last executing test programs: 3m10.750924867s ago: executing program 32 (id=86): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 2m46.892388872s ago: executing program 33 (id=330): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0xfec7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x2) 2m18.281207025s ago: executing program 4 (id=1408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2m18.217502371s ago: executing program 4 (id=1410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 2m17.608537276s ago: executing program 4 (id=1418): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @broadcast}}) 2m16.933227176s ago: executing program 4 (id=1422): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m16.880253501s ago: executing program 4 (id=1426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) getrusage(0x0, &(0x7f0000000280)) 2m16.67314615s ago: executing program 4 (id=1433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) 2m16.611491825s ago: executing program 34 (id=1433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) 1m13.776417615s ago: executing program 6 (id=3281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) 1m13.664789156s ago: executing program 6 (id=3285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x18) r2 = socket$kcm(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r0}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 1m13.664473136s ago: executing program 6 (id=3287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) 1m13.112381236s ago: executing program 6 (id=3313): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@mblk_io_submit}, {@quota}]}, 0x2, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) pwrite64(r1, &(0x7f0000000100)="95", 0x1, 0xe7c) 1m12.716730661s ago: executing program 6 (id=3328): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000040)) 1m10.780286565s ago: executing program 6 (id=3409): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) 1m10.769339046s ago: executing program 35 (id=3409): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) 1m2.71412734s ago: executing program 1 (id=3665): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) write$selinux_load(0xffffffffffffffff, 0x0, 0xffa8) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1m2.694146932s ago: executing program 1 (id=3668): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x10004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) syz_clone(0x2801000, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) syz_clone(0x40000000, 0x0, 0x4b, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1) 1m2.319564856s ago: executing program 1 (id=3677): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 1m2.239118603s ago: executing program 1 (id=3678): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@mblk_io_submit}, {@quota}]}, 0x2, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) pwrite64(r1, &(0x7f0000000100)="95", 0x1, 0xe7c) 1m1.94383536s ago: executing program 1 (id=3685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, 0x0, 0x0, 0x5405, 0x0, 0x0) 1m0.60065147s ago: executing program 1 (id=3719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m0.60032294s ago: executing program 8 (id=3720): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x16}, 0x18) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) 1m0.588560741s ago: executing program 36 (id=3719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m0.584143992s ago: executing program 8 (id=3723): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0x20c89f, 0x1c881, 0x1, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0, 0x8}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r0, 0x0, 0x1000002, 0x37, 0x0, 0x0) 1m0.526267827s ago: executing program 8 (id=3724): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, 0x0, 0x0, 0x9c00, 0x0, 0x3) 1m0.500656239s ago: executing program 8 (id=3726): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@mblk_io_submit}, {@quota}]}, 0x2, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) pwrite64(r1, &(0x7f0000000100)="95", 0x1, 0xe7c) 1m0.220535495s ago: executing program 8 (id=3729): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 59.548658125s ago: executing program 8 (id=3735): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000011c0)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x7fffffff, @empty, 0xfffffffe}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x48, 0x11, 0x0, @empty, @mcast2, {[], {0x4, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "501d85d4c30be8f7096bcac751c47a7064c0905ddbda9581", "babcb20957603da1f0f50bdeece24d1a6888200cff6eb0e25e458eaae0df616e"}}}}}}}, 0x0) 59.548501665s ago: executing program 37 (id=3735): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000011c0)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x7fffffff, @empty, 0xfffffffe}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x48, 0x11, 0x0, @empty, @mcast2, {[], {0x4, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "501d85d4c30be8f7096bcac751c47a7064c0905ddbda9581", "babcb20957603da1f0f50bdeece24d1a6888200cff6eb0e25e458eaae0df616e"}}}}}}}, 0x0) 7.922555017s ago: executing program 9 (id=5369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = socket$inet(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="0800cdc8460f2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 7.8918839s ago: executing program 9 (id=5371): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0xfda0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x40}, 0x18) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r0) 7.842890075s ago: executing program 9 (id=5374): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) brk(0x200004ffc000) 7.819665166s ago: executing program 9 (id=5375): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) 7.788325189s ago: executing program 9 (id=5376): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x6, 0xf, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x3a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004680)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {0x0, 0x20}, {0x0, 0x9}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) 7.722431145s ago: executing program 9 (id=5380): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e028008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_open_dev$sg(0x0, 0x0, 0x0) 7.674038919s ago: executing program 38 (id=5380): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e028008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_open_dev$sg(0x0, 0x0, 0x0) 1.304301332s ago: executing program 5 (id=5591): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.291978884s ago: executing program 3 (id=5592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4e}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) 1.071240153s ago: executing program 3 (id=5594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pwritev(r2, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 1.028603567s ago: executing program 3 (id=5596): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 824.059576ms ago: executing program 0 (id=5604): io_setup(0xb, &(0x7f00000003c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r0, 0x2, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x9, r3, &(0x7f0000000380)="ba419f8d4fda55572b", 0x9, 0x8, 0x0, 0x0, r3}]) 765.120221ms ago: executing program 7 (id=5606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 740.946683ms ago: executing program 0 (id=5607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000108000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 732.792284ms ago: executing program 2 (id=5608): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2c040, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 726.963914ms ago: executing program 7 (id=5609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000400), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00\x00 \x00', "a3f7a0879100"}, 0x38) recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 702.161616ms ago: executing program 0 (id=5610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0), 0x4) 676.171879ms ago: executing program 7 (id=5611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 587.855347ms ago: executing program 2 (id=5612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 587.687017ms ago: executing program 7 (id=5613): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() tkill(r1, 0x1) rt_sigtimedwait(&(0x7f00000010c0)={[0x401]}, 0x0, 0x0, 0x8) 541.036681ms ago: executing program 7 (id=5614): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r4, 0x0, 0xbc3}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 534.746022ms ago: executing program 5 (id=5615): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rename(&(0x7f0000000400)='./file1\x00', 0x0) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/173, 0xad}, {0x0}, {0x0}, {&(0x7f0000000000)=""/205, 0xcd}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000180)=""/24, 0x18}], 0x7, 0x7fffffff, 0x100, 0xa) 529.103242ms ago: executing program 0 (id=5616): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x2000000000}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x2) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 460.758048ms ago: executing program 5 (id=5617): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000"/50], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 460.561588ms ago: executing program 0 (id=5618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000070a05ca"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) syz_open_dev$sg(0x0, 0x0, 0x18b203) 421.777962ms ago: executing program 0 (id=5619): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) 398.235134ms ago: executing program 7 (id=5620): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000740)={[{@nojournal_checksum}, {@inlinecrypt}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000500)={[{@sysvgroups}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@nouid32}, {@min_batch_time}, {@jqfmt_vfsold}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0xff, 0x476, &(0x7f0000001580)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000340)=0xff, 0x4) 335.21486ms ago: executing program 5 (id=5621): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x5, 0x70bd29, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000005800410f9c00f4f90085b3a85c91fddf08", 0x15) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 328.79632ms ago: executing program 2 (id=5622): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0x1, 0x163}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x1000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="6c0100"], 0x16c}}, 0x0) io_uring_enter(r0, 0x847ba, 0x4c86, 0x5, 0x0, 0x0) 244.696178ms ago: executing program 5 (id=5623): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) 115.51619ms ago: executing program 3 (id=5624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 93.439401ms ago: executing program 3 (id=5625): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0, 0xffffffffffffff64}) 72.311503ms ago: executing program 2 (id=5626): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000240)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'virt_wifi0\x00'}}, 0x1e) 48.435745ms ago: executing program 2 (id=5627): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x14, 0x453, 0x200, 0x70bd2d, 0x25dfdbff, "9b21"}, 0x14}, 0x1, 0x0, 0x0, 0x60004881}, 0x8000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 28.922497ms ago: executing program 3 (id=5628): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x4, 0x10000, 0x1, 0x12, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 16.877448ms ago: executing program 2 (id=5629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") utimes(&(0x7f0000000000)='./file1\x00', 0x0) 0s ago: executing program 5 (id=5630): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, r0, 0x308000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) kernel console output (not intermixed with test programs): ee8f749 code=0x7ffc0000 [ 159.467347][ T5064] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.488816][ T5064] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.504812][ T5064] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.513155][ T5064] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.525933][T13022] IPv6: NLM_F_CREATE should be specified when creating new route [ 159.974756][ T29] audit: type=1326 audit(1767429994.220:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13050 comm="syz.0.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13ee8f749 code=0x7ffc0000 [ 160.013078][T13055] netlink: 'syz.1.3598': attribute type 30 has an invalid length. [ 160.083213][T13062] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.093177][T13062] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.103124][T13040] loop8: detected capacity change from 0 to 32768 [ 160.165046][T13040] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 160.171473][T13040] loop8: p1 start 460800 is beyond EOD, truncated [ 160.178247][T13040] loop8: p2 size 83886080 extends beyond EOD, truncated [ 160.195589][T13040] loop8: p5 start 460800 is beyond EOD, truncated [ 160.202265][T13040] loop8: p6 size 83886080 extends beyond EOD, truncated [ 160.224565][T13062] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.234469][T13062] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.276292][T13062] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.286220][T13062] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.356952][T13062] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.366855][T13062] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.463351][T13090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13090 comm=syz.7.3616 [ 160.471872][ T5108] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.476017][T13090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13090 comm=syz.7.3616 [ 160.484107][ T5108] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.599630][ T5108] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.607979][ T5108] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.634670][ T5108] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.642916][ T5108] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.655718][ T5108] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.664100][ T5108] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.722790][T13111] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.731633][T13112] loop1: detected capacity change from 0 to 2048 [ 160.794370][T13112] Alternate GPT is invalid, using primary GPT. [ 160.800782][T13112] loop1: p2 p3 p7 [ 161.100969][T13140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3635'. [ 161.202012][T13148] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 161.212030][T13148] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 161.288919][T13148] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 161.299110][T13148] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 161.312460][T13154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3643'. [ 161.335291][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3643'. [ 161.476875][T13148] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 161.487063][T13148] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 161.536707][T13148] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 161.546654][T13148] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 161.617190][ T5090] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 161.625662][ T5090] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 161.650157][ T5090] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 161.658539][ T5090] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 161.702743][ T5090] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 161.711170][ T5090] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 161.739911][ T5090] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 161.748301][ T5090] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 161.775298][T13169] hub 3-0:1.0: USB hub found [ 161.784456][T13169] hub 3-0:1.0: 8 ports detected [ 161.931826][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3656'. [ 161.951158][T13186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.966999][T13186] bond3: Unable to set up delay as MII monitoring is disabled [ 162.010698][T13191] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.020690][T13191] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.208951][T13191] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.218996][T13191] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.286939][T13191] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.296779][T13191] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.372955][T13191] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.382805][T13191] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.430357][T13226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3674'. [ 162.535464][T13230] loop8: detected capacity change from 0 to 512 [ 162.542267][T13230] ext4: Bad value for 'max_dir_size_kb' [ 162.645761][T13238] loop1: detected capacity change from 0 to 1024 [ 162.672893][T13238] EXT4-fs: inline encryption not supported [ 162.686690][T13238] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.724116][T13238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.784714][T13238] loop1: detected capacity change from 1024 to 64 [ 162.800287][T13238] bio_check_eod: 103 callbacks suppressed [ 162.800302][T13238] syz.1.3678: attempt to access beyond end of device [ 162.800302][T13238] loop1: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 162.819609][T13238] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 113) [ 162.831295][T13238] syz.1.3678: attempt to access beyond end of device [ 162.831295][T13238] loop1: rw=2049, sector=230, nr_sectors = 2 limit=64 [ 162.844744][T13238] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 115) [ 162.856132][T13238] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 162.868704][T13238] Buffer I/O error on device loop1, logical block 115 [ 162.875621][T13238] Buffer I/O error on device loop1, logical block 113 [ 162.895702][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 162.909576][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 162.923535][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 162.948411][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 162.977638][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 162.991757][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 163.009929][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 163.023668][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 163.227225][T13223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.257181][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 163.257196][ T29] audit: type=1326 audit(1767429997.500:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 163.296091][T13241] kmmpd-loop1: attempt to access beyond end of device [ 163.296091][T13241] loop1: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 163.309837][T13241] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 163.331168][ T29] audit: type=1326 audit(1767429997.530:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 163.354734][ T29] audit: type=1326 audit(1767429997.530:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 163.378235][ T29] audit: type=1326 audit(1767429997.530:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 163.401751][ T29] audit: type=1326 audit(1767429997.530:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 163.425258][ T29] audit: type=1326 audit(1767429997.540:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 163.448918][ T29] audit: type=1326 audit(1767429997.540:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 163.472831][ T29] audit: type=1326 audit(1767429997.540:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 163.496796][ T29] audit: type=1326 audit(1767429997.540:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 163.520317][ T29] audit: type=1326 audit(1767429997.560:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 163.563947][ T5090] smc: removing ib device syz1 [ 163.570480][ T3423] syz1: Port: 1 Link DOWN [ 163.597534][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3700'. [ 163.616585][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3700'. [ 163.802516][T13300] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3708'. [ 163.812648][T13298] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3707'. [ 163.867446][ T5108] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 163.877601][ T5108] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 163.936931][T13306] syzkaller1: entered promiscuous mode [ 163.942464][T13306] syzkaller1: entered allmulticast mode [ 163.966298][ T5108] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 163.976442][ T5108] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 163.988880][T13308] macvtap0: refused to change device tx_queue_len [ 164.037052][ T5108] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 164.047134][ T5108] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 164.096634][ T5108] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 164.106580][ T5108] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 164.148216][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3715'. [ 164.379768][T13336] loop8: detected capacity change from 0 to 1024 [ 164.386948][T13336] EXT4-fs: inline encryption not supported [ 164.393017][T13336] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.417487][T13336] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.467712][ T5108] $Hÿ (unregistering): Released all slaves [ 164.476917][ T5108] bond0 (unregistering): Released all slaves [ 164.484608][T13336] loop8: detected capacity change from 1024 to 64 [ 164.493887][T13336] syz.8.3726: attempt to access beyond end of device [ 164.493887][T13336] loop8: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 164.507412][T13336] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 113) [ 164.520863][T13336] syz.8.3726: attempt to access beyond end of device [ 164.520863][T13336] loop8: rw=2049, sector=230, nr_sectors = 2 limit=64 [ 164.534296][T13336] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 115) [ 164.545638][T13336] EXT4-fs (loop8): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 164.558218][T13336] Buffer I/O error on device loop8, logical block 115 [ 164.565089][T13336] Buffer I/O error on device loop8, logical block 113 [ 164.573119][ T5108] tipc: Left network mode [ 164.629425][T12591] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 164.643991][T12591] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 164.659834][T12591] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 164.673879][T12591] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 164.702239][ T5108] veth1_macvtap: left promiscuous mode [ 164.708075][T12591] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 164.715325][ T5108] veth0_macvtap: left promiscuous mode [ 164.722216][T12591] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 164.734622][ T5108] veth1_vlan: left promiscuous mode [ 164.741523][T12591] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 164.763759][T12591] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 164.765291][ T5108] veth0_vlan: left promiscuous mode [ 164.791074][T13351] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 165.048301][ T5067] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.056681][ T5067] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.159872][T12591] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.210539][T13328] chnl_net:caif_netlink_parms(): no params data found [ 165.221125][T13337] kmmpd-loop8: attempt to access beyond end of device [ 165.221125][T13337] loop8: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 165.234843][T13337] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 165.248615][T13362] loop5: detected capacity change from 0 to 512 [ 165.278762][ T5067] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.287023][ T5067] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.295804][ T5067] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.304065][ T5067] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.318090][ T5067] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.326362][ T5067] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.343115][T13362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.364229][T13362] ext4 filesystem being mounted at /701/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.398500][T13328] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.405873][T13328] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.413568][T13328] bridge_slave_0: entered allmulticast mode [ 165.414844][ T3692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.420555][T13328] bridge_slave_0: entered promiscuous mode [ 165.435712][T13328] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.442789][T13328] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.450022][T13328] bridge_slave_1: entered allmulticast mode [ 165.456829][T13328] bridge_slave_1: entered promiscuous mode [ 165.499216][T13328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.511611][T13328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.568808][T13328] team0: Port device team_slave_0 added [ 165.585859][T13328] team0: Port device team_slave_1 added [ 165.628828][T13328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.635949][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.661887][T13328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.677145][T13328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.684139][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.710142][T13328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.737059][ T5108] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.766700][T13328] hsr_slave_0: entered promiscuous mode [ 165.772992][T13328] hsr_slave_1: entered promiscuous mode [ 165.779238][T13328] debugfs: 'hsr0' already exists in 'hsr' [ 165.785045][T13328] Cannot create hsr debugfs directory [ 165.821638][ T5108] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.835534][T13398] netem: incorrect gi model size [ 165.840752][T13398] netem: change failed [ 165.877265][ T5108] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.933147][T13409] xt_hashlimit: max too large, truncated to 1048576 [ 165.956070][ T5108] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.969547][T13328] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 165.997579][T13328] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 166.029509][T13328] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 166.049254][T13328] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 166.067927][T13368] chnl_net:caif_netlink_parms(): no params data found [ 166.155385][T13368] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.162499][T13368] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.169929][T13368] bridge_slave_0: entered allmulticast mode [ 166.177874][T13368] bridge_slave_0: entered promiscuous mode [ 166.188242][ T5108] bridge_slave_1: left allmulticast mode [ 166.194042][ T5108] bridge_slave_1: left promiscuous mode [ 166.199904][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.226296][ T5108] bridge_slave_0: left allmulticast mode [ 166.231986][ T5108] bridge_slave_0: left promiscuous mode [ 166.237780][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.376867][ T5108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.387190][ T5108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.397469][ T5108] bond0 (unregistering): Released all slaves [ 166.405927][T13368] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.413136][T13368] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.420452][T13368] bridge_slave_1: entered allmulticast mode [ 166.426926][T13368] bridge_slave_1: entered promiscuous mode [ 166.482667][T13368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.494326][T13368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.535573][T13368] team0: Port device team_slave_0 added [ 166.546160][T13368] team0: Port device team_slave_1 added [ 166.554940][ T5108] hsr_slave_0: left promiscuous mode [ 166.561768][ T5108] hsr_slave_1: left promiscuous mode [ 166.569196][ T5108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.576682][ T5108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.585209][ T5108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.592615][ T5108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.646041][ T5108] veth1_macvtap: left promiscuous mode [ 166.656638][ T5108] veth0_macvtap: left promiscuous mode [ 166.662679][ T5108] veth1_vlan: left promiscuous mode [ 166.668197][ T5108] veth0_vlan: left promiscuous mode [ 166.735668][T13458] loop5: detected capacity change from 0 to 512 [ 166.766410][T13458] ------------[ cut here ]------------ [ 166.771932][T13458] EA inode 11 i_nlink=2 [ 166.771950][T13458] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.5.3760/13458 [ 166.787279][T13458] Modules linked in: [ 166.791319][T13458] CPU: 1 UID: 0 PID: 13458 Comm: syz.5.3760 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.801264][T13458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.811387][T13458] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 166.818128][T13458] Code: d1 e2 9c ff 4c 8d 2d 2a f0 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 7c ac ba 03 66 66 66 2e 0f 1f 84 [ 166.837875][T13458] RSP: 0018:ffffc900016675a0 EFLAGS: 00010246 [ 166.844022][T13458] RAX: ffff88810373ed90 RBX: ffff88811acaf688 RCX: ffffffff81bb1d9b [ 166.852027][T13458] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0db0 [ 166.860033][T13458] RBP: 000000000000000b R08: 000188811acaf63b R09: 0000000000000000 [ 166.868024][T13458] R10: ffffc900016674d0 R11: 0001c900016674d0 R12: ffff88811acaf638 [ 166.876006][T13458] R13: ffffffff86dc0db0 R14: ffff88811acaf5f0 R15: 0000000000000001 [ 166.884140][T13458] FS: 00007f10400176c0(0000) GS:ffff8882aeec5000(0000) knlGS:0000000000000000 [ 166.893113][T13458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.899734][T13458] CR2: 0000001b33f20ff8 CR3: 0000000128960000 CR4: 00000000003506f0 [ 166.907821][T13458] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 166.915805][T13458] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 166.923877][T13458] Call Trace: [ 166.927200][T13458] [ 166.930226][T13458] ext4_xattr_set_entry+0x77f/0x1020 [ 166.935585][T13458] ext4_xattr_ibody_set+0x184/0x3c0 [ 166.940837][T13458] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 166.946735][T13458] __ext4_expand_extra_isize+0x246/0x280 [ 166.952494][T13458] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 166.957990][T13458] ext4_evict_inode+0x7c4/0xd40 [ 166.962933][T13458] ? __pfx_ext4_evict_inode+0x10/0x10 [ 166.968403][T13458] evict+0x2af/0x510 [ 166.972331][T13458] ? __dquot_initialize+0x146/0x7c0 [ 166.977646][T13458] iput+0x4bd/0x650 [ 166.981473][T13458] ext4_process_orphan+0x1a9/0x1c0 [ 166.986617][T13458] ext4_orphan_cleanup+0x6a8/0xa00 [ 166.991735][T13458] ext4_fill_super+0x3411/0x37a0 [ 166.996767][T13458] ? set_blocksize+0x1a8/0x310 [ 167.001603][T13458] ? sb_set_blocksize+0xfc/0x170 [ 167.006566][T13458] ? setup_bdev_super+0x30e/0x370 [ 167.011678][T13458] ? __pfx_ext4_fill_super+0x10/0x10 [ 167.017043][T13458] get_tree_bdev_flags+0x291/0x300 [ 167.022226][T13458] ? __pfx_ext4_fill_super+0x10/0x10 [ 167.027526][T13458] get_tree_bdev+0x1f/0x30 [ 167.031986][T13458] ext4_get_tree+0x1c/0x30 [ 167.036430][T13458] vfs_get_tree+0x57/0x1d0 [ 167.040851][T13458] do_new_mount+0x24d/0x6a0 [ 167.045507][T13458] path_mount+0x4ab/0xb80 [ 167.049913][T13458] ? user_path_at+0xbf/0x130 [ 167.054573][T13458] __se_sys_mount+0x28c/0x2e0 [ 167.059345][T13458] __x64_sys_mount+0x67/0x80 [ 167.064009][T13458] x64_sys_call+0x2cca/0x3000 [ 167.068707][T13458] do_syscall_64+0xca/0x2b0 [ 167.073305][T13458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.079239][T13458] RIP: 0033:0x7f10415b0eea [ 167.083784][T13458] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.103479][T13458] RSP: 002b:00007f1040016e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.112055][T13458] RAX: ffffffffffffffda RBX: 00007f1040016ef0 RCX: 00007f10415b0eea [ 167.120545][T13458] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f1040016eb0 [ 167.128562][T13458] RBP: 0000200000000180 R08: 00007f1040016ef0 R09: 0000000000800700 [ 167.136592][T13458] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 167.144638][T13458] R13: 00007f1040016eb0 R14: 000000000000046f R15: 000000000000002c [ 167.152638][T13458] [ 167.155672][T13458] ---[ end trace 0000000000000000 ]--- [ 167.161372][T13458] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.3760: iget: bad extra_isize 90 (inode size 256) [ 167.164768][ T5108] team0 (unregistering): Port device team_slave_1 removed [ 167.176668][T13458] EXT4-fs (loop5): Remounting filesystem read-only [ 167.189044][T13458] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 167.198137][T13458] EXT4-fs (loop5): 1 orphan inode deleted [ 167.198382][ T5108] team0 (unregistering): Port device team_slave_0 removed [ 167.204734][T13458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.271064][ T3692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.313704][T13368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.320756][T13368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.346973][T13368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.370565][T13328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.381515][T13368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.388663][T13368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.415051][T13368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.430816][T13328] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.440812][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.447978][ T5113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.499831][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.506974][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.523758][T13368] hsr_slave_0: entered promiscuous mode [ 167.530783][T13368] hsr_slave_1: entered promiscuous mode [ 167.537605][T13368] debugfs: 'hsr0' already exists in 'hsr' [ 167.543427][T13368] Cannot create hsr debugfs directory [ 167.678278][T13328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.731695][T13499] loop5: detected capacity change from 0 to 1024 [ 167.750552][T13499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.779747][T13499] ext4 filesystem being mounted at /713/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.800040][T13515] vlan0: entered allmulticast mode [ 167.806962][T13499] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3776: bg 0: block 112: padding at end of block bitmap is not set [ 167.861090][ T3692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 167.885783][T13328] veth0_vlan: entered promiscuous mode [ 167.906365][T13521] netlink: 'syz.7.3780': attribute type 13 has an invalid length. [ 167.927715][T13521] gretap0: refused to change device tx_queue_len [ 167.934440][T13521] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 167.950699][T13328] veth1_vlan: entered promiscuous mode [ 167.979504][T13368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 167.990212][T13368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.000113][T13368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.018876][T13368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.044934][T13328] veth0_macvtap: entered promiscuous mode [ 168.053532][T13328] veth1_macvtap: entered promiscuous mode [ 168.072486][T13328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.098101][T13328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.121918][ T5112] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.147750][ T5064] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.161068][ T5064] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.181450][T13368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.196509][ T5064] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.228393][T13368] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.247896][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.255038][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.284653][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.292169][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.437311][T13368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.583124][T13368] veth0_vlan: entered promiscuous mode [ 168.597380][T13368] veth1_vlan: entered promiscuous mode [ 168.615650][T13368] veth0_macvtap: entered promiscuous mode [ 168.623459][T13368] veth1_macvtap: entered promiscuous mode [ 168.693535][T13368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.707402][T13368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.733261][ T5090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.764846][ T5090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.775871][T13592] __nla_validate_parse: 1 callbacks suppressed [ 168.775888][T13592] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3801'. [ 168.787609][ T5090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.800707][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3803'. [ 168.812758][T13597] loop5: detected capacity change from 0 to 128 [ 168.827226][ T5090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.856800][T13601] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3806'. [ 168.868290][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 168.868308][ T29] audit: type=1326 audit(1767430003.110:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.7.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 168.942381][ T29] audit: type=1326 audit(1767430003.110:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.7.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 168.966502][ T29] audit: type=1326 audit(1767430003.110:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.7.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 168.990214][ T29] audit: type=1326 audit(1767430003.150:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.7.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 169.013842][ T29] audit: type=1326 audit(1767430003.150:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.7.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 169.037544][ T29] audit: type=1326 audit(1767430003.150:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.7.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 169.061418][ T29] audit: type=1326 audit(1767430003.150:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.7.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 169.085044][ T29] audit: type=1326 audit(1767430003.150:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.7.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 169.108828][ T29] audit: type=1326 audit(1767430003.150:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.7.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 169.132484][ T29] audit: type=1326 audit(1767430003.150:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.7.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 169.235441][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3819'. [ 169.318157][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3826'. [ 169.362169][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3826'. [ 169.537205][T13677] Cannot find add_set index 0 as target [ 169.586784][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3840'. [ 169.649314][T13680] wireguard0: entered promiscuous mode [ 169.654857][T13680] wireguard0: entered allmulticast mode [ 169.848091][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3847'. [ 169.919010][T13706] netlink: 'syz.9.3851': attribute type 3 has an invalid length. [ 170.015537][T13717] loop9: detected capacity change from 0 to 1024 [ 170.034385][T13717] EXT4-fs: inline encryption not supported [ 170.059431][T13717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.160990][T13717] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 170.195951][T13717] EXT4-fs (loop9): Remounting filesystem read-only [ 170.218851][T13736] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3862'. [ 170.235321][T13328] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.260420][T13736] IPVS: Unknown mcast interface: [ 170.274001][T13742] loop2: detected capacity change from 0 to 512 [ 170.280892][T13742] EXT4-fs: Ignoring removed i_version option [ 170.302684][T13742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.331424][T13368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.432203][T13768] rdma_op ffff888130803180 conn xmit_rdma 0000000000000000 [ 170.467864][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3878'. [ 171.349531][T13845] netlink: 'syz.9.3911': attribute type 3 has an invalid length. [ 171.767613][T13886] loop9: detected capacity change from 0 to 1024 [ 171.780588][T13886] EXT4-fs: inline encryption not supported [ 171.815827][T13886] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.871800][T13328] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.953946][T13913] hub 9-0:1.0: USB hub found [ 171.973269][T13913] hub 9-0:1.0: 8 ports detected [ 172.029391][T13926] netlink: zone id is out of range [ 172.034660][T13926] netlink: zone id is out of range [ 172.052238][T13927] netlink: 'syz.9.3948': attribute type 29 has an invalid length. [ 172.059218][T13926] netlink: zone id is out of range [ 172.078602][T13926] netlink: zone id is out of range [ 172.114061][T13926] netlink: set zone limit has 8 unknown bytes [ 172.268570][T13947] bridge0: port 3(batadv1) entered blocking state [ 172.275078][T13946] ALSA: seq fatal error: cannot create timer (-19) [ 172.275549][T13947] bridge0: port 3(batadv1) entered disabled state [ 172.307401][T13947] batadv1: entered allmulticast mode [ 172.325334][T13947] batadv1: entered promiscuous mode [ 172.357747][T13954] vlan0: entered promiscuous mode [ 172.511849][T13973] loop9: detected capacity change from 0 to 164 [ 172.595355][T13975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.617463][T13977] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 172.764588][ T5118] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 172.773942][ T5118] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 172.841541][T14003] pim6reg: entered allmulticast mode [ 172.863053][T14003] pim6reg: left allmulticast mode [ 172.873956][T14005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14005 comm=syz.5.3983 [ 173.749473][T14083] loop5: detected capacity change from 0 to 1024 [ 173.771434][T14083] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 173.782568][T14083] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 173.826122][T14083] JBD2: no valid journal superblock found [ 173.831895][T14083] EXT4-fs (loop5): Could not load journal inode [ 173.875917][T14083] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 174.030689][T14102] infiniband syz1: set active [ 174.035455][T14102] infiniband syz1: added veth0_to_bond [ 174.053176][T14106] __nla_validate_parse: 14 callbacks suppressed [ 174.053197][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4031'. [ 174.068521][T14106] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4031'. [ 174.111195][T14106] bridge0: port 4(vlan0) entered blocking state [ 174.117650][T14106] bridge0: port 4(vlan0) entered disabled state [ 174.142163][T14102] RDS/IB: syz1: added [ 174.154779][T14106] vlan0: entered allmulticast mode [ 174.159985][T14106] bridge0: entered allmulticast mode [ 174.167415][T14102] smc: adding ib device syz1 with port count 1 [ 174.174324][T14106] vlan0: left allmulticast mode [ 174.179342][T14106] bridge0: left allmulticast mode [ 174.204730][T14102] smc: ib device syz1 port 1 has no pnetid [ 174.585007][T14143] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001158 ! [ 174.610788][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4047'. [ 174.620255][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4047'. [ 174.648990][T14150] loop9: detected capacity change from 0 to 512 [ 174.656361][T14150] EXT4-fs: Ignoring removed i_version option [ 174.662394][T14150] EXT4-fs: Ignoring removed nobh option [ 174.669292][T14150] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 174.684953][T14150] EXT4-fs (loop9): 1 truncate cleaned up [ 174.715236][T14150] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.782766][T14162] loop2: detected capacity change from 0 to 512 [ 174.789875][T14162] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.802073][T14162] EXT4-fs (loop2): 1 truncate cleaned up [ 174.810298][T14162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.863709][T13328] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.031571][T13368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.204616][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 175.204633][ T29] audit: type=1326 audit(1767430009.440:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.9.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a52fe65e7 code=0x7ffc0000 [ 175.204729][T14179] loop5: detected capacity change from 0 to 1024 [ 175.211007][ T29] audit: type=1326 audit(1767430009.450:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.9.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a52f8b829 code=0x7ffc0000 [ 175.211269][ T29] audit: type=1326 audit(1767430009.450:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.9.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a52fe65e7 code=0x7ffc0000 [ 175.294769][ T29] audit: type=1326 audit(1767430009.540:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.9.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a52f8b829 code=0x7ffc0000 [ 175.324584][ T29] audit: type=1326 audit(1767430009.560:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.9.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 175.334689][T14179] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 175.348279][ T29] audit: type=1326 audit(1767430009.560:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.9.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 175.357361][T14179] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 175.357380][T14179] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4059: Failed to acquire dquot type 0 [ 175.413306][T14179] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 175.428031][T14179] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.4059: corrupted inode contents [ 175.456536][T14179] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.4059: mark_inode_dirty error [ 175.468951][T14179] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.4059: corrupted inode contents [ 175.487736][T14179] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.4059: mark_inode_dirty error [ 175.499705][T14179] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.4059: corrupted inode contents [ 175.512188][T14179] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.4059: mark_inode_dirty error [ 175.524698][T14179] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.4059: corrupted inode contents [ 175.537341][T14179] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 175.546398][T14179] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.4059: corrupted inode contents [ 175.559660][T14179] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.4059: mark_inode_dirty error [ 175.571042][T14179] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 175.580603][T14179] EXT4-fs (loop5): 1 truncate cleaned up [ 175.586870][T14179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.633387][ T29] audit: type=1326 audit(1767430009.870:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.9.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 175.663532][T14176] loop9: detected capacity change from 0 to 256 [ 175.689726][T14176] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001) [ 175.768343][ T29] audit: type=1326 audit(1767430009.900:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.9.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 175.857834][ T3692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.877258][T14204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4067'. [ 176.022874][T14230] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4072'. [ 176.169515][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4081'. [ 176.236165][T14252] team0 (unregistering): Port device team_slave_0 removed [ 176.243856][T14267] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=14267 comm=syz.9.4082 [ 176.265690][T14252] team0 (unregistering): Port device team_slave_1 removed [ 176.291614][ T3403] !yz!: Port: 1 Link DOWN [ 176.710827][T14345] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 176.720917][T14345] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 176.763690][T14345] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 176.773805][T14345] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 176.866307][T14345] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 176.876361][T14345] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 176.877023][T14376] loop5: detected capacity change from 0 to 512 [ 176.918782][T14345] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 176.929062][T14345] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 176.989592][ T2031] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 176.997960][ T2031] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.034800][ T2031] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.043236][ T2031] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.063763][ T2031] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.072148][ T2031] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.097485][ T2031] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.105857][ T2031] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.208083][T14407] loop2: detected capacity change from 0 to 512 [ 177.242438][T14407] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.286045][T14407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.299705][T14407] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.464873][T13368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.831620][T14466] netlink: 'syz.0.4140': attribute type 1 has an invalid length. [ 177.905489][T14480] bond3: entered promiscuous mode [ 177.910686][T14480] bond3: entered allmulticast mode [ 177.916626][T14480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.923797][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4147'. [ 177.936179][T14480] bond3 (unregistering): Released all slaves [ 178.122584][T14510] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4159'. [ 178.150836][T14510] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 178.166325][T14510] 0ªî{X¹¦: entered allmulticast mode [ 178.173567][T14510] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 178.282850][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4163'. [ 178.314767][T14526] bridge_slave_1: left allmulticast mode [ 178.320504][T14526] bridge_slave_1: left promiscuous mode [ 178.326221][T14526] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.355375][T14526] bridge_slave_0: left promiscuous mode [ 178.361153][T14526] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.664017][T14551] dvmrp1: entered allmulticast mode [ 178.689040][T14551] dvmrp1: left allmulticast mode [ 178.747089][T14561] loop9: detected capacity change from 0 to 512 [ 178.768260][T14561] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.777143][T14561] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.836041][T14561] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.4182: Allocating blocks 41-42 which overlap fs metadata [ 178.860878][T14561] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.4182: Allocating blocks 41-42 which overlap fs metadata [ 178.875909][T14561] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4182: Failed to acquire dquot type 1 [ 178.890555][T14561] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 178.910345][T14561] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.4182: corrupted inode contents [ 178.966550][T14561] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #12: comm syz.9.4182: mark_inode_dirty error [ 178.981493][T14561] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.4182: corrupted inode contents [ 178.996218][T14561] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.4182: mark_inode_dirty error [ 179.015272][T14561] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.4182: corrupted inode contents [ 179.028101][T14561] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 179.037129][T14561] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.4182: corrupted inode contents [ 179.049360][T14561] EXT4-fs error (device loop9): ext4_truncate:4635: inode #12: comm syz.9.4182: mark_inode_dirty error [ 179.063677][T14561] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 179.073951][T14561] EXT4-fs (loop9): 1 truncate cleaned up [ 179.080463][T14561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.139423][T13328] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.456654][T14611] smc: net device bond0 applied user defined pnetid SYZ0 [ 179.464210][T14611] smc: net device bond0 erased user defined pnetid SYZ0 [ 179.649797][T14629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.652580][T14631] rdma_op ffff8881705c3580 conn xmit_rdma 0000000000000000 [ 179.658788][T14629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.924783][ T5094] batman_adv: batadv1: IGMP Querier appeared [ 179.978314][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4226'. [ 179.998134][T14659] dvmrp1: entered allmulticast mode [ 179.999114][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4226'. [ 180.046249][T14659] dvmrp1: left allmulticast mode [ 180.229803][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 180.229843][ T29] audit: type=1400 audit(1767430014.470:4960): avc: denied { connect } for pid=14680 comm="syz.5.4235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.286373][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4238'. [ 180.311806][ T4499] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 180.319573][ T4499] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 180.328068][ T4499] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 180.348951][ T4499] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 180.470924][T14719] smc: net device bond0 applied user defined pnetid SYZ0 [ 180.478876][T14719] smc: net device bond0 erased user defined pnetid SYZ0 [ 180.525836][T14728] loop5: detected capacity change from 0 to 128 [ 180.541049][T14728] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 180.553977][T14728] ext4 filesystem being mounted at /809/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.569830][ T29] audit: type=1326 audit(1767430014.810:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.9.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 180.595044][ T3692] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.601485][ T29] audit: type=1326 audit(1767430014.830:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.9.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 180.627776][ T29] audit: type=1326 audit(1767430014.840:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.9.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 180.651371][ T29] audit: type=1326 audit(1767430014.840:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.9.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 180.674937][ T29] audit: type=1326 audit(1767430014.840:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.9.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 180.698700][ T29] audit: type=1326 audit(1767430014.840:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.9.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 180.722671][ T29] audit: type=1326 audit(1767430014.840:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.9.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 180.764012][ T29] audit: type=1326 audit(1767430014.920:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.9.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 180.787661][ T29] audit: type=1326 audit(1767430014.950:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.9.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 181.103174][T14766] netlink: 'syz.0.4272': attribute type 3 has an invalid length. [ 181.849956][T14791] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 182.965454][T14865] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4318'. [ 182.974602][T14865] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4318'. [ 183.017460][T14865] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4318'. [ 183.026677][T14865] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4318'. [ 183.445238][T14890] loop5: detected capacity change from 0 to 8192 [ 183.482930][T14894] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 183.502081][T14901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4335'. [ 183.511274][T14901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4335'. [ 183.544580][T14901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4335'. [ 183.627486][T14914] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 183.643297][T14916] netlink: zone id is out of range [ 183.648487][T14916] netlink: zone id is out of range [ 183.674810][T14916] netlink: zone id is out of range [ 183.684410][T14916] netlink: zone id is out of range [ 183.726404][T14916] netlink: set zone limit has 8 unknown bytes [ 183.951402][T14933] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 184.211995][T14950] netlink: zone id is out of range [ 184.217225][T14950] netlink: zone id is out of range [ 184.223065][T14950] netlink: zone id is out of range [ 184.223541][T14953] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 184.228320][T14950] netlink: zone id is out of range [ 184.238146][T14950] netlink: set zone limit has 8 unknown bytes [ 184.835397][T15005] syz_tun: entered promiscuous mode [ 184.844675][T15005] vlan2: entered promiscuous mode [ 185.171738][T15013] __nla_validate_parse: 5 callbacks suppressed [ 185.171758][T15013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4388'. [ 185.187021][T15013] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4388'. [ 185.208428][T15013] bridge0: port 4(vlan2) entered blocking state [ 185.214984][T15013] bridge0: port 4(vlan2) entered disabled state [ 185.228036][T15013] vlan2: entered allmulticast mode [ 185.233218][T15013] bridge0: entered allmulticast mode [ 185.266398][T15013] vlan2: left allmulticast mode [ 185.271362][T15013] bridge0: left allmulticast mode [ 185.393840][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 185.393859][ T29] audit: type=1326 audit(1767430019.630:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15025 comm="syz.5.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 185.448873][ T29] audit: type=1326 audit(1767430019.630:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15025 comm="syz.5.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 185.458970][T15028] loop2: detected capacity change from 0 to 164 [ 185.472936][ T29] audit: type=1326 audit(1767430019.630:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15025 comm="syz.5.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 185.674131][ T29] audit: type=1326 audit(1767430019.910:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15025 comm="syz.5.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 185.724542][ T29] audit: type=1326 audit(1767430019.950:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15025 comm="syz.5.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 185.965702][T15041] netlink: 'syz.7.4399': attribute type 12 has an invalid length. [ 186.241507][T15056] SELinux: failed to load policy [ 186.585493][T15088] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 186.664979][T15091] SELinux: failed to load policy [ 186.912080][ T29] audit: type=1326 audit(1767430021.150:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15117 comm="syz.5.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 186.984584][ T29] audit: type=1326 audit(1767430021.150:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15117 comm="syz.5.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 187.008084][ T29] audit: type=1326 audit(1767430021.150:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15117 comm="syz.5.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 187.031767][ T29] audit: type=1326 audit(1767430021.220:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15117 comm="syz.5.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 187.229472][ T29] audit: type=1326 audit(1767430021.470:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.7.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 187.382356][T15133] SELinux: failed to load policy [ 187.568703][T15136] SELinux: failed to load policy [ 187.661346][T15170] netlink: 'syz.0.4447': attribute type 12 has an invalid length. [ 187.824726][T15189] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 189.325157][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4473'. [ 189.366482][T15321] bond0: (slave team0): Releasing backup interface [ 189.378210][T15321] team0 (unregistering): Port device team_slave_0 removed [ 189.389263][T15321] team0 (unregistering): Port device team_slave_1 removed [ 189.613839][T15339] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4481'. [ 190.472379][T15403] loop2: detected capacity change from 0 to 512 [ 190.498168][T15403] EXT4-fs: Ignoring removed nobh option [ 190.522817][T15403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.554850][T15403] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.670552][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 190.670571][ T29] audit: type=1400 audit(1767430024.910:5185): avc: denied { lock } for pid=15402 comm="syz.2.4510" path="/138/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.760495][T13368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.042511][T15445] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4528'. [ 191.088391][T15439] loop2: detected capacity change from 0 to 8192 [ 191.125568][ T29] audit: type=1400 audit(1767430025.370:5186): avc: denied { mounton } for pid=15438 comm="syz.2.4525" path="/140/file2/bus" dev="loop2" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 191.286064][T13368] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 191.293952][T13368] FAT-fs (loop2): Filesystem has been set read-only [ 191.359370][ T29] audit: type=1326 audit(1767430025.600:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.5.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 191.414703][ T29] audit: type=1326 audit(1767430025.600:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.5.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 191.438507][ T29] audit: type=1326 audit(1767430025.600:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.5.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 191.462322][ T29] audit: type=1326 audit(1767430025.630:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.5.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 191.486311][ T29] audit: type=1326 audit(1767430025.630:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.5.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 191.509856][ T29] audit: type=1326 audit(1767430025.630:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.5.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 191.533407][ T29] audit: type=1326 audit(1767430025.630:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.5.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 191.557010][ T29] audit: type=1326 audit(1767430025.630:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.5.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 191.559328][T15470] veth0: entered promiscuous mode [ 191.676935][T15479] net_ratelimit: 6 callbacks suppressed [ 191.676956][T15479] IPv4: Oversized IP packet from 127.202.26.0 [ 191.737838][T15469] veth0: left promiscuous mode [ 191.772505][T15483] loop2: detected capacity change from 0 to 512 [ 191.799761][T15483] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 191.834745][T15483] EXT4-fs (loop2): orphan cleanup on readonly fs [ 191.845157][T15483] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.4546: corrupted inode contents [ 191.910357][T15483] EXT4-fs (loop2): Remounting filesystem read-only [ 191.967153][T15483] EXT4-fs (loop2): 1 truncate cleaned up [ 191.972946][ T5104] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 191.983638][ T5104] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 192.011348][ T5104] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 192.031438][T15483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.047557][T15511] netlink: 'syz.5.4559': attribute type 1 has an invalid length. [ 192.081788][T13368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.170228][T15534] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.224295][T15534] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.235696][T15545] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4574'. [ 192.286913][T15534] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.297571][T15549] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4576'. [ 192.355948][T15534] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.454675][ T5104] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.504343][ T5104] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.528373][ T5104] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.545041][T15578] netlink: 'syz.0.4587': attribute type 7 has an invalid length. [ 192.564361][ T5091] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.636895][T15585] SELinux: failed to load policy [ 192.901230][T15625] vlan2: entered allmulticast mode [ 193.165340][T15638] rdma_op ffff888145380980 conn xmit_rdma 0000000000000000 [ 193.940303][T15722] vlan0: entered allmulticast mode [ 194.563930][T15790] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4687'. [ 194.718385][T15804] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 194.779568][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4686'. [ 194.789041][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4686'. [ 194.870638][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4692'. [ 195.140893][T15837] loop5: detected capacity change from 0 to 128 [ 195.197083][T15837] syz.5.4701: attempt to access beyond end of device [ 195.197083][T15837] loop5: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 195.212711][T15837] syz.5.4701: attempt to access beyond end of device [ 195.212711][T15837] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 195.226344][T15837] syz.5.4701: attempt to access beyond end of device [ 195.226344][T15837] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 195.239914][T15837] syz.5.4701: attempt to access beyond end of device [ 195.239914][T15837] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 195.262160][T15837] syz.5.4701: attempt to access beyond end of device [ 195.262160][T15837] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 195.285578][T15837] syz.5.4701: attempt to access beyond end of device [ 195.285578][T15837] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 195.324248][T15837] syz.5.4701: attempt to access beyond end of device [ 195.324248][T15837] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 195.329882][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4703'. [ 195.338467][T15837] syz.5.4701: attempt to access beyond end of device [ 195.338467][T15837] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 195.366441][T15837] syz.5.4701: attempt to access beyond end of device [ 195.366441][T15837] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 195.380723][T15837] syz.5.4701: attempt to access beyond end of device [ 195.380723][T15837] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 195.525474][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4713'. [ 195.593945][T15882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4720'. [ 195.642634][T15893] netlink: 'syz.0.4725': attribute type 1 has an invalid length. [ 195.666504][T15895] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.753679][T15895] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.817473][T15913] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15913 comm=syz.7.4732 [ 195.850212][T15895] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.927864][T15895] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.991954][T15925] loop2: detected capacity change from 0 to 128 [ 196.008524][ T5089] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.034388][ T5089] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.046982][ T5089] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.065448][ T5089] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.133374][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 196.133394][ T29] audit: type=1326 audit(1767430030.370:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 196.194461][ T29] audit: type=1326 audit(1767430030.370:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 196.218074][ T29] audit: type=1326 audit(1767430030.410:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 196.241885][ T29] audit: type=1326 audit(1767430030.410:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 196.265927][ T29] audit: type=1326 audit(1767430030.410:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 196.289815][ T29] audit: type=1326 audit(1767430030.410:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 196.313794][ T29] audit: type=1326 audit(1767430030.410:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 196.337391][ T29] audit: type=1326 audit(1767430030.410:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 196.361096][ T29] audit: type=1326 audit(1767430030.420:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 196.402512][ T29] audit: type=1326 audit(1767430030.640:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.7.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 196.433262][T15942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15942 comm=syz.2.4745 [ 196.438964][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4744'. [ 196.445903][T15942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15942 comm=syz.2.4745 [ 196.741836][T15979] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 197.144334][T16002] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 197.174178][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4772'. [ 197.314179][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4772'. [ 197.549016][T16015] bond1: entered promiscuous mode [ 197.554106][T16015] bond1: entered allmulticast mode [ 197.615076][T16015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.663686][T16015] bond1 (unregistering): Released all slaves [ 197.855981][T16026] bridge0: port 4(erspan0) entered blocking state [ 197.862546][T16026] bridge0: port 4(erspan0) entered disabled state [ 197.915330][T16026] erspan0: entered allmulticast mode [ 197.921974][T16026] erspan0: entered promiscuous mode [ 197.944712][T16026] bridge0: port 4(erspan0) entered blocking state [ 197.951198][T16026] bridge0: port 4(erspan0) entered forwarding state [ 198.046822][T16038] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4796'. [ 198.103740][T16044] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4785'. [ 198.176568][ T31] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.196705][ T31] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.215501][ T31] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.224389][ T31] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.236456][T16054] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 198.246526][T16054] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 198.306813][T16054] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 198.316777][T16054] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 198.376478][T16054] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 198.386417][T16054] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 198.479388][T16054] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 198.489561][T16054] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 198.570682][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 198.579035][ T31] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.596236][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 198.604568][ T31] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.626320][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 198.634817][ T31] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.659747][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 198.668212][ T31] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.840495][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4812'. [ 198.939669][T16109] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.949716][T16109] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.007005][T16109] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.017279][T16109] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.029784][T16119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4832'. [ 199.039238][T16119] netlink: 'syz.0.4832': attribute type 7 has an invalid length. [ 199.047065][T16119] netlink: 'syz.0.4832': attribute type 8 has an invalid length. [ 199.055169][T16119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4832'. [ 199.108923][T16125] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4825'. [ 199.123411][ T31] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.132353][ T31] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.140678][T16125] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4825'. [ 199.151275][T16109] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.161234][T16109] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.205920][ T31] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.219280][ T31] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.244927][T16109] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.254778][T16109] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.324817][ T31] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.333083][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.366785][ T31] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.375125][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.397719][ T31] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.406213][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.416435][ T31] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.424756][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.502769][ T31] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.513094][T16160] netem: change failed [ 199.525316][ T31] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.555817][ T31] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.578528][ T31] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.840987][T16196] loop5: detected capacity change from 0 to 512 [ 199.858282][T16196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.871518][T16196] ext4 filesystem being mounted at /943/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.885357][T16196] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.4857: corrupted xattr block 33: invalid header [ 199.899397][T16196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 199.917075][T16196] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.4857: corrupted xattr block 33: invalid header [ 199.930557][T16196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 199.941630][T16196] EXT4-fs error (device loop5): ext4_xattr_block_find:1878: inode #15: comm syz.5.4857: corrupted xattr block 33: invalid header [ 199.974214][ T3692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.254253][T16237] loop2: detected capacity change from 0 to 512 [ 200.280666][T16237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.344891][T16237] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.379241][T16237] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4876: corrupted xattr block 33: invalid header [ 200.445316][T16237] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 200.476644][T16257] loop5: detected capacity change from 0 to 1024 [ 200.477489][T16237] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4876: corrupted xattr block 33: invalid header [ 200.496510][T16257] EXT4-fs: inline encryption not supported [ 200.504948][T16237] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 200.515331][T16237] EXT4-fs error (device loop2): ext4_xattr_block_find:1878: inode #15: comm syz.2.4876: corrupted xattr block 33: invalid header [ 200.597338][T16257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.618773][T13368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.745835][T16282] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.4894: Allocating blocks 385-513 which overlap fs metadata [ 200.781654][T16254] EXT4-fs (loop5): pa ffff888107e14460: logic 16, phys. 129, len 24 [ 200.789918][T16254] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 200.847028][ T3692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.990563][T16299] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 201.127699][T16308] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 201.429871][ T3403] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.448497][ T3403] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 201.873527][T16336] __nla_validate_parse: 5 callbacks suppressed [ 201.873548][T16336] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4919'. [ 201.898761][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 201.898781][ T29] audit: type=1326 audit(1767430036.140:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.9.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 201.968925][ T29] audit: type=1326 audit(1767430036.140:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.9.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 201.992633][ T29] audit: type=1326 audit(1767430036.170:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.9.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 202.016510][ T29] audit: type=1326 audit(1767430036.170:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.9.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 202.029343][T16351] netlink: 'syz.9.4924': attribute type 2 has an invalid length. [ 202.040044][ T29] audit: type=1326 audit(1767430036.170:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.9.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 202.040124][ T29] audit: type=1326 audit(1767430036.170:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16340 comm="syz.9.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a52fef749 code=0x7ffc0000 [ 202.094951][T16351] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4924'. [ 202.140497][ T29] audit: type=1326 audit(1767430036.380:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.5.4927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f10415a65e7 code=0x0 [ 202.201973][ T29] audit: type=1400 audit(1767430036.420:5397): avc: denied { mounton } for pid=16358 comm="syz.2.4929" path="/213/file0" dev="tmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 202.240955][T16366] x_tables: duplicate underflow at hook 1 [ 202.354764][ T29] audit: type=1400 audit(1767430036.590:5398): avc: denied { write } for pid=16373 comm="syz.0.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.896238][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4956'. [ 202.905413][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4956'. [ 202.942358][T16423] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4959'. [ 203.000298][T16423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.040388][T16429] wireguard0: entered promiscuous mode [ 203.080574][ T29] audit: type=1326 audit(1767430037.320:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16433 comm="syz.5.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 203.147519][T16437] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.157972][T16437] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.228383][T16437] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.238951][T16437] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.299665][T16437] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.310075][T16437] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.372419][T16448] loop9: detected capacity change from 0 to 8192 [ 203.389996][T16437] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.400408][T16437] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.477845][T13328] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 203.485751][T13328] FAT-fs (loop9): Filesystem has been set read-only [ 203.534996][ T365] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.543229][ T365] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.562444][ T365] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.570998][ T365] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.581592][ T365] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.589887][ T365] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.598360][ T365] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.606599][ T365] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.849203][T16470] bond3: entered promiscuous mode [ 203.854277][T16470] bond3: entered allmulticast mode [ 203.955269][T16470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.986580][T16470] bond3 (unregistering): Released all slaves [ 204.155329][T16479] ip6gre0: left promiscuous mode [ 204.194934][T16479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.479653][T16485] loop5: detected capacity change from 0 to 512 [ 204.486784][T16485] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.524125][T16485] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 204.533111][T16485] FAT-fs (loop5): Filesystem has been set read-only [ 204.581160][T16485] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 204.614753][T16485] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 204.818371][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4992'. [ 204.856757][T16505] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4994'. [ 204.866485][T16505] hsr_slave_0: left promiscuous mode [ 204.872696][T16505] hsr_slave_1: left promiscuous mode [ 204.978214][T16521] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 205.082947][ T3580] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 205.090832][ T3580] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 205.098358][ T3580] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 205.105916][ T3580] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 205.113437][ T3580] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 205.121156][ T3580] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 205.128884][ T3580] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 205.136570][ T3580] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 205.144035][ T3580] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 205.158324][ T3580] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 205.448466][T16576] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5022'. [ 205.457643][T16576] tipc: Invalid UDP bearer configuration [ 205.457664][T16576] tipc: Enabling of bearer rejected, failed to enable media [ 205.766642][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5042'. [ 205.795975][T16616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.803446][T16616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.822321][T16616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.829786][T16616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.853193][T16623] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.866316][T16625] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5046'. [ 205.962910][T16623] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.974923][T16629] loop9: detected capacity change from 0 to 1024 [ 205.997261][T16629] EXT4-fs: inline encryption not supported [ 206.019016][T16629] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.034281][T16623] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.081965][T16635] netlink: 'syz.0.5049': attribute type 5 has an invalid length. [ 206.100492][ T3580] syz1: Port: 1 Link DOWN [ 206.127079][T16623] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.143222][T16629] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.5048: Allocating blocks 385-513 which overlap fs metadata [ 206.210483][T13328] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.237356][T16644] netlink: 'syz.0.5053': attribute type 10 has an invalid length. [ 206.250112][ T5084] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.262692][T16644] dummy0: entered promiscuous mode [ 206.272096][T16644] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 206.390876][ T5084] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.419703][ T5084] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.444822][ T5084] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.590359][T16666] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.634977][T16670] wireguard0: entered promiscuous mode [ 206.965548][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 206.965565][ T29] audit: type=1326 audit(1767430041.210:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.7.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 207.024603][ T29] audit: type=1326 audit(1767430041.240:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.7.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 207.048199][ T29] audit: type=1326 audit(1767430041.240:5565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.7.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 207.071863][ T29] audit: type=1326 audit(1767430041.240:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.7.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 207.095948][ T29] audit: type=1326 audit(1767430041.240:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.7.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 207.120050][ T29] audit: type=1326 audit(1767430041.240:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.7.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 207.143996][ T29] audit: type=1326 audit(1767430041.240:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.7.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 207.167634][ T29] audit: type=1326 audit(1767430041.240:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.7.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 207.191444][ T29] audit: type=1326 audit(1767430041.240:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.7.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 207.215179][ T29] audit: type=1326 audit(1767430041.240:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.7.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fbdac94f749 code=0x7ffc0000 [ 207.651644][T16718] __nla_validate_parse: 3 callbacks suppressed [ 207.651663][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5082'. [ 208.060990][T16754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5096'. [ 208.344054][T16796] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 208.486093][T16809] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5121'. [ 208.496170][T16809] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5121'. [ 208.507082][T16809] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5121'. [ 208.517437][T16809] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5121'. [ 208.565910][T16817] xt_l2tp: invalid flags combination: 4 [ 208.834921][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5135'. [ 208.848188][ T899] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.856604][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5135'. [ 208.866225][ T899] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.874880][ T899] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.887539][ T899] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.222964][T16856] loop5: detected capacity change from 0 to 1024 [ 209.230336][T16856] EXT4-fs: Ignoring removed orlov option [ 209.238964][T16856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.308133][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5142'. [ 209.444709][T16863] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 209.465168][T16863] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 209.489596][ T3692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.532998][T16867] loop9: detected capacity change from 0 to 1024 [ 209.561936][T16867] EXT4-fs: Ignoring removed nobh option [ 209.567643][T16867] EXT4-fs: inline encryption not supported [ 209.586750][T16867] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.630673][T16867] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.5147: Allocating blocks 497-513 which overlap fs metadata [ 209.659087][T16867] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 209.671521][T16867] EXT4-fs (loop9): This should not happen!! Data will be lost [ 209.671521][T16867] [ 209.684261][T16879] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 209.705812][T13328] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.792048][T16894] xt_l2tp: invalid flags combination: 4 [ 209.985540][T16917] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5168'. [ 210.023334][T16920] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=7764 sclass=netlink_audit_socket pid=16920 comm=wg1 [ 210.195839][T16949] batadv_slave_0: entered promiscuous mode [ 210.206268][T16949] ip6gretap0: entered promiscuous mode [ 210.212362][T16948] ip6gretap0: left promiscuous mode [ 210.217902][T16948] batadv_slave_0: left promiscuous mode [ 210.227567][T16953] xt_hashlimit: max too large, truncated to 1048576 [ 210.237019][T16953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.437426][T16979] netlink: zone id is out of range [ 210.442584][T16979] netlink: zone id is out of range [ 210.458804][T16979] netlink: zone id is out of range [ 210.464141][T16979] netlink: zone id is out of range [ 210.473003][T16979] netlink: zone id is out of range [ 210.478945][T16979] netlink: zone id is out of range [ 210.484193][T16979] netlink: zone id is out of range [ 210.489398][T16979] netlink: zone id is out of range [ 210.494670][T16979] netlink: zone id is out of range [ 210.499792][T16979] netlink: zone id is out of range [ 212.632891][T17107] loop9: detected capacity change from 0 to 1024 [ 212.725482][T17107] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.765317][T13328] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.839046][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 212.839064][ T29] audit: type=1326 audit(1767430047.080:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.5.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 212.894572][ T29] audit: type=1326 audit(1767430047.120:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.5.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 212.918589][ T29] audit: type=1326 audit(1767430047.120:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.5.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 212.942262][ T29] audit: type=1326 audit(1767430047.120:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz.5.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f10415af783 code=0x7ffc0000 [ 212.965781][ T29] audit: type=1326 audit(1767430047.120:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13ee8f749 code=0x7ffc0000 [ 212.989442][ T29] audit: type=1326 audit(1767430047.120:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13ee8f749 code=0x7ffc0000 [ 213.013238][ T29] audit: type=1326 audit(1767430047.120:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13ee8f749 code=0x7ffc0000 [ 213.036964][ T29] audit: type=1326 audit(1767430047.120:5726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13ee8f749 code=0x7ffc0000 [ 213.060625][ T29] audit: type=1326 audit(1767430047.130:5727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc13ee8f749 code=0x7ffc0000 [ 213.084570][ T29] audit: type=1326 audit(1767430047.130:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17115 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13ee8f749 code=0x7ffc0000 [ 213.117939][T17119] loop5: detected capacity change from 0 to 8192 [ 213.243759][T17134] loop5: detected capacity change from 0 to 1764 [ 213.263142][T17138] pimreg: entered allmulticast mode [ 213.269805][T17139] __nla_validate_parse: 5 callbacks suppressed [ 213.269818][T17139] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.5255'. [ 213.289893][T17138] pimreg: left allmulticast mode [ 213.335672][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5258'. [ 213.361555][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5258'. [ 213.511398][T17161] Invalid ELF header magic: != ELF [ 213.565990][T17168] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.5271'. [ 213.687297][T17174] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5276'. [ 213.695618][T17178] loop5: detected capacity change from 0 to 2048 [ 213.703448][T17178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.710364][T17178] EXT4-fs: Ignoring removed nobh option [ 213.714737][T17174] netem: change failed [ 213.737972][T17178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.758674][T17178] EXT4-fs (loop5): resizing filesystem from 512 to 0 blocks [ 213.766085][T17178] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 213.806972][ T3692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.990360][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5284'. [ 214.371561][T17222] SELinux: failed to load policy [ 215.040022][T17230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17230 comm=syz.0.5304 [ 215.052885][T17230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17230 comm=syz.0.5304 [ 215.674167][T17278] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5316'. [ 215.991806][T17334] netlink: 'syz.0.5341': attribute type 3 has an invalid length. [ 215.999643][T17334] netlink: 'syz.0.5341': attribute type 1 has an invalid length. [ 216.007535][T17334] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.5341'. [ 216.017708][T17335] loop5: detected capacity change from 0 to 512 [ 216.024868][T17335] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.057739][T17335] EXT4-fs (loop5): 1 truncate cleaned up [ 216.063783][T17335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.125924][ T3692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.843943][T17384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5362'. [ 217.100672][ T5098] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.110531][ T5098] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.186708][ T5098] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.196593][ T5098] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.284009][ T5098] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.287938][T17424] Invalid ELF header magic: != ELF [ 217.294089][ T5098] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.355334][T17440] ref_ctr_offset mismatch. inode: 0x14c1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 217.369708][ T5098] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.379673][ T5098] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.438322][T17448] wireguard0: entered promiscuous mode [ 217.443858][T17448] wireguard0: entered allmulticast mode [ 217.575023][ T5098] bridge_slave_1: left allmulticast mode [ 217.580796][ T5098] bridge_slave_1: left promiscuous mode [ 217.586543][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.625244][ T5098] bridge_slave_0: left promiscuous mode [ 217.631156][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.671953][T17473] loop5: detected capacity change from 0 to 512 [ 217.693162][T17473] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 217.725477][T17473] EXT4-fs (loop5): invalid journal inode [ 217.732061][T17473] EXT4-fs (loop5): can't get journal size [ 217.738986][T17473] EXT4-fs (loop5): 1 truncate cleaned up [ 217.746282][T17473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.768430][ T5098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.779128][ T3692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.789757][ T5098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.811498][ T5098] bond0 (unregistering): Released all slaves [ 217.817656][T17480] loop5: detected capacity change from 0 to 256 [ 217.821230][ T5098] bond1 (unregistering): Released all slaves [ 217.825441][T17480] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 217.842392][T17480] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 217.846186][T17470] macvtap2: entered promiscuous mode [ 217.858610][T17470] macvtap2: entered allmulticast mode [ 218.001324][ T5098] hsr_slave_0: left promiscuous mode [ 218.016104][ T5098] hsr_slave_1: left promiscuous mode [ 218.028774][ T5098] veth1_macvtap: left promiscuous mode [ 218.034337][ T5098] veth0_macvtap: left promiscuous mode [ 218.040104][ T5098] veth1_vlan: left promiscuous mode [ 218.045410][ T5098] veth0_vlan: left promiscuous mode [ 218.123212][ T5098] team0 (unregistering): Port device team_slave_1 removed [ 218.139164][ T5098] team0 (unregistering): Port device team_slave_0 removed [ 218.208549][T17427] chnl_net:caif_netlink_parms(): no params data found [ 218.290304][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 218.290321][ T29] audit: type=1326 audit(1767430052.530:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.5.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 218.320216][ T29] audit: type=1326 audit(1767430052.530:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.5.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 218.343829][ T29] audit: type=1326 audit(1767430052.530:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.5.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 218.367313][ T29] audit: type=1326 audit(1767430052.530:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.5.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 218.390819][ T29] audit: type=1326 audit(1767430052.530:5944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.5.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 218.415101][ T29] audit: type=1326 audit(1767430052.530:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.5.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 218.438798][ T29] audit: type=1326 audit(1767430052.530:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.5.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 218.462406][ T29] audit: type=1326 audit(1767430052.530:5947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.5.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 218.485984][ T29] audit: type=1326 audit(1767430052.530:5948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.5.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 218.509502][ T29] audit: type=1326 audit(1767430052.530:5949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.5.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 218.550921][T17427] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.558248][T17427] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.572602][T17427] bridge_slave_0: entered allmulticast mode [ 218.579829][T17427] bridge_slave_0: entered promiscuous mode [ 218.596614][T17427] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.603835][T17427] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.618850][T17427] bridge_slave_1: entered allmulticast mode [ 218.635226][T17427] bridge_slave_1: entered promiscuous mode [ 218.642812][T17518] tipc: New replicast peer: 255.255.255.255 [ 218.648986][T17518] tipc: Enabled bearer , priority 10 [ 218.664906][ C1] net_ratelimit: 1742 callbacks suppressed [ 218.664922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.689839][T17528] ref_ctr_offset mismatch. inode: 0x5fd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 218.705884][T17524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5417'. [ 218.714945][T17524] tipc: Disabling bearer [ 218.735311][T17427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.751128][T17427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.751344][T17532] loop5: detected capacity change from 0 to 256 [ 218.792793][T17534] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 218.804087][T17532] FAT-fs (loop5): Directory bread(block 64) failed [ 218.811652][T17532] FAT-fs (loop5): Directory bread(block 65) failed [ 218.823449][T17534] SELinux: failed to load policy [ 218.833411][T17427] team0: Port device team_slave_0 added [ 218.839154][T17532] FAT-fs (loop5): Directory bread(block 66) failed [ 218.845055][T17427] team0: Port device team_slave_1 added [ 218.849228][T17532] FAT-fs (loop5): Directory bread(block 67) failed [ 218.875529][T17532] FAT-fs (loop5): Directory bread(block 68) failed [ 218.882231][T17532] FAT-fs (loop5): Directory bread(block 69) failed [ 218.907323][T17427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.914338][T17427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.914639][T17532] FAT-fs (loop5): Directory bread(block 70) failed [ 218.940409][T17427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.941575][T17427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.957757][T17532] FAT-fs (loop5): Directory bread(block 71) failed [ 218.964544][T17427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.964583][T17427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.012568][T17532] FAT-fs (loop5): Directory bread(block 72) failed [ 219.019537][T17532] FAT-fs (loop5): Directory bread(block 73) failed [ 219.076893][T17427] hsr_slave_0: entered promiscuous mode [ 219.080436][T17546] Process accounting resumed [ 219.089292][T17550] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 219.104950][T17427] hsr_slave_1: entered promiscuous mode [ 219.130165][T17427] debugfs: 'hsr0' already exists in 'hsr' [ 219.136051][T17427] Cannot create hsr debugfs directory [ 219.393051][T17583] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 219.409876][T17584] wireguard0: entered promiscuous mode [ 219.415470][T17584] wireguard0: entered allmulticast mode [ 219.445651][T17588] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5447'. [ 219.545491][T17594] sch_tbf: burst 22 is lower than device lo mtu (81) ! [ 219.631745][T17427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.666265][T17427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.685279][T17427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.706979][T17427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.782577][T17427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.794446][T17427] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.819622][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.826761][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.869028][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.876181][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.920886][T17427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.931499][T17427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.081055][T17427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.131646][T17635] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5464'. [ 220.214444][T17427] veth0_vlan: entered promiscuous mode [ 220.222623][T17427] veth1_vlan: entered promiscuous mode [ 220.264821][T17427] veth0_macvtap: entered promiscuous mode [ 220.275015][T17427] veth1_macvtap: entered promiscuous mode [ 220.287470][T17427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.307569][T17427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.337695][ T5082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.356107][ T5082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.378198][ T5082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.387903][ T365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.509408][T17693] syzkaller1: entered promiscuous mode [ 220.514983][T17693] syzkaller1: entered allmulticast mode [ 220.633754][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5497'. [ 220.645614][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5497'. [ 220.659314][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5497'. [ 220.676884][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5497'. [ 220.693727][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5497'. [ 220.724669][T17722] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5501'. [ 220.903237][T17748] netlink: 'syz.5.5512': attribute type 3 has an invalid length. [ 221.565469][T17798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.584273][T17801] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 221.598387][T17805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.607587][T17805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.618869][T17809] netlink: 'syz.5.5540': attribute type 1 has an invalid length. [ 221.622360][T17805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.626808][T17809] netlink: 'syz.5.5540': attribute type 4 has an invalid length. [ 221.636297][T17805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.642942][T17809] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.5540'. [ 222.624781][T17852] wireguard0: entered promiscuous mode [ 222.630315][T17852] wireguard0: entered allmulticast mode [ 222.801370][T17874] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 222.812806][T17872] IPVS: stopping master sync thread 17874 ... [ 222.882382][T17879] vlan0: entered allmulticast mode [ 222.922393][T17884] loop5: detected capacity change from 0 to 512 [ 222.975908][T17884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.990599][T17884] ext4 filesystem being mounted at /1077/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.140702][ T3692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.427600][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 223.427621][ T29] audit: type=1326 audit(1767430057.670:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17908 comm="syz.5.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 223.519285][T17922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17922 comm=syz.5.5589 [ 223.561978][ T29] audit: type=1326 audit(1767430057.670:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17908 comm="syz.5.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 223.585616][ T29] audit: type=1326 audit(1767430057.710:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17908 comm="syz.5.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 223.609356][ T29] audit: type=1326 audit(1767430057.710:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17908 comm="syz.5.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 223.632923][ T29] audit: type=1326 audit(1767430057.710:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17908 comm="syz.5.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 223.656642][ T29] audit: type=1326 audit(1767430057.710:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17908 comm="syz.5.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 223.680199][ T29] audit: type=1326 audit(1767430057.710:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17908 comm="syz.5.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 223.703856][ T29] audit: type=1326 audit(1767430057.710:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17908 comm="syz.5.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 223.727532][ T29] audit: type=1326 audit(1767430057.710:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17908 comm="syz.5.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 223.751141][ T29] audit: type=1326 audit(1767430057.710:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17908 comm="syz.5.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f10415af749 code=0x7ffc0000 [ 223.783331][T17933] SELinux: Context Ü is not valid (left unmapped). [ 223.929754][T17951] random: crng reseeded on system resumption [ 224.057089][T17962] __nla_validate_parse: 4 callbacks suppressed [ 224.057106][T17962] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5602'. [ 224.090323][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5606'. [ 224.284882][T17972] sctp: [Deprecated]: syz.0.5610 (pid 17972) Use of int in maxseg socket option. [ 224.284882][T17972] Use struct sctp_assoc_value instead [ 224.348790][T17978] vlan0: entered allmulticast mode [ 224.391905][T17989] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5618'. [ 224.532436][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5621'. [ 224.542719][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5621'. [ 224.591069][T18002] loop5: detected capacity change from 0 to 4096 [ 224.607017][T18002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.853060][ T3692] ================================================================== [ 224.861278][ T3692] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 224.868687][ T3692] [ 224.871022][ T3692] read-write to 0xffff88811af0f470 of 8 bytes by task 5099 on cpu 0: [ 224.879184][ T3692] __xa_clear_mark+0xf5/0x1e0 [ 224.883887][ T3692] __folio_end_writeback+0xf4/0x360 [ 224.889108][ T3692] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 224.895356][ T3692] folio_end_writeback+0x1c/0x70 [ 224.900820][ T3692] ext4_finish_bio+0x459/0x8c0 [ 224.905606][ T3692] ext4_release_io_end+0x9f/0x1f0 [ 224.910650][ T3692] ext4_end_io_end+0x18d/0x240 [ 224.915518][ T3692] ext4_end_io_rsv_work+0x151/0x1e0 [ 224.920907][ T3692] process_scheduled_works+0x4ce/0x9d0 [ 224.926467][ T3692] worker_thread+0x582/0x770 [ 224.931247][ T3692] kthread+0x489/0x510 [ 224.935340][ T3692] ret_from_fork+0x149/0x290 [ 224.940114][ T3692] ret_from_fork_asm+0x1a/0x30 [ 224.944892][ T3692] [ 224.947221][ T3692] read to 0xffff88811af0f470 of 8 bytes by task 3692 on cpu 1: [ 224.954945][ T3692] xas_find_marked+0x218/0x620 [ 224.959743][ T3692] find_get_entry+0x5d/0x380 [ 224.964340][ T3692] filemap_get_folios_tag+0x13b/0x210 [ 224.969729][ T3692] filemap_fdatawait_keep_errors+0x6c/0x180 [ 224.975722][ T3692] sync_inodes_sb+0x3b3/0x460 [ 224.980420][ T3692] sync_filesystem+0x102/0x190 [ 224.985230][ T3692] generic_shutdown_super+0x44/0x210 [ 224.990536][ T3692] kill_block_super+0x2a/0x70 [ 224.995323][ T3692] ext4_kill_sb+0x42/0x80 [ 224.999662][ T3692] deactivate_locked_super+0x75/0x1c0 [ 225.005048][ T3692] deactivate_super+0x97/0xa0 [ 225.009769][ T3692] cleanup_mnt+0x2a9/0x320 [ 225.014212][ T3692] __cleanup_mnt+0x19/0x20 [ 225.018731][ T3692] task_work_run+0x131/0x1a0 [ 225.023475][ T3692] exit_to_user_mode_loop+0x1fe/0x740 [ 225.028935][ T3692] do_syscall_64+0x1e1/0x2b0 [ 225.033536][ T3692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.039610][ T3692] [ 225.041934][ T3692] value changed: 0xffc0000000000000 -> 0x8000000000000000 [ 225.049043][ T3692] [ 225.051370][ T3692] Reported by Kernel Concurrency Sanitizer on: [ 225.057530][ T3692] CPU: 1 UID: 0 PID: 3692 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.068999][ T3692] Tainted: [W]=WARN [ 225.072813][ T3692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.082890][ T3692] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 225.102941][ T3692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.435219][ T5082] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.445139][ T5082] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.507219][ T5082] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.517399][ T5082] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.606567][ T5082] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.616586][ T5082] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.685321][ T5082] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.695406][ T5082] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.016917][ T5082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.027109][ T5082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.036689][ T5082] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 226.045668][ T5082] bond0 (unregistering): Released all slaves [ 226.054306][ T5082] bond1 (unregistering): (slave batadv1): Releasing active interface [ 226.063470][ T5082] bond1 (unregistering): Released all slaves [ 226.072050][ T5082] bond2 (unregistering): Released all slaves [ 226.080287][ T5082] bond3 (unregistering): Released all slaves [ 226.088761][ T5082] bond4 (unregistering): Released all slaves [ 226.137200][ T5082] tipc: Disabling bearer [ 226.142205][ T5082] tipc: Left network mode [ 226.192433][ T5082] hsr_slave_0: left promiscuous mode [ 226.199017][ T5082] hsr_slave_1: left promiscuous mode [ 226.204636][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.212257][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.220097][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.227603][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.236942][ T5082] veth1_macvtap: left promiscuous mode [ 226.242429][ T5082] veth0_macvtap: left promiscuous mode [ 226.247993][ T5082] veth1_vlan: left promiscuous mode [ 226.253288][ T5082] veth0_vlan: left promiscuous mode [ 226.808421][ T5082] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.847184][ T5082] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.906934][ T5082] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.947246][ T5082] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.037034][ T5082] bridge_slave_1: left allmulticast mode [ 227.042804][ T5082] bridge_slave_1: left promiscuous mode [ 227.048559][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.056255][ T5082] bridge_slave_0: left allmulticast mode [ 227.062054][ T5082] bridge_slave_0: left promiscuous mode [ 227.067792][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.137121][ T5082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.147367][ T5082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.157048][ T5082] bond0 (unregistering): Released all slaves [ 227.302557][ T5082] hsr_slave_0: left promiscuous mode [ 227.308385][ T5082] hsr_slave_1: left promiscuous mode [ 227.313898][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.322470][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.329996][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.337445][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.348629][ T5082] veth1_macvtap: left promiscuous mode [ 227.354104][ T5082] veth0_macvtap: left promiscuous mode [ 227.359761][ T5082] veth1_vlan: left promiscuous mode [ 227.365245][ T5082] veth0_vlan: left promiscuous mode [ 227.428622][ T5082] team0 (unregistering): Port device team_slave_1 removed [ 227.440323][ T5082] team0 (unregistering): Port device team_slave_0 removed