last executing test programs: 5.777507731s ago: executing program 0 (id=2785): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 5.463859212s ago: executing program 1 (id=2792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 5.361696962s ago: executing program 0 (id=2796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800e91818bd000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000030000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6, 0x0, 0x10}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 4.47091972s ago: executing program 0 (id=2809): r0 = socket(0xa, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000002540)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000a00)="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", 0xe77}], 0x1, &(0x7f0000001bc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0xd8, 0x44081}}], 0x1, 0x0) 4.460053391s ago: executing program 0 (id=2810): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073d07a31000000000900010073797a3000000000e17c5d5b970284321c000980100002800c0001800800014000000002080001400000ffff140000001000010000000000000000000084000a"], 0xa0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4.422966284s ago: executing program 0 (id=2811): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x30) 3.332414322s ago: executing program 3 (id=2818): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0xd, 0xf18, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r2, r2, 0x0, 0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 3.273298428s ago: executing program 3 (id=2820): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204080, &(0x7f00000004c0), 0xfd, 0x573, &(0x7f0000000cc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0xe0) getdents(r1, 0x0, 0x0) 3.271695248s ago: executing program 3 (id=2821): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) 3.25398451s ago: executing program 3 (id=2822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) 3.238188101s ago: executing program 3 (id=2823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c6163636573733dbf", @ANYBLOB=',']) 3.215266604s ago: executing program 3 (id=2824): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x1, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) r3 = socket(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4048840) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x4e22, 0x400, 0x4e21, 0x0, 0xa, 0x80, 0x40, 0x2f}, {0xfff, 0x401, 0x7, 0x2, 0x5, 0x2, 0x9277, 0xa676}, {0x80000000, 0x6, 0xffff, 0x5}, 0x27, 0x6e6bb0, 0x2, 0x1, 0x3, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x32}, 0x2, @in6=@remote, 0x3504, 0x10b43197a60a3a06, 0x2, 0x2, 0x81, 0xffffffa0, 0x2}}, 0xe8) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x30) 2.664442228s ago: executing program 2 (id=2825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6163636573733dbf", @ANYBLOB=',']) 2.554041069s ago: executing program 2 (id=2826): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000001c0)={@any, 0x7, 0x7f, 0x3, 0x0, 0x5, "d73a880a769ec4c897da68b98f50aa0f421d38c16f9fdb6774a306f84dc62a4477bfb5a38b9505ebdbfe5e2fa6c86e9e1ad8764b635b3eccefc12fc1486bc2efcb8b2f595f1c6b3db7727c3b06fac19bee0019fe41667be257d372bacfb5e63c38898531deac325cab38f5e478727ffce6065b755939e307f1e569ae20acde46"}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r4, 0x0, 0x0}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@broadcast, @loopback, @empty}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000004000020000000700000000000000030000b79977963828361a00000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r6) epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESOCT=r5]) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=") r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000002c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0x0, 0x2, [@loopback, @empty]}, 0x18) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40000000, 0x1000, 0x4, 0x0, 0x0, 0x8000002, 0x0, 0x7e154a0b, 0x0, 0x5, 0x0, 0x100, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd, 0x0, 0x1007, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0xfffffffc, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0xfffffffc, 0x4000000, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x20000024, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x400, 0x7fc, 0x2000009, 0x800, 0x0, 0x7ffe, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa23, 0x0, 0xfffffffd, 0x80000, 0x0, 0xd819ac7, 0x4, 0x802, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x0, 0x200000, 0x20000040, 0xfffffffe, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffdf}, 0x7, 0x10, 0x132}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newchain={0x2c, 0x64, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x2, 0xd}, {0x7, 0x9}, {0xc, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004804}, 0x4000040) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x3c}}, 0x20000080) 2.278798596s ago: executing program 2 (id=2827): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231", 0xc5}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd", 0x377}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.267813587s ago: executing program 2 (id=2828): bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0xe) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0xfe2e40b63e0197e7}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r7, 0x0, r5, 0x0, 0x20000000000002, 0x2) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) io_uring_setup(0xc6b, &(0x7f0000000000)={0x0, 0x14ca, 0x4, 0x1, 0x1}) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 1.418839651s ago: executing program 2 (id=2829): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.22016264s ago: executing program 2 (id=2830): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r0, 0x0, 0x0, 0x62, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000700000000000019078ac1e0001ac1414aa0300907800080000450000000000000000ff2c000000000000000001443c00d10000000000000000ffffffff00000000ffffffff000000000000000000000000e000000100000000e0000001ffffffffff006c21c92eff1400000000008303000097e5c13ad346991c48395842af777f9b9da031a1b6b87bea06a513342c8dd30f32509efb637203b25ddeae571cd58b030583a136a3bb2127da8e83566d952780ccf77e332049aa074671a8cbecc47bb561dc90b98fa356a9e5fbaa3d"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000540)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x1000000000000000}, 0x18) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc96, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$TCFLSH(r1, 0x400455c8, 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = inotify_init() r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r8 = inotify_add_watch(r6, &(0x7f0000000200)='./file0\x00', 0x400009bf) write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[@ANYRES64=r8], 0x69) close(r7) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$P9_RLOPEN(r7, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x80, 0x4, 0x6}, 0x2}}, 0x18) 1.061689676s ago: executing program 1 (id=2834): r0 = socket(0xa, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000002540)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000a00)="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", 0xe77}], 0x1, &(0x7f0000001bc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0xd8, 0x44081}}], 0x1, 0x0) 1.047465447s ago: executing program 1 (id=2835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000140)) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r9, 0x21, 0x0, 0x1) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x1a) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0x5}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 785.072153ms ago: executing program 1 (id=2838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3ff, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cb1a3d5d186c8a3b", "c1dc6ac03f88da6d2328625791e30125", "adc8edc9", "670f9b7d29e2c3ab"}, 0x28) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) (async) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 673.368164ms ago: executing program 1 (id=2840): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r8 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001600)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09d0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90005f1c5512406c7f0000000000000400000000000000000000000b3765a500", [0x4, 0x40000000000000]}}) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000009c0)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r10) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x13, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="f5c494e5355c2a32c68a4bf79ee9f96a2c786787477b4b3619770b009b16b727288794789db9d16b47e1f0637f0944e2d57891fa8590458167b2b8439dc4ee9d7ef0d9382ea0020776f88856ffacd98cac49815d52c75ad000", @ANYRESDEC=r6, @ANYRESOCT=r7, @ANYRESDEC, @ANYBLOB="edb3839065224273862687c089bbfed243809941ecaf39122ed80e0db4cd051b2be7981757a36a5358e8d566af63971527e3588be06fe1bbf9e8e58b51248d55b96b7dc65a8bc6834f7f6adf09a713beac98ed3a3150e0944c97981a0036de", @ANYRES64=r5], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/kexec_loaded', 0x0, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 671.975794ms ago: executing program 4 (id=2841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000ffffc92303014b4a18fbf395b50b24f642cbe74d46f19467c87c0c695737", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) fallocate(r0, 0x4, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa20000000000000700000000ffffffb703000008000000b70400000000925e850000000100000095", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @multicast}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="f35f449849a0a014265c6c81d8adc9278200000000fffffffff6822866695e38dcd23294f25670205bc281c942e217a51569c3c30d5dc5", @ANYRESDEC=r2, @ANYRES32=r2, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES8=0x0, @ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRES64=0x0], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8, 0x0, 0x200000000000006}, 0x18) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r9, 0x0, 0x4}, 0x18) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, 0xfffffffffffffeff, 0x0, &(0x7f0000000040)='\x00', 0x0}, 0x50) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x8040) close(r12) futex(&(0x7f0000000140), 0x189, 0x0, &(0x7f0000000a40), 0x0, 0x1) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000000c0)=@sg0, 0x0, 0x0) syz_pidfd_open(r11, 0x0) 563.281115ms ago: executing program 1 (id=2842): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x4, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="0000005933fb7b"], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r5, r2, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0xfffffffffffffff8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200), 0x1, 0x257, &(0x7f0000000ac0)="$eJzs3T1oJGUcBvBnZncv5m6RUxtB/AAR0UA4O8HmbBQO5DhEBBVORGyUO+G8w+7WysZCa5WrbA6xM1pKmmCjiFZRU8RG0GBhsNBiZXc2EpMN6u5mx8v8fjCZr3fm/w4zz5ttZjdAY51McjpJK8lSkk6SYneDe6rp5Gj12uLa+aTff/KXYtiuWq/sHHciSS/Jw0lWyyIvt5MrK89u/rb++P1vXe7c98HKM4tzvciRrc2NJ7bfP/vmx2ceuvLlNz+dLXI63b9d1+wVY7a1i+TWwyj2P1G06+4B/8a51z/6dpD725LcO8x/J2Wqm/f2pWOrnTz43kHHvvPzV3fMs6/A7PX7ncH/wF4faJwySTdFuZykWi7L5eXqM/x3rePlKxcvvbb00sXLF16se6QCZqWbbDz26cInJ/bk/8dWlX/g6Brk/6lz178fLG+3JjrFwqz7BByyO6vZIP9Lz199IJPnH7hByT80l/xDc8k/NJf8Q3PJPzSX/MMR9PVo3tnZ0BvbTP6hueQfjrhjB++Sf2iu3fkHAJqlv1D3G8hAXeoefwAAAAAAAAAAAAAAAAAAgP2uLa6d35nmVfPzd5OtR5O0x9VvDX+POLlp+Pf4r8Wg2V+K6rCpPHf3lCeY0oc1v3198w/11v/irnrrX72Q9N5Icqrd3v/8FaPnb3K3/MP+zgtTFviPij3rjzw93/p7/XG93vpn1pPPBuPPqRTZd//L3D6cjx9/uru/YnlCr/4+5QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmz8DAAD//25Tbg4=") 513.80577ms ago: executing program 4 (id=2843): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000580)="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", &(0x7f0000000340)=""/172}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x38, 0x30]}}}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1, 0x0, 0x1}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000240)={0xa2a, 0xb, 0x55, 0x7, 0x1000, 0xfffffff5}) write$sndseq(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 422.662839ms ago: executing program 4 (id=2844): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 269.094344ms ago: executing program 0 (id=2845): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 227.766688ms ago: executing program 4 (id=2846): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) 199.918651ms ago: executing program 4 (id=2847): r0 = socket$key(0xf, 0x3, 0x2) getsockname(r0, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000000)=0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000240)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@grpquota}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$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") inotify_init() ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x81, 0x3, 0x22, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x40, 0x5, 0x3}}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x60, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f00000003c0)='.pending_reads\x00', 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2, '\x00', r3, r5}, 0x50) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000080)=0x1f, 0x4) getsockopt$inet_tcp_int(r7, 0x6, 0x7, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="600000001000030400000000fe388c41b0a971e21022e2ec0dcc98dbdf250000740057c7be23672e8c00", @ANYRES32=r8, @ANYBLOB="0008000007500500400012800b00010062726964676500003000028005001900020000000500170000000000080004008100000005001600010000000a0014000180c20000000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) open(0x0, 0x50500, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r12, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x10}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "28cf73a26b4ac109e0584720b888993e"}]}]}, 0x54}}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES16=r2], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r14}, 0x10) dup2(r1, r2) 0s ago: executing program 4 (id=2848): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) utimes(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/partitions\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) mmap(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x3, 0x110, r4, 0x6b396000) accept$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000004240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x7f, 0xff, 0x9, 0x101}, {0x7, 0xd, 0x0, 0x8}, {0x6, 0x4, 0x9, 0x3}, {0x1, 0x81, 0x32, 0x5}, {0x3, 0xe, 0xc, 0x800}, {0x7ff, 0x6, 0x3, 0x4bd}]}) kernel console output (not intermixed with test programs): thout journal. Quota mode: writeback. [ 138.073162][ T9016] loop4: detected capacity change from 0 to 1024 [ 138.080482][ T9016] EXT4-fs: Ignoring removed orlov option [ 138.099741][ T9016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.138192][ T9020] loop1: detected capacity change from 0 to 512 [ 138.155878][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.187509][ T7355] Bluetooth: hci1: Frame reassembly failed (-84) [ 138.200666][ T9020] EXT4-fs (loop1): too many log groups per flexible block group [ 138.208394][ T9020] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 138.219394][ T9020] EXT4-fs (loop1): mount failed [ 138.232251][ T9028] loop3: detected capacity change from 0 to 128 [ 138.240597][ T9028] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.253240][ T9028] ext4 filesystem being mounted at /377/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.290362][ T9028] lo speed is unknown, defaulting to 1000 [ 138.459825][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.489008][ T9041] rdma_rxe: rxe_newlink: failed to add bond0 [ 138.624473][ T9052] loop1: detected capacity change from 0 to 1024 [ 138.631398][ T9052] EXT4-fs: Ignoring removed orlov option [ 138.639817][ T9052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.673257][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.730416][ T9056] loop1: detected capacity change from 0 to 8192 [ 138.785083][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.807005][ T9059] tipc: Enabled bearer , priority 0 [ 138.816384][ T9059] tipc: Resetting bearer [ 138.824312][ T9058] tipc: Disabling bearer [ 138.973755][ T9069] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.010768][ T9069] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.061395][ T9069] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.120958][ T9069] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.449781][ T9071] rdma_rxe: rxe_newlink: failed to add bond0 [ 139.472633][ T9073] 9p: Unknown access argument : -22 [ 139.547075][ T7355] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.558940][ T7355] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.575593][ T7355] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.585101][ T7355] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.620808][ T9081] loop1: detected capacity change from 0 to 512 [ 139.627531][ T9079] loop2: detected capacity change from 0 to 1024 [ 139.634795][ T9079] EXT4-fs: Ignoring removed orlov option [ 139.642987][ T9081] EXT4-fs (loop1): too many log groups per flexible block group [ 139.651007][ T9081] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 139.657828][ T9081] EXT4-fs (loop1): mount failed [ 139.664169][ T9079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.678704][ T9081] __nla_validate_parse: 3 callbacks suppressed [ 139.678725][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2030'. [ 139.698411][ T9089] tipc: Enabling of bearer rejected, failed to enable media [ 139.710793][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.757690][ T9097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2033'. [ 139.855464][ T9114] 9p: Unknown access argument : -22 [ 139.870173][ T9109] loop3: detected capacity change from 0 to 8192 [ 140.005204][ T9123] loop1: detected capacity change from 0 to 1024 [ 140.011673][ T3605] Bluetooth: hci0: command 0x1003 tx timeout [ 140.018350][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 140.019812][ T9123] EXT4-fs: Ignoring removed orlov option [ 140.056277][ T9127] loop0: detected capacity change from 0 to 512 [ 140.081628][ T9127] EXT4-fs (loop0): too many log groups per flexible block group [ 140.089708][ T9127] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 140.091170][ T9131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2046'. [ 140.096524][ T9127] EXT4-fs (loop0): mount failed [ 140.115761][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2044'. [ 140.152107][ T9137] tipc: Enabling of bearer rejected, failed to enable media [ 140.249535][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 140.255609][ T3710] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 140.291903][ T9159] 9p: Unknown access argument : -22 [ 140.316382][ T7320] Bluetooth: hci0: Frame reassembly failed (-84) [ 140.318650][ T9162] syzkaller0: entered allmulticast mode [ 140.330518][ T9162] syzkaller0: entered promiscuous mode [ 140.338053][ T9162] syzkaller0 (unregistering): left allmulticast mode [ 140.344996][ T9162] syzkaller0 (unregistering): left promiscuous mode [ 140.412196][ T9167] loop1: detected capacity change from 0 to 1024 [ 140.419016][ T9167] EXT4-fs: Ignoring removed oldalloc option [ 140.425620][ T9167] EXT4-fs: Ignoring removed bh option [ 140.579540][ T9177] tipc: Enabling of bearer rejected, failed to enable media [ 140.706260][ T9185] loop2: detected capacity change from 0 to 128 [ 140.738541][ T9185] ext4 filesystem being mounted at /505/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.768187][ T7330] Bluetooth: hci1: Frame reassembly failed (-84) [ 140.770707][ T9185] lo speed is unknown, defaulting to 1000 [ 141.042020][ T9209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2070'. [ 141.082593][ T9211] syzkaller0: entered allmulticast mode [ 141.088479][ T9211] syzkaller0: entered promiscuous mode [ 141.095804][ T9211] syzkaller0 (unregistering): left allmulticast mode [ 141.102872][ T9211] syzkaller0 (unregistering): left promiscuous mode [ 141.273737][ T9222] 9p: Unknown access argument : -22 [ 141.382427][ T9236] loop2: detected capacity change from 0 to 128 [ 141.391194][ T9236] ext4 filesystem being mounted at /509/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.417406][ T9236] lo speed is unknown, defaulting to 1000 [ 141.466531][ T9] lo speed is unknown, defaulting to 1000 [ 141.593031][ T9253] loop2: detected capacity change from 0 to 1024 [ 141.600724][ T9253] EXT4-fs: Ignoring removed oldalloc option [ 141.606712][ T9253] EXT4-fs: Ignoring removed bh option [ 141.957297][ T7341] Bluetooth: hci2: Frame reassembly failed (-84) [ 142.299894][ T9265] netlink: 'syz.1.2089': attribute type 142 has an invalid length. [ 142.307901][ T9265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2089'. [ 142.320832][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 142.320851][ T29] audit: type=1326 audit(1760386294.779:7417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9264 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 142.357620][ T9265] loop1: detected capacity change from 0 to 1024 [ 142.364504][ T3710] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 142.369396][ T3651] Bluetooth: hci0: command 0x1003 tx timeout [ 142.370860][ T29] audit: type=1326 audit(1760386294.809:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9264 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 142.378725][ T9265] EXT4-fs: Ignoring removed orlov option [ 142.400904][ T29] audit: type=1326 audit(1760386294.809:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9264 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 142.429972][ T29] audit: type=1326 audit(1760386294.809:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9264 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 142.453400][ T29] audit: type=1326 audit(1760386294.809:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9264 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 142.477596][ T29] audit: type=1326 audit(1760386294.809:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9264 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 142.501800][ T29] audit: type=1326 audit(1760386294.809:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9264 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 142.525234][ T29] audit: type=1326 audit(1760386294.809:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9264 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 142.549402][ T29] audit: type=1326 audit(1760386294.809:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9264 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7d7ac0ef03 code=0x7ffc0000 [ 142.573008][ T29] audit: type=1326 audit(1760386294.809:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9264 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7d7ac0d97f code=0x7ffc0000 [ 142.618091][ T9270] 9p: Unknown access argument : -22 [ 142.759809][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2095'. [ 142.809370][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 142.809421][ T3710] Bluetooth: hci1: command 0x1003 tx timeout [ 142.858837][ T9289] syzkaller0: entered allmulticast mode [ 142.865400][ T9289] syzkaller0: entered promiscuous mode [ 142.872837][ T9289] syzkaller0 (unregistering): left allmulticast mode [ 142.879636][ T9289] syzkaller0 (unregistering): left promiscuous mode [ 142.978274][ T9296] loop0: detected capacity change from 0 to 512 [ 143.000499][ T9296] EXT4-fs (loop0): too many log groups per flexible block group [ 143.008292][ T9296] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 143.015930][ T9296] EXT4-fs (loop0): mount failed [ 143.025590][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 143.054426][ T7330] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.666883][ T7365] Bluetooth: hci1: Frame reassembly failed (-84) [ 143.698171][ T9320] syzkaller0: entered allmulticast mode [ 143.704054][ T9320] syzkaller0: entered promiscuous mode [ 143.711784][ T9320] syzkaller0 (unregistering): left allmulticast mode [ 143.718578][ T9320] syzkaller0 (unregistering): left promiscuous mode [ 143.807804][ T9324] loop2: detected capacity change from 0 to 128 [ 143.816316][ T9324] ext4 filesystem being mounted at /518/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.839237][ T9324] lo speed is unknown, defaulting to 1000 [ 143.997157][ T9337] loop1: detected capacity change from 0 to 8192 [ 144.009423][ T3605] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 144.081693][ T9346] tipc: Enabling of bearer rejected, failed to enable media [ 144.331231][ T9363] syzkaller0: entered allmulticast mode [ 144.336955][ T9363] syzkaller0: entered promiscuous mode [ 144.344327][ T9363] syzkaller0 (unregistering): left allmulticast mode [ 144.351146][ T9363] syzkaller0 (unregistering): left promiscuous mode [ 144.447566][ T9367] netlink: 'syz.3.2124': attribute type 142 has an invalid length. [ 144.455656][ T9367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2124'. [ 144.465389][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2124'. [ 144.482159][ T9367] loop3: detected capacity change from 0 to 1024 [ 144.489145][ T9367] EXT4-fs: Ignoring removed orlov option [ 144.695246][ T9375] 9p: Unknown access argument : -22 [ 144.820997][ T9377] netlink: 'syz.3.2127': attribute type 142 has an invalid length. [ 144.828984][ T9377] __nla_validate_parse: 1 callbacks suppressed [ 144.829005][ T9377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2127'. [ 144.856624][ T9377] loop3: detected capacity change from 0 to 1024 [ 144.868040][ T9377] EXT4-fs: Ignoring removed orlov option [ 144.882012][ T9385] tipc: Enabling of bearer rejected, failed to enable media [ 144.935776][ T9392] syzkaller0: entered promiscuous mode [ 144.941450][ T9392] syzkaller0: entered allmulticast mode [ 145.030426][ T9403] loop2: detected capacity change from 0 to 1024 [ 145.037470][ T9403] EXT4-fs: Ignoring removed orlov option [ 145.102889][ T9408] SELinux: failed to load policy [ 145.134677][ T3651] Bluetooth: hci0: command 0x1003 tx timeout [ 145.134686][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 145.179783][ T9412] 9p: Unknown access argument : -22 [ 145.189066][ T9414] 9p: Unknown access argument : -22 [ 145.245630][ T9418] syzkaller0: entered allmulticast mode [ 145.251452][ T9418] syzkaller0: entered promiscuous mode [ 145.259012][ T9418] syzkaller0 (unregistering): left allmulticast mode [ 145.265896][ T9418] syzkaller0 (unregistering): left promiscuous mode [ 145.408044][ T9428] 9p: Unknown access argument : -22 [ 145.434258][ T9426] syzkaller0: entered promiscuous mode [ 145.440399][ T9426] syzkaller0: entered allmulticast mode [ 145.448470][ T9432] tipc: Enabling of bearer rejected, failed to enable media [ 145.551972][ T9444] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.583523][ T9448] loop2: detected capacity change from 0 to 128 [ 145.592402][ T9448] ext4 filesystem being mounted at /526/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.618308][ T9448] lo speed is unknown, defaulting to 1000 [ 145.626890][ T9444] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.686064][ T9462] 9p: Unknown access argument : -22 [ 145.691321][ T3710] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 145.697926][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 145.707073][ T9444] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.719063][ T9460] syzkaller0: entered allmulticast mode [ 145.725402][ T9460] syzkaller0: entered promiscuous mode [ 145.735335][ T9460] syzkaller0 (unregistering): left allmulticast mode [ 145.742341][ T9460] syzkaller0 (unregistering): left promiscuous mode [ 145.750409][ T9464] 9p: Unknown access argument : -22 [ 145.824329][ T9444] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.880646][ T9471] tipc: Enabling of bearer rejected, failed to enable media [ 145.937307][ T7330] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.964209][ T7330] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.989330][ T7330] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.014191][ T7330] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.068466][ T9489] netlink: 'syz.4.2166': attribute type 142 has an invalid length. [ 146.076496][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2166'. [ 146.094010][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2166'. [ 146.103176][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2166'. [ 146.136218][ T9489] loop4: detected capacity change from 0 to 1024 [ 146.143155][ T7330] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.153031][ T9481] syzkaller0: entered promiscuous mode [ 146.158601][ T9481] syzkaller0: entered allmulticast mode [ 146.160907][ T9498] 9p: Unknown access argument : -22 [ 146.168385][ T9489] EXT4-fs: Ignoring removed orlov option [ 146.217118][ T9503] loop3: detected capacity change from 0 to 128 [ 146.226069][ T9503] ext4 filesystem being mounted at /415/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.251195][ T9503] lo speed is unknown, defaulting to 1000 [ 146.412947][ T9512] SELinux: failed to load policy [ 146.446794][ T9517] tipc: Enabling of bearer rejected, failed to enable media [ 146.557717][ T9538] netlink: 'syz.1.2185': attribute type 142 has an invalid length. [ 146.565944][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2185'. [ 146.591524][ T9540] 9p: Unknown access argument : -22 [ 146.602610][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 146.612780][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 146.637992][ T9538] loop1: detected capacity change from 0 to 1024 [ 146.647713][ T9538] EXT4-fs: Ignoring removed orlov option [ 146.653660][ T9544] loop4: detected capacity change from 0 to 128 [ 146.662236][ T9544] ext4 filesystem being mounted at /396/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.687563][ T9544] lo speed is unknown, defaulting to 1000 [ 146.892553][ T9560] 9p: Unknown access argument : -22 [ 147.084694][ T7330] Bluetooth: hci1: Frame reassembly failed (-84) [ 147.112612][ T9594] netlink: 'syz.4.2203': attribute type 142 has an invalid length. [ 147.120745][ T9594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2203'. [ 147.130028][ T7355] Bluetooth: hci2: Frame reassembly failed (-84) [ 147.137323][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 147.146532][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 147.164119][ T9594] loop4: detected capacity change from 0 to 1024 [ 147.171191][ T9594] EXT4-fs: Ignoring removed orlov option [ 147.353465][ T9604] syzkaller0: entered allmulticast mode [ 147.359574][ T9604] syzkaller0: entered promiscuous mode [ 147.366831][ T9604] syzkaller0 (unregistering): left allmulticast mode [ 147.373687][ T9604] syzkaller0 (unregistering): left promiscuous mode [ 147.478274][ T9608] 9p: Unknown access argument : -22 [ 147.662236][ T9618] 9p: Unknown access argument : -22 [ 147.990656][ T9644] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 147.996114][ T9642] SELinux: failed to load policy [ 148.005513][ T9644] loop9: detected capacity change from 0 to 8 [ 148.013468][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.023757][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.032933][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.043538][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.051438][ T9644] loop9: unable to read partition table [ 148.057613][ T9644] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 148.057613][ T9644] ) failed (rc=-5) [ 148.113472][ T9651] loop3: detected capacity change from 0 to 1024 [ 148.120390][ T9651] EXT4-fs: Ignoring removed oldalloc option [ 148.125965][ T9649] loop4: detected capacity change from 0 to 8192 [ 148.126901][ T9651] EXT4-fs: Ignoring removed bh option [ 148.169972][ T3605] Bluetooth: hci0: command 0x1003 tx timeout [ 148.176063][ T3710] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.470317][ T9671] loop2: detected capacity change from 0 to 512 [ 148.481276][ T9671] EXT4-fs (loop2): too many log groups per flexible block group [ 148.489075][ T9671] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 148.495996][ T9671] EXT4-fs (loop2): mount failed [ 148.708642][ T9687] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.763115][ T9687] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.802716][ T9687] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.841533][ T9687] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.910534][ T7320] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.929853][ T7357] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.951311][ T7320] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.971440][ T7320] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.017416][ T7357] Bluetooth: hci0: Frame reassembly failed (-84) [ 149.097541][ T9700] syzkaller0: entered promiscuous mode [ 149.103792][ T9700] syzkaller0: entered allmulticast mode [ 149.129341][ T3605] Bluetooth: hci1: command 0x1003 tx timeout [ 149.135466][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 149.210330][ T3651] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 149.216534][ T44] Bluetooth: hci2: command 0x1003 tx timeout [ 149.240116][ T9718] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 149.265038][ T9718] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.431173][ T9744] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.630037][ T9744] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.663334][ T9739] Set syz1 is full, maxelem 65536 reached [ 149.701366][ T9744] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.760806][ T9744] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.827125][ T7341] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.839087][ T7341] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.850945][ T7320] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.862658][ T7320] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.990281][ T9757] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.031315][ T9757] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.032235][ T9759] __nla_validate_parse: 4 callbacks suppressed [ 150.032256][ T9759] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2266'. [ 150.081281][ T9757] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.116599][ T9765] 9p: Unknown access argument : -22 [ 150.140954][ T9757] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.196142][ T9767] loop4: detected capacity change from 0 to 128 [ 150.204821][ T9767] ext4 filesystem being mounted at /431/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.229103][ T9767] lo speed is unknown, defaulting to 1000 [ 150.239639][ T9771] syzkaller0: entered allmulticast mode [ 150.245513][ T9771] syzkaller0: entered promiscuous mode [ 150.253756][ T9771] syzkaller0 (unregistering): left allmulticast mode [ 150.260559][ T9771] syzkaller0 (unregistering): left promiscuous mode [ 150.375367][ T9777] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.461566][ T9777] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.571769][ T9777] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.661748][ T9777] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.687520][ T9790] netlink: 'syz.4.2277': attribute type 1 has an invalid length. [ 150.702206][ T9790] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.712650][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 150.723303][ T7357] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.734337][ T7357] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.746250][ T7357] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.754609][ T7357] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.778082][ T9793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2278'. [ 150.803839][ T7330] Bluetooth: hci1: Frame reassembly failed (-84) [ 151.049389][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 151.050261][ T3710] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.093772][ T9799] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 151.104094][ T9799] SELinux: failed to load policy [ 151.127460][ T9801] loop3: detected capacity change from 0 to 1024 [ 151.134489][ T9801] EXT4-fs: Ignoring removed oldalloc option [ 151.140550][ T9801] EXT4-fs: Ignoring removed bh option [ 152.097009][ T9816] 9p: Unknown access argument : -22 [ 152.261815][ T9822] 9p: Unknown access argument : -22 [ 152.326818][ T7357] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.809778][ T3651] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 152.831800][ T9826] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 152.842724][ T9826] SELinux: failed to load policy [ 152.882261][ T9830] loop1: detected capacity change from 0 to 1024 [ 152.888981][ T9830] EXT4-fs: Ignoring removed oldalloc option [ 152.895066][ T9830] EXT4-fs: Ignoring removed bh option [ 153.080189][ T9840] loop4: detected capacity change from 0 to 1024 [ 153.087099][ T9840] EXT4-fs: Ignoring removed oldalloc option [ 153.093821][ T9840] EXT4-fs: Ignoring removed bh option [ 153.302042][ T9848] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 153.313077][ T9848] loop9: detected capacity change from 0 to 8 [ 153.320214][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.330450][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.338698][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.349018][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.357332][ T9848] loop9: unable to read partition table [ 153.363791][ T9848] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 153.363791][ T9848] ) failed (rc=-5) [ 153.441942][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 153.441962][ T29] audit: type=1326 audit(1760386305.899:7670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9a5eec9 code=0x7ffc0000 [ 153.554664][ T29] audit: type=1326 audit(1760386305.899:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57a9a5eec9 code=0x7ffc0000 [ 153.578231][ T29] audit: type=1326 audit(1760386305.899:7672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9a5eec9 code=0x7ffc0000 [ 153.601726][ T29] audit: type=1326 audit(1760386305.899:7673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57a9a5eec9 code=0x7ffc0000 [ 153.625210][ T29] audit: type=1326 audit(1760386305.899:7674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9a5eec9 code=0x7ffc0000 [ 153.648755][ T29] audit: type=1326 audit(1760386305.899:7675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57a9a5eec9 code=0x7ffc0000 [ 153.672247][ T29] audit: type=1326 audit(1760386305.929:7676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9a5eec9 code=0x7ffc0000 [ 153.695742][ T29] audit: type=1326 audit(1760386305.929:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9a5eec9 code=0x7ffc0000 [ 153.719388][ T29] audit: type=1326 audit(1760386305.939:7678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57a9a5eec9 code=0x7ffc0000 [ 153.742805][ T29] audit: type=1326 audit(1760386305.939:7679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9a5eec9 code=0x7ffc0000 [ 153.808916][ T9860] netlink: 'syz.2.2303': attribute type 1 has an invalid length. [ 153.826966][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'. [ 153.847482][ T9859] SELinux: failed to load policy [ 154.339990][ T3710] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.346241][ T3651] Bluetooth: hci0: command 0x1003 tx timeout [ 154.371264][ T9869] loop3: detected capacity change from 0 to 128 [ 154.379680][ T9869] ext4 filesystem being mounted at /437/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.402834][ T9869] lo speed is unknown, defaulting to 1000 [ 154.561422][ T7341] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.578411][ T7341] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.601609][ T7341] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.618942][ T7341] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.633019][ T9880] 9p: Unknown access argument : -22 [ 154.818135][ T9907] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2318'. [ 154.856099][ T9908] SELinux: failed to load policy [ 154.884932][ T9913] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.907562][ T9915] syzkaller0: entered allmulticast mode [ 154.914004][ T9915] syzkaller0: entered promiscuous mode [ 154.921600][ T9915] syzkaller0 (unregistering): left allmulticast mode [ 154.928327][ T9915] syzkaller0 (unregistering): left promiscuous mode [ 154.961704][ T9913] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.041192][ T9913] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.091326][ T9913] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.502688][ T9921] loop2: detected capacity change from 0 to 128 [ 155.511156][ T9921] ext4 filesystem being mounted at /549/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.538036][ T9921] lo speed is unknown, defaulting to 1000 [ 155.559559][ T9926] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.604716][ T9924] rdma_rxe: rxe_newlink: failed to add bond0 [ 155.651045][ T9926] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.663624][ T9931] 9p: Unknown access argument : -22 [ 155.688888][ T9933] loop3: detected capacity change from 0 to 1024 [ 155.696000][ T9933] EXT4-fs: Ignoring removed orlov option [ 155.728663][ T9936] loop2: detected capacity change from 0 to 1024 [ 155.735735][ T9936] EXT4-fs: Ignoring removed orlov option [ 155.771892][ T9926] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.802787][ T9939] loop3: detected capacity change from 0 to 8192 [ 155.881682][ T9926] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.893906][ T9951] SELinux: failed to load policy [ 155.977094][ T9965] loop1: detected capacity change from 0 to 1024 [ 155.978264][ T9968] 9p: Unknown access argument : -22 [ 155.986119][ T9965] EXT4-fs: Ignoring removed oldalloc option [ 155.995661][ T9965] EXT4-fs: Ignoring removed bh option [ 156.004432][ T9969] rdma_rxe: rxe_newlink: failed to add bond0 [ 156.009998][ T7355] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.028963][ T7355] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.041359][ T7365] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.050123][ T7365] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.064247][ T9973] loop2: detected capacity change from 0 to 128 [ 156.078338][ T9973] ext4 filesystem being mounted at /554/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.142773][ T9977] loop3: detected capacity change from 0 to 8192 [ 156.197677][ T9973] lo speed is unknown, defaulting to 1000 [ 156.280473][ T9984] 9p: Unknown access argument : -22 [ 156.330470][ T9985] loop4: detected capacity change from 0 to 1024 [ 156.338628][ T9985] EXT4-fs: Ignoring removed orlov option [ 156.596275][T10002] SELinux: failed to load policy [ 156.634624][T10011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2353'. [ 156.692989][T10017] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 156.734917][T10015] loop2: detected capacity change from 0 to 8192 [ 156.746182][T10017] loop9: detected capacity change from 0 to 8 [ 156.752939][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.763171][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.772373][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.782644][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.790515][T10017] loop9: unable to read partition table [ 156.799918][T10017] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 156.799918][T10017] ) failed (rc=-5) [ 156.836508][T10024] 9p: Unknown access argument : -22 [ 156.989371][T10035] SELinux: failed to load policy [ 157.011462][T10042] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2366'. [ 157.080291][T10056] loop4: detected capacity change from 0 to 512 [ 157.100594][T10056] EXT4-fs (loop4): too many log groups per flexible block group [ 157.110267][T10056] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 157.117165][T10056] EXT4-fs (loop4): mount failed [ 157.135255][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'. [ 157.197071][T10069] loop1: detected capacity change from 0 to 128 [ 157.205599][T10069] ext4 filesystem being mounted at /489/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.220441][T10072] 9p: Unknown access argument : -22 [ 157.231147][T10069] lo speed is unknown, defaulting to 1000 [ 157.780194][T10081] loop2: detected capacity change from 0 to 1024 [ 157.786918][T10081] EXT4-fs: Ignoring removed oldalloc option [ 157.792980][T10081] EXT4-fs: Ignoring removed bh option [ 158.048810][T10090] SELinux: failed to load policy [ 158.089802][T10092] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2378'. [ 158.254054][T10104] loop3: detected capacity change from 0 to 512 [ 158.278356][T10104] EXT4-fs (loop3): too many log groups per flexible block group [ 158.286942][T10104] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 158.294173][T10104] EXT4-fs (loop3): mount failed [ 158.306044][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2382'. [ 158.339049][ T7357] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.766776][T10127] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2390'. [ 158.812075][T10129] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 4278190080) [ 158.822482][T10129] SELinux: failed to load policy [ 158.861587][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 158.861607][ T29] audit: type=1326 audit(1760386311.319:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.1.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 158.892234][ T29] audit: type=1326 audit(1760386311.319:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.1.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 158.915885][ T29] audit: type=1326 audit(1760386311.319:7753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.1.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 158.940343][ T29] audit: type=1326 audit(1760386311.319:7754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.1.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 158.963879][ T29] audit: type=1326 audit(1760386311.319:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.1.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 158.988222][ T29] audit: type=1326 audit(1760386311.319:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.1.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 159.012574][ T29] audit: type=1326 audit(1760386311.319:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.1.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 159.036174][ T29] audit: type=1326 audit(1760386311.319:7758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.1.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 159.061005][ T29] audit: type=1326 audit(1760386311.319:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.1.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d7ac10de7 code=0x7ffc0000 [ 159.078639][T10146] loop1: detected capacity change from 0 to 512 [ 159.084519][ T29] audit: type=1326 audit(1760386311.319:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.1.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7d7ac10d5c code=0x7ffc0000 [ 159.120274][ T7330] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.132639][T10146] EXT4-fs (loop1): too many log groups per flexible block group [ 159.141222][ T7357] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.149680][ T7357] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.157952][ T7357] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.167820][T10146] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 159.174839][T10146] EXT4-fs (loop1): mount failed [ 159.185845][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2395'. [ 159.785164][T10170] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2403'. [ 159.880032][T10186] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.961882][T10186] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.997184][T10194] loop4: detected capacity change from 0 to 512 [ 160.010714][T10194] EXT4-fs (loop4): too many log groups per flexible block group [ 160.018731][T10194] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 160.026537][T10194] EXT4-fs (loop4): mount failed [ 160.043506][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2411'. [ 160.070274][T10186] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.088870][T10203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2415'. [ 160.099548][T10206] netlink: 'syz.4.2414': attribute type 142 has an invalid length. [ 160.117023][T10186] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.133851][T10206] loop4: detected capacity change from 0 to 1024 [ 160.141593][T10206] EXT4-fs: Ignoring removed orlov option [ 160.180488][ T7357] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.225631][ T7357] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.266503][ T7357] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.313958][T10216] syzkaller0: entered allmulticast mode [ 160.320479][T10216] syzkaller0: entered promiscuous mode [ 160.327974][T10216] syzkaller0 (unregistering): left allmulticast mode [ 160.334863][T10216] syzkaller0 (unregistering): left promiscuous mode [ 160.380135][ T7357] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.409428][ T3710] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.479202][T10234] loop1: detected capacity change from 0 to 512 [ 160.488723][ T3316] EXT4-fs unmount: 61 callbacks suppressed [ 160.488742][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.509664][T10234] EXT4-fs (loop1): too many log groups per flexible block group [ 160.519447][T10234] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 160.531777][T10234] EXT4-fs (loop1): mount failed [ 160.534815][T10247] 9p: Unknown access argument : -22 [ 160.596555][T10256] loop1: detected capacity change from 0 to 128 [ 160.602833][T10258] loop4: detected capacity change from 0 to 1024 [ 160.603402][T10258] EXT4-fs: Ignoring removed oldalloc option [ 160.612205][T10256] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.615316][T10258] EXT4-fs: Ignoring removed bh option [ 160.628964][T10256] ext4 filesystem being mounted at /505/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.641503][T10258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.664937][T10256] lo speed is unknown, defaulting to 1000 [ 160.717780][T10263] syzkaller0: entered allmulticast mode [ 160.725407][T10263] syzkaller0: entered promiscuous mode [ 160.735398][T10263] syzkaller0 (unregistering): left allmulticast mode [ 160.742253][T10263] syzkaller0 (unregistering): left promiscuous mode [ 160.905704][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.970977][T10273] syzkaller0: entered allmulticast mode [ 160.978675][T10273] syzkaller0: entered promiscuous mode [ 160.986800][T10273] syzkaller0 (unregistering): left allmulticast mode [ 160.993619][T10273] syzkaller0 (unregistering): left promiscuous mode [ 161.144588][T10280] loop1: detected capacity change from 0 to 1024 [ 161.155926][T10280] EXT4-fs: Ignoring removed oldalloc option [ 161.162586][T10280] EXT4-fs: Ignoring removed bh option [ 161.193462][T10280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.230184][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.255356][ T7357] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.286322][T10293] 9p: Unknown access argument : -22 [ 161.365341][T10301] loop0: detected capacity change from 0 to 128 [ 161.449948][T10308] SELinux: failed to load policy [ 161.476306][T10310] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 161.488551][T10310] loop9: detected capacity change from 0 to 8 [ 161.495281][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.500556][T10301] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.505521][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.518878][T10301] ext4 filesystem being mounted at /411/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.536067][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.546325][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.554238][T10310] loop9: unable to read partition table [ 161.562419][T10310] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 161.562419][T10310] ) failed (rc=-5) [ 161.628338][T10301] lo speed is unknown, defaulting to 1000 [ 161.641179][T10315] loop2: detected capacity change from 0 to 1024 [ 161.648138][T10315] EXT4-fs: Ignoring removed oldalloc option [ 161.654843][T10315] EXT4-fs: Ignoring removed bh option [ 161.691956][T10315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.832433][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.081144][T10339] 9p: Unknown access argument : -22 [ 162.104592][T10341] syzkaller0: entered allmulticast mode [ 162.116528][T10341] syzkaller0: entered promiscuous mode [ 162.130426][T10341] syzkaller0 (unregistering): left allmulticast mode [ 162.137225][T10341] syzkaller0 (unregistering): left promiscuous mode [ 162.188884][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.214861][ T7330] Bluetooth: hci1: Frame reassembly failed (-84) [ 162.333958][T10357] netlink: 'syz.1.2471': attribute type 142 has an invalid length. [ 162.342043][T10357] __nla_validate_parse: 5 callbacks suppressed [ 162.342062][T10357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2471'. [ 162.366489][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'. [ 162.375579][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'. [ 162.405193][T10357] loop1: detected capacity change from 0 to 1024 [ 162.420319][T10357] EXT4-fs: Ignoring removed orlov option [ 162.431371][T10357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.498356][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.551586][T10368] netlink: 'syz.0.2473': attribute type 1 has an invalid length. [ 162.560265][T10370] 9p: Unknown access argument : -22 [ 162.572981][T10368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.704364][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.728190][T10376] syzkaller0: entered allmulticast mode [ 162.734208][T10376] syzkaller0: entered promiscuous mode [ 162.741741][T10376] syzkaller0 (unregistering): left allmulticast mode [ 162.748495][T10376] syzkaller0 (unregistering): left promiscuous mode [ 162.851633][T10381] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.891371][T10381] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.941530][T10381] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.991444][T10381] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.058053][ T7344] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.069957][ T7357] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.082727][ T7344] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.094574][ T7344] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.146950][T10385] loop1: detected capacity change from 0 to 1024 [ 163.153876][T10385] EXT4-fs: Ignoring removed oldalloc option [ 163.159948][T10385] EXT4-fs: Ignoring removed bh option [ 163.171627][T10385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.289316][ T3710] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.289378][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 163.332732][T10391] 9p: Unknown access argument : -22 [ 163.511385][T10403] 9p: Unknown access argument : -22 [ 163.527375][ T7320] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.661073][T10409] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.712078][T10409] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.771593][T10409] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.832258][T10409] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.902002][ T7344] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.915930][ T7344] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.927792][ T7344] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.942697][ T7320] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.003381][ T7365] Bluetooth: hci2: Frame reassembly failed (-84) [ 164.090977][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.210783][T10416] netlink: 'syz.1.2494': attribute type 1 has an invalid length. [ 164.224661][T10416] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.241711][T10419] loop2: detected capacity change from 0 to 128 [ 164.249331][ T3651] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 164.249742][T10419] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.268023][T10419] ext4 filesystem being mounted at /580/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.294934][T10419] lo speed is unknown, defaulting to 1000 [ 164.417577][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.582718][ T7320] Bluetooth: hci1: Frame reassembly failed (-84) [ 164.958616][T10455] loop1: detected capacity change from 0 to 128 [ 164.967607][T10455] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.979971][T10455] ext4 filesystem being mounted at /518/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.002716][T10455] lo speed is unknown, defaulting to 1000 [ 165.105400][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.230915][T10468] netlink: 'syz.1.2516': attribute type 142 has an invalid length. [ 165.238907][T10468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2516'. [ 165.248560][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 165.257513][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 165.268454][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 165.268472][ T29] audit: type=1326 audit(1760386317.729:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 165.298737][T10468] loop1: detected capacity change from 0 to 1024 [ 165.298875][ T29] audit: type=1326 audit(1760386317.729:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 165.306737][T10468] EXT4-fs: Ignoring removed orlov option [ 165.328792][ T29] audit: type=1326 audit(1760386317.729:7877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 165.337879][T10468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.357979][ T29] audit: type=1326 audit(1760386317.729:7878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 165.394103][ T29] audit: type=1326 audit(1760386317.729:7879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 165.417783][ T29] audit: type=1326 audit(1760386317.729:7880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 165.441304][ T29] audit: type=1326 audit(1760386317.729:7881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 165.464863][ T29] audit: type=1326 audit(1760386317.729:7882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 165.488382][ T29] audit: type=1326 audit(1760386317.729:7883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7d7ac0eec9 code=0x7ffc0000 [ 165.512119][ T29] audit: type=1326 audit(1760386317.729:7884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7d7ac0ef03 code=0x7ffc0000 [ 165.535609][ T3651] Bluetooth: hci0: command 0x1003 tx timeout [ 165.538829][ T3710] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 165.597673][T10475] netlink: 'syz.4.2519': attribute type 142 has an invalid length. [ 165.605832][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2519'. [ 165.616244][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.616865][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 165.634369][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 165.663305][T10475] loop4: detected capacity change from 0 to 1024 [ 165.670436][T10475] EXT4-fs: Ignoring removed orlov option [ 165.678646][T10475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.696791][T10482] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 165.709006][T10482] loop9: detected capacity change from 0 to 8 [ 165.715965][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.726189][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.734888][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.745113][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.753133][T10482] loop9: unable to read partition table [ 165.759389][T10482] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 165.759389][T10482] ) failed (rc=-5) [ 165.838218][T10490] syzkaller0: entered allmulticast mode [ 165.844241][T10490] syzkaller0: entered promiscuous mode [ 165.852611][T10490] syzkaller0 (unregistering): left allmulticast mode [ 165.860108][T10490] syzkaller0 (unregistering): left promiscuous mode [ 165.931264][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.980978][T10498] 9p: Unknown access argument : -22 [ 166.009422][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 166.015590][ T3710] Bluetooth: hci2: command 0x1003 tx timeout [ 166.022032][ T7357] Bluetooth: hci0: Frame reassembly failed (-84) [ 166.048618][T10503] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 166.063047][T10503] loop9: detected capacity change from 0 to 8 [ 166.071463][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.081701][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.089800][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.100072][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.107996][T10503] loop9: unable to read partition table [ 166.108696][T10505] 9p: Unknown access argument : -22 [ 166.114623][T10503] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 166.114623][T10503] ) failed (rc=-5) [ 166.190577][T10510] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.256552][T10512] loop4: detected capacity change from 0 to 512 [ 166.264911][T10510] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.281196][T10512] EXT4-fs (loop4): too many log groups per flexible block group [ 166.289052][T10512] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 166.295913][T10512] EXT4-fs (loop4): mount failed [ 166.303770][T10510] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.316028][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2533'. [ 166.362564][T10510] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.433985][T10528] 9p: Unknown access argument : -22 [ 166.540790][T10530] loop4: detected capacity change from 0 to 1024 [ 166.547538][T10530] EXT4-fs: Ignoring removed oldalloc option [ 166.553575][T10530] EXT4-fs: Ignoring removed bh option [ 166.571796][T10530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.649358][ T3605] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 166.649397][T10501] Bluetooth: hci1: command 0x1003 tx timeout [ 166.701404][T10535] syzkaller0: entered allmulticast mode [ 166.707352][T10535] syzkaller0: entered promiscuous mode [ 166.719504][T10535] syzkaller0 (unregistering): left allmulticast mode [ 166.726252][T10535] syzkaller0 (unregistering): left promiscuous mode [ 166.931513][ T7344] Bluetooth: hci1: Frame reassembly failed (-84) [ 166.958076][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.061707][T10556] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 167.072971][T10556] loop9: detected capacity change from 0 to 8 [ 167.079403][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.089680][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.097803][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 167.107995][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.116275][T10556] loop9: unable to read partition table [ 167.122023][T10556] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 167.122023][T10556] ) failed (rc=-5) [ 167.203890][T10565] 9p: Unknown access argument : -22 [ 167.240565][T10566] netlink: 'syz.3.2547': attribute type 1 has an invalid length. [ 167.253788][T10566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.266996][T10566] bond2 (unregistering): Released all slaves [ 168.083019][T10581] netlink: 'syz.3.2555': attribute type 142 has an invalid length. [ 168.091078][T10581] __nla_validate_parse: 1 callbacks suppressed [ 168.091096][T10581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2555'. [ 168.091097][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 168.114673][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2555'. [ 168.123831][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2555'. [ 168.135406][T10583] 9p: Unknown access argument : -22 [ 168.143888][T10581] loop3: detected capacity change from 0 to 1024 [ 168.151249][T10581] EXT4-fs: Ignoring removed orlov option [ 168.159417][T10581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.177271][T10587] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 168.188679][T10587] loop9: detected capacity change from 0 to 8 [ 168.195234][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.205480][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.213683][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.223932][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.231811][T10587] loop9: unable to read partition table [ 168.237511][T10587] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 168.237511][T10587] ) failed (rc=-5) [ 168.291765][T10594] tipc: Enabling of bearer rejected, failed to enable media [ 168.421028][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.446488][T10611] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.482156][T10611] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.542645][T10611] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.592476][T10611] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.640026][ T7365] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.653814][ T7365] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.665774][ T7365] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.676810][ T7365] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.738470][T10618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2566'. [ 168.767680][ T7344] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.789640][ T7344] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.802575][ T7344] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.819465][ T7344] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.837755][T10628] 9p: Unknown access argument : -22 [ 168.841171][T10624] loop3: detected capacity change from 0 to 512 [ 168.860585][T10624] EXT4-fs (loop3): too many log groups per flexible block group [ 168.868419][T10624] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 168.875607][T10624] EXT4-fs (loop3): mount failed [ 168.886528][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2569'. [ 168.916063][T10632] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 168.927198][T10632] loop9: detected capacity change from 0 to 8 [ 168.934569][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.944847][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.953233][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.963514][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.971566][T10632] loop9: unable to read partition table [ 168.977258][T10632] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 168.977258][T10632] ) failed (rc=-5) [ 168.979359][ T3605] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 168.996658][ T3651] Bluetooth: hci1: command 0x1003 tx timeout [ 169.075158][T10643] loop3: detected capacity change from 0 to 1024 [ 169.085442][T10643] EXT4-fs: Ignoring removed orlov option [ 169.102057][T10649] 9p: Unknown access argument : -22 [ 169.110675][T10643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.151164][T10654] syzkaller0: entered allmulticast mode [ 169.157109][T10654] syzkaller0: entered promiscuous mode [ 169.164853][T10654] syzkaller0 (unregistering): left allmulticast mode [ 169.172339][T10654] syzkaller0 (unregistering): left promiscuous mode [ 169.211898][T10657] netlink: 'syz.2.2582': attribute type 142 has an invalid length. [ 169.220153][T10657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2582'. [ 169.238312][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2582'. [ 169.247368][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2582'. [ 169.270019][T10657] loop2: detected capacity change from 0 to 1024 [ 169.277251][T10657] EXT4-fs: Ignoring removed orlov option [ 169.319191][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.325279][T10664] 9p: Unknown access argument : -22 [ 169.331884][T10657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.358915][T10666] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 169.371006][T10666] loop9: detected capacity change from 0 to 8 [ 169.377597][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.387860][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.395869][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.406119][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.414091][T10666] loop9: unable to read partition table [ 169.420159][T10666] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 169.420159][T10666] ) failed (rc=-5) [ 169.493989][ T7355] Bluetooth: hci0: Frame reassembly failed (-84) [ 169.567432][T10677] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 169.578755][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.579215][T10677] loop9: detected capacity change from 0 to 8 [ 169.594649][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.604892][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.614149][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.624393][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.632893][T10677] loop9: unable to read partition table [ 169.638670][T10677] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 169.638670][T10677] ) failed (rc=-5) [ 169.698936][T10687] 9p: Unknown access argument : -22 [ 169.704195][T10688] loop2: detected capacity change from 0 to 1024 [ 169.711525][T10688] EXT4-fs: Ignoring removed orlov option [ 169.720579][T10688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 169.732731][T10688] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.757044][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 169.779484][T10692] syzkaller0: entered allmulticast mode [ 169.785221][T10692] syzkaller0: entered promiscuous mode [ 169.792426][T10692] syzkaller0 (unregistering): left allmulticast mode [ 169.799205][T10692] syzkaller0 (unregistering): left promiscuous mode [ 169.886505][T10708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2601'. [ 169.898147][T10707] netlink: 'syz.4.2600': attribute type 142 has an invalid length. [ 169.906206][T10707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2600'. [ 169.927090][T10712] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 169.938424][T10712] loop9: detected capacity change from 0 to 8 [ 169.941132][T10707] loop4: detected capacity change from 0 to 1024 [ 169.945365][T10712] loop9: unable to read partition table [ 169.957584][T10712] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 169.957584][T10712] ) failed (rc=-5) [ 169.960166][T10707] EXT4-fs: Ignoring removed orlov option [ 169.979124][T10707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.091359][T10718] loop0: detected capacity change from 0 to 1024 [ 170.098210][T10718] EXT4-fs: Ignoring removed orlov option [ 170.111212][T10721] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.124477][T10718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 170.137103][T10718] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.162083][T10721] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.213552][T10721] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.227855][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 170.269914][T10725] lo speed is unknown, defaulting to 1000 [ 170.272697][T10735] netlink: 'syz.0.2608': attribute type 142 has an invalid length. [ 170.286470][ T7365] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.288652][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 170.288671][ T29] audit: type=1326 audit(1760386322.739:8043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.0.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 170.326355][ T29] audit: type=1326 audit(1760386322.779:8044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.0.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 170.350016][ T29] audit: type=1326 audit(1760386322.779:8045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.0.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 170.373713][ T29] audit: type=1326 audit(1760386322.779:8046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.0.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 170.397299][ T29] audit: type=1326 audit(1760386322.779:8047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.0.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 170.420900][ T29] audit: type=1326 audit(1760386322.779:8048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.0.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 170.444466][ T29] audit: type=1326 audit(1760386322.779:8049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.0.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 170.454336][T10735] loop0: detected capacity change from 0 to 1024 [ 170.468234][ T29] audit: type=1326 audit(1760386322.779:8050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.0.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 170.468283][ T29] audit: type=1326 audit(1760386322.779:8051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.0.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 170.468345][ T29] audit: type=1326 audit(1760386322.779:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.0.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff7a114ef03 code=0x7ffc0000 [ 170.502073][T10721] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.524634][T10735] EXT4-fs: Ignoring removed orlov option [ 170.546811][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.560468][T10735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.590709][ T7365] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.673006][ T7365] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.687063][ T7355] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.704140][ T7355] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.714505][ T7365] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.733547][ T7355] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.746907][ T7355] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.761365][T10725] chnl_net:caif_netlink_parms(): no params data found [ 170.813389][T10749] loop4: detected capacity change from 0 to 1024 [ 170.824599][T10751] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 170.835048][T10749] EXT4-fs: Ignoring removed oldalloc option [ 170.841157][T10749] EXT4-fs: Ignoring removed bh option [ 170.855125][T10751] loop9: detected capacity change from 0 to 8 [ 170.855507][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.866803][T10751] loop9: unable to read partition table [ 170.872538][T10749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.876694][T10751] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 170.876694][T10751] ) failed (rc=-5) [ 170.918133][T10725] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.925367][T10725] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.969745][T10725] bridge_slave_0: entered allmulticast mode [ 170.977933][T10725] bridge_slave_0: entered promiscuous mode [ 171.011231][T10725] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.018375][T10725] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.026113][T10725] bridge_slave_1: entered allmulticast mode [ 171.033095][T10725] bridge_slave_1: entered promiscuous mode [ 171.070654][T10725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.156568][ T7365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.168448][ T7365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.185805][ T7365] bond0 (unregistering): Released all slaves [ 171.195937][ T7365] bond1 (unregistering): Released all slaves [ 171.209851][ T7365] bond2 (unregistering): Released all slaves [ 171.226006][ T7365] bond3 (unregistering): Released all slaves [ 171.246988][ T7365] bond4 (unregistering): Released all slaves [ 171.261633][ T7365] bond5 (unregistering): Released all slaves [ 171.273928][ T7365] bond6 (unregistering): Released all slaves [ 171.295675][ T7365] bond7 (unregistering): Released all slaves [ 171.305680][ T7365] bond8 (unregistering): Released all slaves [ 171.316736][T10725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.327307][T10765] tipc: Enabling of bearer rejected, failed to enable media [ 171.361849][T10725] team0: Port device team_slave_0 added [ 171.367951][ T7365] tipc: Left network mode [ 171.374500][T10725] team0: Port device team_slave_1 added [ 171.489436][T10725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.496444][T10725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.523357][T10725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.539534][ T3651] Bluetooth: hci0: command 0x1003 tx timeout [ 171.549299][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 171.562206][T10725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.569219][T10725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.595983][T10725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.624327][T10779] loop1: detected capacity change from 0 to 512 [ 171.664349][T10779] EXT4-fs: Ignoring removed oldalloc option [ 171.670445][T10779] EXT4-fs: inline encryption not supported [ 171.676417][T10779] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.687096][T10779] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.697422][ T7365] veth1_macvtap: left promiscuous mode [ 171.703204][ T7365] veth0_macvtap: left promiscuous mode [ 171.710165][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.718341][T10779] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2617: bg 0: block 64: padding at end of block bitmap is not set [ 171.733857][T10779] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2617: Failed to acquire dquot type 0 [ 171.747446][T10779] EXT4-fs (loop1): 1 truncate cleaned up [ 171.755957][T10779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.773139][T10779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.794224][T10779] serio: Serial port ptm1 [ 171.815389][ T7365] team0 (unregistering): Port device team_slave_1 removed [ 171.826104][ T7365] team0 (unregistering): Port device team_slave_0 removed [ 171.833438][T10785] loop3: detected capacity change from 0 to 1024 [ 171.848814][T10785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.898174][ T7503] infiniband syz1: ib_query_port failed (-19) [ 171.905957][T10795] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.948145][T10725] hsr_slave_0: entered promiscuous mode [ 171.955115][T10725] hsr_slave_1: entered promiscuous mode [ 171.993857][T10795] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.051208][T10795] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.133222][T10795] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.326726][T10725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.335944][T10725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.345464][T10725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.354459][T10725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.391439][T10725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.406470][T10725] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.416529][ T7355] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.423681][ T7355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.434636][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.441769][ T7330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.462663][T10725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.473301][T10725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.502242][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.543613][T10725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.611099][T10725] veth0_vlan: entered promiscuous mode [ 172.625650][T10725] veth1_vlan: entered promiscuous mode [ 172.632093][T10816] 9pnet_fd: Insufficient options for proto=fd [ 172.640965][T10816] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 172.647500][T10725] veth0_macvtap: entered promiscuous mode [ 172.658561][T10818] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 172.667728][T10816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.678094][T10725] veth1_macvtap: entered promiscuous mode [ 172.684763][T10725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.694472][T10725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.719866][ T7320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.735069][T10816] bond2 (unregistering): Released all slaves [ 172.746649][T10822] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 172.758129][T10822] loop9: detected capacity change from 0 to 8 [ 172.758972][ T7320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.766894][ C1] blk_print_req_error: 4 callbacks suppressed [ 172.766915][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.790002][ C1] buffer_io_error: 4 callbacks suppressed [ 172.790016][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.806008][ T7320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.808697][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.825232][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.833897][T10822] loop9: unable to read partition table [ 172.838132][ T7320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.840022][T10822] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 172.840022][T10822] ) failed (rc=-5) [ 172.923913][ T7320] Bluetooth: hci0: Frame reassembly failed (-84) [ 172.941234][T10832] netlink: 'syz.4.2625': attribute type 1 has an invalid length. [ 172.955918][T10832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.972160][T10832] bond6 (unregistering): Released all slaves [ 173.376575][T10837] 9p: Unknown access argument : -22 [ 173.583058][T10846] 9pnet_fd: Insufficient options for proto=fd [ 173.590484][T10846] netlink: 'syz.3.2631': attribute type 1 has an invalid length. [ 173.604464][T10846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.618598][T10846] __nla_validate_parse: 7 callbacks suppressed [ 173.618612][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2631'. [ 173.636218][T10846] bond2 (unregistering): Released all slaves [ 173.819195][T10856] 9p: Unknown access argument : -22 [ 173.931766][T10860] loop9: detected capacity change from 0 to 8 [ 173.938120][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.948392][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 173.956334][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.966591][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 173.974460][T10860] loop9: unable to read partition table [ 173.980865][T10860] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 173.980865][T10860] ) failed (rc=-5) [ 174.012332][T10862] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2638'. [ 174.055203][T10866] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 174.066114][T10866] loop9: detected capacity change from 0 to 8 [ 174.073249][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.083621][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 174.091698][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.101964][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 174.109840][T10866] loop9: unable to read partition table [ 174.115646][T10866] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 174.115646][T10866] ) failed (rc=-5) [ 174.163024][T10869] 9p: Unknown access argument : -22 [ 174.256907][T10871] netlink: 'syz.4.2642': attribute type 142 has an invalid length. [ 174.265496][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2642'. [ 174.275624][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2642'. [ 174.284570][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2642'. [ 174.301580][T10871] loop4: detected capacity change from 0 to 1024 [ 174.308479][T10871] EXT4-fs: Ignoring removed orlov option [ 174.316589][T10871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.614944][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.694868][T10890] loop4: detected capacity change from 0 to 512 [ 174.701611][T10890] EXT4-fs: Ignoring removed orlov option [ 174.707663][T10890] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 174.717261][T10890] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.2649: corrupted in-inode xattr: e_value size too large [ 174.733514][T10890] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2649: couldn't read orphan inode 15 (err -117) [ 174.746066][T10890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.814341][T10892] 9pnet_fd: Insufficient options for proto=fd [ 174.953295][T10890] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.960593][T10890] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.969905][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 174.976037][ T3651] Bluetooth: hci0: command 0x1003 tx timeout [ 175.042701][T10895] loop0: detected capacity change from 0 to 512 [ 175.064023][T10895] EXT4-fs (loop0): too many log groups per flexible block group [ 175.072252][T10895] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 175.079145][T10895] EXT4-fs (loop0): mount failed [ 175.102050][T10890] bond2: left promiscuous mode [ 175.107669][T10890] bond3: left promiscuous mode [ 175.113518][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 175.119741][T10890] bond4: left promiscuous mode [ 175.128345][ T7355] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.159482][ T7355] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.168027][T10901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=10901 comm=syz.0.2651 [ 175.180970][ T7355] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.199544][ T7355] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.238509][T10904] 9p: Unknown access argument : -22 [ 175.346255][ T63] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.360768][ T63] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.379171][ T63] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.390956][ T63] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.424358][ T7344] Bluetooth: hci0: Frame reassembly failed (-84) [ 175.451105][T10915] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 175.462883][T10915] loop9: detected capacity change from 0 to 8 [ 175.469416][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.479674][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 175.487884][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.493598][T10918] 9p: Unknown access argument : -22 [ 175.498161][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 175.511371][T10915] loop9: unable to read partition table [ 175.517319][T10915] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 175.517319][T10915] ) failed (rc=-5) [ 175.542554][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.631786][T10930] netlink: 'syz.4.2663': attribute type 142 has an invalid length. [ 175.639895][T10930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2663'. [ 175.649827][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2663'. [ 175.658728][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2663'. [ 175.668565][T10932] netlink: 'syz.1.2665': attribute type 142 has an invalid length. [ 175.670023][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 175.670041][ T29] audit: type=1326 audit(1760386328.119:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9d1aeec9 code=0x7ffc0000 [ 175.676669][T10932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2665'. [ 175.689313][ T29] audit: type=1326 audit(1760386328.139:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f2d9d1aeec9 code=0x7ffc0000 [ 175.739817][ T29] audit: type=1326 audit(1760386328.139:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9d1aeec9 code=0x7ffc0000 [ 175.741185][T10930] loop4: detected capacity change from 0 to 1024 [ 175.763359][ T29] audit: type=1326 audit(1760386328.139:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9d1aeec9 code=0x7ffc0000 [ 175.763401][ T29] audit: type=1326 audit(1760386328.139:8236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9d1aeec9 code=0x7ffc0000 [ 175.772605][T10930] EXT4-fs: Ignoring removed orlov option [ 175.793487][ T29] audit: type=1326 audit(1760386328.139:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9d1aeec9 code=0x7ffc0000 [ 175.844127][T10936] 9p: Unknown access argument : -22 [ 175.846256][ T29] audit: type=1326 audit(1760386328.139:8238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9d1aeec9 code=0x7ffc0000 [ 175.853146][T10932] loop1: detected capacity change from 0 to 1024 [ 175.875426][ T29] audit: type=1326 audit(1760386328.139:8239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2d9d1aeec9 code=0x7ffc0000 [ 175.875509][ T29] audit: type=1326 audit(1760386328.139:8240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d9d1aef03 code=0x7ffc0000 [ 175.875547][ T29] audit: type=1326 audit(1760386328.139:8241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.4.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2d9d1ad97f code=0x7ffc0000 [ 175.879833][T10930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.883805][T10932] EXT4-fs: Ignoring removed orlov option [ 175.976474][T10932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.012337][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.073376][T10945] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 176.115155][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.174032][T10956] 9p: Unknown access argument : -22 [ 176.208024][T10961] loop0: detected capacity change from 0 to 512 [ 176.248616][T10963] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.311966][T10963] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.329196][T10967] 9p: Unknown access argument : -22 [ 176.372069][T10963] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.395975][T10970] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 176.457255][T10963] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.474899][T10975] loop0: detected capacity change from 0 to 512 [ 176.490563][T10975] EXT4-fs (loop0): too many log groups per flexible block group [ 176.498337][T10975] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 176.505565][T10975] EXT4-fs (loop0): mount failed [ 176.597928][T10989] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 176.610443][T10989] loop9: detected capacity change from 0 to 8 [ 176.617002][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.627253][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.635451][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.645673][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.653630][T10989] loop9: unable to read partition table [ 176.659691][T10989] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 176.659691][T10989] ) failed (rc=-5) [ 176.783472][T11000] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 176.811396][T11002] 9p: Unknown access argument : -22 [ 176.960833][T11005] 9p: Unknown access argument : -22 [ 176.983233][T11008] loop2: detected capacity change from 0 to 512 [ 177.018072][T11008] EXT4-fs (loop2): too many log groups per flexible block group [ 177.025903][T11008] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 177.032967][T11008] EXT4-fs (loop2): mount failed [ 177.100259][T11018] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 177.202762][T11034] loop2: detected capacity change from 0 to 512 [ 177.216906][T11034] EXT4-fs: Ignoring removed orlov option [ 177.226726][T11034] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 177.237838][T11034] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.2704: corrupted in-inode xattr: e_value size too large [ 177.260139][T11034] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2704: couldn't read orphan inode 15 (err -117) [ 177.276708][T11034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.294541][T11040] netlink: 'syz.4.2707': attribute type 21 has an invalid length. [ 177.323026][T11042] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 177.351783][T11044] 9pnet_fd: Insufficient options for proto=fd [ 177.436373][T11045] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.443642][T11045] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.452034][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 177.482578][T11047] 9p: Unknown access argument : -22 [ 177.507368][T11045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.518823][T11045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.576389][ T63] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.596352][ T63] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.611938][ T63] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.622098][ T63] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.651910][T11053] loop3: detected capacity change from 0 to 512 [ 177.661585][T11053] EXT4-fs (loop3): too many log groups per flexible block group [ 177.669706][T11053] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 177.676560][T11053] EXT4-fs (loop3): mount failed [ 177.685951][T11061] loop4: detected capacity change from 0 to 1024 [ 177.693280][T11061] EXT4-fs: Ignoring removed oldalloc option [ 177.699395][T11061] EXT4-fs: Ignoring removed bh option [ 177.711949][T11061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.814200][T11067] netlink: 'syz.3.2715': attribute type 1 has an invalid length. [ 177.832236][T11067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.846844][T11067] bond2 (unregistering): Released all slaves [ 178.054336][T10725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.294117][T11086] netlink: 'syz.2.2719': attribute type 142 has an invalid length. [ 178.326029][T11086] loop2: detected capacity change from 0 to 1024 [ 178.333721][T11086] EXT4-fs: Ignoring removed orlov option [ 178.343096][T11086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.370427][T10725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.507230][T11095] bridge0: port 3(batadv1) entered blocking state [ 178.513889][T11095] bridge0: port 3(batadv1) entered disabled state [ 178.520914][T11095] batadv1: entered allmulticast mode [ 178.526913][T11095] batadv1: entered promiscuous mode [ 178.560272][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.583840][T11101] 9p: Unknown access argument : -22 [ 178.637415][T11108] loop2: detected capacity change from 0 to 4096 [ 178.646142][T11108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.660679][T11108] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.2728: corrupted inode contents [ 178.672761][T11108] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm syz.2.2728: mark_inode_dirty error [ 178.685199][T11108] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.2728: corrupted inode contents [ 178.697461][T11108] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.2728: mark_inode_dirty error [ 178.709068][T11108] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.2728: corrupted inode contents [ 178.722581][T11108] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.2728: mark_inode_dirty error [ 178.740775][T11108] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.2728: corrupted inode contents [ 178.754839][T11108] EXT4-fs error (device loop2): ext4_truncate:4637: inode #15: comm syz.2.2728: mark_inode_dirty error [ 178.777929][T11108] EXT4-fs error (device loop2) in ext4_setattr:6042: Corrupt filesystem [ 178.789597][T11117] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.2728: corrupted inode contents [ 178.824920][T11130] bond3: option all_slaves_active: invalid value (16) [ 178.837638][T11130] bond3 (unregistering): Released all slaves [ 178.837675][T10725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.878973][T11139] __nla_validate_parse: 10 callbacks suppressed [ 178.878995][T11139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2737'. [ 178.894271][T11141] loop2: detected capacity change from 0 to 1024 [ 178.902442][T11141] EXT4-fs: Ignoring removed oldalloc option [ 178.908453][T11141] EXT4-fs: Ignoring removed bh option [ 178.921947][T11141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.939456][T11145] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 178.951469][T11145] loop9: detected capacity change from 0 to 8 [ 178.957882][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.968107][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 178.977280][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.987557][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 178.995701][T11145] loop9: unable to read partition table [ 179.001650][T11145] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 179.001650][T11145] ) failed (rc=-5) [ 179.014719][ T63] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 179.024047][ T63] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 179.033656][T11148] netlink: 'syz.4.2736': attribute type 1 has an invalid length. [ 179.070654][T11148] 8021q: adding VLAN 0 to HW filter on device bond6 [ 179.108454][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2736'. [ 179.121386][T11148] bond6 (unregistering): Released all slaves [ 179.211051][T11166] 9p: Unknown access argument : -22 [ 179.416888][T11174] syzkaller0: entered allmulticast mode [ 179.423198][T11174] syzkaller0: entered promiscuous mode [ 179.431268][T11174] syzkaller0 (unregistering): left allmulticast mode [ 179.438057][T11174] syzkaller0 (unregistering): left promiscuous mode [ 179.568358][T11178] loop3: detected capacity change from 0 to 512 [ 179.580711][T11178] EXT4-fs (loop3): too many log groups per flexible block group [ 179.588789][T11178] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 179.596450][T11178] EXT4-fs (loop3): mount failed [ 179.605430][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2746'. [ 179.681930][T11187] FAULT_INJECTION: forcing a failure. [ 179.681930][T11187] name failslab, interval 1, probability 0, space 0, times 0 [ 179.694751][T11187] CPU: 1 UID: 0 PID: 11187 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 179.694785][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.694806][T11187] Call Trace: [ 179.694814][T11187] [ 179.694825][T11187] __dump_stack+0x1d/0x30 [ 179.694861][T11187] dump_stack_lvl+0xe8/0x140 [ 179.694984][T11187] dump_stack+0x15/0x1b [ 179.695002][T11187] should_fail_ex+0x265/0x280 [ 179.695107][T11187] ? do_kimage_alloc_init+0x2f/0x160 [ 179.695199][T11187] should_failslab+0x8c/0xb0 [ 179.695300][T11187] __kmalloc_cache_noprof+0x4c/0x4a0 [ 179.695343][T11187] do_kimage_alloc_init+0x2f/0x160 [ 179.695383][T11187] do_kexec_load+0x8b/0x500 [ 179.695413][T11187] __se_sys_kexec_load+0x134/0x160 [ 179.695515][T11187] __x64_sys_kexec_load+0x55/0x70 [ 179.695598][T11187] x64_sys_call+0x289c/0x3000 [ 179.695619][T11187] do_syscall_64+0xd2/0x200 [ 179.695657][T11187] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 179.695695][T11187] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 179.695769][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.695799][T11187] RIP: 0033:0x7fde1ec1eec9 [ 179.695825][T11187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.695849][T11187] RSP: 002b:00007fde1d687038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 179.695879][T11187] RAX: ffffffffffffffda RBX: 00007fde1ee75fa0 RCX: 00007fde1ec1eec9 [ 179.695941][T11187] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000003e00 [ 179.695955][T11187] RBP: 00007fde1d687090 R08: 0000000000000000 R09: 0000000000000000 [ 179.695971][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.696056][T11187] R13: 00007fde1ee76038 R14: 00007fde1ee75fa0 R15: 00007fff1498baa8 [ 179.696081][T11187] [ 179.915170][T11189] loop0: detected capacity change from 0 to 1024 [ 179.949230][T10725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.960137][T11189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.973322][T11189] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.011122][T11202] loop9: detected capacity change from 0 to 8 [ 180.022902][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.033163][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.041679][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.051922][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.059865][T11202] loop9: unable to read partition table [ 180.066911][T11202] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 180.066911][T11202] ) failed (rc=-5) [ 180.160385][T11212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11212 comm=syz.0.2754 [ 180.185372][T11218] syzkaller0: entered allmulticast mode [ 180.191951][T11218] syzkaller0: entered promiscuous mode [ 180.199422][T11218] syzkaller0 (unregistering): left allmulticast mode [ 180.206219][T11218] syzkaller0 (unregistering): left promiscuous mode [ 180.301683][T11228] loop0: detected capacity change from 0 to 164 [ 180.321874][T11228] bio_check_eod: 17 callbacks suppressed [ 180.321889][T11228] syz.0.2760: attempt to access beyond end of device [ 180.321889][T11228] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 180.333075][T11230] loop9: detected capacity change from 0 to 8 [ 180.358645][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.369008][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.371075][T11228] syz.0.2760: attempt to access beyond end of device [ 180.371075][T11228] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 180.379318][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.400444][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.408849][T11230] loop9: unable to read partition table [ 180.414867][T11230] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 180.414867][T11230] ) failed (rc=-5) [ 180.513836][T11240] 9p: Unknown access argument : -22 [ 180.531562][ T7330] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.629608][T11250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11250 comm=syz.0.2770 [ 180.653095][T11252] syzkaller0: entered allmulticast mode [ 180.669152][T11252] syzkaller0: entered promiscuous mode [ 180.676488][T11252] syzkaller0 (unregistering): left allmulticast mode [ 180.683348][T11252] syzkaller0 (unregistering): left promiscuous mode [ 180.746507][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 180.746523][ T29] audit: type=1326 audit(1760386333.199:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 180.776515][ T29] audit: type=1326 audit(1760386333.199:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 180.800290][ T29] audit: type=1326 audit(1760386333.199:8526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 180.823923][ T29] audit: type=1400 audit(1760386333.209:8527): avc: denied { mounton } for pid=11257 comm="syz.0.2773" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 180.851458][ T29] audit: type=1326 audit(1760386333.209:8528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 180.875203][ T29] audit: type=1326 audit(1760386333.209:8529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 180.898783][ T29] audit: type=1326 audit(1760386333.209:8530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 180.922457][ T29] audit: type=1326 audit(1760386333.209:8531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 180.946031][ T29] audit: type=1326 audit(1760386333.209:8532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 180.969643][ T29] audit: type=1326 audit(1760386333.209:8533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a114eec9 code=0x7ffc0000 [ 181.021032][T11260] loop9: detected capacity change from 0 to 8 [ 181.027641][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.037896][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.048058][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.058321][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.058664][T11262] loop3: detected capacity change from 0 to 512 [ 181.066758][T11260] loop9: unable to read partition table [ 181.078776][T11260] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 181.078776][T11260] ) failed (rc=-5) [ 181.094217][T11262] EXT4-fs (loop3): too many log groups per flexible block group [ 181.102757][T11262] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 181.109968][T11262] EXT4-fs (loop3): mount failed [ 181.137106][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2775'. [ 181.170170][T11273] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 181.180475][T11273] loop9: detected capacity change from 0 to 8 [ 181.186864][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.197141][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.205231][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.208314][ T7330] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.215497][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.215538][T11273] loop9: unable to read partition table [ 181.215640][T11273] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 181.215640][T11273] ) failed (rc=-5) [ 181.234249][ T7330] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.274354][ T7330] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.282938][ T7330] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.302456][T11282] 9p: Unknown access argument : -22 [ 181.333420][T11287] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.382572][T11287] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.407405][T11295] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 181.431265][T11287] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.442795][T11295] SELinux: failed to load policy [ 181.491265][T11287] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.511687][T11304] loop3: detected capacity change from 0 to 512 [ 181.522252][T11308] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 181.534786][T11304] EXT4-fs (loop3): too many log groups per flexible block group [ 181.535115][T11308] loop9: detected capacity change from 0 to 8 [ 181.543054][T11304] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 181.555652][T11304] EXT4-fs (loop3): mount failed [ 181.562326][T11308] loop9: unable to read partition table [ 181.572545][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2789'. [ 181.581638][T11308] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 181.581638][T11308] ) failed (rc=-5) [ 181.597338][ T7344] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.619046][ T7344] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.639190][T11313] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.664160][ T7344] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.681833][ T7344] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.701221][T11313] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.751079][T11313] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.802373][T11313] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.836722][T11332] 9p: Unknown access argument : -22 [ 181.852329][T11330] lo speed is unknown, defaulting to 1000 [ 181.902331][T11336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11336 comm=syz.3.2799 [ 181.951661][T11340] 9p: Unknown access argument : -22 [ 182.050528][T11344] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2802'. [ 182.068964][T11342] loop2: detected capacity change from 0 to 512 [ 182.084412][T11346] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 182.087196][T11342] EXT4-fs: Ignoring removed bh option [ 182.105738][T11346] loop9: detected capacity change from 0 to 8 [ 182.112059][T11342] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.118857][T11346] loop9: unable to read partition table [ 182.124990][T11346] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 182.124990][T11346] ) failed (rc=-5) [ 182.149080][T11342] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 182.190455][T11342] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 182.198540][T11342] EXT4-fs (loop2): orphan cleanup on readonly fs [ 182.205517][T11342] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2801: Failed to acquire dquot type 1 [ 182.217322][T11342] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2801: Invalid block bitmap block 0 in block_group 0 [ 182.232365][T11342] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2801: Invalid block bitmap block 0 in block_group 0 [ 182.246350][T11342] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2801: Invalid block bitmap block 0 in block_group 0 [ 182.261604][T11342] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2801: Failed to acquire dquot type 1 [ 182.273850][T11342] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2801: Failed to acquire dquot type 1 [ 182.285796][T11342] EXT4-fs (loop2): 1 orphan inode deleted [ 182.300967][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2801'. [ 182.336281][T11353] loop3: detected capacity change from 0 to 1024 [ 182.343501][T11353] EXT4-fs: Ignoring removed oldalloc option [ 182.349510][T11353] EXT4-fs: Ignoring removed bh option [ 182.366592][ T7330] Bluetooth: hci1: Frame reassembly failed (-84) [ 182.569335][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.643754][T11367] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2810'. [ 182.711129][T11374] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.967134][T11374] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.066881][T11382] lo speed is unknown, defaulting to 1000 [ 183.103374][T11374] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.164128][T11374] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.413898][T11390] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.463838][T11390] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.557519][T11390] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.613153][T11390] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.656395][T11392] loop9: detected capacity change from 0 to 8 [ 183.663105][T11392] loop9: unable to read partition table [ 183.668832][T11392] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 183.668832][T11392] ) failed (rc=-5) [ 183.701016][ T7330] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.713759][ T7330] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.724876][ T7330] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.736788][ T7330] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.779055][ T7355] Bluetooth: hci0: Frame reassembly failed (-84) [ 183.795063][T11402] loop3: detected capacity change from 0 to 1024 [ 183.865012][T11410] 9pnet_fd: Insufficient options for proto=fd [ 183.887282][T11412] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.037429][T11412] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.091028][T11412] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.140771][T11412] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.409424][ T3651] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 184.410164][T10501] Bluetooth: hci1: command 0x1003 tx timeout [ 184.438154][T11416] 9p: Unknown access argument : -22 [ 184.655395][T11418] loop2: detected capacity change from 0 to 32768 [ 184.710429][T11418] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 184.715707][T11418] loop2: p1 start 460800 is beyond EOD, truncated [ 184.722220][T11418] loop2: p2 size 83886080 extends beyond EOD, truncated [ 184.732063][T11418] loop2: p5 start 460800 is beyond EOD, truncated [ 184.738555][T11418] loop2: p6 size 83886080 extends beyond EOD, truncated [ 185.136501][T11424] Set syz1 is full, maxelem 65536 reached [ 185.849323][ T3651] Bluetooth: hci0: command 0x1003 tx timeout [ 185.855409][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 185.883047][ T7320] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.883461][T11431] loop9: detected capacity change from 0 to 8 [ 185.895879][ C1] blk_print_req_error: 6 callbacks suppressed [ 185.895900][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.912268][ C1] buffer_io_error: 6 callbacks suppressed [ 185.912288][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.926236][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.936481][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.944384][T11431] loop9: unable to read partition table [ 185.950882][T11431] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 185.950882][T11431] ) failed (rc=-5) [ 185.986488][ T7330] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.998433][ T7330] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.013686][ T7330] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.022008][ T7330] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.062105][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'. [ 186.071041][T11440] Unsupported xt match [ 186.071053][T11440] unable to load match [ 186.093862][T11442] FAULT_INJECTION: forcing a failure. [ 186.093862][T11442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.107546][T11442] CPU: 1 UID: 0 PID: 11442 Comm: syz.4.2836 Not tainted syzkaller #0 PREEMPT(voluntary) [ 186.107651][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.107667][T11442] Call Trace: [ 186.107673][T11442] [ 186.107680][T11442] __dump_stack+0x1d/0x30 [ 186.107698][T11442] dump_stack_lvl+0xe8/0x140 [ 186.107726][T11442] dump_stack+0x15/0x1b [ 186.107741][T11442] should_fail_ex+0x265/0x280 [ 186.107772][T11442] should_fail+0xb/0x20 [ 186.107859][T11442] should_fail_usercopy+0x1a/0x20 [ 186.107879][T11442] _copy_from_user+0x1c/0xb0 [ 186.107901][T11442] proc_control_compat+0x44/0xe0 [ 186.107928][T11442] usbdev_ioctl+0xed5/0x1700 [ 186.107950][T11442] ? __pfx_usbdev_ioctl+0x10/0x10 [ 186.108044][T11442] __se_sys_ioctl+0xce/0x140 [ 186.108062][T11442] __x64_sys_ioctl+0x43/0x50 [ 186.108156][T11442] x64_sys_call+0x1816/0x3000 [ 186.108175][T11442] do_syscall_64+0xd2/0x200 [ 186.108200][T11442] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 186.108225][T11442] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 186.108246][T11442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.108265][T11442] RIP: 0033:0x7f2d9d1aeec9 [ 186.108352][T11442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.108369][T11442] RSP: 002b:00007f2d9bc0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.108386][T11442] RAX: ffffffffffffffda RBX: 00007f2d9d405fa0 RCX: 00007f2d9d1aeec9 [ 186.108477][T11442] RDX: 0000200000000040 RSI: 00000000c0105500 RDI: 0000000000000005 [ 186.108488][T11442] RBP: 00007f2d9bc0f090 R08: 0000000000000000 R09: 0000000000000000 [ 186.108499][T11442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.108579][T11442] R13: 00007f2d9d406038 R14: 00007f2d9d405fa0 R15: 00007fffeb499908 [ 186.108597][T11442] [ 186.387397][T11453] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 186.398334][T11453] loop9: detected capacity change from 0 to 8 [ 186.404860][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.415099][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 186.423656][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.433906][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 186.441786][T11453] loop9: unable to read partition table [ 186.445022][T11456] syzkaller0: entered allmulticast mode [ 186.447469][T11453] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 186.447469][T11453] ) failed (rc=-5) [ 186.453658][T11456] syzkaller0: entered promiscuous mode [ 186.475747][T11456] syzkaller0 (unregistering): left allmulticast mode [ 186.482727][T11456] syzkaller0 (unregistering): left promiscuous mode [ 186.542982][T11461] loop1: detected capacity change from 0 to 1024 [ 186.549860][T11461] EXT4-fs: Ignoring removed oldalloc option [ 186.555811][T11461] EXT4-fs: Ignoring removed bh option [ 186.607172][T11465] tmpfs: Bad value for 'mpol' [ 186.662551][ T63] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.680489][ T63] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.696394][ T63] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.710878][ T63] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.861401][T11477] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.902653][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 186.902671][ T29] audit: type=1400 audit(1760386339.359:8591): avc: denied { getattr } for pid=11480 comm="syz.4.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 186.906126][T11481] loop4: detected capacity change from 0 to 512 [ 186.936280][T11481] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.947815][T11477] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.969404][T11481] EXT4-fs (loop4): 1 truncate cleaned up [ 187.021570][T11477] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.034596][T11483] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2847'. [ 187.071855][T11477] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.200108][T11461] ================================================================== [ 187.208245][T11461] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 187.216161][T11461] [ 187.218481][T11461] write to 0xffff88811a8160f4 of 4 bytes by task 11469 on cpu 1: [ 187.226195][T11461] xas_set_mark+0x12b/0x140 [ 187.230713][T11461] __folio_start_writeback+0x155/0x390 [ 187.236214][T11461] ext4_bio_write_folio+0x5ad/0x9f0 [ 187.241431][T11461] mpage_process_page_bufs+0x4a1/0x620 [ 187.246905][T11461] mpage_prepare_extent_to_map+0x786/0xc00 [ 187.252753][T11461] ext4_do_writepages+0x708/0x2750 [ 187.257891][T11461] ext4_writepages+0x176/0x300 [ 187.262662][T11461] do_writepages+0x1c6/0x310 [ 187.267262][T11461] file_write_and_wait_range+0x156/0x2c0 [ 187.272905][T11461] generic_buffers_fsync_noflush+0x45/0x120 [ 187.278808][T11461] ext4_sync_file+0x1ab/0x690 [ 187.283489][T11461] vfs_fsync_range+0x10d/0x130 [ 187.288274][T11461] ext4_buffered_write_iter+0x34f/0x3c0 [ 187.293933][T11461] ext4_file_write_iter+0x387/0xf60 [ 187.299168][T11461] iter_file_splice_write+0x666/0xa60 [ 187.304542][T11461] direct_splice_actor+0x156/0x2a0 [ 187.309661][T11461] splice_direct_to_actor+0x312/0x680 [ 187.315047][T11461] do_splice_direct+0xda/0x150 [ 187.319822][T11461] do_sendfile+0x380/0x650 [ 187.324276][T11461] __x64_sys_sendfile64+0x105/0x150 [ 187.329485][T11461] x64_sys_call+0x2bb4/0x3000 [ 187.334187][T11461] do_syscall_64+0xd2/0x200 [ 187.338699][T11461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.344596][T11461] [ 187.346925][T11461] read to 0xffff88811a8160f4 of 4 bytes by task 11461 on cpu 0: [ 187.354562][T11461] __writeback_single_inode+0x1f9/0x7c0 [ 187.360165][T11461] writeback_single_inode+0x16d/0x3f0 [ 187.365561][T11461] sync_inode_metadata+0x5b/0x90 [ 187.370701][T11461] generic_buffers_fsync_noflush+0xd9/0x120 [ 187.376622][T11461] ext4_sync_file+0x1ab/0x690 [ 187.381303][T11461] vfs_fsync_range+0x10d/0x130 [ 187.386091][T11461] ext4_buffered_write_iter+0x34f/0x3c0 [ 187.391642][T11461] ext4_file_write_iter+0x387/0xf60 [ 187.396870][T11461] iter_file_splice_write+0x666/0xa60 [ 187.402251][T11461] direct_splice_actor+0x156/0x2a0 [ 187.407376][T11461] splice_direct_to_actor+0x312/0x680 [ 187.412756][T11461] do_splice_direct+0xda/0x150 [ 187.417523][T11461] do_sendfile+0x380/0x650 [ 187.421951][T11461] __x64_sys_sendfile64+0x105/0x150 [ 187.427171][T11461] x64_sys_call+0x2bb4/0x3000 [ 187.431854][T11461] do_syscall_64+0xd2/0x200 [ 187.436375][T11461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.442276][T11461] [ 187.444613][T11461] value changed: 0x0a000021 -> 0x00000021 [ 187.450329][T11461] [ 187.452653][T11461] Reported by Kernel Concurrency Sanitizer on: [ 187.458819][T11461] CPU: 0 UID: 0 PID: 11461 Comm: syz.1.2842 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.468806][T11461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.478953][T11461] ================================================================== [ 187.492296][T11488] FAULT_INJECTION: forcing a failure. [ 187.492296][T11488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.505581][T11488] CPU: 1 UID: 0 PID: 11488 Comm: syz.4.2849 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.505644][T11488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.505657][T11488] Call Trace: [ 187.505665][T11488] [ 187.505675][T11488] __dump_stack+0x1d/0x30 [ 187.505704][T11488] dump_stack_lvl+0xe8/0x140 [ 187.505729][T11488] dump_stack+0x15/0x1b [ 187.505752][T11488] should_fail_ex+0x265/0x280 [ 187.505874][T11488] should_fail+0xb/0x20 [ 187.505924][T11488] should_fail_usercopy+0x1a/0x20 [ 187.505953][T11488] _copy_from_iter+0xd2/0xe80 [ 187.505983][T11488] ? should_fail_ex+0xdb/0x280 [ 187.506029][T11488] ? should_failslab+0x8c/0xb0 [ 187.506069][T11488] ? __kmalloc_noprof+0x2a2/0x570 [ 187.506096][T11488] ? sctp_make_abort_user+0x17b/0x3a0 [ 187.506187][T11488] sctp_make_abort_user+0x1c6/0x3a0 [ 187.506250][T11488] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 187.506290][T11488] sctp_sendmsg+0x10bb/0x18d0 [ 187.506325][T11488] ? __pfx_sctp_sendmsg+0x10/0x10 [ 187.506361][T11488] inet_sendmsg+0xc5/0xd0 [ 187.506437][T11488] __sock_sendmsg+0x102/0x180 [ 187.506464][T11488] ____sys_sendmsg+0x31e/0x4e0 [ 187.506573][T11488] ___sys_sendmsg+0x17b/0x1d0 [ 187.506658][T11488] __x64_sys_sendmsg+0xd4/0x160 [ 187.506705][T11488] x64_sys_call+0x191e/0x3000 [ 187.506732][T11488] do_syscall_64+0xd2/0x200 [ 187.506765][T11488] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 187.506820][T11488] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 187.506909][T11488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.507016][T11488] RIP: 0033:0x7f2d9d1aeec9 [ 187.507037][T11488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.507061][T11488] RSP: 002b:00007f2d9bbee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.507082][T11488] RAX: ffffffffffffffda RBX: 00007f2d9d406090 RCX: 00007f2d9d1aeec9 [ 187.507100][T11488] RDX: 0000000000000006 RSI: 0000200000000400 RDI: 0000000000000006 [ 187.507137][T11488] RBP: 00007f2d9bbee090 R08: 0000000000000000 R09: 0000000000000000 [ 187.507154][T11488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.507170][T11488] R13: 00007f2d9d406128 R14: 00007f2d9d406090 R15: 00007fffeb499908 [ 187.507220][T11488] [ 187.929348][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.605339][ T7330] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.616638][ T7330] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.628601][ T63] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.640239][ T7330] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.504937][ T7355] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.517192][ T63] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.528789][ T7355] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.539313][ T7320] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0