7a5ea9f574c2cec56072d45378827d063bba61b8c035537bd45d087b5edbc17d0183d9f20e2b756e0ec6e66b911d939e2ece084bfbcef45937fe1a4f8745af5af048776766702b39d6c73286ed8efe0a9a2d46fb298a1ebdf8cc9ac71987a06b1d2356651f959877b8acaef6d8736eb49fdb7a44c81e44e20e41facffb0e3cc87a345b261c83032636ca574e28e42249f75101cd85338fd4b16f2bfcab8d459e188f262befd5681fca3e0dee7b409e23e9464cb1c8e7e7aedc561ff5433d101007de32a432ed5255b90cea0b30eb4169c3e72d45bdd76ecf966b069653f96250ca7519e27105c0d25ddcc6f67e29870c2ce3c821c0639511bee9b3b1fa7d22333019532a7017e4ad3d6f448ddbaedb899b06d8b7941064b50b0e8ce9e757c97ca3d04268a26b7abdc1f0f4737e67571225076e9677091b5b8392a113d5fb135ae78c7cbab8712934e51548ed3e523bcf97b6045facbaae6ce1551058902d150a70123e135e30ad3b4231be700245e2ec25202db5e0ff48a6f63b3f1e382c1e79e3edc32ff70f34a7ff52888e71550422c6e6d7ec0c409160fc699b6049b9924e7dc59c8e3d3da3e3d51cbd597beef9b0abd21eb64ded34a42ba618d4c3bc1d91b83992730785227334a24f039d93104660835fce894ec89cdb65e8850049d182689fc071e55ad486f44edf8bbfd0654bddcb9c5a49a59c4dcbac4c61fc49ff085937fe333060c2e91ebea318e35c0376f0f3061cd8f17204c9c7dc305d44cabb4dbbda28fa7860e974c1f666217fc09b415a9733d930f67d6815bf34f6790509834475ba3fcc4da7a527731d94642004495827bd7d492c83bb526dc56abc3eb52e40ab78217b7f0fdfb6a889da0d3450c5d1cafe49b1ac82994aac1c4cc4c3e36ffe133be1566e576cdda7d13bcbca4d47eb39befdec686ca619a110d321b0f56a3d4e3e5d377967272fef89ef48c42d7bc4c0c5195bfa9cb06fe3d6e01b5a16d402383e4ce565ed51d99df0483270bd6d327d5b914c6731b52e714a11da5b8b7abbaa7b528d74ff6633b3106a2292c8d46a6d45a5742f85f61f4b8b18046f7edb04f68b2fb1c4678bd89bc8a29a6ce94fa6e9c61a170f9e3f3db4e655f46d0b542298380a2a472b11b3d20c1b9fae8ea37a0097006848f6547b58496084d08b105a3d08389903545a2f0b3e5e7d8531ed4c66351ed4de0b9059d86e9bb797501d9c8397d561f76af3ffe048734646dabc07f7408986308a1d6b9f90e1a48ad721073a6d6ac36f6d738dbd2b84a3d7e9ebde958a45fcb1f2ea0ef07dcc4f26b2d9c4a6f13027204e81ee06e0630ef048ac6f9cfaf80ba45bbc388780b60452343fb9d71ef6c7963dce6ee0e61cc3077f3701b8183d958b5b2891f8d51d67ab53aa3062756ac6f466843ebce3a016fc227252a7b6bbe3ed71690293fdcafd70108d71f9aa82495804a2b479c67911b51a51f9bb44796456f00da4ad5f84bf2c2522e21af04c3d8b43418f41527a663acd8eb3f12287d2c72390fa39d256ec22172d63ece6f1d4ef3c453406171ac6cfae56adb487add5e7ce00a69008875e86df68ec809695e1befcca3471bcca9f2d884424b95b884766c031cf303e8d3e0193959630f2b9e96fa54c14d2c10fa140cb31b83b149e6140d78332c2b4a489ad5a2e6098d45692a457195e2c85e1ed546f0b0082233b5dabdca0efb4719da1c41f8858e8be75771a841165c2628eeb5518050ab820d0a24930877b8b2cabe0a7777e4a3c996eacedf838d06233a1e8b5f33fe3ef6062d3339b7f264f9004510b6760c19004ee354b15a0588c82458e2aecd54e3612057de50874868a5ae1d328891c89370729de51a8caaa95f591f57d9958a03dac3db46f4172b3da522cd5f2b589382e44b0fbd22e56440ba4f5e8b4f7819aa9925a2159e55c90c01f1c8a44aab24d38e438723c73a79c6e32a3f447d58551b39baea47ffe3a7f1bc7b037aa81aadd5dc385d072787404dc4bdd3ccca40d962d305a01e0c420a45e3345e02d51266fc174ada1b59b078f7021322abb9aa79495b7a9359e35b0f1ccc73c793d720c8e98578532c89edb813728b7e37b802680987144a60238f0b1f6a30718c276203f7823e43f10bdbd45a610d082ca925513d481961f9ed706294d2f83c89b8eb7e5d520888321b58a8607b29ef599b8d7fdbc88109290074e28d9438798c36aa5ac6d2dd99cbab377556da71ee952608ad4a1759db53a7a39c280b25d3d4828caba15a873321af37f2f967a6829f7640731efea279e6d3b30ea42d5a266f942687a442cdbb325fc99d6563931d1a495a36e91b2498f624a1754fbf3f2cf1a6ab7a042ffd93ae8c08d7bd1952deb0539359cffe4964cf30373add732380053fa08fa7c1f04493e26f927bc78f9148e83fedbf66f4a956fb6419797f880b8092386272b2b986832686922ae966669028196c6e9209febf2fa6d0bbfc566b97611175772525bb44b4e4dc272064547e4f42f5c541684251693ef80fa4a997dddf8f2eee82b133a76b73533af2f1cd738a68f3a09107d335fc2a43ef8a45362152210c0bb31002b16a16c118a682eddb1c9745dcd3dcf23cc412e02811888c561d1aac76e10218aae734b9cf5229b1230870cb91b787ba6cd9a1acfbf9bcc749158269835dd1f72b40d94bd6d8764cc52ce919f8d4aa9c1bc99822431380d5a5ac11edb76ba919b372cf4ac4a8de87069720af44c80b3487c5a7367cdfd6b1fa08e7264e0b0e0697a4a477e52cd1bedf7d594b28cd7405e2f9bb6b946d8023dbf41d037bf2fe286081752b0ca3aedc78d8f753ac3dad018666ce784e95ece10ebac5ef48a6ff0126466fe4a579d01335d84a74587cd543c796cf2abf5b7e672980a63f1d002b739c01d2260a12c745517848d88a69260b26f27a902faeba95a49443427928e4345d23a43dc66b087cfe33ca2a93100d80263065263b49280f054d209ec80b17cdfe08a87d512519a5258b7e47e48042fbf62b49d98cc79ea36a1e86de2d9a3fb9d5b572121815e90652d6855e2204670af7a03356d00f5202836f77bfecc66e6637433eeefcc4f2160bae596c0501370cb1671ee755fa8ca3098332d209dbfb2ce3cfc8a0ae236276384a8bf614e084e4da4ab348954f4331430604fd9de678a665ac8720df377aaa7d263af61e909be44d1206c4da3bd090732452fb8399c15b8d9f4e7b91a1749d34920495ed820bce415d714d67c909d542d667e24648b1793627293af24efcc74f597e65a601a9727f002b5b95921e47e789eacb9b33ffa931ad94a57986055abdce00a1e48317a353f404603a1cd69fde0fa9315fb8db42451b0c9c569fad965e4832e5d0305d79373d00a811faccf784b4aa5ccaa5c3fa67798e74cc8e95022dc312276f257d75a6000961ac5d5c0a6873d28101421718651e714c0d52ed2d2f1ab55493c9c8ab3a5a33670085414823164ac04d0729d1e3f610ee497fabafbb8a5ec48981866806956cb49a6aeabb8bbaa40f53f6d7a035a3868a211b8c085e3c1ffdd2388294600ddeda34500d10569f13e261c7aa4f671c6ccb7da8b2d72793c3a7c38ede491134d5bb5b68536ea61bb84290eb98a372e5d5566a3977d9529c2180bfba5e9472e192bda87272c8bb5c6cea68942a1a03e42b27ff347e9720deed86f93835760ff025e34b6667140583ad4948e3943de9c3e8a9da0a201c781883f1ae350c92d90445cbf7d4f6c72704874fe5fbb3e97b19631acae9401e6fcd8d34c5e0a0eafce219ae23771449a671159b505359da994a3dcfcca4ca5a4e22ae65a11ec24d48da44ac952561e26a4fb98d6fab87c6a3d2d7849c2a3a76d3915e3f5090032ffd3dcfadb5d82315be42687c6ec93b6c2d88b784ca73714d921108d613baf1df40690a6689732e1f77d5ebfcc430aeb9d7aefccb9f266608cea00b18f3a8d46ba685f3b2c5fa5bcc6a5a65cd73bebbc218d9d583eecdee8bb92201dd3315d062ee263e7a95bd6acadf5799bf672860c440fa0261e5232cfffef6527b7af488772c0aa90563cfd4e1bb73da6120ba83c3154e7bb784b0039bb61a199adb54a1d59b6b014062d3ef72f2d00aca4a5fbe32ca024f380ae49c3620956a2d519f7e22f99674f8acd92127a85a992878b599e2988187932438d1c207a7230"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x7, 0x1, "a9d258"}, @NFTA_DATA_VALUE={0x3f, 0x1, "48af98f6911bf2b8dfe28d5148a7a997bb28c2c5aea40d8c079c7a1ec4ed16c26ea53d2168dd9c164a21a182ac366fdc1a507c976904d3a3d2a7fb"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x12dc}, 0x1, 0x0, 0x0, 0x40010}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x82) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mq_timedreceive(r3, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 2.155267061s ago: executing program 5 (id=4449): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r1) 2.15419621s ago: executing program 4 (id=4450): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="b9eaf60e13ad2f757066dad0f6e96479714efafa3baa39855b5555583fcd9f66189d5d4de992650c5f5be98baa74cb42d6d2420ec2d87f59", @ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES8=r1, @ANYRESOCT=r0, @ANYBLOB="44f9f0cb9d1040497ef0fd3007cadbaf4db10fd86e529755a68f4a4d57b625f665bc445d6b76"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000340), 0x6}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRESOCT, @ANYRES32=r1, @ANYRES16], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r3}, 0x10) r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(0xffffffffffffffff) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 2.021017173s ago: executing program 5 (id=4451): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x7ff, 0x800003, 0x5, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x8c2f, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x40000029) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x14) 1.768802737s ago: executing program 4 (id=4452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1.750575998s ago: executing program 4 (id=4453): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) 1.689039339s ago: executing program 3 (id=4454): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={{0x0, 0x2710}}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x603f) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) connect$can_bcm(r5, &(0x7f00000002c0)={0x1d, r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.677975879s ago: executing program 3 (id=4455): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x7ff, 0x800003, 0x5, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x8c2f, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x40000029) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x14) 1.134365279s ago: executing program 5 (id=4458): socket$kcm(0x10, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000000380)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.002022482s ago: executing program 1 (id=4460): openat$ptp0(0xffffffffffffff9c, &(0x7f0000001740), 0x80, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'hugetlb'}]}, 0x9) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) 962.921182ms ago: executing program 1 (id=4461): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) statfs(0x0, 0x0) 944.743873ms ago: executing program 1 (id=4462): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012800b0001006d"], 0x48}}, 0x40000) 912.955193ms ago: executing program 1 (id=4463): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYRES8=0x0], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) pipe(0x0) io_submit(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x10000000) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 833.613135ms ago: executing program 4 (id=4464): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7f0, &(0x7f0000001d80)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) rt_sigpending(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000002580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x12b4, 0xc, 0xa, 0x901, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1298, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "7fbcb3f484eca8de17526cc0c4771da752817d67aba3b76cbac7be1649afaa49a1178f0532af85f33fdbade397e25981c5f71131204692ecae727f7238f11dfcfd2e6f30a7c3da499a50d719509bfa85642179b6a2a9d68f485fa3315c2092e513ded970c2bfe7994e139cfcceb32f174e40cebc77d0621861d2c1e7f2d48285cf70fc7b53ca251987a90f35155ab4ecbbe2043ce46be305b1ade34a897889e4bddbfd7a8e6b339cd7465b5b2dd54e76e2d3f5c60f6f0c855c1bf3c5b452a05d59d1312c34fbf35b2bbf88de84e52ea9ad2566"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7, 0x1, "f30814"}, @NFTA_DATA_VALUE={0x65, 0x1, "b7020caac784b23c86a8676d388ad2417105e3b434a59f16c29bed4ab680050c7cff6f2604d44f34e45c9021d64f746dd417ff1a8de468229731781605e8e7412593f986be306cf047748b5c68629977dbaf003069f12174bdf9b75111be0e26fe"}]}]}, {0x10f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x65, 0x1, "f793e08bced7e0efb71ec86a5e2b11d85910887ba2cf1dad912180edda8262926866509af7a58923669969972561143eef03c83eb872daeecb3ae3409a94d4d01b7c9baed83844da9e394552915df9e4e4c63a48533037f7bf542007af4e3c5178"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x7, 0x1, "a9d258"}, @NFTA_DATA_VALUE={0x3f, 0x1, "48af98f6911bf2b8dfe28d5148a7a997bb28c2c5aea40d8c079c7a1ec4ed16c26ea53d2168dd9c164a21a182ac366fdc1a507c976904d3a3d2a7fb"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x12dc}, 0x1, 0x0, 0x0, 0x40010}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") openat(0xffffffffffffff9c, 0x0, 0x0, 0x82) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mq_timedreceive(r3, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 833.143305ms ago: executing program 1 (id=4465): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000001000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0xfed1, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000078000000000511907800000000e000000100004e200064907802000000000000000000000082d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d170194bd7b1b7803c5ba7f602606a285b330da2d58da817f8a5f77a23de36a21643b33cfa231a427159c7b9f0eceb155f087719daf74852e71ec6629af636fea36bf61bec22bffcd771917bb8b66eacf3c3d485fc592885e3557"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) alarm(0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) alarm(0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = socket(0x10, 0x3, 0x0) recvmsg$kcm(r3, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delqdisc={0x90, 0x25, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0x0, 0xd}, {0x6, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xb}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7e0}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x101}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x821f}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x5}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x559d}, @TCA_RATE={0x6, 0x5, {0x5, 0xd}}]}, 0x90}}, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000000c0), 0x0, 0x72d, &(0x7f00000014c0)="$eJzs3U1rXNUbAPDn3mb+k38bTQQVX0AqihVLJ01sKV1ZF6KbYqDgNg3JJMRMemNmpjahi3TlVkRRcKPfwY0rxbUfwK+gIFrioq5G7rykbTrTjnWSgczvB3fmOffe4TlnJpwHcoY5AYysk/lDGvF8RMwlEZPt80lEFJrRWMSl1n27t28u5kcSjcaVP5LmPXk77nlN7kRE7ETEcxHxUyHidPpg3urW9tpCpVLebLena+sb09Wt7TOr6wsr5ZXytYvnzs2eu3D+4sXBjfWN9z94tnT+nYnv55bnT838+l0Sl2Kife3ecQxS6z0p5G/hfd49iGRDlAy7AzyWsYg41n5+JibjWDMCAI6yRjGiAQCMmET9B4AR0/k/QGdt76DWwXr5/e2IGO+Wf6y9ZjbeXIc8vpvctzKRRMTUYXaUI2nnVkRcnTr54N9f8sCa7b91dhAd5ED9mM8/l7rNP+ne/BNd5p/xzncn/qPe89/d/Md6zH9zfeZ478V61jP/rYgXxrrlT/byJz3yX+0z/w93lv7uda3xbcRrXetPcl+u3t8PmV5erZTPth675zhZv/nhw8Z/vEf+nUeMf6PP8U989vLPOw/J//orD//8u+XPa+Knfeb/pPDWF72u5fmXeoz/UZ//N33mv/DSR9t93goAAAAAAAAAAAAAAAAAAAAAAAAAAABHQhoRE5Gkpb04TUul1h7eT8fxtJJVa6eXs/q1pWjulT0VhbTzU8uTrXaSt2fav8ffac8249299psR8VREfF78f7NdWswqS8MePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0ndi3//9fxdb+/wDAETc+7A4AAIdO/QeA0aP+A8DoUf8BYPSo/wAwetR/ABg9j1H/iwfRDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGxtzly/nR2L19czFvL13fqq9l188slatrpfX6Ymkx29worWTZSqVcWszW978+2deuZNnG7GzUb0zXytXadHVre349q1+rza+uL6yU58uFQxsZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRvonkkaSki0macpqVSxBMRMRWFZHm1Uj4bEU9GxC/FQjFvzwy70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwYNWt7bWFSqW8KRAIBHvBsGcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOHx3N/0edk8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJjS35KIyI9Tk69O7L/6v+ROsfkcER9/feXLGwu12uZMfv7PvfO1r9rnZ4fRfwDgUTp1ulPHAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCb6tb22kKlUt5sBXcaLXfPDCAY9hgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABicfwIAAP//wLPUPg==") r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x3, 0xb}, {0x2, 0x2}, {0xc, 0xfff1}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396ed3c0074dcab6cab21ae16c4cdf9"]) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r9, 0x0, 0x0}, 0x20) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 781.111986ms ago: executing program 3 (id=4466): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r1) 739.078676ms ago: executing program 3 (id=4467): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) writev(r5, 0x0, 0x19) syz_socket_connect_nvme_tcp() bpf$PROG_LOAD(0x5, 0x0, 0x0) 561.19767ms ago: executing program 1 (id=4468): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x21c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1d0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b8, 0x1, [@m_simple={0x17c, 0x1e, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x97, 0x3, 'K\xea\x19Q\xab\x1b\\7\xf0P\xfa\xc0\xa9\x1d|\xdbH\xb22%\xf7\x14x\xddD\x96.\x15\xfdA\xba\xb4\xc6\xbb\'\xe7+\x9c\x80\x1e\xafQ\xe5\xa4<*\xbc\xe3\xb8\xb0?\xdc\x7f\xcd\x99j\'\xfc\x99\xb3\x9a\x9c\xd1\xbeD\x12.!\xf7\xad|\x0f\xde\xf1lt7v\xc1}\x1e\v\xa4?\xc5K t\x8b\xbe\x1b|\x87K\xd2\x1a0-\xb0\xbf\xbbv\x91\xe2G\xab\x05J\xc0G\xcd\x8aI\xa0\x99\xb2k\xe60S\xb2\xe0\xaf\xd0\x10\xec\x1bS%>\x9aa\x95)M\xc3\xefK[PV\x91=\xe9\x8f0xffffffffffffffff}) r2 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000009500000000000000def745cba5c240947521b5f7884ab293cc5489977222b262aa86ddf0a5f257e48ac789c6f9d2a5546d7048908f2d36b7013562b12a3d9011c372b916a08a3369fbc9c796ba9c8a18f1a1846b1b251b0548211a8565c69a89167874ccf32d9e968668d9a624cb309b10e629529794fa7f7bba341ca43d8c35adfb53e096dfedb689"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x2c, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$unix(r4, &(0x7f0000000300)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000980)="7f947c55f1b3421169e502a9ce2e30b7981ce10d141d8e4963410fb2110b76d9551fb6fd0f6922bf9000616b5cf85053695b6072ef35d0d7c9ad099f1bc7adb550956e7e78cac5c78e7a2ea515cc7149b4643ee405d2782c33e2487848da35a92ab0091fccf5f32a4d1c3cb624f3228cca9bf2a0819343c296cf2b5064e2df5ecfa6fce7c7ce83ee2666a601f9f7d9bc2574d8a35708f3bb305cb2d067cb79cc60c72cebef0b9650618c6a042ee65771966ba489d6a0e21f9afee3a550d1652d1964dc7634958a206604351fb914739ee7adc1348067fd5f9701bd1febedf865c630", 0xe2}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="74e869f087cad76ead0584d08a16d66e04ba7b1e791c9dec4bb3f58acce2335565ba88f908ad3a60c744a65a24f50031fdb30cf6b866ab97b34bd66ffebe04ecab1221adb9ee3b2c3efe12ea6d47785e2c8da2577aadd3c26e08aa7f486166", 0x5f}, {&(0x7f0000001c00)="6f0528d98a8d7b7d95daee29b26703d8a2a7d3cc340216ff2dc1450f56886c6da5711aa43c598d3917ed7562cb018ae5ba74ef9d695f189e992b2ccbecb6086052babd84475324f5ff8ec42c67cf5ca38de02fdd3c6654f191f8dc4562d46fe9093f7c3b399b3e012cd9769a9b5d3180ca349190bb497935ffcb2f3a067e6d3b3ed709108d74670209d8d1e80509ad91622f2a570754c467ce14d08ffcd00257a53dae458f6e0922df722c05c03191f581bf9f64cd3aed5737382341b430baeb81210f9c5f4e77", 0xc7}, {&(0x7f0000003700)="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", 0x1000}], 0x5}, 0x1) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r4, r5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000c00)={{r4}, r6, 0x12, @inherit={0x70, &(0x7f0000001d00)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000800008c00000000210000000000000005000000000000007f00000000000000cb00000000000000010000000080000009c100000000000000000080000000000400000000000000271100000000000048070000000000008f02c0af59821958aa15c9db3e1c362d7050bf7750aa03852c40bbc27fa5521178d4cea956a7b2e1a8addbc64ec3e3dd951d660342bd365fbbeb5ac6eba84bb1a5bd256f431133fe16c718ba05e56c60cc7c6daa43b510c719520cd03fbd7d7b2dcb70b6e26b4fd383"]}, @subvolid=0x40}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000580)={{r0}, r6, 0xa, @unused=[0x9, 0x9, 0x1, 0x8], @subvolid=0x7e}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89fb, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) fsetxattr(r7, &(0x7f0000000440)=@known='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 68.677489ms ago: executing program 5 (id=4470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xe000, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7fff}]}}}]}, 0x3c}}, 0x20004002) 7.06226ms ago: executing program 4 (id=4471): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff684fa02277d97d2478040000040000000000000000", @ANYRES32, @ANYRES16], 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xffffdffc, 0x100, 0xfffffffc, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/34, 0x22}], &(0x7f0000000a80)=[0xb], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0683, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) timer_create(0x3, &(0x7f0000000200)={0x0, 0x21, 0x1, @thr={&(0x7f0000000c00)="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", &(0x7f0000000500)="ae34e5d8a3707b23d631258d17dfa81be82d31d55f7ac9a61666f8d9a19a6d76d4aa87a1a7eaf6335fcbb64591435b2465154818902f79b45e662a1f102579f8aa8c6d5afa48a50ba75a1da41162c5e3294397267677149c63cbaf7433ae6d8ab02ad0594537f74bbca083567b8964f081e916a7d84d468107506dc39fccc74fe2a6178adcd78b828966d4c30b3d80048b2980604caaa42a58702a7d60bde01ecc36c10e7bb1b2cb744831a846b15dccc0781465e665a9bc95af602c8bef5bfde79ec7a180"}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r4, 0x400, 0x1) setreuid(0xee01, 0x0) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x100, 0x2) close(r4) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) chmod(&(0x7f00000001c0)='./bus\x00', 0x30) 5.46726ms ago: executing program 5 (id=4472): openat$ptp0(0xffffffffffffff9c, &(0x7f0000001740), 0x80, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'hugetlb'}]}, 0x9) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) 0s ago: executing program 5 (id=4473): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) statfs(0x0, 0x0) kernel console output (not intermixed with test programs): blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 262.190210][T13948] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3732'. [ 262.225281][T12418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.573875][T13971] loop4: detected capacity change from 0 to 128 [ 262.588209][T13969] SELinux: failed to load policy [ 262.600801][T13971] bio_check_eod: 77 callbacks suppressed [ 262.600890][T13971] syz.4.3742: attempt to access beyond end of device [ 262.600890][T13971] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 262.625473][T13969] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 262.637057][T13969] macsec1: entered allmulticast mode [ 262.642475][T13969] bridge0: entered allmulticast mode [ 262.652145][T13971] syz.4.3742: attempt to access beyond end of device [ 262.652145][T13971] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 262.665718][T13971] buffer_io_error: 32 callbacks suppressed [ 262.665733][T13971] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 262.683558][T13969] bridge0: port 1(macsec1) entered blocking state [ 262.690162][T13969] bridge0: port 1(macsec1) entered disabled state [ 262.703163][T13969] bridge0: left allmulticast mode [ 262.714223][T13971] syz.4.3742: attempt to access beyond end of device [ 262.714223][T13971] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 262.729946][T13971] syz.4.3742: attempt to access beyond end of device [ 262.729946][T13971] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 262.743527][T13971] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 262.753793][T13971] syz.4.3742: attempt to access beyond end of device [ 262.753793][T13971] loop4: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 262.795002][T13973] netlink: 'syz.3.3739': attribute type 10 has an invalid length. [ 262.806001][T13971] syz.4.3742: attempt to access beyond end of device [ 262.806001][T13971] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 262.819550][T13971] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 262.863146][T13982] batadv_slave_1: entered promiscuous mode [ 262.869741][T13971] syz.4.3742: attempt to access beyond end of device [ 262.869741][T13971] loop4: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 262.904360][T13980] batadv_slave_1: left promiscuous mode [ 262.918942][T13971] syz.4.3742: attempt to access beyond end of device [ 262.918942][T13971] loop4: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 262.932500][T13971] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 262.947869][T13985] loop3: detected capacity change from 0 to 512 [ 262.954939][T13985] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 262.964850][T13985] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 262.977171][T13987] loop5: detected capacity change from 0 to 512 [ 262.983930][T13971] syz.4.3742: attempt to access beyond end of device [ 262.983930][T13971] loop4: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 262.998104][T13987] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.052065][T13971] syz.4.3742: attempt to access beyond end of device [ 263.052065][T13971] loop4: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 263.053025][T13987] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 263.065556][T13971] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 263.085703][T13971] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 263.095911][T13985] netlink: zone id is out of range [ 263.101365][T13985] netlink: zone id is out of range [ 263.106739][T13985] netlink: zone id is out of range [ 263.108987][T13987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 263.112010][T13985] netlink: zone id is out of range [ 263.125328][T13985] netlink: zone id is out of range [ 263.131972][T13971] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 263.136117][T13987] System zones: 1-12 [ 263.141044][T13971] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 263.153359][T13985] netlink: zone id is out of range [ 263.156407][T13987] EXT4-fs (loop5): 1 truncate cleaned up [ 263.158567][T13985] netlink: zone id is out of range [ 263.169349][T13987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.169747][T13985] netlink: zone id is out of range [ 263.187286][T13971] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 263.196170][T13985] netlink: zone id is out of range [ 263.201929][T13971] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 263.210868][T13985] netlink: zone id is out of range [ 263.250752][T13993] loop1: detected capacity change from 0 to 1024 [ 263.294843][T13993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.364403][T13995] random: crng reseeded on system resumption [ 263.451891][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.559606][T14016] 0{X功: renamed from 31{X功 (while UP) [ 263.571457][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.717544][T14030] loop5: detected capacity change from 0 to 1024 [ 263.731613][T14030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.753186][T14030] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 263.785611][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.813907][T14034] loop5: detected capacity change from 0 to 1024 [ 263.833011][T14034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.899701][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.954423][T14044] netlink: 'syz.0.3770': attribute type 10 has an invalid length. [ 264.016138][T14052] __nla_validate_parse: 4 callbacks suppressed [ 264.016156][T14052] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3774'. [ 264.034144][T14052] 1{X功: renamed from 30{X功 (while UP) [ 264.134905][T14061] loop5: detected capacity change from 0 to 128 [ 264.288132][T14066] loop5: detected capacity change from 0 to 1024 [ 264.311055][T14066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.368483][T14066] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 264.426184][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.471105][T14087] loop5: detected capacity change from 0 to 764 [ 264.478622][T14087] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 264.518136][T14089] random: crng reseeded on system resumption [ 264.611496][T14094] loop3: detected capacity change from 0 to 512 [ 264.619242][T14094] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 264.671172][T14099] loop4: detected capacity change from 0 to 512 [ 264.678018][T14099] EXT4-fs: Ignoring removed mblk_io_submit option [ 264.685023][T14099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 264.710659][T14099] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 264.719655][T14099] System zones: 1-12 [ 264.724060][T14099] EXT4-fs (loop4): 1 truncate cleaned up [ 264.736577][T14099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.980176][T14115] netlink: 'syz.3.3799': attribute type 10 has an invalid length. [ 264.989399][T14115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3799'. [ 265.122312][T14122] loop5: detected capacity change from 0 to 1024 [ 265.148658][T14124] loop3: detected capacity change from 0 to 512 [ 265.155324][T14124] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.162105][T14124] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 265.164744][T14122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.186065][T14124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 265.194399][T14124] System zones: 1-12 [ 265.200414][T14124] EXT4-fs (loop3): 1 truncate cleaned up [ 265.206696][T14124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.219568][T14122] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 265.261836][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.306783][T14129] random: crng reseeded on system resumption [ 265.754624][T12418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.776326][T14138] loop4: detected capacity change from 0 to 764 [ 265.784203][T14138] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 265.992246][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 265.992261][ T29] audit: type=1326 audit(1757273446.329:23325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 265.998700][T14142] loop4: detected capacity change from 0 to 512 [ 266.029553][T14142] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 266.051329][ T29] audit: type=1326 audit(1757273446.329:23326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 266.051446][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.075153][ T29] audit: type=1326 audit(1757273446.329:23327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 266.108159][ T29] audit: type=1326 audit(1757273446.329:23328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 266.131811][ T29] audit: type=1326 audit(1757273446.329:23329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 266.144221][T14146] netlink: 'syz.4.3808': attribute type 10 has an invalid length. [ 266.155519][ T29] audit: type=1326 audit(1757273446.329:23330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 266.163518][T14146] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3808'. [ 266.196469][ T29] audit: type=1326 audit(1757273446.329:23331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 266.220086][ T29] audit: type=1326 audit(1757273446.329:23332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 266.244207][ T29] audit: type=1326 audit(1757273446.329:23333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 266.268168][ T29] audit: type=1326 audit(1757273446.329:23334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.4.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 266.341828][T14151] netlink: 'syz.3.3810': attribute type 10 has an invalid length. [ 266.350385][T14151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3810'. [ 266.592075][T14161] random: crng reseeded on system resumption [ 266.653175][T14166] loop1: detected capacity change from 0 to 512 [ 266.661172][T14166] EXT4-fs: Ignoring removed mblk_io_submit option [ 266.671015][T14166] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 266.683203][T14166] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 266.691435][T14166] System zones: 1-12 [ 266.696362][T14166] EXT4-fs (loop1): 1 truncate cleaned up [ 266.719649][T14173] loop4: detected capacity change from 0 to 512 [ 266.720195][T14166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.726885][T14173] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 266.960187][T14183] random: crng reseeded on system resumption [ 267.015432][T14187] netlink: 'syz.4.3823': attribute type 10 has an invalid length. [ 267.024019][T14187] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3823'. [ 267.682699][T14197] SELinux: failed to load policy [ 267.700070][T14197] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 267.708797][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3827'. [ 267.730787][T14197] bridge0: entered promiscuous mode [ 267.736135][T14197] macsec1: entered allmulticast mode [ 267.741584][T14197] bridge0: entered allmulticast mode [ 267.750389][T14197] bridge0: port 3(macsec1) entered blocking state [ 267.756913][T14197] bridge0: port 3(macsec1) entered disabled state [ 267.765046][T14197] bridge0: left allmulticast mode [ 267.770149][T14197] bridge0: left promiscuous mode [ 267.776977][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.848317][T14203] loop3: detected capacity change from 0 to 512 [ 267.855603][T14203] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 267.889763][T14206] random: crng reseeded on system resumption [ 268.065681][T14217] netlink: 'syz.5.3834': attribute type 10 has an invalid length. [ 268.074418][T14217] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3834'. [ 268.106336][T14217] dummy0: entered promiscuous mode [ 268.137156][T14217] bridge0: port 3(dummy0) entered blocking state [ 268.144566][T14217] bridge0: port 3(dummy0) entered disabled state [ 268.175182][T14217] dummy0: entered allmulticast mode [ 268.306134][T14217] bridge0: port 3(dummy0) entered blocking state [ 268.313432][T14217] bridge0: port 3(dummy0) entered forwarding state [ 268.376095][T14229] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3838'. [ 268.387814][T14231] loop3: detected capacity change from 0 to 512 [ 268.394801][T14231] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.404054][T14231] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 268.415238][T14231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 268.423347][T14231] System zones: 1-12 [ 268.427951][T14231] EXT4-fs (loop3): 1 truncate cleaned up [ 268.434902][T14231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.457173][T14238] loop5: detected capacity change from 0 to 512 [ 268.464471][T14238] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 268.727773][T14251] random: crng reseeded on system resumption [ 268.885221][T14257] random: crng reseeded on system resumption [ 269.581470][T14263] loop5: detected capacity change from 0 to 512 [ 269.600760][T14263] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.610094][T14263] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 269.629979][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.640166][T14263] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 269.648157][T14263] System zones: 1-12 [ 269.657201][T14263] EXT4-fs (loop5): 1 truncate cleaned up [ 269.667574][T14268] random: crng reseeded on system resumption [ 269.674459][T14263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.714539][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.900336][T14280] loop5: detected capacity change from 0 to 2048 [ 269.912900][T14284] netlink: 'syz.0.3856': attribute type 10 has an invalid length. [ 269.920879][T14284] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3856'. [ 269.946961][T14284] net_ratelimit: 75 callbacks suppressed [ 269.946981][T14284] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 269.955039][T14286] random: crng reseeded on system resumption [ 270.075769][T14291] batadv_slave_1: entered promiscuous mode [ 270.102619][T14290] batadv_slave_1: left promiscuous mode [ 270.146661][T14299] loop3: detected capacity change from 0 to 128 [ 270.156102][T14296] loop1: detected capacity change from 0 to 1024 [ 270.186520][T14299] bio_check_eod: 48 callbacks suppressed [ 270.186537][T14299] syz.3.3861: attempt to access beyond end of device [ 270.186537][T14299] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 270.208042][T14296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.220985][T14299] syz.3.3861: attempt to access beyond end of device [ 270.220985][T14299] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 270.234471][T14299] buffer_io_error: 18 callbacks suppressed [ 270.234489][T14299] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 270.249290][T14299] syz.3.3861: attempt to access beyond end of device [ 270.249290][T14299] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 270.263447][T14299] syz.3.3861: attempt to access beyond end of device [ 270.263447][T14299] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 270.277281][T14299] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 270.291403][T14299] syz.3.3861: attempt to access beyond end of device [ 270.291403][T14299] loop3: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 270.319897][T14299] syz.3.3861: attempt to access beyond end of device [ 270.319897][T14299] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 270.333387][T14299] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 270.348822][T14299] syz.3.3861: attempt to access beyond end of device [ 270.348822][T14299] loop3: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 270.360694][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.363005][T14299] syz.3.3861: attempt to access beyond end of device [ 270.363005][T14299] loop3: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 270.384793][T14299] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 270.394231][T14299] syz.3.3861: attempt to access beyond end of device [ 270.394231][T14299] loop3: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 270.422984][T14299] syz.3.3861: attempt to access beyond end of device [ 270.422984][T14299] loop3: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 270.436546][T14299] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 270.469185][T14299] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 270.490498][T14299] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 270.502148][T14299] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 270.521487][T14299] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 270.541677][T14299] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 270.730829][T14310] loop3: detected capacity change from 0 to 512 [ 270.747680][T14310] EXT4-fs: Ignoring removed mblk_io_submit option [ 270.756413][T14310] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 270.768320][T14310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 270.776635][T14310] System zones: 1-12 [ 270.780855][T14310] EXT4-fs (loop3): 1 truncate cleaned up [ 270.787071][T14310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.822548][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.021127][T14323] loop3: detected capacity change from 0 to 512 [ 271.027881][T14323] EXT4-fs: Ignoring removed mblk_io_submit option [ 271.035833][T14323] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 271.046780][T14323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 271.055944][T14323] System zones: 1-12 [ 271.060667][T14323] EXT4-fs (loop3): 1 truncate cleaned up [ 271.066835][T14323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.131448][T14327] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.203817][T14327] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.242376][T14327] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.296493][T14327] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.346552][T14335] random: crng reseeded on system resumption [ 271.380711][ T5687] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.390050][ T5687] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.398826][ T5712] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.417414][ T5712] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.432805][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 271.432822][ T29] audit: type=1326 audit(1757273451.769:23619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 271.488692][ T29] audit: type=1326 audit(1757273451.769:23620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 271.489723][T14338] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3873'. [ 271.512988][ T29] audit: type=1326 audit(1757273451.769:23621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 271.545571][ T29] audit: type=1326 audit(1757273451.769:23622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 271.545735][T14338] 1{X功: renamed from 30{X功 (while UP) [ 271.569197][ T29] audit: type=1326 audit(1757273451.769:23623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 271.569244][ T29] audit: type=1326 audit(1757273451.769:23624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 271.622781][ T29] audit: type=1326 audit(1757273451.769:23625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 271.646536][ T29] audit: type=1326 audit(1757273451.769:23626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 271.670300][ T29] audit: type=1326 audit(1757273451.769:23627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 271.694164][ T29] audit: type=1326 audit(1757273451.769:23628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 271.720311][T14344] loop1: detected capacity change from 0 to 2048 [ 271.731394][T14338] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 271.794168][T14346] loop5: detected capacity change from 0 to 1024 [ 271.831879][T14346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.835681][T14351] loop4: detected capacity change from 0 to 512 [ 271.890335][T14351] EXT4-fs: Ignoring removed mblk_io_submit option [ 271.908533][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.923955][T14351] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 271.942267][T14346] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 271.963323][T14351] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 271.973547][T14354] loop3: detected capacity change from 0 to 1024 [ 271.975884][T14351] System zones: 1-12 [ 271.994986][T14351] EXT4-fs (loop4): 1 truncate cleaned up [ 272.003754][T14351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.017548][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.028346][T14354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.068070][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3879'. [ 272.091644][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.646582][T14380] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3887'. [ 272.656284][T14380] 0{X功: renamed from 31{X功 (while UP) [ 272.664454][T14380] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 272.795133][T12418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.813208][T14385] loop4: detected capacity change from 0 to 512 [ 272.820088][T14385] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.826813][T14385] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 272.837681][T14385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 272.846162][T14385] System zones: 1-12 [ 272.850636][T14385] EXT4-fs (loop4): 1 truncate cleaned up [ 272.856837][T14385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.504805][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3892'. [ 273.532508][T14398] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3893'. [ 273.700618][T14406] SELinux: failed to load policy [ 273.713037][T14410] loop1: detected capacity change from 0 to 128 [ 273.713616][T14406] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 273.727000][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3896'. [ 273.737478][T12418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.740850][T14406] macsec1: entered allmulticast mode [ 273.752012][T14406] bridge0: entered allmulticast mode [ 273.759067][T14406] bridge0: port 1(macsec1) entered blocking state [ 273.765703][T14406] bridge0: port 1(macsec1) entered disabled state [ 273.773521][T14406] bridge0: left allmulticast mode [ 273.803525][T14412] random: crng reseeded on system resumption [ 273.985091][T14424] loop1: detected capacity change from 0 to 1024 [ 274.030513][T14424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.114948][T14424] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 274.152043][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.198721][T14439] loop1: detected capacity change from 0 to 764 [ 274.206156][T14439] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 274.393813][T14446] netlink: 'syz.1.3910': attribute type 10 has an invalid length. [ 274.401804][T14446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3910'. [ 274.433021][T14448] loop1: detected capacity change from 0 to 512 [ 274.441087][T14448] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 274.805226][T14454] loop4: detected capacity change from 0 to 128 [ 275.171445][T14469] loop4: detected capacity change from 0 to 764 [ 275.179569][T14469] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 275.206698][T14471] loop3: detected capacity change from 0 to 1024 [ 275.251267][T14471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.267568][T14474] netlink: 'syz.1.3921': attribute type 10 has an invalid length. [ 275.276409][T14474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3921'. [ 275.311850][T14471] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 275.396261][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.467806][T14485] random: crng reseeded on system resumption [ 275.871185][T14500] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3930'. [ 276.316938][T14509] loop3: detected capacity change from 0 to 512 [ 276.324387][T14509] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 276.389174][T14511] SELinux: failed to load policy [ 276.395775][T14511] syz2: rxe_newlink: already configured on vxcan1 [ 276.402957][T14511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 276.415226][T14511] bridge0: entered promiscuous mode [ 276.420677][T14511] macsec1: entered allmulticast mode [ 276.426013][T14511] bridge0: entered allmulticast mode [ 276.433145][T14511] bridge0: port 4(macsec1) entered blocking state [ 276.439720][T14511] bridge0: port 4(macsec1) entered disabled state [ 276.448215][T14511] bridge0: left allmulticast mode [ 276.453459][T14511] bridge0: left promiscuous mode [ 276.519523][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 276.519551][ T29] audit: type=1400 audit(1757273456.859:23960): avc: granted { setsecparam } for pid=14512 comm="syz.1.3935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 276.578657][T14517] loop3: detected capacity change from 0 to 1024 [ 276.602179][T14517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.654618][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.686642][T14523] netlink: 'syz.3.3938': attribute type 10 has an invalid length. [ 276.694574][T14523] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3938'. [ 276.708823][T14524] loop1: detected capacity change from 0 to 764 [ 276.717745][T14524] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 277.166032][ T29] audit: type=1326 audit(1757273457.409:23961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14544 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 277.190236][ T29] audit: type=1326 audit(1757273457.409:23962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14544 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 277.213960][ T29] audit: type=1326 audit(1757273457.409:23963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14544 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 277.237649][ T29] audit: type=1326 audit(1757273457.409:23964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14544 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 277.261299][ T29] audit: type=1326 audit(1757273457.409:23965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14544 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 277.285017][ T29] audit: type=1326 audit(1757273457.409:23966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14544 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 277.308655][ T29] audit: type=1326 audit(1757273457.409:23967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14544 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 277.332404][ T29] audit: type=1326 audit(1757273457.409:23968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14544 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 277.356129][ T29] audit: type=1326 audit(1757273457.409:23969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14544 comm="syz.4.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 277.418173][T14560] loop3: detected capacity change from 0 to 1024 [ 277.450724][T14560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.497049][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.551512][T14567] random: crng reseeded on system resumption [ 277.650382][T14572] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3953'. [ 277.659496][T14572] 1{X功: renamed from 30{X功 (while UP) [ 277.667053][T14572] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 277.747657][T14578] loop3: detected capacity change from 0 to 512 [ 277.754888][T14578] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.761798][T14578] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 277.772614][T14578] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 277.780734][T14578] System zones: 1-12 [ 277.785064][T14578] EXT4-fs (loop3): 1 truncate cleaned up [ 277.791376][T14578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.818087][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.839065][T14582] loop3: detected capacity change from 0 to 764 [ 277.846377][T14582] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 277.960105][T14584] SELinux: failed to load policy [ 277.975325][T14584] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 277.984266][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3958'. [ 278.007384][T14584] bridge0: entered promiscuous mode [ 278.013128][T14584] macsec1: entered allmulticast mode [ 278.018435][T14584] bridge0: entered allmulticast mode [ 278.040905][T14584] bridge0: port 4(macsec1) entered blocking state [ 278.047419][T14584] bridge0: port 4(macsec1) entered disabled state [ 278.055812][T14591] netlink: 'syz.4.3961': attribute type 10 has an invalid length. [ 278.063952][T14591] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3961'. [ 278.074796][T14584] bridge0: left allmulticast mode [ 278.079920][T14584] bridge0: left promiscuous mode [ 278.085082][T14593] loop1: detected capacity change from 0 to 512 [ 278.092862][T14593] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.100034][T14593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 278.111625][T14593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 278.119873][T14593] System zones: 1-12 [ 278.124363][T14593] EXT4-fs (loop1): 1 truncate cleaned up [ 278.131590][T14593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.149125][T14596] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3963'. [ 278.180629][T14600] loop5: detected capacity change from 0 to 512 [ 278.209893][T14600] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.221274][T14600] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 278.302924][T14600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 278.326487][T14600] System zones: 1-12 [ 278.331315][T14600] EXT4-fs (loop5): 1 truncate cleaned up [ 278.337739][T14600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.479160][T14610] loop4: detected capacity change from 0 to 128 [ 278.523564][T14610] bio_check_eod: 77 callbacks suppressed [ 278.523585][T14610] syz.4.3967: attempt to access beyond end of device [ 278.523585][T14610] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 278.565721][T14610] syz.4.3967: attempt to access beyond end of device [ 278.565721][T14610] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 278.579230][T14610] buffer_io_error: 32 callbacks suppressed [ 278.579248][T14610] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 278.602979][T14610] syz.4.3967: attempt to access beyond end of device [ 278.602979][T14610] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 278.648995][T14610] syz.4.3967: attempt to access beyond end of device [ 278.648995][T14610] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 278.662796][T14610] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 278.672641][T14610] syz.4.3967: attempt to access beyond end of device [ 278.672641][T14610] loop4: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 278.686829][T14610] syz.4.3967: attempt to access beyond end of device [ 278.686829][T14610] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 278.700544][T14610] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 278.702150][T14615] random: crng reseeded on system resumption [ 278.716682][T14610] syz.4.3967: attempt to access beyond end of device [ 278.716682][T14610] loop4: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 278.736210][T14610] syz.4.3967: attempt to access beyond end of device [ 278.736210][T14610] loop4: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 278.749788][T14610] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 278.760564][T14610] syz.4.3967: attempt to access beyond end of device [ 278.760564][T14610] loop4: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 278.774973][T14610] syz.4.3967: attempt to access beyond end of device [ 278.774973][T14610] loop4: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 278.788467][T14610] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 278.802512][T14610] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 278.864721][T14610] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 278.876813][T14610] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 278.899587][T14618] loop3: detected capacity change from 0 to 1024 [ 278.906857][T14610] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 278.917132][T14610] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 278.929446][T14618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.067738][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.106113][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.152525][T14622] netlink: 'syz.3.3971': attribute type 10 has an invalid length. [ 279.160995][T14622] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3971'. [ 279.189591][T14627] loop4: detected capacity change from 0 to 764 [ 279.201868][T14627] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 279.223691][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.242341][T14630] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3976'. [ 279.259023][T14630] 1{X功: renamed from 30{X功 (while UP) [ 279.277056][T14630] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 279.635862][T14662] netlink: 'syz.3.3987': attribute type 10 has an invalid length. [ 279.640849][T14658] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.695824][T14658] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.774748][T14658] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.791962][T14671] SELinux: failed to load policy [ 279.803593][T14671] syz2: rxe_newlink: already configured on vxcan1 [ 279.813095][T14671] bridge0: entered promiscuous mode [ 279.818439][T14671] macsec1: entered allmulticast mode [ 279.823831][T14671] bridge0: entered allmulticast mode [ 279.830486][T14671] bridge0: port 4(macsec1) entered blocking state [ 279.836990][T14671] bridge0: port 4(macsec1) entered disabled state [ 279.844427][T14671] bridge0: left allmulticast mode [ 279.849549][T14671] bridge0: left promiscuous mode [ 279.866357][T14658] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.937400][T14675] loop3: detected capacity change from 0 to 764 [ 279.944748][T14675] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 280.053416][ T5712] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.117014][ T5712] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.211539][ T5712] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.289881][ T5712] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.344807][T14683] loop1: detected capacity change from 0 to 512 [ 280.351592][T14683] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.358443][T14683] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 280.369243][T14683] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 280.377453][T14683] System zones: 1-12 [ 280.381902][T14683] EXT4-fs (loop1): 1 truncate cleaned up [ 280.388386][T14683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.823388][T14690] __nla_validate_parse: 3 callbacks suppressed [ 280.823407][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3997'. [ 280.846542][T14692] netlink: 'syz.4.3998': attribute type 10 has an invalid length. [ 280.854970][T14692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3998'. [ 280.994416][T14702] SELinux: failed to load policy [ 281.020463][T14702] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 281.029974][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4002'. [ 281.042636][T14702] bridge0: entered promiscuous mode [ 281.047968][T14702] macsec1: entered allmulticast mode [ 281.053526][T14702] bridge0: entered allmulticast mode [ 281.060601][T14702] bridge0: port 4(macsec1) entered blocking state [ 281.067133][T14702] bridge0: port 4(macsec1) entered disabled state [ 281.133843][T14702] bridge0: left allmulticast mode [ 281.139004][T14702] bridge0: left promiscuous mode [ 281.234747][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.250026][T14715] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4007'. [ 281.259230][T14715] 0{X功: renamed from 31{X功 (while UP) [ 281.267273][T14715] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 281.345015][T14724] netlink: 'syz.3.4010': attribute type 10 has an invalid length. [ 281.356393][T14724] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4010'. [ 281.373092][T14726] random: crng reseeded on system resumption [ 281.425727][T14733] loop1: detected capacity change from 0 to 512 [ 281.432756][T14733] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.439623][T14733] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 281.450517][T14733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 281.458617][T14733] System zones: 1-12 [ 281.463165][T14733] EXT4-fs (loop1): 1 truncate cleaned up [ 281.469438][T14733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.501785][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.291724][T14748] SELinux: failed to load policy [ 282.298633][T14748] syz2: rxe_newlink: already configured on vxcan1 [ 282.305601][T14748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4018'. [ 282.317907][T14748] bridge0: entered promiscuous mode [ 282.323280][T14748] macsec1: entered allmulticast mode [ 282.328911][T14748] bridge0: entered allmulticast mode [ 282.335848][T14748] bridge0: port 4(macsec1) entered blocking state [ 282.342451][T14748] bridge0: port 4(macsec1) entered disabled state [ 282.355657][T14748] bridge0: left allmulticast mode [ 282.360785][T14748] bridge0: left promiscuous mode [ 282.424446][T14750] loop1: detected capacity change from 0 to 1024 [ 282.471662][T14756] loop3: detected capacity change from 0 to 1024 [ 282.488183][T14750] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 282.561214][T14761] loop1: detected capacity change from 0 to 512 [ 282.568157][T14761] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.576166][T14761] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 282.576213][T14762] netlink: 'syz.3.4023': attribute type 10 has an invalid length. [ 282.587114][T14761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 282.587217][T14761] System zones: 1-12 [ 282.587599][T14761] EXT4-fs (loop1): 1 truncate cleaned up [ 282.618404][T14762] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4023'. [ 282.771300][T14767] random: crng reseeded on system resumption [ 282.847914][T14769] loop3: detected capacity change from 0 to 128 [ 282.897423][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 282.897441][ T29] audit: type=1326 audit(1757273463.229:24319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14770 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 282.910012][T14771] loop5: detected capacity change from 0 to 512 [ 282.933815][ T29] audit: type=1326 audit(1757273463.229:24320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14770 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 282.933853][ T29] audit: type=1326 audit(1757273463.229:24321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14770 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 282.981273][ T29] audit: type=1326 audit(1757273463.229:24322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14770 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 283.004952][ T29] audit: type=1326 audit(1757273463.229:24323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14770 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 283.028570][ T29] audit: type=1326 audit(1757273463.229:24324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14770 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 283.052182][ T29] audit: type=1326 audit(1757273463.229:24325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14770 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 283.076105][ T29] audit: type=1326 audit(1757273463.229:24326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14770 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 283.076805][T14771] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 283.099897][ T29] audit: type=1326 audit(1757273463.229:24327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14770 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 283.099960][ T29] audit: type=1326 audit(1757273463.229:24328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14770 comm="syz.5.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 283.240729][T14778] random: crng reseeded on system resumption [ 283.616816][T14787] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 283.656801][T14787] SELinux: failed to load policy [ 283.673514][T14785] syz2: rxe_newlink: already configured on vxcan1 [ 283.682735][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4031'. [ 283.697264][T14785] bridge0: entered promiscuous mode [ 283.703027][T14785] macsec1: entered allmulticast mode [ 283.708355][T14785] bridge0: entered allmulticast mode [ 283.716999][T14785] bridge0: port 4(macsec1) entered blocking state [ 283.723532][T14785] bridge0: port 4(macsec1) entered disabled state [ 283.739432][T14785] bridge0: left allmulticast mode [ 283.744623][T14785] bridge0: left promiscuous mode [ 283.863480][T14789] loop3: detected capacity change from 0 to 1024 [ 283.954171][T14789] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 284.580020][T14821] random: crng reseeded on system resumption [ 284.677897][T14823] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.764018][T14823] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.883435][T14823] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.985957][T14831] random: crng reseeded on system resumption [ 285.039339][T14823] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.095069][T14838] loop3: detected capacity change from 0 to 512 [ 285.103432][T14838] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.110540][T14838] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 285.122514][T14838] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 285.130605][T14838] System zones: 1-12 [ 285.139991][T14838] EXT4-fs (loop3): 1 truncate cleaned up [ 285.146222][T14838] EXT4-fs mount: 8 callbacks suppressed [ 285.146279][T14838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.339069][ T5725] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.349831][ T5687] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.430693][ T5725] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.671696][ T5725] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.735225][T14845] loop5: detected capacity change from 0 to 512 [ 285.742654][T14845] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.750370][T14845] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 285.776025][T14845] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 285.784120][T14845] System zones: 1-12 [ 285.789059][T14845] EXT4-fs (loop5): 1 truncate cleaned up [ 285.795258][T14845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.837453][T14848] netlink: 'syz.4.4051': attribute type 10 has an invalid length. [ 285.845414][T14848] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4051'. [ 285.923136][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.968465][T14855] loop5: detected capacity change from 0 to 1024 [ 285.991486][T14855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.095252][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.113103][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.165746][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4059'. [ 286.203047][T14868] SELinux: failed to load policy [ 286.210817][T14868] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 286.217466][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4060'. [ 286.230563][T14868] bridge0: entered promiscuous mode [ 286.235873][T14868] macsec1: entered allmulticast mode [ 286.241353][T14868] bridge0: entered allmulticast mode [ 286.251467][T14868] bridge0: port 4(macsec1) entered blocking state [ 286.258035][T14868] bridge0: port 4(macsec1) entered disabled state [ 286.267970][T14868] bridge0: left allmulticast mode [ 286.273139][T14868] bridge0: left promiscuous mode [ 286.377025][T14877] loop4: detected capacity change from 0 to 1024 [ 286.401032][T14877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.442354][T12418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.018966][T14896] netlink: 'syz.3.4069': attribute type 10 has an invalid length. [ 287.027473][T14896] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4069'. [ 287.143837][T14900] loop5: detected capacity change from 0 to 764 [ 287.185369][T14905] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4073'. [ 287.200061][T14900] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 287.216640][T14902] SELinux: failed to load policy [ 287.221985][T14905] 1{X功: renamed from 30{X功 (while UP) [ 287.251086][T14905] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 287.281767][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4072'. [ 287.310454][T14902] bridge0: entered promiscuous mode [ 287.326795][T14902] macsec1: entered allmulticast mode [ 287.332174][T14902] bridge0: entered allmulticast mode [ 287.352271][T14902] bridge0: port 4(macsec1) entered blocking state [ 287.358915][T14902] bridge0: port 4(macsec1) entered disabled state [ 287.389789][T14902] bridge0: left allmulticast mode [ 287.395046][T14902] bridge0: left promiscuous mode [ 287.416635][T14909] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4074'. [ 287.475726][T14921] netlink: 'syz.1.4078': attribute type 10 has an invalid length. [ 287.483672][T14921] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4078'. [ 287.558402][T14927] netlink: 'syz.3.4080': attribute type 10 has an invalid length. [ 287.566329][T14927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4080'. [ 287.662317][T14935] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.676806][T14936] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4084'. [ 287.686225][T14936] 0{X功: renamed from gretap0 (while UP) [ 287.694001][T14936] 0{X功: entered allmulticast mode [ 287.700442][T14936] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 288.520224][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 288.520243][ T29] audit: type=1326 audit(1757273467.989:24520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f576e72ebe9 code=0x7ffc0000 [ 288.550211][ T29] audit: type=1326 audit(1757273467.989:24519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.5.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 288.573953][ T29] audit: type=1326 audit(1757273467.989:24521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576e72ebe9 code=0x7ffc0000 [ 288.597586][ T29] audit: type=1326 audit(1757273467.989:24522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.5.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 288.621301][ T29] audit: type=1326 audit(1757273467.989:24523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576e72ebe9 code=0x7ffc0000 [ 288.644989][ T29] audit: type=1326 audit(1757273467.989:24524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f576e72ebe9 code=0x7ffc0000 [ 288.668618][ T29] audit: type=1326 audit(1757273467.989:24525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576e72ebe9 code=0x7ffc0000 [ 288.692357][ T29] audit: type=1326 audit(1757273467.989:24526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576e72ebe9 code=0x7ffc0000 [ 288.716085][ T29] audit: type=1326 audit(1757273467.989:24527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f576e72ebe9 code=0x7ffc0000 [ 288.739670][ T29] audit: type=1326 audit(1757273467.989:24528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576e72ebe9 code=0x7ffc0000 [ 288.811945][T14935] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.872824][T14935] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.963797][T14935] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.980147][T14954] SELinux: failed to load policy [ 288.990760][T14954] bridge0: entered promiscuous mode [ 288.996169][T14954] macsec1: entered allmulticast mode [ 289.001564][T14954] bridge0: entered allmulticast mode [ 289.008400][T14954] bridge0: port 4(macsec1) entered blocking state [ 289.014987][T14954] bridge0: port 4(macsec1) entered disabled state [ 289.026229][T14954] bridge0: left allmulticast mode [ 289.031375][T14954] bridge0: left promiscuous mode [ 289.062202][ T5687] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.076535][ T5687] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.103065][ T5687] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.129134][ T5687] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.152387][T14964] loop1: detected capacity change from 0 to 512 [ 289.159418][T14964] EXT4-fs: Ignoring removed mblk_io_submit option [ 289.176210][T14964] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 289.199689][T14964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 289.207765][T14964] System zones: 1-12 [ 289.218855][T14968] netlink: 'syz.5.4094': attribute type 10 has an invalid length. [ 289.248296][T14964] EXT4-fs (loop1): 1 truncate cleaned up [ 289.259312][T14964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.273038][T14972] netlink: 'syz.5.4095': attribute type 10 has an invalid length. [ 289.297445][T14974] 0{X功: renamed from 31{X功 (while UP) [ 289.307247][T14974] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 289.434763][T14987] random: crng reseeded on system resumption [ 289.502724][T14991] SELinux: failed to load policy [ 289.533507][T14991] macsec1: entered allmulticast mode [ 289.538950][T14991] bridge0: entered allmulticast mode [ 289.546838][T14991] bridge0: port 1(macsec1) entered blocking state [ 289.553518][T14991] bridge0: port 1(macsec1) entered disabled state [ 289.563176][T14991] bridge0: left allmulticast mode [ 289.771225][T15005] netlink: 'syz.5.4107': attribute type 10 has an invalid length. [ 289.829003][T15007] netlink: 'syz.5.4108': attribute type 10 has an invalid length. [ 289.842008][T15009] 1{X功: renamed from 30{X功 (while UP) [ 289.851019][T15009] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 290.177913][T15026] random: crng reseeded on system resumption [ 290.213831][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.215900][T15028] SELinux: failed to load policy [ 290.232942][T15028] bridge0: entered promiscuous mode [ 290.238215][T15028] macsec1: entered allmulticast mode [ 290.243728][T15028] bridge0: entered allmulticast mode [ 290.250631][T15028] bridge0: port 4(macsec1) entered blocking state [ 290.257114][T15028] bridge0: port 4(macsec1) entered disabled state [ 290.265333][T15028] bridge0: left allmulticast mode [ 290.270584][T15028] bridge0: left promiscuous mode [ 290.301480][T15034] netlink: 'syz.1.4118': attribute type 10 has an invalid length. [ 290.383986][T15046] 0{X功: renamed from 31{X功 (while UP) [ 290.394228][T15046] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 290.456107][T15050] loop1: detected capacity change from 0 to 1024 [ 290.480924][T15050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.576740][T15062] random: crng reseeded on system resumption [ 290.764026][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.816703][T15073] netlink: 'syz.3.4132': attribute type 10 has an invalid length. [ 290.990540][T15079] random: crng reseeded on system resumption [ 291.226577][T15096] random: crng reseeded on system resumption [ 291.236911][T15098] random: crng reseeded on system resumption [ 291.264336][T15100] loop5: detected capacity change from 0 to 1024 [ 291.280780][T15100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.321209][T15107] netlink: 'syz.0.4144': attribute type 10 has an invalid length. [ 291.325464][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.329264][T15107] __nla_validate_parse: 20 callbacks suppressed [ 291.329282][T15107] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4144'. [ 291.354685][T15107] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 291.427284][T15113] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.512083][T15119] loop4: detected capacity change from 0 to 764 [ 291.520605][T15119] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 291.550527][T15113] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.612533][T15113] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.679108][T15113] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.774540][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.798379][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.824774][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.878804][ T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.048107][T15132] loop5: detected capacity change from 0 to 1024 [ 292.458990][T15132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.490115][T15132] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.4154: Allocating blocks 497-513 which overlap fs metadata [ 292.505014][T15132] EXT4-fs (loop5): pa ffff888106f7daf0: logic 256, phys. 369, len 9 [ 292.513176][T15132] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 292.537381][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.557781][T15137] random: crng reseeded on system resumption [ 292.588193][T15141] netlink: 'syz.4.4157': attribute type 10 has an invalid length. [ 292.596247][T15141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4157'. [ 292.647487][T15144] random: crng reseeded on system resumption [ 292.658805][T15148] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4160'. [ 292.824951][T15158] SELinux: failed to load policy [ 292.832891][T15158] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 292.839574][T15158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4163'. [ 292.851816][T15158] bridge0: entered promiscuous mode [ 292.857196][T15158] macsec1: entered allmulticast mode [ 292.862575][T15158] bridge0: entered allmulticast mode [ 292.869208][T15158] bridge0: port 4(macsec1) entered blocking state [ 292.875765][T15158] bridge0: port 4(macsec1) entered disabled state [ 292.890560][T15158] bridge0: left allmulticast mode [ 292.895716][T15158] bridge0: left promiscuous mode [ 292.936531][T15165] loop1: detected capacity change from 0 to 1024 [ 292.950186][T15165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.986454][T15165] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4166: Allocating blocks 497-513 which overlap fs metadata [ 293.001216][T15165] EXT4-fs (loop1): pa ffff888106dc1700: logic 256, phys. 369, len 9 [ 293.009275][T15165] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 293.037510][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.084172][T15182] random: crng reseeded on system resumption [ 293.156969][T15186] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.225614][T15186] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.266005][T15186] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.316508][T15186] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.755355][ T5686] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.780427][ T5686] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.804214][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 293.804233][ T29] audit: type=1326 audit(1757273474.139:24849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.5.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 293.807715][T15189] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4175'. [ 293.818971][ T29] audit: type=1326 audit(1757273474.139:24850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.5.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 293.867363][ T29] audit: type=1326 audit(1757273474.139:24851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.5.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 293.891201][ T29] audit: type=1326 audit(1757273474.139:24852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.5.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 293.915037][ T29] audit: type=1326 audit(1757273474.139:24853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.5.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 293.938780][ T29] audit: type=1326 audit(1757273474.139:24854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.5.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 293.962596][ T29] audit: type=1326 audit(1757273474.139:24855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.5.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 293.962665][ T5686] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.986222][ T29] audit: type=1326 audit(1757273474.139:24856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.5.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 293.998590][T15189] 1{X功: renamed from 30{X功 (while UP) [ 294.018182][ T29] audit: type=1326 audit(1757273474.139:24857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.5.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 294.048137][ T29] audit: type=1326 audit(1757273474.139:24858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.5.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 294.098643][T15189] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 294.122836][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.238439][T15195] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.293997][T15204] loop1: detected capacity change from 0 to 512 [ 294.301068][T15204] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.314438][T15206] loop3: detected capacity change from 0 to 1024 [ 294.322195][T15204] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 294.335389][T15204] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 294.358622][T15204] System zones: 1-12 [ 294.364216][T15206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.365998][T15195] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.403729][T15204] EXT4-fs (loop1): 1 truncate cleaned up [ 294.430209][T15204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.448896][T15217] random: crng reseeded on system resumption [ 294.483694][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.520381][T15223] random: crng reseeded on system resumption [ 294.533630][T15195] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.690672][T15195] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.018736][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.042939][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.069149][ T5687] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.089271][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.196832][T15234] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4190'. [ 295.216390][T15234] 0{X功: renamed from 31{X功 (while UP) [ 295.233354][T15234] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 295.285128][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.327882][T15239] netlink: 'syz.4.4192': attribute type 10 has an invalid length. [ 295.335872][T15239] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4192'. [ 295.614086][T15252] SELinux: failed to load policy [ 295.623186][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4196'. [ 295.635372][T15252] bridge0: entered promiscuous mode [ 295.641866][T15252] macsec1: entered allmulticast mode [ 295.647209][T15252] bridge0: entered allmulticast mode [ 295.656768][T15252] bridge0: port 4(macsec1) entered blocking state [ 295.663337][T15252] bridge0: port 4(macsec1) entered disabled state [ 295.670202][T15254] random: crng reseeded on system resumption [ 295.678641][T15252] bridge0: left allmulticast mode [ 295.683728][T15252] bridge0: left promiscuous mode [ 295.757039][T15257] loop1: detected capacity change from 0 to 764 [ 295.776069][T15257] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 295.852049][T15259] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.982855][T15259] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.074877][T15271] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4203'. [ 296.079687][T15259] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.116171][T15271] 1{X功: renamed from 30{X功 (while UP) [ 296.123940][T15271] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 296.169100][T15276] netlink: 'syz.0.4205': attribute type 10 has an invalid length. [ 296.176643][T15259] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.176989][T15276] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4205'. [ 296.203225][T15276] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 296.332292][ T5687] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.370197][ T56] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.393873][ T56] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.417901][ T56] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.568657][T15284] loop3: detected capacity change from 0 to 1024 [ 296.580926][T15284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.614030][T15284] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 296.645751][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.667955][T15288] loop3: detected capacity change from 0 to 1024 [ 296.681093][T15288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.718610][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.753006][T15294] random: crng reseeded on system resumption [ 296.884712][T15298] loop3: detected capacity change from 0 to 1024 [ 296.900247][T15298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.929245][T15298] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 296.957416][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.996501][T15308] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.020597][T15308] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.035525][T15310] random: crng reseeded on system resumption [ 297.060247][T15308] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.120064][T15308] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.184101][T15314] random: crng reseeded on system resumption [ 297.267012][T15319] random: crng reseeded on system resumption [ 297.328197][T15326] random: crng reseeded on system resumption [ 297.385343][T15330] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.456284][T15330] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.516796][T15330] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.566207][T15330] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.082088][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.106184][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.131590][ T5686] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.154838][ T5686] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.193742][T15337] random: crng reseeded on system resumption [ 298.238438][T15339] SELinux: failed to load policy [ 298.245595][T15339] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 298.350468][T15344] random: crng reseeded on system resumption [ 298.469322][T15355] netlink: 'syz.0.4234': attribute type 10 has an invalid length. [ 298.477198][T15355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4234'. [ 298.487854][T15355] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 298.517324][T15360] loop4: detected capacity change from 0 to 512 [ 298.524220][T15360] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.531342][T15360] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 298.559989][T15360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 298.568583][T15360] System zones: 1-12 [ 298.578232][T15360] EXT4-fs (loop4): 1 truncate cleaned up [ 298.585421][T15365] SELinux: failed to load policy [ 298.593321][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4238'. [ 298.598906][T15360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.606072][T15365] bridge0: entered promiscuous mode [ 298.619851][T15365] macsec1: entered allmulticast mode [ 298.625183][T15365] bridge0: entered allmulticast mode [ 298.631922][T15365] bridge0: port 4(macsec1) entered blocking state [ 298.638392][T15365] bridge0: port 4(macsec1) entered disabled state [ 298.646251][T15365] bridge0: left allmulticast mode [ 298.651424][T15365] bridge0: left promiscuous mode [ 298.815035][T15369] random: crng reseeded on system resumption [ 298.929480][T15372] loop5: detected capacity change from 0 to 764 [ 298.937567][T15372] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 299.179849][T15376] loop1: detected capacity change from 0 to 1024 [ 299.212486][T15376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.385868][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.462960][T12418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.483349][T15383] random: crng reseeded on system resumption [ 299.524890][T15389] loop5: detected capacity change from 0 to 1024 [ 299.543656][T15391] netlink: 'syz.4.4248': attribute type 10 has an invalid length. [ 299.551714][T15391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4248'. [ 299.569639][T15389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.610510][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 299.610528][ T29] audit: type=1400 audit(1757273479.949:25092): avc: granted { setsecparam } for pid=15398 comm="syz.1.4250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 299.668258][T15397] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.746080][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.781946][T15397] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.797692][ T29] audit: type=1326 audit(1757273480.129:25093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15402 comm="syz.5.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 299.821515][ T29] audit: type=1326 audit(1757273480.129:25094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15402 comm="syz.5.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 299.845513][ T29] audit: type=1326 audit(1757273480.129:25095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15402 comm="syz.5.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 299.869176][ T29] audit: type=1326 audit(1757273480.129:25096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15402 comm="syz.5.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 299.893029][ T29] audit: type=1326 audit(1757273480.129:25097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15402 comm="syz.5.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 299.917648][ T29] audit: type=1326 audit(1757273480.259:25098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15402 comm="syz.5.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 299.941611][ T29] audit: type=1326 audit(1757273480.259:25099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15402 comm="syz.5.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 299.965419][ T29] audit: type=1326 audit(1757273480.259:25100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15402 comm="syz.5.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 299.975985][T15403] loop5: detected capacity change from 0 to 512 [ 299.989619][ T29] audit: type=1326 audit(1757273480.259:25101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15402 comm="syz.5.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75c335ebe9 code=0x7ffc0000 [ 300.020831][T15403] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 300.066632][T15397] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.174783][T15410] loop5: detected capacity change from 0 to 512 [ 300.178089][T15397] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.194733][T15410] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.211486][T15410] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 300.223534][T15410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 300.231536][T15410] System zones: 1-12 [ 300.235849][T15410] EXT4-fs (loop5): 1 truncate cleaned up [ 300.243413][T15410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.271290][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.297267][T15415] loop5: detected capacity change from 0 to 512 [ 300.306232][T15415] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.314644][T15415] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 300.326563][T15415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 300.334732][T15415] System zones: 1-12 [ 300.339377][T15415] EXT4-fs (loop5): 1 truncate cleaned up [ 300.345518][T15415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.366851][T15417] SELinux: failed to load policy [ 300.371546][ T5687] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.383454][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4257'. [ 300.414644][ T5687] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.454206][T15417] macsec1: entered allmulticast mode [ 300.459738][T15417] bridge0: entered allmulticast mode [ 300.466622][T15417] bridge0: port 1(macsec1) entered blocking state [ 300.473180][T15417] bridge0: port 1(macsec1) entered disabled state [ 300.481593][T15417] bridge0: left allmulticast mode [ 300.491555][ T5687] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.503811][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.536187][T15423] netlink: 'syz.3.4259': attribute type 10 has an invalid length. [ 300.544172][T15423] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4259'. [ 300.546073][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.592469][ T5686] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.629867][T15429] loop3: detected capacity change from 0 to 1024 [ 300.636432][ T5686] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.646746][ T5686] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.722179][T15429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.898253][T11642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.258251][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.286263][T15444] loop1: detected capacity change from 0 to 512 [ 301.294650][T15444] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.302315][T15444] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 301.315919][T15444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 301.324289][T15444] System zones: 1-12 [ 301.330790][T15444] EXT4-fs (loop1): 1 truncate cleaned up [ 301.339401][T15444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.385620][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.431010][T15448] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.433001][T15455] loop1: detected capacity change from 0 to 764 [ 301.500963][T15455] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 301.558143][T15453] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.686497][T15448] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.708203][T15465] random: crng reseeded on system resumption [ 301.853940][T15453] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.895760][T15448] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.965000][T15453] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.023745][T15448] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.081994][T15453] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.145655][ T5709] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.158673][ T5686] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.171942][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.207456][ T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.674104][T15486] loop5: detected capacity change from 0 to 512 [ 302.681012][T15486] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.692176][T15486] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 302.708773][T15486] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 302.717192][T15490] FAULT_INJECTION: forcing a failure. [ 302.717192][T15490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.721939][T15486] System zones: 1-12 [ 302.730433][T15490] CPU: 0 UID: 0 PID: 15490 Comm: syz.4.4284 Not tainted syzkaller #0 PREEMPT(voluntary) [ 302.730472][T15490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.730490][T15490] Call Trace: [ 302.730499][T15490] [ 302.730512][T15490] __dump_stack+0x1d/0x30 [ 302.730541][T15490] dump_stack_lvl+0xe8/0x140 [ 302.730568][T15490] dump_stack+0x15/0x1b [ 302.730613][T15490] should_fail_ex+0x265/0x280 [ 302.730658][T15490] should_fail+0xb/0x20 [ 302.730687][T15490] should_fail_usercopy+0x1a/0x20 [ 302.730721][T15490] _copy_from_user+0x1c/0xb0 [ 302.730766][T15490] memdup_user+0x5e/0xd0 [ 302.730881][T15490] strndup_user+0x68/0xb0 [ 302.730917][T15490] perf_uprobe_init+0x48/0x150 [ 302.731023][T15490] perf_uprobe_event_init+0xc4/0x140 [ 302.731094][T15490] perf_try_init_event+0xd6/0x540 [ 302.731132][T15490] ? perf_event_alloc+0xb1c/0x1740 [ 302.731215][T15490] perf_event_alloc+0xb27/0x1740 [ 302.731263][T15490] __se_sys_perf_event_open+0x4a5/0x11c0 [ 302.731327][T15490] ? __rcu_read_unlock+0x4f/0x70 [ 302.731418][T15490] __x64_sys_perf_event_open+0x67/0x80 [ 302.731506][T15490] x64_sys_call+0x7bd/0x2ff0 [ 302.731535][T15490] do_syscall_64+0xd2/0x200 [ 302.731577][T15490] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 302.731643][T15490] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 302.731684][T15490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.731713][T15490] RIP: 0033:0x7fba21b0ebe9 [ 302.731775][T15490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.731828][T15490] RSP: 002b:00007fba2056f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 302.731854][T15490] RAX: ffffffffffffffda RBX: 00007fba21d45fa0 RCX: 00007fba21b0ebe9 [ 302.731939][T15490] RDX: 0000000000000001 RSI: ffffffffffffffff RDI: 0000200000000140 [ 302.731996][T15490] RBP: 00007fba2056f090 R08: 0000000000000002 R09: 0000000000000000 [ 302.732013][T15490] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 302.732031][T15490] R13: 00007fba21d46038 R14: 00007fba21d45fa0 R15: 00007ffeea23ae88 [ 302.732055][T15490] [ 302.818288][T15493] loop4: detected capacity change from 0 to 512 [ 302.840605][T15493] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.877607][T15486] EXT4-fs (loop5): 1 truncate cleaned up [ 302.959028][T15493] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 302.965322][T15486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.029344][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.044748][T15493] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 303.064157][T15493] System zones: 1-12 [ 303.073874][T15493] EXT4-fs (loop4): 1 truncate cleaned up [ 303.090366][T15493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.106203][T15503] loop1: detected capacity change from 0 to 1024 [ 303.143320][T15503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.193808][T15503] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 303.216707][T15507] random: crng reseeded on system resumption [ 303.252146][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.373137][T15515] loop5: detected capacity change from 0 to 1024 [ 303.400729][T15515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.414186][T15513] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.476515][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.527925][T15513] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.585323][T15520] loop5: detected capacity change from 0 to 1024 [ 303.621476][T15520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.753176][T15524] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4295'. [ 303.763932][T12418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.765602][T15513] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.800336][T15524] 0{X功: renamed from 31{X功 (while UP) [ 303.808692][T15524] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 303.839918][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.925270][T15533] loop5: detected capacity change from 0 to 764 [ 303.936551][T15513] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.947966][T15533] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 304.377620][T15538] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4299'. [ 304.405249][ T5709] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.454637][T15538] 1{X功: renamed from 30{X功 (while UP) [ 304.494649][T15538] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 304.519987][ T5709] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.564529][ T5709] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.626883][ T5709] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.641474][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 304.641491][ T29] audit: type=1326 audit(1757273484.979:25300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15526 comm="syz.4.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 304.671624][ T29] audit: type=1326 audit(1757273484.979:25301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15526 comm="syz.4.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 304.750103][T15549] loop1: detected capacity change from 0 to 1024 [ 304.758089][T15549] EXT4-fs: Ignoring removed orlov option [ 304.779499][T15549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.831121][T15555] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.872113][T15559] netlink: 'syz.0.4307': attribute type 10 has an invalid length. [ 304.880355][T15559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4307'. [ 304.966986][T15559] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 304.988611][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.017828][ T29] audit: type=1400 audit(1757273485.349:25302): avc: granted { setsecparam } for pid=15564 comm="syz.0.4310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 305.076038][ T29] audit: type=1326 audit(1757273485.409:25303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.1.4312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a3cdaebe9 code=0x0 [ 305.084044][T15555] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.179407][ T29] audit: type=1326 audit(1757273485.509:25304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15579 comm="syz.0.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24640ebe9 code=0x7ffc0000 [ 305.203309][ T29] audit: type=1326 audit(1757273485.509:25305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15579 comm="syz.0.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc24640ebe9 code=0x7ffc0000 [ 305.227087][ T29] audit: type=1326 audit(1757273485.509:25306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15579 comm="syz.0.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24640ebe9 code=0x7ffc0000 [ 305.250777][ T29] audit: type=1326 audit(1757273485.509:25307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15579 comm="syz.0.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc24640ebe9 code=0x7ffc0000 [ 305.274663][ T29] audit: type=1326 audit(1757273485.509:25308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15579 comm="syz.0.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24640ebe9 code=0x7ffc0000 [ 305.298351][ T29] audit: type=1326 audit(1757273485.509:25309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15579 comm="syz.0.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc24640ebe9 code=0x7ffc0000 [ 305.363965][T15555] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.445929][T15555] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.078908][ T56] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.092307][ T56] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.100811][ T56] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.110216][ T56] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.120592][T15588] loop1: detected capacity change from 0 to 764 [ 306.130881][T15588] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 306.139789][T15591] loop4: detected capacity change from 0 to 512 [ 306.146505][T15591] EXT4-fs: Ignoring removed mblk_io_submit option [ 306.154660][T15591] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 306.165366][T15591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 306.175030][T15591] System zones: 1-12 [ 306.187613][T15591] EXT4-fs (loop4): 1 truncate cleaned up [ 306.194979][T15591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.311311][T15598] netlink: 'syz.0.4320': attribute type 10 has an invalid length. [ 306.319811][T15598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4320'. [ 306.333740][T15598] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 306.456316][ T5686] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.483760][T15609] netlink: 'syz.5.4324': attribute type 10 has an invalid length. [ 306.491747][T15609] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4324'. [ 306.502721][ T5686] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.514939][ T5686] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.532748][ T5686] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.646516][T15618] SELinux: failed to load policy [ 306.656896][T15618] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 306.706051][T15621] loop5: detected capacity change from 0 to 764 [ 306.724544][T15621] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 307.013790][T12418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.113202][T15627] loop5: detected capacity change from 0 to 512 [ 307.120275][T15627] EXT4-fs: Ignoring removed mblk_io_submit option [ 307.127071][T15627] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 307.150078][T15627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 307.158316][T15627] System zones: 1-12 [ 307.162800][T15627] EXT4-fs (loop5): 1 truncate cleaned up [ 307.170141][T15627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.844595][T15640] netlink: 'syz.3.4333': attribute type 10 has an invalid length. [ 307.853168][T15640] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4333'. [ 308.112842][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.172393][T15654] loop4: detected capacity change from 0 to 512 [ 308.176532][T15652] SELinux: failed to load policy [ 308.179261][T15654] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.191756][T15654] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 308.204078][T15652] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 308.204422][T15654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 308.227664][T15654] System zones: 1-12 [ 308.233697][T15654] EXT4-fs (loop4): 1 truncate cleaned up [ 308.241000][T15654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.248986][T15658] loop5: detected capacity change from 0 to 512 [ 308.263867][T15658] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.271027][T15658] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 308.283803][T15658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 308.292047][T15658] System zones: 1-12 [ 308.297044][T15658] EXT4-fs (loop5): 1 truncate cleaned up [ 308.309445][T15661] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4341'. [ 308.310231][T15658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.318766][T15661] 0{X功: renamed from 31{X功 (while UP) [ 308.340898][T15661] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 308.413707][T12418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.481077][T15663] random: crng reseeded on system resumption [ 308.725618][T15678] netlink: 'syz.0.4347': attribute type 10 has an invalid length. [ 308.736615][T15678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4347'. [ 308.793669][T15678] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 308.879614][T15685] SELinux: failed to load policy [ 308.893562][T15685] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 308.978626][T15691] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4353'. [ 308.990309][T15691] 0{X功: renamed from 31{X功 (while UP) [ 309.001312][T15691] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 309.109641][T15694] random: crng reseeded on system resumption [ 309.117696][T13046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.195853][T15704] random: crng reseeded on system resumption [ 309.223504][T15703] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.436075][T15703] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.534461][T15703] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.847843][T15722] loop1: detected capacity change from 0 to 1024 [ 309.862698][T15722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.961617][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.097919][T15703] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.115756][T15727] loop1: detected capacity change from 0 to 512 [ 310.122709][T15727] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.129704][T15727] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 310.143602][T15727] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 310.152943][T15727] System zones: 1-12 [ 310.158641][T15731] random: crng reseeded on system resumption [ 310.170128][T15727] EXT4-fs (loop1): 1 truncate cleaned up [ 310.187516][T15734] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.310338][T15734] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.370147][T15734] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.394580][T15738] random: crng reseeded on system resumption [ 310.431044][T15734] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.523386][ T5709] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.547915][ T5709] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.556843][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 310.556861][ T29] audit: type=1326 audit(1757273490.879:25499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 310.587205][ T29] audit: type=1326 audit(1757273490.879:25500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 310.611182][ T29] audit: type=1326 audit(1757273490.879:25501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 310.634867][ T29] audit: type=1326 audit(1757273490.879:25502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 310.658772][ T29] audit: type=1326 audit(1757273490.879:25503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 310.682407][ T29] audit: type=1326 audit(1757273490.879:25504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 310.688823][ T5709] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.706066][ T29] audit: type=1326 audit(1757273490.899:25505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 310.706100][ T29] audit: type=1326 audit(1757273490.899:25506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 310.754169][ T5709] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.762180][ T29] audit: type=1326 audit(1757273490.899:25507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 310.794125][ T29] audit: type=1326 audit(1757273490.899:25508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.4.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba21b0ebe9 code=0x7ffc0000 [ 311.708986][T15764] loop5: detected capacity change from 0 to 512 [ 311.715715][T15764] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.722455][T15764] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 311.733235][T15764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 311.741410][T15764] System zones: 1-12 [ 311.745952][T15764] EXT4-fs (loop5): 1 truncate cleaned up [ 311.773882][T15768] netlink: 'syz.5.4379': attribute type 10 has an invalid length. [ 311.781828][T15768] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4379'. [ 311.872619][T15780] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.936642][T15784] loop1: detected capacity change from 0 to 512 [ 311.943457][T15784] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.950310][T15784] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 311.950870][T15780] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.963987][T15784] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 311.978126][T15784] System zones: 1-12 [ 311.982790][T15784] EXT4-fs (loop1): 1 truncate cleaned up [ 312.010848][T15780] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.062583][T15780] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.077295][T15788] loop4: detected capacity change from 0 to 512 [ 312.084313][T15788] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.091260][T15788] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 312.102182][T15788] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 312.116809][ T5725] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.117511][T15788] System zones: 1-12 [ 312.138458][T15788] EXT4-fs (loop4): 1 truncate cleaned up [ 312.145200][ T5725] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.171010][T15792] netlink: 'syz.3.4388': attribute type 10 has an invalid length. [ 312.183180][T15792] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4388'. [ 312.202864][ T5725] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.242379][T15794] loop3: detected capacity change from 0 to 512 [ 312.249277][T15794] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.255927][ T5725] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.256270][T15794] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 312.275958][T15794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 312.284580][T15794] System zones: 1-12 [ 312.290751][T15794] EXT4-fs (loop3): 1 truncate cleaned up [ 312.838417][T15799] SELinux: failed to load policy [ 312.855265][T15799] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 312.884982][T15801] netlink: 'syz.1.4391': attribute type 10 has an invalid length. [ 312.892951][T15801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4391'. [ 313.232642][T15823] loop4: detected capacity change from 0 to 512 [ 313.256058][T15823] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.283057][T15823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 313.318877][T15823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 313.335452][T15823] System zones: 1-12 [ 313.349872][T15823] EXT4-fs (loop4): 1 truncate cleaned up [ 313.406178][T15829] loop4: detected capacity change from 0 to 764 [ 313.414271][T15829] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 313.645099][T15837] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4405'. [ 313.690997][T15843] loop4: detected capacity change from 0 to 512 [ 313.697644][T15843] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.704626][T15843] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 313.715423][T15843] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 313.723499][T15843] System zones: 1-12 [ 313.727802][T15843] EXT4-fs (loop4): 1 truncate cleaned up [ 313.962200][T15851] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4408'. [ 314.015599][T15855] netlink: 'syz.1.4409': attribute type 10 has an invalid length. [ 314.023514][T15855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4409'. [ 314.475717][T15867] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4413'. [ 314.562934][T15867] 1{X功: renamed from 30{X功 (while UP) [ 314.646872][T15867] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 314.824135][T15874] loop4: detected capacity change from 0 to 764 [ 314.832194][T15874] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 314.999089][T15877] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4417'. [ 315.016946][T15877] 1{X功: renamed from 30{X功 (while UP) [ 315.026602][T15877] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 315.101765][ T5725] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.126402][ T5725] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.146891][ T5725] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.161382][T15884] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4420'. [ 315.171752][ T5725] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.427477][T15897] random: crng reseeded on system resumption [ 315.475623][T15899] SELinux: failed to load policy [ 315.483489][T15899] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 316.124945][T15911] loop1: detected capacity change from 0 to 1024 [ 316.140470][T15911] EXT4-fs mount: 14 callbacks suppressed [ 316.140489][T15911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.634543][T15911] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 316.643533][T15916] loop3: detected capacity change from 0 to 764 [ 316.659606][T15916] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 316.694357][T15918] SELinux: failed to load policy [ 316.700525][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.711413][T15918] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 316.729111][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 316.729126][ T29] audit: type=1326 audit(1757273497.069:25730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.1.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3cdaebe9 code=0x7ffc0000 [ 316.766689][ T29] audit: type=1326 audit(1757273497.099:25731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.1.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a3cdaebe9 code=0x7ffc0000 [ 316.790362][ T29] audit: type=1326 audit(1757273497.099:25732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.1.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3cdaebe9 code=0x7ffc0000 [ 316.813967][ T29] audit: type=1326 audit(1757273497.099:25733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.1.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3cdaebe9 code=0x7ffc0000 [ 316.837581][ T29] audit: type=1326 audit(1757273497.099:25734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.1.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a3cdaebe9 code=0x7ffc0000 [ 316.861218][ T29] audit: type=1326 audit(1757273497.099:25735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.1.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3cdaebe9 code=0x7ffc0000 [ 316.884892][ T29] audit: type=1326 audit(1757273497.099:25736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.1.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3cdaebe9 code=0x7ffc0000 [ 316.908587][ T29] audit: type=1326 audit(1757273497.099:25737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.1.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a3cdaebe9 code=0x7ffc0000 [ 316.932370][ T29] audit: type=1326 audit(1757273497.099:25738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.1.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3cdaebe9 code=0x7ffc0000 [ 316.957800][ T29] audit: type=1326 audit(1757273497.099:25739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.1.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3cdaebe9 code=0x7ffc0000 [ 317.037314][T15929] random: crng reseeded on system resumption [ 317.074775][T15927] loop1: detected capacity change from 0 to 1024 [ 317.107203][T15923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.132342][T15927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.182350][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.270742][T15923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.320483][T15923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.395490][T15923] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.469730][ T5709] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.493327][ T5709] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.516543][ T5709] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.540025][ T56] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.604213][T15948] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.655436][T15948] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.715897][T15948] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.775182][T15948] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.961432][T15950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4442'. [ 318.004072][T15952] SELinux: failed to load policy [ 318.011200][T15952] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 318.037719][T15954] loop4: detected capacity change from 0 to 764 [ 318.046046][T15954] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 318.216910][T15964] loop3: detected capacity change from 0 to 764 [ 318.232515][T15964] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 318.240221][T15966] random: crng reseeded on system resumption [ 318.805346][T15983] SELinux: failed to load policy [ 318.812259][T15983] syz2: rxe_newlink: already configured on vxcan1 [ 319.016986][T15992] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.065381][T15992] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.135470][T15992] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.185260][T15992] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.281215][ T5686] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.305387][ T5686] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.329327][ T5686] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.352252][ T5686] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.413380][T15994] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.423443][T15996] random: crng reseeded on system resumption [ 319.476162][T15994] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.531793][T15994] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.569233][T16005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4462'. [ 319.603722][T16008] loop1: detected capacity change from 0 to 128 [ 319.636687][T15994] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.653387][T16011] loop4: detected capacity change from 0 to 764 [ 319.665812][T16011] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 319.691036][T16013] loop1: detected capacity change from 0 to 2048 [ 319.701686][T16013] EXT4-fs (loop1): failed to initialize system zone (-117) [ 319.710188][T16013] EXT4-fs (loop1): mount failed [ 319.849478][ T56] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.907849][ T56] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.920436][T16022] loop1: detected capacity change from 0 to 512 [ 319.932885][T16022] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.951009][T16022] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 320.168771][T16022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 320.182621][T16022] System zones: 1-12 [ 320.201449][T16022] EXT4-fs (loop1): 1 truncate cleaned up [ 320.245236][T16022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.263447][ T5725] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.301051][ T5725] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.507532][T16037] random: crng reseeded on system resumption [ 320.524245][T16033] ================================================================== [ 320.532395][T16033] BUG: KCSAN: data-race in __filemap_remove_folio / filemap_write_and_wait_range [ 320.541576][T16033] [ 320.543919][T16033] read-write to 0xffff888100618730 of 8 bytes by task 16022 on cpu 0: [ 320.552104][T16033] __filemap_remove_folio+0x1bc/0x2a0 [ 320.557513][T16033] folio_unmap_invalidate+0x1dd/0x360 [ 320.562916][T16033] invalidate_inode_pages2_range+0x27c/0x3d0 [ 320.568913][T16033] filemap_invalidate_pages+0x16d/0x1a0 [ 320.574478][T16033] kiocb_invalidate_pages+0x6e/0x80 [ 320.579786][T16033] __iomap_dio_rw+0x5d4/0x1250 [ 320.584571][T16033] iomap_dio_rw+0x40/0x90 [ 320.588912][T16033] ext4_file_write_iter+0xad9/0xf00 [ 320.594142][T16033] iter_file_splice_write+0x666/0xa60 [ 320.599715][T16033] direct_splice_actor+0x156/0x2a0 [ 320.604847][T16033] splice_direct_to_actor+0x312/0x680 [ 320.610278][T16033] do_splice_direct+0xda/0x150 [ 320.615056][T16033] do_sendfile+0x380/0x650 [ 320.620036][T16033] __x64_sys_sendfile64+0x105/0x150 [ 320.625254][T16033] x64_sys_call+0x2bb0/0x2ff0 [ 320.629944][T16033] do_syscall_64+0xd2/0x200 [ 320.634471][T16033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.640400][T16033] [ 320.642730][T16033] read to 0xffff888100618730 of 8 bytes by task 16033 on cpu 1: [ 320.650376][T16033] filemap_write_and_wait_range+0x59/0x340 [ 320.656215][T16033] ext4_file_write_iter+0xe04/0xf00 [ 320.661444][T16033] iter_file_splice_write+0x666/0xa60 [ 320.666834][T16033] direct_splice_actor+0x156/0x2a0 [ 320.671962][T16033] splice_direct_to_actor+0x312/0x680 [ 320.677346][T16033] do_splice_direct+0xda/0x150 [ 320.682203][T16033] do_sendfile+0x380/0x650 [ 320.686652][T16033] __x64_sys_sendfile64+0x105/0x150 [ 320.691870][T16033] x64_sys_call+0x2bb0/0x2ff0 [ 320.696659][T16033] do_syscall_64+0xd2/0x200 [ 320.701185][T16033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.707099][T16033] [ 320.709426][T16033] value changed: 0x0000000000000002 -> 0x0000000000000001 [ 320.716536][T16033] [ 320.718862][T16033] Reported by Kernel Concurrency Sanitizer on: [ 320.725017][T16033] CPU: 1 UID: 0 PID: 16033 Comm: syz.1.4468 Not tainted syzkaller #0 PREEMPT(voluntary) [ 320.735009][T16033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.745086][T16033] ================================================================== [ 320.799585][T11846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.504139][ T5686] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.515382][ T5686] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.526808][ T5725] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.538894][ T5709] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0