last executing test programs: 2.883665313s ago: executing program 4 (id=334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/1, 0x1}, {&(0x7f0000000500)=""/136, 0x88}, {&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000680)=""/53, 0x35}], 0x5, &(0x7f0000000740)=""/196, 0xc4}, 0x98f54f273f137978) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001000925e850000000100000095e5dadb077417115c870c1e3f51fbcbcf7a0036abde4755e16f209927"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) getpgid(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) 2.494514268s ago: executing program 2 (id=337): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) dup3(r2, r0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, 0x0, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r6], 0x4}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 2.442337609s ago: executing program 2 (id=339): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="cc00000000000000f7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70000000000000085b0690a5935000095", @ANYRESDEC=r0], 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = dup(r0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000008000000089e"], 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10400, &(0x7f00000002c0)={[{@norecovery}, {@grpquota}, {@debug}, {@grpquota}]}, 0xee, 0x4b6, &(0x7f0000000980)="$eJzs3DtsHEUfAPD/rt95fPH3feGRkIAhPCIgduw8SEFDBBIFSEhQBFEZx4lCnBjFRiKRBYYilCgSPaJEokeiggYBBUKihR5FQshNAtWi3ds1Z/vOz4vtcL+fdOeZ3T3PzM7O7Xj+dw6gbQ3kT0nEroj4JSL21LILDxio/bg9NzP259zMWBJZ9uofSXHcrbmZserQ6nU7a5ksi+jJkz0Nyr3+RsToxMT4lTI/NH3p7aGpq9eOXLg0en78/PjlkVOnjh872H1y5ESxP1tn+9LyZ96uW/vfmzyw78XXb7w8dubGm99/kdd3V7m/vh3rki2t4UDt7C72UP702IYK21Z+zJ92121IOpsfPLgJFWL1OiIi766uIpdER/TN79sTL3y4hVUD7rAsy7JG9+eou29nwL9UYnxDm6ru9fnfv9Vjc2Ye28Pvz0XEkTIzNzN2e779nfNrB12L/r5tpYGIODP716f5I1qxDgEAsIKv8/nP043mf2ncW3fcf8oYSn9E/Dci/hcR/4+IvRFxT0Rx7H0Rl+5fY/mLIyRL5z/pzXU1bJXy+d+zRWwrn+XVz//K2V9f9HeUud1F+7uScxcmxo+W5+RwdPXk+eFlyvjm+Z8/rtK9i/bVz//yR15+NRcs63Gzc9EC3dnR6dEikWXZ+xtt/wcR+ztrsb3bC+a/SVRhnCQi9kXE/nWWceHJzw8027dy+5exTJxptbLPIp6oxTZnR3bVzkPZSfNdldTHJ/siYj4+OfzMyZETQ70xMX50qLoqlvrhp+uvNCt/Q+1vgbz/d0Tj/i/1J70RU1evXSzitVNrL+P6rx/VjekF0eW8/emXEWu+/ruT14p0d7nt3dHp6SvDEd3JS0VQa8H2kX9eW+Wr4/P2Hz7UqP1p8R5X1fiBiMgv4oMR8WAZxM377uGIeCQiDi3T/u9OP/pWs33N+7/ZqnxrVUNo2f6P+v5fe6Lj4rdfNSt/oIxBRnkeGvf/8SJ1uNwy//63jNVWcD3nDAAAAO42afEZ+CQdnE+n6eBg7TP8e2NHOjE5Nf3Uucl3Lp+tfVa+P7rSaqVrT9166HC5NlzlRxblj5Xrxp909BX5wbHJibNb3XhoczubjP/cbx1bXTvgjmtBHA24Sxn/0L6Mf2hfxj+0L+Mf2lej8b/RLxYAdwf3f2hfxfh/fHarqwFsgdXc/5PZdBNqAmw2839oS02/G59u6Cv/TRNJq39hw0T1vxM2o6yVE9X/otj00vvW/KrT5SXRu/Kpi7TFdc7nl9uiv7ZZonNJX0RnS4voabhrC9+UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWujvAAAA//+qNMrw") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0xc0) pwritev2(r7, &(0x7f0000000240)=[{0x0}], 0x1, 0x7802, 0x0, 0x3) 2.096463163s ago: executing program 4 (id=342): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000001900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x154, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x55}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x27a97a63}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fbc8235}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cf1e432}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3596e6c5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2da74902}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7057c84f}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x70, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x26c8fd8f}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2466690a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa2405aa}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f65c481}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2a8, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6420632e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x14c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x53dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xca}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdaf8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x17a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, @NFTA_SET_USERDATA={0x2b, 0xd, 0x1, 0x0, "ee256fed0ee6184c8116ec0567b12856381f1c0cf902a1916a97c6c1996fd1a113a691c7a9d36a"}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2d}]}, @NFT_MSG_NEWSETELEM={0x126c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1240, 0x3, 0x0, 0x1, [{0x123c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x95, 0x1, "9ee658f86c862c52c724910cdcff2692211bc84003452328faf8a806433d07ba1796aeadc2697899dc5cf37f6fbf5f45c24017b11f53ffe3cea3e03db125bcc88c1a5941d4a4f7a5d289773a7b8702f0f16f5f1d7a26df29b47b1cd6958ec95a7c3b2122b040ebc142984d9ce3e07f9aa113377ea732e87edb51e987ae83d5200981e2bd8b907fda214a4d1a19e5d9c513"}]}, @NFTA_SET_ELEM_KEY={0x1140, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "500a1b0a2dbcc9a70a9eab4693231afc2ee7b49eeafe0eec82961ce7a81f731264852dc5a7cb2f65272a4130fe2411fa91b7ef9d5441a468f2051144fb3a004814eecb2edd3d1dd0deaa23e60590f7495ea83894a4a2ff170cffc87f94afbbdc3a7620afef831396856bd28b33113fb4cad4b940eb90f66d541e832c3f8dec14e5cae0e551738e12b8706377222eec804483b3345f9512ac24df281b3fa644571c4d8bb3b9c75ec1058a4012f28f5bbe2a3a0d914526956ecbe0f1648a6b89c8ed952e4b3ca871a7929697f04872b669f2fb6514f61648a3715fffd0bc1fe84010879eb752f6cba6077de4d9a5"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1001, 0x1, "569c2119c2315933f5e365af2f14ffcf791e35b1bfa85b5337308e39e71ce5ce27ee78337cc13b51cae5ffbc6e62d59e117e8097d9b514675c28e9993d99c1f0e191e7215e99f86b61a1461f6f46adcf49a91f3772e5468bab2f8973b7baba72517caf2f4857d34fbd7726508362110880c6890cd268c9e8c5059d1a6681000266dfeed27df57a8afac407eec6dbe40aa05fdf64ec900faa73510da861ed465cf3b464419ef1c0631660523deb3951c9216689b2adc2c093058270666ab05a0eb0f68b40ee95d08d8e40f68bafbd230a9114c2b97fc03c4dbbf2502cde4785d2c7b6687149ca89d521c4175743445e052aca90f7652daf9f14d247ad2d9b4ee258d6f1f595cdc1ce35b7f99b563da24fa477bed15aadf29ccb4280498fafaea1e3b19ddce3a82636a521b73cbdbc3dee5009ab04c4fc9b5c9b18ff18a14728e96dd0d4f6ffa5cd4848b4af23868da3dcfb0e4db1c96938a3b1f4c4601b9e2e626d33a72d24f47b6373544ffd851b40e738f848df956f821580bc9b384a141a01a6d4082d74c46eda2cc0409e637a70cc31441c0ca35ca09d70ff55fe3725841d9f4401de7cf990d82a0801c8859c64660be33877d8235c92ee4a7191f1b60e0a0a0cf67f2002e144c045105d7b4f7a3bf4016a1952a6053405b16fe30bf441d63ff1a9d466a4a06569fb989483fb941085817dc7324f55c9e8145472156d7f6c9670f12666300ea0039f3dd1751a317d2d957e639d286359bf7e2aaf04483808649b8d0674cb0df26d88616889a0364d5835a76882ea250a104b3f40d336ccaf3c73cae10d9287f669cdbe997792319fbde83fc38f1960686a4e7b236c5af6fa791d280fe3239c2d8717a4f4751a6da781a2e466d57f48b393028e36196aea67d6b02cc4a0d0c04dfb7f78099a20b22b7f266be1e3882cca0316597d37256b515d18657ba69bc7013fb61ec445e5f4cdc6be7b74c4c2853c07b37cb883400eb5e3bb1380cfac731a0a159af4f303be8ed19318c8e8e9eaa64a5e5f77de7b52e11ae3d4e70fcc30fff80c9f36bef0ffe1351e569665754e14b777a3f982c95788c4e9c31cb9f2b26c293a5140ac6637a1d220229fe826c413237406a781cf29e274b8d56cf86eb5f299b509da6d2853ca1d26540dc7b119c8e4bdb440b00e72fe03c0a7f1330cc047cf28a28285313bf67acc6b2f0ebd319cc9b17aeb35c6758a75aeddd49050e7962064ead2600faa9a7238ee82bdd5c0686f076033a424bb51581e7ec70efbb6edd44b3f4bf357593a7181b5f1c13c2c5c65fb981a51c20920fc541d6a87b0d0747eb239e00adb026760aaca2fe5df3f79f604173962734861006dec9f693f26f89057b102d4c42847ae2b9aa8f052c1f3d7a54de5090e046463d9c18d8d56c416678afcc3f14f48832537f07743b06aa0fe4e0bd75b430d9e2537fdd28ff54d781cb83f2995e730626cfc619b3f1585a1b69bcb43f6ba7141aec8a042a1c96b845834d181f7fc0b1de4ded22712fea2bba4089915ceaefe92bcc7fabab1671682c37d52383b441ef77f8088d94088d6a85b239bb7f0049dd2666cf2d15f1d5d353c0683ef066743a21ff3127afcf4a9a6144b13ee1a99180e36003f634dcac82df0d170e9d3da711487008701b13406c738138b1281bf0696ae3b63c3834832962923940fad8261c6083b18ac84e7193bc3fad6a53b00d67b8488baad52820cc7909af98c54d01ac903e5d4c11fb1f2bafb1e8ecb6dbe2bfef7dbf03a78b19fbc724fafe805bc39848bcebba416b921c72dc10834e85da0a59c8bb396130bb2aa561d1250bd4f10d35da1acc1951431552c9971c36aa49c131e7f7d3047b3308fb6508fbf46b54942d4c790882b8b70b5e3b8abb0fd49de2601b9c6e2f442fe9bc7433e5805cd9034b0125d6030ff7bcdf96776d50292cde3e1429c41ccf3f500e2ad64471e27a66ff3880bdbf8243081a942ae04bf3049b75bf4600be8b2e7425c1d2581166d6435348b0d06146793aceba51220f746d975d42ef1ba0e717cd5f0db951044bdb58163196a7280b5e5fb48a40fcad5220cd775e510a8fd6b7e3a9fadcc37b5e59b48b3730b788313ea7ccff0ce9db0102273e882ade3bdd69fc6053b6a8122c6f99d80adcdb277a40d05b80b6a01ab0edc35d9a8394255e72ea07a66a21310eac4005066bb98755385a8af6e5675c305b0114149411500bb0dc1acdd9b458792eb4b3fb8276d8308a60735043699cd4b1aac1c95541edef0a2d740df7c9dff45cc045df1300a925fe3fde9d21b999b136cb56cade4ed557d77988639910cbc32f539e043dddc575294ab9baef15a029069543893cbaca463a989b57bc3a501cb4e2e962e1b73098b6d8b4bf633f42f150020fc2f45be6e2be957293dde4d65163e58f55d083243e41ad8f98b928615e1901ced56ebca8fdeeb2102cb93163119c52ccb87600d9da6129285b39be7d0cdf3d148f2d759434b40db4e3fdaa2782224aa736f845f18c39ed8d9904deb41295da7d8e37051fba93b36294d1a17830cd4e470f155bd2a6f22f19a500cdd14e66648890b140e1a821b1642a8faab46decfb4f6160a61c7f37509e03aa80804b390e32730f39f1e23c51957e4ed3b5507d0a67bd7396ad700b7cf99481364faa0ea688f1188441644093a1afc22d8e9abe6c957186e790286d3a432f7fdfbb1594613b95d74248f87e14bfc2b6e38104bd23d1bc91bf73815188c42612bc0eee0f14fe75d1010b5082735cf894e39c2c049b0325a8f76bdeaf9e3bfa012e0e032fa209a929ed52538e4fc865dd2b1aebb5183a5f931e3efbf5f9563b0d053467bd121202b9349bf84e96fb0ab34b2553402285c56f9ebc0d7f82b816060d2e85197f9d9652a92d194998eb46fa091a8f7aac0c04355f006e0a583da3817f03990e349ca809a5229a9a9c29e6787c1c2af2e19bc9583972105ffea061046abbb6851b737a3f9c83867b97a444abccbcffd501190f4e26a442b287e24c1e59849313ca94eb41a8f5105a032363b5c234fbea13acf4ba9fe989bedb9a87172e6de9abc2812982e6f3410488081cd3d858e9ca486cce0cbf72d368f165032c43c832bf7efd370e7fae7dbec596bbefe2a05bbe44f401868a36f99051108ea23e94c2e75b65e1648e5f435827f1d50accf13d66cda63786ef627b9e47faa77b7d541170f891670a5d646984915102755d21e94a9684f3c9e9cd52d103465e39f64c75555ff58a2146717aa2e22695faec5e926aa8d56e1976d76eb6d921a46f6b57338139816ac0ee4cef102a74f6e4f480affbcaed12a8d37f83c3b2e76394e588fb681770c93eec7e361e14d2ae1b2bfcedf12c527bb02128cd640930a9236fdf42ca529f40045dd14806252cb3fd869a51e16ad9aa37245fe74f63b834318700ab5072a45e359c480b4b12f61a31cb9c4ad4eb23f1df9f662aa1929ba2ad642381f80cbb6bf80e91af350e6fb3d6d194353d172c60ddabffa9fab85a27f23f8cbf0247460c85d7ee879d4200e2bc30c9433f8cccfcd904a6bc7d9b5771a4c5e2859e92638d79dfe7e0805e0ab19afc82014542b533167deeb5f248b763be744b210e390c5604c54a5fc63dfbeb31c62241106875ae818d251118dedc27c3f8ef8e346451ff5b6bda65be7f3efedf8a471c5bcb891488ffda42e8766581fc295c4db20ddda64744dbce2abebdaabeca48d91dedecd067fae9edc8d62ae8ab39b1065d9eb2a514dd3a62565f403ab23dff49fed666c4af14cbeb9043d8be23012fa8967e12e35f59ceea73695a20b05db2039cfc3c0c97b7ac9809eb840a84fd8211564855638e5325d1c245d7377f5a640893010c0992ac515437175a8e1d6b74b80fd2027e09c2cc49bd1e2c1fea373b66c2af3bf09c6f51ad5327c918111a1a6515b0a65fd3cc55ab4475b82b5a0dafacddfb50603cecb350d1f55136f5532f31803289b3a2c4ebad8b890497466ed00965f24a82e03bceeaa0d6bcae19d68919ac7659ea2cd0d08d491ab3e6f4b536565bea9bd8eebde778bdb926aa7c23abc814ed228371ed695ed43978dadf1e1296d436f197801497bcc1711cf7a0fb3fae2913780e26d9658cdfef7c25c509cc1bbf22fcdc2bfc4be14b7803bf9619717073704127a2fbf3ec06153abda2b3a12b738390cbc6ceed829d6accef1639491a1b1dc56ae915fdcaacec999f3671db734da8b41584b71089daf2fefa975e9d2e5b2251105763e4577953db5814a7bd5622d98c39a269aa1bbd65525d96ead29bd9770d718ce47a9cc059420ad3ad54ef5049a275ff49f6f73dd028559f8d9f97b98967587ece9bf85f41b9281899886c58bc93576f927ee655e5a0f6d6c32dd240ac0ed05aceb36c2ca1b968dee319b896797322fec38d4e28908c58acd74ac4e8bf6815a8d69e77c6c86ab196fe34e11aca20490150a35b979b9d375f2a3f10cfe09d066cda645deabd5c4ecdc34c5006aeb1f99b5bfa7e6bbc17402eb488008001224847f6520a607a66d339ed25cd4c0c84ca177d4eec526b9726e6fef163294129d800a29d08415b157bb96f02670807ee2d55d303b6a0d7c544d8e7882902005dd8f2cf1966e92b3db13886989bf4c1f6f025234f849b4211fe59445043d435bcdb9361442d75079602bb48fe7f980573a529297c84885453c6f855cebb37b5ad30d9151bb94d1517a7aff3862298c592f9f4c012d31fa9cfc6839d41883e5b3aad1a3bec2bf471f59b3e0229e0817c9cab3fbc7c0693e5b9ca82e9583f793cc946ff447ed1c3d0cbe6664c8418c0492fa5026c27706d17ff5014c63fb513948dc30dfd0e2ee4ac32d3a62f23a5130a637d322bb51534a76b762546dcf8d66088deca7bd943891fa30bf5550ad3eb2bda01062f6f1fb39714d2f6d5a53aba6e9006b770dc2315cb467644f985c5aa2ae8b9fc985f5e895e52b676f90d3b7a70061506cb6fe3961cfd9a4e9503375c0eec79c53ea064deecdac3caaa071c0c45e9a9fc290f55a9d60fb4b20a6fc3c774f1839a80f3e19841f6ac3bf463198d5d706cbb16f4296121f39a48d3d91c63fbcb31e7e9aef6bc3c0faef64d21e154e9d5fa5de9279c36eaf1d46e40f37461ba94dd16c447a99146df8c8610ae03579eee198fba593c5fd5f09d77e7d8a8792bb2b880f63bbca1fc366b63f5e43da227a19e73ae5486b2164017e9ad228861b6ebfd657cd3540495a309a6c401744111dace4be597d1c6fe103a693f0f7362498377a257ba01e415784fe34019f383533182e7949725d81e58bbd12bc6b004dab791575adc63beb30295a0741a55b63721559460f64a1bd5ad1089c34913da3c79a1610149db9fad5d1c4ed6a583387e573470274910df45c014a0f0774318910001273b0561c140fce6a3a37d8914f15d02262799454cbdcda00b4e6b7b117b8ad63fcecd94f12666cc81c10ceb1cc1c4cdf101509821e9ed48358ed926a35bea0b1dad7dc2de48d95b28ce84c7aa2e96284e5af1ccb127598ad574803618db3417430c3ed190b3acf8f336a3006e266c8bddacaf78c1b993e66efa287d033521a66e8671642081dcd3a53b3560e39c63f63951a8d7d60a20d11bd0a482e0edcd1a8ab7fc2bc770c89323b17e88a03b9082cc11298dd2b00bde9c7758ea4ca2f843ef0f05044dc77e6d7200e0ea4492adb59e5589b11fe196a8c4d4292d6019b4537149762af1775bc26766cc2f74630b341d4a44d2eb42b9526159ba80bf128f5d53ef36fca7e418b6ea562b2"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0x35, 0x6, 0x1, 0x0, "db7f24caae56c8cf5d6342d031798ee0d8b6588825c4caba220a9424c9a1ea7d3858f488e1d839937ff3e4725a003845df"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000}, @NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "b8d66d"}]}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x7}]}], {0x14}}, 0x16c0}, 0x1, 0x0, 0x0, 0x48000}, 0x8433a63802837605) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 1.986486775s ago: executing program 0 (id=344): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) 1.969570784s ago: executing program 2 (id=345): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) 1.878365366s ago: executing program 2 (id=347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4110, 0x0, 0x1, 0x4}, 0x0, 0x0, r1, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r5, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) close(r6) pwritev2(r4, &(0x7f00000002c0), 0x0, 0x8, 0x840c, 0x14) 1.492964461s ago: executing program 4 (id=350): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)={0x14, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x0) renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) unlinkat(r2, &(0x7f0000000080)='./bus/file0\x00', 0x200) 1.470697901s ago: executing program 0 (id=351): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x80060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101814}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40001100, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xe, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0x0) io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.470216301s ago: executing program 1 (id=352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x9, 0xb, {0x5, @usage=0xffffffffffff396e, 0x0, 0x10000, 0x8, 0x3, 0xffffffffffffff18, 0x2, 0x81, @usage=0x40, 0x9, 0xffff2ab2, [0xfffffffffffffff7, 0x200, 0x3, 0x7, 0x3, 0xfffffffffffffffe]}, {0x1, @struct={0x0, 0x8001}, 0x0, 0x3, 0x400, 0x6, 0x100000001, 0x2ab6, 0x82, @struct={0x37, 0x401}, 0xffff, 0x0, [0xb, 0xa, 0x4, 0xc, 0x8, 0x3]}, {0x3, @usage=0x3, 0x0, 0x3, 0xfc, 0xff, 0x101, 0x2, 0x1b, @usage=0xfff, 0x3, 0x2, [0x1000, 0x5, 0x3, 0x8, 0x0, 0x3]}, {0x400, 0xfff, 0x3}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa97aa1553ff41cf1186dd604dda0000280600fc0100000000000000000089000002fe8000"/49, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x1, 0x3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000500)=""/18, 0x16}, {&(0x7f00000003c0)=""/93, 0xffffffffffffffcf}], 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x3}}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r8, r7, 0x0, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b80000001300e99900000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) 1.350290493s ago: executing program 4 (id=354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) 1.241031814s ago: executing program 1 (id=355): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x1320, 0x0, 0x3, 0x5, 0x2, 0x800001, 0xfffb, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r3, &(0x7f0000000f80)={0xa, 0x4, 0x0, @loopback={0x9d}, 0xa7a}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x10, 0x0, 0x1, 0xe, 0x6, @local}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x527d, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) 1.174746405s ago: executing program 4 (id=356): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ffffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="003fd06e6c0300000400a3f51300", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="050427bd7000fcdbdf2501"], 0xa4}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f0000000000), 0x1, 0x504, &(0x7f0000000ac0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="44000000100003040400"/20, @ANYBLOB], 0x44}, 0x1, 0xba01}, 0x810) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000400, &(0x7f00000000c0), 0x6, 0x588, &(0x7f0000000300)="$eJzs3U1sHFcdAPD/TOzsOnGaFHooCGgohYCirmOnjapeWi5IUFUgFU49pNZ6Y0VeZyPvutTGB+fEgSsSlTjBhQsnDpU4IPWEuHKDG5dyQCooAtVICE01491kd7ObbOOPie3fTxrte/P1f2/kfeN5szMvgBPrYkRsR8TpiHgnIs5HUsxPulO8vjvl631yd6u+c3ernkSWvfWvqe4etuq99XvORsRPR8Sq9KXbG5sri81mY62bn+us3p5rb2y+eHN1cbmx3Li1sHBt/tqVV66+vLBvdX1u9Xcff+fmGz/6w++//NGft7/1k7zMr3WX5XXrWzXJsmzvAV/rHZfpmO3OSiMiP3Jv7H3vT4RT3fqcLrsgPJb87/FzEfF8N31PtbwyAQAHK8vOR3a+P39fOpDLsmTEOgDA0ZNf889Gkta61/+zkaa1WtGHV30mzqTNVrtz+UZr/VbS6+KbTm/cbDauFH2FEZWYTvL8fERcKKbd/MJQ/mpEPB0RP6/MFPlavdVcKuU/HgDg7ND5/z+V/PxfmWRTdwgA4ChzJgeAk+fB8/90KeUAAA6P638AOHn6zv8T3fkHAI6+6tCz/yNlyaGUBQA4HCP7/98+dz/9bDL0ii8A4Khz/x8ATpQfvPlmPmU7WVK8/3rp3Y31lda7Ly412iu11fV6rd5au11bbrWWi3f2rI7YxZ3+TLPVuj3/Uqy/N9dptDtz7Y3N66ut9Vud68V7va83PFgAAOV7+rkP/5pExParM8UUvbEcHv2DAOCISyNmyi4DUI5TZRcAKM1U2QUASqM/HnjUj3tH/kRoJiLeH7+NjgV4sl36wpj+/+H/DQbvB/x/H0bHBkrW/VrrBoATaG/9/3oP4Ch7+Infg0FwnGVZYjx/ADhhJriC9xNBOOYe6/4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnHCzxZSkte5Y4LORprVaxLmIuBDTyY2bzcaViHgqIv5Sma7k+fmyCw0A7FH6j6Q7/tel8y/MDi89nfy3UnxGxI9/+dYv3lvs9IYOvDe/834xv7O2MDJA5eDrAAD0mRqe0TtPF599F/Kf3N2q96bDLODH394dXDSPu3N3q35/POKpbuGrkc878+9koDLJPg1MvH0nIp4drn96b/mF7sinw/Hz2OcOLH4UNZwdiD/4b1RaLNv9zI/F52cmjLcPZYbj4sO8/Xl91PcvjYvFZ/f7NzXYmFbjZw82ro+h1/7tZLvt305f/Hz/3z9XLdqaUe3fxUljvPTH745ddudU9sWpiF7snb72Z1e1SI2K/8KE8f/2pa88P+5gZb+KuBQPi7+bmuus3p5rb2z+9nsf/Gm5sdy4tbBwbf7alVeuvrwwV/RRz/V6qh/0z1cvPzW+/hFnxsSvPqL+X5+w/r/+3ztvf/Uh8b/5tVHx03jmIfHzc+I3Ym2i+ItnPhg7fHcef2lM/acG4p8e2C6fd3l4Z2P+ID/6++bSRAUFAA5Fe2NzZbHZbKxNkkhjc2Wxd6E58VYDiZnH2mrCRBzYnkcnpgcOQvWgYp0ds+g3n3mH03Gox2ffEnc+w8qVcop6Kpq9/qhHrtxdb3svQbNsD2W+OME6JTVIwKG5/6UvuyQAAAAAAAAAAAAAAMA47R92X/m3zw9F9T8MV3YdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL4+DQAA//+T6cce") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) fadvise64(r7, 0x1, 0x85, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r6, 0x1000000}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x100000, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0x0, 0xe}, {0x0, 0xffe0}}}, 0x24}}, 0x4040040) r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x70) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r10, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "6455d828effa4c0c3424baf0d6794fd0781b48181698edab65235ff0507da48343d497"}, 0x2e) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) 1.156691655s ago: executing program 1 (id=357): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x3, 0x8900c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x6, 0x7ffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x2) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0xffff, 0xfffffffc, 0x20000001, 0xa069, 0x80000001}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x122, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) fspick(0xffffffffffffffff, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6775f5d4004021fffc010000000000000000000000000001fe8000000000000000000000000000aa2d0004000c380700331c8a7859e10b5bea45cb9b04a45df1e0000206000000000002000000000000c9102001000000000000000000000000000100000000000050eabf63f3c6d63109fcdce429ad7568f4cf422d9621671790fba159393eed48e3b0ca1cd4cb17c94538a1177db8d8f8f357741dca72a26f2613f0a1f75e076498939ac7ca824b816ca498bf1dd24738cfd5a0a83640df5afa46e484aba9c5368652615b78a4cb420bdf4f5a0ce4af256b9a6ef5000000000000"], 0x0) 1.142977645s ago: executing program 3 (id=358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/1, 0x1}, {&(0x7f0000000500)=""/136, 0x88}, {&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000680)=""/53, 0x35}], 0x5, &(0x7f0000000740)=""/196, 0xc4}, 0x98f54f273f137978) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001000925e850000000100000095e5dadb077417115c870c1e3f51fbcbcf7a0036abde4755e16f209927"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) getpgid(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x11, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) 502.791514ms ago: executing program 0 (id=359): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10400, &(0x7f00000002c0)={[{@norecovery}, {@grpquota}, {@debug}, {@grpquota}]}, 0xee, 0x4b6, &(0x7f0000000980)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0xc0) pwritev2(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x7802, 0x0, 0x3) 501.944514ms ago: executing program 1 (id=360): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x81b0, 0x200, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x100000000}, 0x2, 0xffffffff, 0x2, 0x9, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r4) r6 = io_uring_setup(0x349a, &(0x7f0000000000)={0x0, 0x84bf, 0x8, 0x20, 0xfffffffc}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000500)=[@ioring_restriction_sqe_op={0x1, 0x31a1ac19ea15b29b}], 0x1) 406.428745ms ago: executing program 3 (id=361): perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc8590, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x1, 0x101}, 0x214d59, 0x5, 0x0, 0x3, 0xc, 0x20003, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000300)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x10, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r2, 0x4, 0x40800) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f32b5cbba07d1c3, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYRESOCT=r5], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x18) mkdir(0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000000100000fd0300000100000000000000", @ANYRES32, @ANYBLOB="0000000000000100000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r10}, 0x18) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vlan0\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 301.931766ms ago: executing program 3 (id=362): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) 301.729606ms ago: executing program 3 (id=363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) 301.393646ms ago: executing program 1 (id=364): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)={0x14, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x0) renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) unlinkat(r2, &(0x7f0000000080)='./bus/file0\x00', 0x200) 280.401616ms ago: executing program 0 (id=365): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x9, 0xb, {0x5, @usage=0xffffffffffff396e, 0x0, 0x10000, 0x8, 0x3, 0xffffffffffffff18, 0x2, 0x81, @usage=0x40, 0x9, 0xffff2ab2, [0xfffffffffffffff7, 0x200, 0x3, 0x7, 0x3, 0xfffffffffffffffe]}, {0x1, @struct={0x0, 0x8001}, 0x0, 0x3, 0x400, 0x6, 0x100000001, 0x2ab6, 0x82, @struct={0x37, 0x401}, 0xffff, 0x0, [0xb, 0xa, 0x4, 0xc, 0x8, 0x3]}, {0x3, @usage=0x3, 0x0, 0x3, 0xfc, 0xff, 0x101, 0x2, 0x1b, @usage=0xfff, 0x3, 0x2, [0x1000, 0x5, 0x3, 0x8, 0x0, 0x3]}, {0x400, 0xfff, 0x3}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa97aa1553ff41cf1186dd604dda0000280600fc0100000000000000000089000002fe8000"/49, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x1, 0x3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000500)=""/18, 0x16}, {&(0x7f00000003c0)=""/93, 0xffffffffffffffcf}], 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x3}}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) 192.675488ms ago: executing program 3 (id=366): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x31209, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e0000002000100010000000000000000cd0a251e98051c73d2459eff0f7d5f8df8456a0636f8c411ac391e397dea704db254b887fa5b37c1b4435951616349b3249382b0f041010e5c50ec1fec29e2cf0d516bf6bc5c5d3407951a888c2a49b95d07b36ce9661f4ba4443d2fb0c838112cb60227c5f14e39e9dd9810390fca31bb30418f23b1fc14125c47e78a61bf386717e91fc7fa4a942856622458086ae23a2c30d1231baeae2867cfc655e9373acf0135cf144c5ef63f27a1cd31591836edb342bcf470b6a7"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES8=r4, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r5, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51], 0x30}], 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x50) 148.276878ms ago: executing program 2 (id=367): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = memfd_create(&(0x7f0000000600)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LL;\xd6\x84\x195\x06\x00\x00\x00~\xf3\x83\x18\xe4\xe8\xac\xc1\xa4y\x89m\x80\xf4k\xfbS\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xa7C\xc6\x01\x1d\xd9^\xaf\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xef\xf6c%n', 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRES16=r6, @ANYRES8=r1, @ANYRESDEC=r3], 0x184}}, 0x0) fallocate(r3, 0x0, 0x400000000000000, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000009bb6000004658b00fdffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000008a000000020000f8ffffffb703000008000000b704000000000000850000008200000008190600000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x10000, 0x8e, &(0x7f00000004c0)=""/142, 0x40f00, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[{0x0, 0x1, 0xe, 0xb}, {0x5, 0x3, 0xf, 0xc}, {0x5, 0x3, 0x2, 0xb}, {0x5, 0x1, 0xf, 0xb}, {0x2, 0x2, 0x10, 0x9}, {0x0, 0x4, 0x0, 0xa}, {0x0, 0x1, 0xd, 0x3}, {0x1, 0x5, 0xf, 0xe6fa2fc2e021680c}, {0x2, 0x1, 0x9, 0x2}], 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001b00)=ANY=[], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x1) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) io_setup(0x1000000f, &(0x7f0000002400)) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb7, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, @void, @value}, 0x94) 134.584208ms ago: executing program 3 (id=368): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2044d0, &(0x7f00000005c0)={[{@noauto_da_alloc}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={@empty, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x16}, 0x7f, 0x780, 0x7fff, 0x0, 0x9, 0x40080008}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="654abb0c72616e733d66642ab8397a6e6f3dbdcb7f07010d8cc468dff81c930a4fc30f3dc8fa0b80ba3372c592347c8860f79b893be28c0b1d84c44ca86ce15876cb84afc05c5100580770ff69f6b7437294816a2bf7869f26900d805b171ab5d41c697200000a45c12e60c3091cf1173ceb8c57344b2f88058b0a9e1e5bae7ad47c0c2d4ab91bf343a01d0585d82aa7c2608094014778dc54836b89e61dc254301b6bb447fa87eaa650b2c2f8c22789e2717bf703747b1b9e4538a697d7", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea"]) 102.641489ms ago: executing program 2 (id=369): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)={0x14, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x0) renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) unlinkat(r2, &(0x7f0000000080)='./bus/file0\x00', 0x200) 102.060269ms ago: executing program 1 (id=370): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757818"], 0x65) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRESOCT=r7, @ANYRES64=r1], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="61b31f0056f699f07868"], &(0x7f0000000ac0)='GPL\x00', 0x8c0e, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x90) 88.061689ms ago: executing program 0 (id=371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) 42.45426ms ago: executing program 0 (id=372): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}]}}]}, 0x48}}, 0x4) 0s ago: executing program 4 (id=373): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000210001002dbd7000fbdbdf250a10800802000006010000001400010000000000000000000000ffffac14143d14000200fc020000080000000000000000000001080017004e244e23"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 27.634028][ T29] audit: type=1400 audit(1748473511.531:62): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.635161][ T3306] cgroup: Unknown subsys name 'net' [ 27.656764][ T29] audit: type=1400 audit(1748473511.531:63): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.684151][ T29] audit: type=1400 audit(1748473511.571:64): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.799980][ T3306] cgroup: Unknown subsys name 'cpuset' [ 27.806309][ T3306] cgroup: Unknown subsys name 'rlimit' [ 27.926837][ T29] audit: type=1400 audit(1748473511.821:65): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.953377][ T29] audit: type=1400 audit(1748473511.821:66): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.973860][ T29] audit: type=1400 audit(1748473511.821:67): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.987768][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.994379][ T29] audit: type=1400 audit(1748473511.821:68): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.023240][ T29] audit: type=1400 audit(1748473511.821:69): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.048053][ T29] audit: type=1400 audit(1748473511.821:70): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.071286][ T29] audit: type=1400 audit(1748473511.911:71): avc: denied { relabelto } for pid=3310 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.111882][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.346758][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 29.357795][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 29.448889][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 29.472004][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.479247][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.486396][ T3317] bridge_slave_0: entered allmulticast mode [ 29.492812][ T3317] bridge_slave_0: entered promiscuous mode [ 29.502211][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 29.526528][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.533794][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.541039][ T3316] bridge_slave_0: entered allmulticast mode [ 29.547660][ T3316] bridge_slave_0: entered promiscuous mode [ 29.554294][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.561433][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.568531][ T3317] bridge_slave_1: entered allmulticast mode [ 29.575106][ T3317] bridge_slave_1: entered promiscuous mode [ 29.596020][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.603219][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.610440][ T3316] bridge_slave_1: entered allmulticast mode [ 29.616818][ T3316] bridge_slave_1: entered promiscuous mode [ 29.630379][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 29.659767][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.669863][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.682385][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.701428][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.756721][ T3317] team0: Port device team_slave_0 added [ 29.764700][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.771804][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.779033][ T3328] bridge_slave_0: entered allmulticast mode [ 29.785394][ T3328] bridge_slave_0: entered promiscuous mode [ 29.792020][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.799168][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.806336][ T3327] bridge_slave_0: entered allmulticast mode [ 29.812703][ T3327] bridge_slave_0: entered promiscuous mode [ 29.819817][ T3316] team0: Port device team_slave_0 added [ 29.825541][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.832685][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.839817][ T3327] bridge_slave_1: entered allmulticast mode [ 29.846425][ T3327] bridge_slave_1: entered promiscuous mode [ 29.853283][ T3317] team0: Port device team_slave_1 added [ 29.871078][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.878211][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.885437][ T3328] bridge_slave_1: entered allmulticast mode [ 29.891915][ T3328] bridge_slave_1: entered promiscuous mode [ 29.898621][ T3316] team0: Port device team_slave_1 added [ 29.923287][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.930385][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.937562][ T3324] bridge_slave_0: entered allmulticast mode [ 29.943982][ T3324] bridge_slave_0: entered promiscuous mode [ 29.960014][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.966974][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.993327][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.009163][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.016121][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.042080][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.053578][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.060572][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.086552][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.097370][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.104512][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.111676][ T3324] bridge_slave_1: entered allmulticast mode [ 30.117929][ T3324] bridge_slave_1: entered promiscuous mode [ 30.130364][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.139659][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.146606][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.172618][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.184549][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.197479][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.212667][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.256656][ T3327] team0: Port device team_slave_0 added [ 30.263261][ T3327] team0: Port device team_slave_1 added [ 30.270392][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.280284][ T3328] team0: Port device team_slave_0 added [ 30.287069][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.308165][ T3316] hsr_slave_0: entered promiscuous mode [ 30.314362][ T3316] hsr_slave_1: entered promiscuous mode [ 30.325590][ T3328] team0: Port device team_slave_1 added [ 30.367178][ T3324] team0: Port device team_slave_0 added [ 30.374855][ T3317] hsr_slave_0: entered promiscuous mode [ 30.381111][ T3317] hsr_slave_1: entered promiscuous mode [ 30.386894][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.394553][ T3317] Cannot create hsr debugfs directory [ 30.405633][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.412765][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.438824][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.449804][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.456791][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.482786][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.494273][ T3324] team0: Port device team_slave_1 added [ 30.510062][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.517074][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.543096][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.554138][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.561182][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.587149][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.631611][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.638586][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.664585][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.676367][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.683432][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.709387][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.735127][ T3328] hsr_slave_0: entered promiscuous mode [ 30.741264][ T3328] hsr_slave_1: entered promiscuous mode [ 30.747073][ T3328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.754740][ T3328] Cannot create hsr debugfs directory [ 30.797462][ T3327] hsr_slave_0: entered promiscuous mode [ 30.803847][ T3327] hsr_slave_1: entered promiscuous mode [ 30.809811][ T3327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.817397][ T3327] Cannot create hsr debugfs directory [ 30.842302][ T3324] hsr_slave_0: entered promiscuous mode [ 30.848319][ T3324] hsr_slave_1: entered promiscuous mode [ 30.854360][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.861939][ T3324] Cannot create hsr debugfs directory [ 30.992700][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.003664][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.019099][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.037245][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.052666][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.063294][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.072393][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.088133][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.108907][ T3328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.125583][ T3328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.137209][ T3328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.147940][ T3328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.176200][ T3327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.190397][ T3327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.199659][ T3327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.218926][ T3327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.246785][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.256091][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.265396][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.274899][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.297048][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.326146][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.335886][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.352582][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.359670][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.369205][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.383960][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.400936][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.407996][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.416892][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.423971][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.433841][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.440923][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.458323][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.471126][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.481882][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.499027][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.517056][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.524142][ T391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.534822][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.541917][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.555750][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.562877][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.578263][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.588686][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.601280][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.613986][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.621134][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.643237][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.650464][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.671687][ T3328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.685347][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.692552][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.736353][ T3327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.757620][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.788880][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.823575][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.864595][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.896358][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.912993][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.983515][ T3316] veth0_vlan: entered promiscuous mode [ 32.011017][ T3316] veth1_vlan: entered promiscuous mode [ 32.037155][ T3328] veth0_vlan: entered promiscuous mode [ 32.064399][ T3328] veth1_vlan: entered promiscuous mode [ 32.073774][ T3316] veth0_macvtap: entered promiscuous mode [ 32.085226][ T3316] veth1_macvtap: entered promiscuous mode [ 32.126003][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.133932][ T3317] veth0_vlan: entered promiscuous mode [ 32.141748][ T3327] veth0_vlan: entered promiscuous mode [ 32.149545][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.164940][ T3317] veth1_vlan: entered promiscuous mode [ 32.175283][ T3328] veth0_macvtap: entered promiscuous mode [ 32.183097][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.191885][ T3316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.200635][ T3316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.209391][ T3316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.224116][ T3327] veth1_vlan: entered promiscuous mode [ 32.242193][ T3327] veth0_macvtap: entered promiscuous mode [ 32.250538][ T3328] veth1_macvtap: entered promiscuous mode [ 32.265648][ T3327] veth1_macvtap: entered promiscuous mode [ 32.277769][ T3324] veth0_vlan: entered promiscuous mode [ 32.291805][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.309634][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.318273][ T3317] veth0_macvtap: entered promiscuous mode [ 32.324949][ T3324] veth1_vlan: entered promiscuous mode [ 32.332844][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.340585][ T3317] veth1_macvtap: entered promiscuous mode [ 32.354951][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.368482][ T3327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.377278][ T3327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.386317][ T3327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.395192][ T3327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.411225][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.422137][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.432894][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.441712][ T3328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.450482][ T3328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.459238][ T3328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.468052][ T3328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.480077][ T3324] veth0_macvtap: entered promiscuous mode [ 32.487517][ T3317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.496414][ T3317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.505414][ T3317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.514252][ T3317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.521670][ T3458] loop0: detected capacity change from 0 to 2048 [ 32.540581][ T3458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.540973][ T3324] veth1_macvtap: entered promiscuous mode [ 32.577733][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.611025][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.650199][ T3324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.659088][ T3324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.659428][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 32.659444][ T29] audit: type=1400 audit(1748473516.551:108): avc: denied { map_read map_write } for pid=3465 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.667809][ T3324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.702316][ T3324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.760598][ T3468] mmap: syz.3.4 (3468) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.852401][ T29] audit: type=1400 audit(1748473516.751:109): avc: denied { create } for pid=3477 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.890421][ T3478] loop2: detected capacity change from 0 to 512 [ 32.906302][ T3478] ======================================================= [ 32.906302][ T3478] WARNING: The mand mount option has been deprecated and [ 32.906302][ T3478] and is ignored by this kernel. Remove the mand [ 32.906302][ T3478] option from the mount to silence this warning. [ 32.906302][ T3478] ======================================================= [ 32.957988][ T3478] EXT4-fs: Ignoring removed orlov option [ 32.967303][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.976532][ T3484] loop4: detected capacity change from 0 to 1024 [ 32.986385][ T29] audit: type=1400 audit(1748473516.881:110): avc: denied { create } for pid=3479 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.011319][ T3478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.036815][ T3484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.044740][ T29] audit: type=1400 audit(1748473516.911:111): avc: denied { connect } for pid=3479 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.068169][ T29] audit: type=1400 audit(1748473516.931:112): avc: denied { create } for pid=3485 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.070405][ C1] hrtimer: interrupt took 37806 ns [ 33.087489][ T29] audit: type=1400 audit(1748473516.931:113): avc: denied { setopt } for pid=3485 comm="syz.1.12" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.102345][ T3480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 33.121355][ T29] audit: type=1400 audit(1748473517.001:114): avc: denied { create } for pid=3479 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.121438][ T29] audit: type=1400 audit(1748473517.001:115): avc: denied { ioctl } for pid=3479 comm="syz.3.10" path="socket:[4225]" dev="sockfs" ino=4225 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.152540][ T3490] loop0: detected capacity change from 0 to 2048 [ 33.165328][ T29] audit: type=1400 audit(1748473517.001:116): avc: denied { write } for pid=3479 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.179220][ T3484] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.5: Allocating blocks 497-513 which overlap fs metadata [ 33.191030][ T29] audit: type=1400 audit(1748473517.001:117): avc: denied { write } for pid=3479 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.219020][ T3483] EXT4-fs (loop4): pa ffff888106f3a0e0: logic 128, phys. 273, len 15 [ 33.232020][ T3483] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 33.239216][ T3478] EXT4-fs (loop2): orphan cleanup on readonly fs [ 33.257631][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.266081][ T3480] Cannot find add_set index 0 as target [ 33.276407][ T3478] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8: bg 0: block 248: padding at end of block bitmap is not set [ 33.307335][ T3478] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.8: Failed to acquire dquot type 1 [ 33.320117][ T3478] EXT4-fs (loop2): 1 truncate cleaned up [ 33.321493][ T3490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.392941][ T3500] loop4: detected capacity change from 0 to 512 [ 33.404663][ T3478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.433881][ T3502] loop3: detected capacity change from 0 to 512 [ 33.449002][ T3500] EXT4-fs: Ignoring removed orlov option [ 33.456511][ T3500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.479201][ T3500] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.489614][ T3502] EXT4-fs: Ignoring removed orlov option [ 33.499106][ T3500] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.14: bg 0: block 248: padding at end of block bitmap is not set [ 33.519663][ T3505] loop1: detected capacity change from 0 to 512 [ 33.526252][ T3502] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.528030][ T3505] EXT4-fs: Ignoring removed orlov option [ 33.550686][ T3505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.567458][ T3500] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.14: Failed to acquire dquot type 1 [ 33.569163][ T3502] EXT4-fs (loop3): orphan cleanup on readonly fs [ 33.592911][ T3500] EXT4-fs (loop4): 1 truncate cleaned up [ 33.604546][ T3502] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.16: bg 0: block 248: padding at end of block bitmap is not set [ 33.619166][ T3505] EXT4-fs (loop1): orphan cleanup on readonly fs [ 33.632877][ T3502] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.16: Failed to acquire dquot type 1 [ 33.645755][ T3505] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.17: bg 0: block 248: padding at end of block bitmap is not set [ 33.661603][ T3505] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.17: Failed to acquire dquot type 1 [ 33.685949][ T3505] EXT4-fs (loop1): 1 truncate cleaned up [ 33.705644][ T3500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.709301][ T3502] EXT4-fs (loop3): 1 truncate cleaned up [ 33.718585][ T3505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.725947][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.750696][ T3505] syz.1.17 (3505) used greatest stack depth: 9480 bytes left [ 33.771425][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.782353][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.810153][ T3502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.897740][ T3511] loop4: detected capacity change from 0 to 2048 [ 33.929505][ T3518] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.929752][ T3512] loop1: detected capacity change from 0 to 2048 [ 33.978207][ T3511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.020216][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.030641][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.041886][ T3512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.171101][ T3530] loop2: detected capacity change from 0 to 1024 [ 34.171264][ T3532] loop0: detected capacity change from 0 to 512 [ 34.183057][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.185505][ T3532] EXT4-fs: Ignoring removed orlov option [ 34.220987][ T3532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.238918][ T3530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.260253][ T3532] EXT4-fs (loop0): orphan cleanup on readonly fs [ 34.280052][ T3532] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.27: bg 0: block 248: padding at end of block bitmap is not set [ 34.295095][ T3539] loop3: detected capacity change from 0 to 1024 [ 34.332178][ T3532] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.27: Failed to acquire dquot type 1 [ 34.358284][ T3541] loop4: detected capacity change from 0 to 2048 [ 34.364493][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.374689][ T3532] EXT4-fs (loop0): 1 truncate cleaned up [ 34.384324][ T3532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.384423][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.417363][ T3539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.425402][ T3541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.442164][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.448715][ T3539] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 16 with error 28 [ 34.463554][ T3539] EXT4-fs (loop3): This should not happen!! Data will be lost [ 34.463554][ T3539] [ 34.473440][ T3539] EXT4-fs (loop3): Total free blocks count 0 [ 34.479582][ T3539] EXT4-fs (loop3): Free/Dirty block details [ 34.485500][ T3539] EXT4-fs (loop3): free_blocks=0 [ 34.490559][ T3539] EXT4-fs (loop3): dirty_blocks=0 [ 34.495692][ T3539] EXT4-fs (loop3): Block reservation details [ 34.501794][ T3539] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 34.555837][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.707471][ T3563] loop1: detected capacity change from 0 to 1024 [ 34.741859][ T3563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.763734][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.801899][ T3563] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.36: Allocating blocks 497-513 which overlap fs metadata [ 34.855677][ T3559] EXT4-fs (loop1): pa ffff888106f3a0e0: logic 128, phys. 273, len 15 [ 34.864015][ T3559] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 34.876421][ T3572] netlink: 'syz.2.40': attribute type 21 has an invalid length. [ 34.898175][ T3574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 34.907137][ T3576] loop4: detected capacity change from 0 to 1024 [ 34.912434][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.927973][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.935526][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.945718][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.949514][ T3578] loop3: detected capacity change from 0 to 2048 [ 34.953428][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.980438][ T3576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.004393][ T3578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.099667][ T3596] loop2: detected capacity change from 0 to 1024 [ 35.127781][ T3596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.144862][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.191588][ T3601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 35.208876][ T3596] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.48: Allocating blocks 497-513 which overlap fs metadata [ 35.241330][ T3601] bond1: entered promiscuous mode [ 35.246462][ T3601] bond1: entered allmulticast mode [ 35.252325][ T3601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.256037][ T3595] EXT4-fs (loop2): pa ffff888106daa230: logic 128, phys. 273, len 15 [ 35.267211][ T3595] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 35.302118][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.333079][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.449797][ T3610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'. [ 35.458671][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.466206][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.494884][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.502384][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.710897][ T3623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 35.758067][ T3625] loop0: detected capacity change from 0 to 1024 [ 35.773026][ T3625] EXT4-fs: Ignoring removed orlov option [ 35.803520][ T3625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.860274][ T3632] loop2: detected capacity change from 0 to 512 [ 35.874407][ T3632] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 35.900857][ T3632] EXT4-fs (loop2): 1 truncate cleaned up [ 35.907139][ T3632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.949495][ T3635] loop3: detected capacity change from 0 to 1024 [ 35.977029][ T3635] EXT4-fs: Ignoring removed orlov option [ 36.020443][ T3635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.251647][ T3623] Cannot find add_set index 0 as target [ 36.267192][ T3601] syz.4.49 (3601) used greatest stack depth: 7192 bytes left [ 36.303546][ T3641] loop1: detected capacity change from 0 to 512 [ 36.319400][ T3641] EXT4-fs (loop1): 1 truncate cleaned up [ 36.325723][ T3641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.432880][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.570825][ T3648] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 36.660597][ T3648] loop2: detected capacity change from 0 to 512 [ 36.682443][ T3648] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 36.698622][ T3648] EXT4-fs (loop2): invalid journal inode [ 36.698920][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.704877][ T3648] EXT4-fs (loop2): can't get journal size [ 36.765086][ T3648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 36.780961][ T3652] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 36.805187][ T3648] System zones: 1-12, 13-13 [ 36.809981][ T3652] loop0: detected capacity change from 0 to 512 [ 36.816461][ T3648] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.66: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 36.837000][ T3652] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 36.846313][ T3648] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.66: couldn't read orphan inode 15 (err -117) [ 36.867712][ T3652] EXT4-fs (loop0): invalid journal inode [ 36.873758][ T3652] EXT4-fs (loop0): can't get journal size [ 36.886413][ T3648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.898888][ T3652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 36.899072][ T3652] System zones: 1-12, 13-13 [ 36.929000][ T3652] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.67: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 36.946559][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.968775][ T3652] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.67: couldn't read orphan inode 15 (err -117) [ 36.988010][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.007379][ T3652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.020935][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.077776][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.092718][ T3658] loop2: detected capacity change from 0 to 1024 [ 37.126109][ T3666] loop3: detected capacity change from 0 to 2048 [ 37.152419][ T3658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.173544][ T3666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.194567][ T3665] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 37.198154][ T3673] loop4: detected capacity change from 0 to 2048 [ 37.209236][ T3665] loop1: detected capacity change from 0 to 512 [ 37.221306][ T3668] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 37.229299][ T3665] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 37.241112][ T3668] loop0: detected capacity change from 0 to 512 [ 37.251953][ T3665] EXT4-fs (loop1): invalid journal inode [ 37.257654][ T3665] EXT4-fs (loop1): can't get journal size [ 37.272975][ T3673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.278794][ T3665] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 37.298939][ T3665] System zones: 1-12, 13-13 [ 37.299008][ T3668] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 37.299555][ T3668] EXT4-fs (loop0): invalid journal inode [ 37.317741][ T3665] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.74: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 37.339945][ T3668] EXT4-fs (loop0): can't get journal size [ 37.343087][ T3665] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.74: couldn't read orphan inode 15 (err -117) [ 37.359183][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.373636][ T3668] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 37.390484][ T3668] System zones: 1-12, 13-13 [ 37.396742][ T3665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.409614][ T3668] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.72: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 37.419096][ T3680] loop2: detected capacity change from 0 to 1024 [ 37.442546][ T3668] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.72: couldn't read orphan inode 15 (err -117) [ 37.462309][ T3680] EXT4-fs: Ignoring removed orlov option [ 37.472337][ T3680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.479324][ T3668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.578473][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.592608][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.607444][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.626275][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.688236][ T3686] loop0: detected capacity change from 0 to 1024 [ 37.716025][ T3686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.740449][ T3690] netlink: 'syz.3.81': attribute type 13 has an invalid length. [ 37.751677][ T3008] udevd[3008]: worker [3474] terminated by signal 33 (Unknown signal 33) [ 37.781819][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.827971][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.835246][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.850862][ T3697] loop0: detected capacity change from 0 to 1024 [ 37.863943][ T3697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.890537][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.933927][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.958716][ T3690] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.968006][ T3690] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.977075][ T3690] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.986237][ T3690] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.077500][ T3708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 38.078954][ T3710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 38.087401][ T3708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.102483][ T3708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.110695][ T3708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.118125][ T3708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.202481][ T3725] syz.4.88 uses obsolete (PF_INET,SOCK_PACKET) [ 38.218506][ T3725] netlink: 304 bytes leftover after parsing attributes in process `syz.4.88'. [ 38.227522][ T3725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.88'. [ 38.243432][ T3728] loop0: detected capacity change from 0 to 2048 [ 38.263023][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 38.263041][ T29] audit: type=1400 audit(1748473522.161:152): avc: denied { ioctl } for pid=3723 comm="syz.3.91" path="socket:[5581]" dev="sockfs" ino=5581 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.271017][ T3728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.294078][ T29] audit: type=1400 audit(1748473522.161:153): avc: denied { bind } for pid=3723 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.324674][ T29] audit: type=1400 audit(1748473522.161:154): avc: denied { write } for pid=3723 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.421176][ T3737] loop2: detected capacity change from 0 to 1024 [ 38.427869][ T3737] EXT4-fs: Ignoring removed orlov option [ 38.436791][ T3737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.453063][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.479752][ T3740] loop0: detected capacity change from 0 to 1024 [ 38.491040][ T3740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.508358][ T3740] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 16 with error 28 [ 38.521022][ T3740] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.521022][ T3740] [ 38.530758][ T3740] EXT4-fs (loop0): Total free blocks count 0 [ 38.536850][ T3740] EXT4-fs (loop0): Free/Dirty block details [ 38.542794][ T3740] EXT4-fs (loop0): free_blocks=0 [ 38.547774][ T3740] EXT4-fs (loop0): dirty_blocks=0 [ 38.552941][ T3740] EXT4-fs (loop0): Block reservation details [ 38.559118][ T3740] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 38.588162][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.624475][ T3748] loop0: detected capacity change from 0 to 1024 [ 38.631427][ T3748] EXT4-fs: Ignoring removed orlov option [ 38.639781][ T3748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.800151][ T3752] loop3: detected capacity change from 0 to 2048 [ 38.828177][ T3752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.988909][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.124792][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.159908][ T3763] loop3: detected capacity change from 0 to 512 [ 39.167129][ T3763] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 39.179652][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.189851][ T3763] EXT4-fs (loop3): invalid journal inode [ 39.195541][ T3763] EXT4-fs (loop3): can't get journal size [ 39.217438][ T3763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 39.227221][ T3763] System zones: 1-12, 13-13 [ 39.233287][ T3771] loop0: detected capacity change from 0 to 2048 [ 39.240915][ T3763] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.102: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 39.258212][ T3763] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.102: couldn't read orphan inode 15 (err -117) [ 39.261078][ T3771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.277985][ T3763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.285410][ T3777] netlink: 304 bytes leftover after parsing attributes in process `syz.1.104'. [ 39.302647][ T3780] capability: warning: `syz.4.107' uses 32-bit capabilities (legacy support in use) [ 39.303503][ T3777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.104'. [ 39.352166][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.462908][ T3786] loop4: detected capacity change from 0 to 2048 [ 39.469100][ T3788] FAULT_INJECTION: forcing a failure. [ 39.469100][ T3788] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.482468][ T3788] CPU: 1 UID: 0 PID: 3788 Comm: syz.3.112 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 39.482563][ T3788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.482581][ T3788] Call Trace: [ 39.482616][ T3788] [ 39.482682][ T3788] __dump_stack+0x1d/0x30 [ 39.482710][ T3788] dump_stack_lvl+0xe8/0x140 [ 39.482732][ T3788] dump_stack+0x15/0x1b [ 39.482777][ T3788] should_fail_ex+0x265/0x280 [ 39.482807][ T3788] should_fail+0xb/0x20 [ 39.482832][ T3788] should_fail_usercopy+0x1a/0x20 [ 39.483052][ T3788] _copy_to_user+0x20/0xa0 [ 39.483078][ T3788] bpf_verifier_vlog+0x2c5/0x5b0 [ 39.483114][ T3788] ? __rcu_read_unlock+0x4f/0x70 [ 39.483144][ T3788] __btf_verifier_log+0x7f/0xb0 [ 39.483236][ T3788] ? btf_parse_hdr+0x1aa/0x3b0 [ 39.483276][ T3788] ? should_failslab+0x8c/0xb0 [ 39.483301][ T3788] btf_parse_hdr+0x1bd/0x3b0 [ 39.483339][ T3788] btf_new_fd+0x241/0x790 [ 39.483365][ T3788] bpf_btf_load+0x112/0x130 [ 39.483461][ T3788] __sys_bpf+0x561/0x790 [ 39.483500][ T3788] __x64_sys_bpf+0x41/0x50 [ 39.483530][ T3788] x64_sys_call+0x2478/0x2fb0 [ 39.483552][ T3788] do_syscall_64+0xd2/0x200 [ 39.483608][ T3788] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.483635][ T3788] ? clear_bhb_loop+0x40/0x90 [ 39.483662][ T3788] ? clear_bhb_loop+0x40/0x90 [ 39.483685][ T3788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.483813][ T3788] RIP: 0033:0x7fa34f31e969 [ 39.483834][ T3788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.483852][ T3788] RSP: 002b:00007fa34d987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 39.483871][ T3788] RAX: ffffffffffffffda RBX: 00007fa34f545fa0 RCX: 00007fa34f31e969 [ 39.483934][ T3788] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 39.483946][ T3788] RBP: 00007fa34d987090 R08: 0000000000000000 R09: 0000000000000000 [ 39.483958][ T3788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.483971][ T3788] R13: 0000000000000001 R14: 00007fa34f545fa0 R15: 00007ffd36830068 [ 39.484068][ T3788] [ 39.485343][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.601456][ T3786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.725111][ T3793] loop3: detected capacity change from 0 to 1024 [ 39.732005][ T3793] EXT4-fs: Ignoring removed orlov option [ 39.768922][ T3793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.770796][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.797035][ T3796] loop1: detected capacity change from 0 to 1024 [ 39.826662][ T3796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.850211][ T3796] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 16 with error 28 [ 39.862666][ T3796] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.862666][ T3796] [ 39.872362][ T3796] EXT4-fs (loop1): Total free blocks count 0 [ 39.878426][ T3796] EXT4-fs (loop1): Free/Dirty block details [ 39.884458][ T3796] EXT4-fs (loop1): free_blocks=0 [ 39.889542][ T3796] EXT4-fs (loop1): dirty_blocks=0 [ 39.894748][ T3796] EXT4-fs (loop1): Block reservation details [ 39.900794][ T3796] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 39.935834][ T29] audit: type=1400 audit(1748473523.831:155): avc: denied { mounton } for pid=3806 comm="syz.0.116" path="/25/bus" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.984150][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.009916][ T3809] loop1: detected capacity change from 0 to 1024 [ 40.016690][ T3809] EXT4-fs: Ignoring removed orlov option [ 40.024923][ T3809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.088044][ T3814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.119'. [ 40.122767][ T3814] netlink: 48 bytes leftover after parsing attributes in process `syz.2.119'. [ 40.163668][ T3814] netlink: 48 bytes leftover after parsing attributes in process `syz.2.119'. [ 40.195933][ T29] audit: type=1400 audit(1748473524.091:156): avc: denied { map } for pid=3813 comm="syz.2.119" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.220232][ T29] audit: type=1400 audit(1748473524.091:157): avc: denied { read write } for pid=3813 comm="syz.2.119" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.353827][ T3823] netlink: 304 bytes leftover after parsing attributes in process `syz.0.121'. [ 40.362959][ T3823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.121'. [ 40.470693][ T3827] loop2: detected capacity change from 0 to 2048 [ 40.480164][ T3831] loop0: detected capacity change from 0 to 512 [ 40.488704][ T3831] EXT4-fs (loop0): 1 truncate cleaned up [ 40.490779][ T3827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.494980][ T3831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.551241][ T29] audit: type=1400 audit(1748473524.451:158): avc: denied { mount } for pid=3835 comm="syz.4.127" name="/" dev="configfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 40.573856][ T29] audit: type=1400 audit(1748473524.451:159): avc: denied { search } for pid=3835 comm="syz.4.127" name="/" dev="configfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.595799][ T29] audit: type=1400 audit(1748473524.451:160): avc: denied { search } for pid=3835 comm="syz.4.127" name="/" dev="configfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.617751][ T29] audit: type=1400 audit(1748473524.451:161): avc: denied { read open } for pid=3835 comm="syz.4.127" path="/" dev="configfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.896633][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.918719][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.982469][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.030971][ T3855] loop4: detected capacity change from 0 to 2048 [ 41.043753][ T3859] loop3: detected capacity change from 0 to 512 [ 41.053318][ T3859] EXT4-fs (loop3): 1 truncate cleaned up [ 41.060977][ T3855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.073603][ T3859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.195959][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.227495][ T3867] loop1: detected capacity change from 0 to 1024 [ 41.244235][ T3867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.263601][ T3867] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 16 with error 28 [ 41.276171][ T3867] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.276171][ T3867] [ 41.285849][ T3867] EXT4-fs (loop1): Total free blocks count 0 [ 41.291872][ T3867] EXT4-fs (loop1): Free/Dirty block details [ 41.297778][ T3867] EXT4-fs (loop1): free_blocks=0 [ 41.302767][ T3867] EXT4-fs (loop1): dirty_blocks=0 [ 41.307823][ T3867] EXT4-fs (loop1): Block reservation details [ 41.313934][ T3867] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 41.320644][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.330005][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.347928][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.383472][ T3878] loop4: detected capacity change from 0 to 1024 [ 41.390678][ T3878] EXT4-fs: Ignoring removed orlov option [ 41.394631][ T3880] loop1: detected capacity change from 0 to 512 [ 41.399182][ T3878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.418279][ T3880] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.427442][ T3880] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 41.436982][ T3880] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 41.445950][ T3880] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 41.454120][ T3880] System zones: 0-2, 18-18, 34-34 [ 41.460434][ T3880] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 41.475384][ T3880] EXT4-fs (loop1): 1 truncate cleaned up [ 41.481590][ T3880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.500136][ T3880] batadv_slave_0: entered promiscuous mode [ 41.506358][ T3880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 41.518914][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.560567][ T3880] batadv_slave_0 (unregistering): left promiscuous mode [ 41.568020][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.575791][ T3886] raw_sendmsg: syz.1.143 forgot to set AF_INET. Fix it! [ 41.650297][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.678990][ T3888] loop1: detected capacity change from 0 to 2048 [ 41.707720][ T3890] loop2: detected capacity change from 0 to 512 [ 41.715510][ T3890] EXT4-fs: Ignoring removed orlov option [ 41.721866][ T3890] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 41.722406][ T3888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.744128][ T3890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 41.752563][ T3890] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.146: corrupted in-inode xattr: e_value size too large [ 41.767231][ T3890] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.146: couldn't read orphan inode 15 (err -117) [ 41.780033][ T3890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.794826][ T3896] netlink: 'syz.2.146': attribute type 39 has an invalid length. [ 41.913422][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.961625][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.982696][ T3901] loop2: detected capacity change from 0 to 512 [ 41.989456][ T3901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.996230][ T3901] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.031418][ T3901] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 42.042657][ T3901] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 42.051748][ T3901] EXT4-fs (loop2): 1 truncate cleaned up [ 42.058335][ T3901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.073899][ T3906] loop1: detected capacity change from 0 to 512 [ 42.082850][ T3906] EXT4-fs (loop1): 1 truncate cleaned up [ 42.089462][ T3906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.110111][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.170352][ T3911] loop2: detected capacity change from 0 to 1024 [ 42.202083][ T3911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.236257][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.272741][ T3916] loop3: detected capacity change from 0 to 8192 [ 42.280867][ T3918] loop0: detected capacity change from 0 to 512 [ 42.288481][ T3918] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 42.297269][ T3918] EXT4-fs (loop0): invalid journal inode [ 42.303466][ T3918] EXT4-fs (loop0): can't get journal size [ 42.307364][ T3911] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 16 with error 28 [ 42.311492][ T3918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 42.321678][ T3911] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.321678][ T3911] [ 42.330561][ T3918] System zones: [ 42.339276][ T3911] EXT4-fs (loop2): Total free blocks count 0 [ 42.339297][ T3911] EXT4-fs (loop2): Free/Dirty block details [ 42.339312][ T3911] EXT4-fs (loop2): free_blocks=0 [ 42.342852][ T3918] 1-12, 13-13 [ 42.343183][ T3918] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.153: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 42.348877][ T3911] EXT4-fs (loop2): dirty_blocks=0 [ 42.348894][ T3911] EXT4-fs (loop2): Block reservation details [ 42.355652][ T3918] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.153: couldn't read orphan inode 15 (err -117) [ 42.359759][ T3911] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 42.363596][ T3918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.470549][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.487995][ T3925] loop3: detected capacity change from 0 to 2048 [ 42.513006][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.513094][ T3925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.665633][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.670086][ T3939] C: renamed from team_slave_0 (while UP) [ 42.682782][ T3939] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 42.704314][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.714620][ T3939] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 42.791222][ T3947] loop2: detected capacity change from 0 to 8192 [ 42.806146][ T3957] loop3: detected capacity change from 0 to 1024 [ 42.896192][ T3968] loop3: detected capacity change from 0 to 512 [ 42.905133][ T3968] EXT4-fs (loop3): 1 truncate cleaned up [ 42.911688][ T3968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.956574][ T3971] loop2: detected capacity change from 0 to 2048 [ 42.982263][ T3971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.999713][ T3973] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 43.020812][ T3973] loop4: detected capacity change from 0 to 512 [ 43.032220][ T3973] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 43.047456][ T3973] EXT4-fs (loop4): invalid journal inode [ 43.063928][ T3973] EXT4-fs (loop4): can't get journal size [ 43.081987][ T3973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 43.090051][ T3973] System zones: 1-12, 13-13 [ 43.094817][ T3973] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.175: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 43.111594][ T3973] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.175: couldn't read orphan inode 15 (err -117) [ 43.159458][ T3982] loop4: detected capacity change from 0 to 1024 [ 43.169014][ T3982] EXT4-fs: Ignoring removed orlov option [ 43.244754][ T3994] IPv6: addrconf: prefix option has invalid lifetime [ 43.285150][ T4000] FAULT_INJECTION: forcing a failure. [ 43.285150][ T4000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.298292][ T4000] CPU: 1 UID: 0 PID: 4000 Comm: syz.3.185 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 43.298327][ T4000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.298342][ T4000] Call Trace: [ 43.298351][ T4000] [ 43.298360][ T4000] __dump_stack+0x1d/0x30 [ 43.298384][ T4000] dump_stack_lvl+0xe8/0x140 [ 43.298405][ T4000] dump_stack+0x15/0x1b [ 43.298441][ T4000] should_fail_ex+0x265/0x280 [ 43.298479][ T4000] should_fail+0xb/0x20 [ 43.298537][ T4000] should_fail_usercopy+0x1a/0x20 [ 43.298566][ T4000] _copy_to_user+0x20/0xa0 [ 43.298588][ T4000] simple_read_from_buffer+0xb5/0x130 [ 43.298617][ T4000] proc_fail_nth_read+0x100/0x140 [ 43.298811][ T4000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.298921][ T4000] vfs_read+0x1a0/0x6f0 [ 43.298952][ T4000] ? __rcu_read_unlock+0x4f/0x70 [ 43.298974][ T4000] ? __fget_files+0x184/0x1c0 [ 43.299059][ T4000] ksys_read+0xda/0x1a0 [ 43.299097][ T4000] __x64_sys_read+0x40/0x50 [ 43.299125][ T4000] x64_sys_call+0x2d77/0x2fb0 [ 43.299148][ T4000] do_syscall_64+0xd2/0x200 [ 43.299207][ T4000] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.299241][ T4000] ? clear_bhb_loop+0x40/0x90 [ 43.299283][ T4000] ? clear_bhb_loop+0x40/0x90 [ 43.299306][ T4000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.299326][ T4000] RIP: 0033:0x7fa34f31d37c [ 43.299341][ T4000] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 43.299358][ T4000] RSP: 002b:00007fa34d987030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.299390][ T4000] RAX: ffffffffffffffda RBX: 00007fa34f545fa0 RCX: 00007fa34f31d37c [ 43.299406][ T4000] RDX: 000000000000000f RSI: 00007fa34d9870a0 RDI: 0000000000000003 [ 43.299428][ T4000] RBP: 00007fa34d987090 R08: 0000000000000000 R09: 0000000000000000 [ 43.299443][ T4000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.299459][ T4000] R13: 0000000000000001 R14: 00007fa34f545fa0 R15: 00007ffd36830068 [ 43.299481][ T4000] [ 43.503892][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 43.503956][ T29] audit: type=1400 audit(1748473527.401:287): avc: denied { append } for pid=3993 comm="syz.1.183" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.552843][ T4006] __nla_validate_parse: 8 callbacks suppressed [ 43.552863][ T4006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 43.570337][ T4008] netlink: 32 bytes leftover after parsing attributes in process `syz.0.188'. [ 43.579431][ T29] audit: type=1400 audit(1748473527.471:288): avc: denied { create } for pid=4004 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.599720][ T4008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.188'. [ 43.610948][ T4008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.188'. [ 43.620564][ T29] audit: type=1400 audit(1748473527.491:289): avc: denied { setopt } for pid=3993 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.640184][ T29] audit: type=1400 audit(1748473527.491:290): avc: denied { read } for pid=3993 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.660342][ T29] audit: type=1400 audit(1748473527.491:291): avc: denied { ioctl } for pid=3993 comm="syz.1.183" path="socket:[6000]" dev="sockfs" ino=6000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.684901][ T29] audit: type=1400 audit(1748473527.491:292): avc: denied { bind } for pid=3993 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.706237][ T4006] bond1: entered promiscuous mode [ 43.711416][ T4006] bond1: entered allmulticast mode [ 43.716740][ T4006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.751197][ T4012] netlink: 304 bytes leftover after parsing attributes in process `syz.2.186'. [ 43.760285][ T4012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.186'. [ 43.769643][ T29] audit: type=1400 audit(1748473527.631:293): avc: denied { write } for pid=4004 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.789756][ T29] audit: type=1400 audit(1748473527.631:294): avc: denied { nlmsg_write } for pid=4004 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.877591][ T29] audit: type=1400 audit(1748473527.731:295): avc: denied { create } for pid=4015 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.897074][ T29] audit: type=1400 audit(1748473527.771:296): avc: denied { read write } for pid=4017 comm="syz.1.190" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 44.117579][ T4030] netlink: 304 bytes leftover after parsing attributes in process `syz.0.192'. [ 44.126664][ T4030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.192'. [ 44.172532][ T4032] loop1: detected capacity change from 0 to 512 [ 44.179572][ T4032] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 44.189734][ T4032] EXT4-fs (loop1): invalid journal inode [ 44.195494][ T4032] EXT4-fs (loop1): can't get journal size [ 44.257557][ T4032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 44.275936][ T4032] System zones: 1-12, 13-13 [ 44.290949][ T4032] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.196: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 44.319621][ T4032] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.196: couldn't read orphan inode 15 (err -117) [ 44.359605][ T4042] dns_resolver: Unsupported server list version (0) [ 44.430315][ T4044] loop0: detected capacity change from 0 to 1024 [ 44.485146][ T4050] netlink: 32 bytes leftover after parsing attributes in process `syz.1.202'. [ 44.494219][ T4050] netlink: 48 bytes leftover after parsing attributes in process `syz.1.202'. [ 44.655190][ T4061] loop1: detected capacity change from 0 to 1024 [ 44.665541][ T4061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.743568][ T4072] loop4: detected capacity change from 0 to 8192 [ 44.804304][ T4076] bond1: entered promiscuous mode [ 44.809420][ T4076] bond1: entered allmulticast mode [ 44.819059][ T4076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.922188][ T4074] loop3: detected capacity change from 0 to 8192 [ 44.971308][ T4092] pim6reg: entered allmulticast mode [ 44.980799][ T4090] loop4: detected capacity change from 0 to 2048 [ 45.000825][ T4092] pim6reg: left allmulticast mode [ 45.046883][ T4099] loop3: detected capacity change from 0 to 512 [ 45.122587][ T4099] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.131865][ T4099] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 45.180351][ T4099] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 45.210708][ T4099] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 45.229935][ T4099] System zones: 0-2, 18-18, 34-34 [ 45.291977][ T4099] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 45.307306][ T4099] EXT4-fs (loop3): 1 truncate cleaned up [ 45.412685][ T4107] loop0: detected capacity change from 0 to 1024 [ 45.486494][ T4108] loop4: detected capacity change from 0 to 8192 [ 45.610548][ T4107] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 16 with error 28 [ 45.623025][ T4107] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.623025][ T4107] [ 45.632751][ T4107] EXT4-fs (loop0): Total free blocks count 0 [ 45.638869][ T4107] EXT4-fs (loop0): Free/Dirty block details [ 45.644811][ T4107] EXT4-fs (loop0): free_blocks=0 [ 45.649892][ T4107] EXT4-fs (loop0): dirty_blocks=0 [ 45.655006][ T4107] EXT4-fs (loop0): Block reservation details [ 45.661084][ T4107] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 45.690827][ T4120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.698778][ T4120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.713318][ T4120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.721009][ T4120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.806205][ T4128] loop2: detected capacity change from 0 to 1024 [ 45.839115][ T4128] EXT4-fs: Ignoring removed orlov option [ 45.955514][ T4137] serio: Serial port ptm0 [ 46.034024][ T4137] loop0: detected capacity change from 0 to 256 [ 46.088777][ T4076] syz.1.211 (4076) used greatest stack depth: 6992 bytes left [ 46.132969][ T4137] FAT-fs (loop0): Directory bread(block 64) failed [ 46.180872][ T4137] FAT-fs (loop0): Directory bread(block 65) failed [ 46.194359][ T4156] loop1: detected capacity change from 0 to 1024 [ 46.205352][ T4137] FAT-fs (loop0): Directory bread(block 66) failed [ 46.214070][ T4156] EXT4-fs: Ignoring removed orlov option [ 46.238858][ T4137] FAT-fs (loop0): Directory bread(block 67) failed [ 46.261774][ T4160] loop4: detected capacity change from 0 to 512 [ 46.270470][ T4137] FAT-fs (loop0): Directory bread(block 68) failed [ 46.280935][ T4160] EXT4-fs: Ignoring removed orlov option [ 46.291091][ T4137] FAT-fs (loop0): Directory bread(block 69) failed [ 46.298196][ T4160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.307684][ T4160] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.314848][ T4160] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.239: bg 0: block 248: padding at end of block bitmap is not set [ 46.329562][ T4137] FAT-fs (loop0): Directory bread(block 70) failed [ 46.336176][ T4137] FAT-fs (loop0): Directory bread(block 71) failed [ 46.343050][ T4137] FAT-fs (loop0): Directory bread(block 72) failed [ 46.343700][ T4160] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.239: Failed to acquire dquot type 1 [ 46.349652][ T4137] FAT-fs (loop0): Directory bread(block 73) failed [ 46.413560][ T4160] EXT4-fs (loop4): 1 truncate cleaned up [ 46.761509][ T4168] loop3: detected capacity change from 0 to 128 [ 46.768164][ T4168] EXT4-fs: Ignoring removed bh option [ 46.780846][ T4169] loop0: detected capacity change from 0 to 1024 [ 46.802610][ T4169] EXT4-fs: Ignoring removed orlov option [ 46.808896][ T4168] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.994888][ T4186] bond2: entered promiscuous mode [ 47.000113][ T4186] bond2: entered allmulticast mode [ 47.037500][ T4186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 47.140440][ T4195] loop3: detected capacity change from 0 to 512 [ 47.200110][ T4195] EXT4-fs (loop3): 1 truncate cleaned up [ 47.530542][ T4204] loop4: detected capacity change from 0 to 128 [ 47.580254][ T4206] loop3: detected capacity change from 0 to 1024 [ 47.587248][ T4206] EXT4-fs: Ignoring removed orlov option [ 47.818922][ T4216] batadv_slave_0: entered promiscuous mode [ 47.847662][ T4216] batadv_slave_0 (unregistering): left promiscuous mode [ 48.018659][ T4231] batadv_slave_0: entered promiscuous mode [ 48.036843][ T4231] batadv_slave_0 (unregistering): left promiscuous mode [ 48.044761][ T4233] loop1: detected capacity change from 0 to 512 [ 48.062023][ T4229] loop0: detected capacity change from 0 to 512 [ 48.074970][ T4233] EXT4-fs (loop1): 1 truncate cleaned up [ 48.084525][ T4238] loop4: detected capacity change from 0 to 1024 [ 48.091604][ T4229] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 48.130811][ T4238] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 16 with error 28 [ 48.143317][ T4238] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.143317][ T4238] [ 48.153082][ T4238] EXT4-fs (loop4): Total free blocks count 0 [ 48.159132][ T4238] EXT4-fs (loop4): Free/Dirty block details [ 48.165052][ T4238] EXT4-fs (loop4): free_blocks=0 [ 48.170047][ T4238] EXT4-fs (loop4): dirty_blocks=0 [ 48.175119][ T4238] EXT4-fs (loop4): Block reservation details [ 48.181188][ T4238] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 48.190927][ T4229] EXT4-fs (loop0): invalid journal inode [ 48.196602][ T4229] EXT4-fs (loop0): can't get journal size [ 48.234134][ T4229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 48.258794][ T4229] System zones: 1-12, 13-13 [ 48.282896][ T4229] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.260: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 48.312756][ T4229] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.260: couldn't read orphan inode 15 (err -117) [ 48.415388][ T4254] bond1: entered promiscuous mode [ 48.420512][ T4254] bond1: entered allmulticast mode [ 48.465163][ T4254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.509429][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 48.509446][ T29] audit: type=1400 audit(1748735934.410:386): avc: denied { create } for pid=4264 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.544488][ T29] audit: type=1400 audit(1748735934.450:387): avc: denied { ioctl } for pid=4264 comm="syz.3.272" path="socket:[6445]" dev="sockfs" ino=6445 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.568969][ T29] audit: type=1400 audit(1748735934.450:388): avc: denied { bind } for pid=4264 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.588190][ T29] audit: type=1400 audit(1748735934.450:389): avc: denied { write } for pid=4264 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.638155][ T4272] Zero length message leads to an empty skb [ 48.653925][ T4272] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 48.655549][ T29] audit: type=1326 audit(1748735934.560:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7525f3e969 code=0x7ffc0000 [ 48.685154][ T29] audit: type=1326 audit(1748735934.560:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7525f3e969 code=0x7ffc0000 [ 48.708551][ T29] audit: type=1326 audit(1748735934.560:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7525f3e969 code=0x7ffc0000 [ 48.731824][ T29] audit: type=1326 audit(1748735934.560:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7525f3e969 code=0x7ffc0000 [ 48.755066][ T29] audit: type=1326 audit(1748735934.560:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7525f3e969 code=0x7ffc0000 [ 48.778435][ T29] audit: type=1326 audit(1748735934.560:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7525f3e969 code=0x7ffc0000 [ 48.867567][ T4270] __nla_validate_parse: 18 callbacks suppressed [ 48.867630][ T4270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.273'. [ 48.902271][ T4275] loop2: detected capacity change from 0 to 1024 [ 48.935517][ T4275] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 16 with error 28 [ 48.948023][ T4275] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.948023][ T4275] [ 48.957705][ T4275] EXT4-fs (loop2): Total free blocks count 0 [ 48.963729][ T4275] EXT4-fs (loop2): Free/Dirty block details [ 48.969662][ T4275] EXT4-fs (loop2): free_blocks=0 [ 48.974634][ T4275] EXT4-fs (loop2): dirty_blocks=0 [ 48.979757][ T4275] EXT4-fs (loop2): Block reservation details [ 48.985794][ T4275] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 49.157152][ T4285] loop1: detected capacity change from 0 to 8192 [ 49.264368][ T4294] loop3: detected capacity change from 0 to 512 [ 49.309455][ T4294] EXT4-fs (loop3): 1 truncate cleaned up [ 49.409521][ T4304] FAULT_INJECTION: forcing a failure. [ 49.409521][ T4304] name failslab, interval 1, probability 0, space 0, times 0 [ 49.422208][ T4304] CPU: 1 UID: 0 PID: 4304 Comm: syz.4.287 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 49.422242][ T4304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.422313][ T4304] Call Trace: [ 49.422321][ T4304] [ 49.422330][ T4304] __dump_stack+0x1d/0x30 [ 49.422359][ T4304] dump_stack_lvl+0xe8/0x140 [ 49.422386][ T4304] dump_stack+0x15/0x1b [ 49.422430][ T4304] should_fail_ex+0x265/0x280 [ 49.422465][ T4304] ? dev_ethtool+0x96/0x1650 [ 49.422492][ T4304] should_failslab+0x8c/0xb0 [ 49.422515][ T4304] __kmalloc_cache_noprof+0x4c/0x320 [ 49.422574][ T4304] dev_ethtool+0x96/0x1650 [ 49.422600][ T4304] ? full_name_hash+0x92/0xe0 [ 49.422671][ T4304] ? strcmp+0x22/0x50 [ 49.422796][ T4304] dev_ioctl+0x2e0/0x960 [ 49.422827][ T4304] sock_do_ioctl+0x197/0x220 [ 49.422863][ T4304] sock_ioctl+0x41b/0x610 [ 49.422980][ T4304] ? __pfx_sock_ioctl+0x10/0x10 [ 49.423068][ T4304] __se_sys_ioctl+0xcb/0x140 [ 49.423103][ T4304] __x64_sys_ioctl+0x43/0x50 [ 49.423191][ T4304] x64_sys_call+0x19a8/0x2fb0 [ 49.423214][ T4304] do_syscall_64+0xd2/0x200 [ 49.423246][ T4304] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.423271][ T4304] ? clear_bhb_loop+0x40/0x90 [ 49.423297][ T4304] ? clear_bhb_loop+0x40/0x90 [ 49.423394][ T4304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.423422][ T4304] RIP: 0033:0x7f154ce4e969 [ 49.423441][ T4304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.423529][ T4304] RSP: 002b:00007f154b4b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.423558][ T4304] RAX: ffffffffffffffda RBX: 00007f154d075fa0 RCX: 00007f154ce4e969 [ 49.423602][ T4304] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 49.423614][ T4304] RBP: 00007f154b4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.423625][ T4304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.423637][ T4304] R13: 0000000000000000 R14: 00007f154d075fa0 R15: 00007ffc8a0ebdd8 [ 49.423655][ T4304] [ 49.640741][ T4300] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 49.772617][ T4323] loop4: detected capacity change from 0 to 512 [ 49.790686][ T4323] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.799864][ T4323] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 49.861272][ T4323] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 49.880686][ T4323] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 49.888935][ T4323] System zones: 0-2, 18-18, 34-34 [ 49.894730][ T4323] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 49.919236][ T4323] EXT4-fs (loop4): 1 truncate cleaned up [ 49.940419][ T4323] batadv_slave_0: entered promiscuous mode [ 49.946842][ T4323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 49.957760][ T4335] loop2: detected capacity change from 0 to 512 [ 49.965140][ T4335] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.967123][ T4323] batadv_slave_0 (unregistering): left promiscuous mode [ 49.974211][ T4335] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 49.976463][ T4335] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 49.989758][ T4337] loop3: detected capacity change from 0 to 1024 [ 50.005237][ T4335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 50.013321][ T4335] System zones: 0-2, 18-18, 34-34 [ 50.018835][ T4335] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 50.034174][ T4335] EXT4-fs (loop2): 1 truncate cleaned up [ 50.046218][ T4337] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 16 with error 28 [ 50.058808][ T4337] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.058808][ T4337] [ 50.061471][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 50.068488][ T4337] EXT4-fs (loop3): Total free blocks count 0 [ 50.083495][ T4337] EXT4-fs (loop3): Free/Dirty block details [ 50.085131][ T4344] bond2: entered promiscuous mode [ 50.089531][ T4337] EXT4-fs (loop3): free_blocks=0 [ 50.094611][ T4344] bond2: entered allmulticast mode [ 50.099610][ T4337] EXT4-fs (loop3): dirty_blocks=0 [ 50.106924][ T4344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 50.109929][ T4337] EXT4-fs (loop3): Block reservation details [ 50.122567][ T4337] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 50.165436][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 50.276156][ T4354] loop3: detected capacity change from 0 to 512 [ 50.298023][ T4354] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.307314][ T4354] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 50.320097][ T4354] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 50.330782][ T4354] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 50.338873][ T4354] System zones: 0-2, 18-18, 34-34 [ 50.344357][ T4354] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 50.360100][ T4354] EXT4-fs (loop3): 1 truncate cleaned up [ 50.440455][ T4367] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 50.448132][ T4367] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.309'. [ 50.498232][ T4372] netlink: 'syz.3.311': attribute type 4 has an invalid length. [ 50.506877][ T4372] xt_hashlimit: max too large, truncated to 1048576 [ 50.552615][ T4375] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 50.552672][ T4377] loop2: detected capacity change from 0 to 512 [ 50.759922][ T4377] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.769102][ T4377] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 50.804797][ T4377] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 50.826586][ T4377] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 50.890879][ T4377] System zones: 0-2, 18-18, 34-34 [ 50.911470][ T4377] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 50.952461][ T4377] EXT4-fs (loop2): 1 truncate cleaned up [ 51.035819][ T4371] syz.3.311 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 51.046818][ T4371] CPU: 1 UID: 0 PID: 4371 Comm: syz.3.311 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 51.046852][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.046868][ T4371] Call Trace: [ 51.046877][ T4371] [ 51.046887][ T4371] __dump_stack+0x1d/0x30 [ 51.046993][ T4371] dump_stack_lvl+0xe8/0x140 [ 51.047019][ T4371] dump_stack+0x15/0x1b [ 51.047046][ T4371] dump_header+0x81/0x220 [ 51.047079][ T4371] oom_kill_process+0x334/0x3f0 [ 51.047156][ T4371] out_of_memory+0x979/0xb80 [ 51.047188][ T4371] ? css_next_descendant_pre+0x138/0x160 [ 51.047211][ T4371] mem_cgroup_out_of_memory+0x13d/0x190 [ 51.047239][ T4371] try_charge_memcg+0x5e2/0x870 [ 51.047309][ T4371] charge_memcg+0x51/0xc0 [ 51.047340][ T4371] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 51.047389][ T4371] __read_swap_cache_async+0x1df/0x350 [ 51.047430][ T4371] swap_cluster_readahead+0x277/0x3e0 [ 51.047500][ T4371] swapin_readahead+0xde/0x6f0 [ 51.047526][ T4371] ? __filemap_get_folio+0x49f/0x650 [ 51.047568][ T4371] ? swap_cache_get_folio+0x77/0x200 [ 51.047672][ T4371] do_swap_page+0x301/0x2460 [ 51.047710][ T4371] ? _raw_spin_unlock+0x26/0x50 [ 51.047806][ T4371] ? finish_task_switch+0xad/0x2b0 [ 51.047837][ T4371] ? __pfx_default_wake_function+0x10/0x10 [ 51.047869][ T4371] handle_mm_fault+0x9a5/0x2c00 [ 51.047979][ T4371] ? mas_walk+0xf2/0x120 [ 51.048060][ T4371] do_user_addr_fault+0x636/0x1090 [ 51.048102][ T4371] ? fpregs_restore_userregs+0xe2/0x1d0 [ 51.048136][ T4371] ? switch_fpu_return+0xe/0x20 [ 51.048255][ T4371] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.048288][ T4371] exc_page_fault+0x62/0xa0 [ 51.048320][ T4371] asm_exc_page_fault+0x26/0x30 [ 51.048344][ T4371] RIP: 0033:0x7fa34f1f53ac [ 51.048439][ T4371] Code: 66 0f 1f 44 00 00 69 3d 06 03 e8 00 e8 03 00 00 48 8d 1d 07 0c 35 00 e8 22 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 51.048525][ T4371] RSP: 002b:00007ffd368301d0 EFLAGS: 00010202 [ 51.048543][ T4371] RAX: 0000000000000000 RBX: 00007fa34f545fa0 RCX: 0000000000000000 [ 51.048557][ T4371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555559446808 [ 51.048644][ T4371] RBP: 00007fa34f547ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 51.048657][ T4371] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000c866 [ 51.048733][ T4371] R13: 00007fa34f546080 R14: ffffffffffffffff R15: 00007ffd368302e0 [ 51.048760][ T4371] [ 51.289890][ T4371] memory: usage 307200kB, limit 307200kB, failcnt 341 [ 51.296679][ T4371] memory+swap: usage 303228kB, limit 9007199254740988kB, failcnt 0 [ 51.304676][ T4371] kmem: usage 291352kB, limit 9007199254740988kB, failcnt 0 [ 51.312017][ T4371] Memory cgroup stats for /syz3: [ 51.356402][ T4387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.315'. [ 51.376228][ T4371] cache 0 [ 51.379419][ T4371] rss 0 [ 51.382197][ T4371] shmem 0 [ 51.385306][ T4371] mapped_file 0 [ 51.388929][ T4371] dirty 0 [ 51.391884][ T4371] writeback 8192 [ 51.395442][ T4371] workingset_refault_anon 92 [ 51.400224][ T4371] workingset_refault_file 182 [ 51.404909][ T4371] swap 188416 [ 51.408280][ T4371] swapcached 20480 [ 51.412189][ T4371] nr_memmap_boot_pages 25756 [ 51.416821][ T4371] pgpgin 25751 [ 51.420355][ T4371] pglazyfree 28212 [ 51.424087][ T4371] pgfault 81 [ 51.427427][ T4371] a_other 8192 [ 51.430969][ T4371] inactive_anon 12288 [ 51.434958][ T4371] active_anon 0 [ 51.438455][ T4371] inactive_file 0 [ 51.442326][ T4371] active_file 0 [ 51.445808][ T4371] hierarchical_memory_limit 314572800 [ 51.448946][ T4377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 51.451340][ T4371] hierarchical_memsw_limit 9223372036854771712 [ 51.451352][ T4371] total_cache 0 [ 51.470030][ T4371] total_rss 0 [ 51.473392][ T4371] total_shmem 0 [ 51.476848][ T4371] total_mapped_file 0 [ 51.480877][ T4371] total_dirty 0 [ 51.484340][ T4371] total_writeback 8192 [ 51.488455][ T4371] total_workingset_refault_anon 92 [ 51.493604][ T4371] total_workingset_refault_file 182 [ 51.498880][ T4371] total_swap 188416 [ 51.502822][ T4371] total_swapcached 20480 [ 51.507078][ T4371] total_nr_memmap_boot_pages 25756 [ 51.512253][ T4371] total_pgpgin 25751 [ 51.516157][ T4371] total_pglazyfree 28212 [ 51.520502][ T4371] total_pgfault 81 [ 51.524226][ T4371] total_a_other 8192 [ 51.528207][ T4371] total_inactive_anon 12288 [ 51.532729][ T4371] total_active_anon 0 [ 51.536749][ T4371] total_inactive_file 0 [ 51.540951][ T4387] netlink: 'syz.0.315': attribute type 2 has an invalid length. [ 51.540968][ T4371] total_active_file 0 [ 51.540986][ T4371] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.311,pid=4371,uid=0 [ 51.567271][ T4371] Memory cgroup out of memory: Killed process 4371 (syz.3.311) total-vm:95796kB, anon-rss:936kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 51.620222][ T4393] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 51.627912][ T4393] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.318'. [ 51.704919][ T4400] loop2: detected capacity change from 0 to 256 [ 51.721212][ T4400] FAT-fs (loop2): Directory bread(block 64) failed [ 51.727916][ T4400] FAT-fs (loop2): Directory bread(block 65) failed [ 51.751661][ T4402] loop0: detected capacity change from 0 to 512 [ 51.752970][ T4399] loop1: detected capacity change from 0 to 2048 [ 51.758719][ T4400] FAT-fs (loop2): Directory bread(block 66) failed [ 51.775228][ T4400] FAT-fs (loop2): Directory bread(block 67) failed [ 51.782758][ T4402] EXT4-fs (loop0): 1 truncate cleaned up [ 51.789093][ T4400] FAT-fs (loop2): Directory bread(block 68) failed [ 51.795647][ T4400] FAT-fs (loop2): Directory bread(block 69) failed [ 51.804811][ T4400] FAT-fs (loop2): Directory bread(block 70) failed [ 51.813238][ T4400] FAT-fs (loop2): Directory bread(block 71) failed [ 51.821420][ T4400] FAT-fs (loop2): Directory bread(block 72) failed [ 51.828411][ T4400] FAT-fs (loop2): Directory bread(block 73) failed [ 51.829057][ T4391] wireguard0: entered promiscuous mode [ 51.840495][ T4391] wireguard0: entered allmulticast mode [ 52.016971][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 52.032099][ T4416] bond2: entered promiscuous mode [ 52.037219][ T4416] bond2: entered allmulticast mode [ 52.051880][ T4416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.223047][ T4430] loop4: detected capacity change from 0 to 512 [ 52.264047][ T4435] loop1: detected capacity change from 0 to 512 [ 52.283319][ T4435] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 52.306711][ T4430] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.314030][ T4435] EXT4-fs (loop1): invalid journal inode [ 52.319807][ T4430] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.328797][ T4435] EXT4-fs (loop1): can't get journal size [ 52.338994][ T4435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 52.360073][ T4430] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 52.369351][ T4430] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 52.386377][ T4435] System zones: 1-12, 13-13 [ 52.396223][ T4430] EXT4-fs (loop4): 1 truncate cleaned up [ 52.402262][ T4435] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.330: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 52.419427][ T4430] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 52.429264][ T4435] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.330: couldn't read orphan inode 15 (err -117) [ 52.504938][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 52.513975][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.521448][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.538590][ T4444] loop2: detected capacity change from 0 to 512 [ 52.545938][ T4444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.555242][ T4444] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.567206][ T4444] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 52.577561][ T4447] loop4: detected capacity change from 0 to 512 [ 52.584040][ T4444] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 52.771272][ T4447] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.780477][ T4447] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 52.789284][ T4444] EXT4-fs (loop2): 1 truncate cleaned up [ 52.797134][ T4447] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 52.830166][ T4447] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 52.877945][ T4447] System zones: 0-2, 18-18, 34-34 [ 52.912589][ T4447] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 52.972081][ T4456] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 52.982939][ T4447] EXT4-fs (loop4): 1 truncate cleaned up [ 53.001610][ T4456] loop2: detected capacity change from 0 to 512 [ 53.081831][ T4456] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 53.105042][ T4458] loop1: detected capacity change from 0 to 8192 [ 53.178389][ T4456] EXT4-fs (loop2): invalid journal inode [ 53.188433][ T4456] EXT4-fs (loop2): can't get journal size [ 53.219322][ T4456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 53.250172][ T4456] System zones: 1-12, 13-13 [ 53.257143][ T4456] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.339: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 53.292788][ T4464] loop4: detected capacity change from 0 to 2048 [ 53.308993][ T4456] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.339: couldn't read orphan inode 15 (err -117) [ 53.338257][ T4468] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 53.362148][ T4468] loop1: detected capacity change from 0 to 512 [ 53.392623][ T4468] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 53.424787][ T4468] EXT4-fs (loop1): invalid journal inode [ 53.465580][ T4468] EXT4-fs (loop1): can't get journal size [ 53.476972][ T4468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 53.513186][ T4468] System zones: 1-12, 13-13 [ 53.519309][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 53.519357][ T29] audit: type=1400 audit(1748735939.430:455): avc: denied { ioctl } for pid=4479 comm="syz.3.348" path="socket:[6870]" dev="sockfs" ino=6870 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.563055][ T4468] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.343: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 53.586781][ T4480] netlink: '+}[@': attribute type 10 has an invalid length. [ 53.604721][ T4480] team0: entered promiscuous mode [ 53.618558][ T4480] team_slave_0: entered promiscuous mode [ 53.624365][ T4480] team_slave_1: entered promiscuous mode [ 53.637322][ T29] audit: type=1400 audit(1748735939.460:456): avc: denied { setopt } for pid=4479 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.656717][ T29] audit: type=1400 audit(1748735939.460:457): avc: denied { read } for pid=4479 comm="syz.3.348" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 53.680078][ T29] audit: type=1400 audit(1748735939.460:458): avc: denied { open } for pid=4479 comm="syz.3.348" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 53.688966][ T4468] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.343: couldn't read orphan inode 15 (err -117) [ 53.703893][ T29] audit: type=1400 audit(1748735939.470:459): avc: denied { ioctl } for pid=4479 comm="syz.3.348" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 53.735525][ T4480] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.740843][ T29] audit: type=1400 audit(1748735939.470:460): avc: denied { connect } for pid=4479 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.768443][ T4480] bridge0: port 3(team0) entered blocking state [ 53.774866][ T4480] bridge0: port 3(team0) entered disabled state [ 53.783600][ T4480] team0: entered allmulticast mode [ 53.794799][ T4480] team_slave_0: entered allmulticast mode [ 53.800613][ T4480] team_slave_1: entered allmulticast mode [ 53.904270][ T4494] loop3: detected capacity change from 0 to 512 [ 53.918061][ T4494] EXT4-fs (loop3): 1 truncate cleaned up [ 53.950098][ T4496] loop4: detected capacity change from 0 to 8192 [ 54.025996][ T4498] netlink: 'syz.0.351': attribute type 4 has an invalid length. [ 54.033894][ T4498] __nla_validate_parse: 3 callbacks suppressed [ 54.033910][ T4498] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.351'. [ 54.157180][ T29] audit: type=1400 audit(1748735940.060:461): avc: denied { bind } for pid=4503 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.201403][ T4507] netlink: 144 bytes leftover after parsing attributes in process `syz.4.356'. [ 54.236631][ T4507] loop4: detected capacity change from 0 to 512 [ 54.263265][ T29] audit: type=1400 audit(1748735940.060:462): avc: denied { setopt } for pid=4503 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.282842][ T29] audit: type=1400 audit(1748735940.060:463): avc: denied { setopt } for pid=4503 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.302165][ T29] audit: type=1400 audit(1748735940.080:464): avc: denied { write } for pid=4503 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.322024][ T4511] loop3: detected capacity change from 0 to 512 [ 54.348703][ T4511] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.357883][ T4511] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 54.400980][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.409188][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.417358][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.425678][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.433864][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.442098][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.450269][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.458362][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.466591][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.474768][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.482896][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.490997][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.499103][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.507293][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.526908][ T4516] netlink: 'syz.1.357': attribute type 9 has an invalid length. [ 54.534637][ T4516] netlink: 'syz.1.357': attribute type 7 has an invalid length. [ 54.542368][ T4516] netlink: 'syz.1.357': attribute type 8 has an invalid length. [ 54.553735][ T4507] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 54.568432][ T4511] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 54.590263][ T4516] xt_TPROXY: Can be used only with -p tcp or -p udp [ 54.607896][ T4516] dccp_invalid_packet: P.CsCov 8 exceeds packet length 64 [ 54.615785][ T4507] EXT4-fs (loop4): mount failed [ 54.617843][ T4511] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 54.635514][ T4511] System zones: 0-2, 18-18, 34-34 [ 54.648810][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.657007][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.665212][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.673405][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.681688][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.689807][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.697921][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.706036][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.714234][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.719089][ T4507] loop4: detected capacity change from 0 to 512 [ 54.722364][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.728657][ T4511] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 54.736648][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.736670][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.736691][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.736716][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.783531][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 54.789059][ T4511] EXT4-fs (loop3): 1 truncate cleaned up [ 54.793793][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0001: hidraw0: HID va0.69 Device [syz0] on syz1 [ 54.830543][ T4507] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.857181][ T4519] loop0: detected capacity change from 0 to 512 [ 54.863119][ T4507] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 54.874752][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 54.884501][ T4507] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 54.893427][ T4519] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 54.901763][ T4507] System zones: 0-2, 18-18, 34-35 [ 54.956978][ T4519] EXT4-fs (loop0): invalid journal inode [ 54.963350][ T4519] EXT4-fs (loop0): can't get journal size [ 54.970726][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 54.973622][ T4519] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 54.988118][ T4519] System zones: 1-12, 13-13 [ 54.999326][ T4519] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.359: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 55.018820][ T4519] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.359: couldn't read orphan inode 15 (err -117) [ 55.127493][ T4531] loop1: detected capacity change from 0 to 8192 [ 55.244729][ T4542] loop3: detected capacity change from 0 to 512 [ 55.259992][ T4542] EXT4-fs (loop3): 1 truncate cleaned up [ 55.354951][ T3324] ================================================================== [ 55.363102][ T3324] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 55.370885][ T3324] [ 55.373227][ T3324] write to 0xffff888237c25e68 of 1 bytes by task 4542 on cpu 0: [ 55.380871][ T3324] folios_put_refs+0x285/0x2d0 [ 55.385659][ T3324] folio_batch_move_lru+0x1fd/0x230 [ 55.390884][ T3324] folio_add_lru+0x14a/0x1f0 [ 55.395497][ T3324] migrate_pages_batch+0x10d2/0x17d0 [ 55.400794][ T3324] migrate_pages+0xf5f/0x1770 [ 55.405477][ T3324] __se_sys_mbind+0x975/0xac0 [ 55.410172][ T3324] __x64_sys_mbind+0x78/0x90 [ 55.414808][ T3324] x64_sys_call+0x14af/0x2fb0 [ 55.419502][ T3324] do_syscall_64+0xd2/0x200 [ 55.424028][ T3324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.429936][ T3324] [ 55.432262][ T3324] read to 0xffff888237c25e68 of 1 bytes by task 3324 on cpu 1: [ 55.439811][ T3324] __lru_add_drain_all+0x12b/0x3f0 [ 55.444951][ T3324] lru_add_drain_all+0x10/0x20 [ 55.449758][ T3324] invalidate_bdev+0x47/0x70 [ 55.454375][ T3324] ext4_put_super+0x624/0x7d0 [ 55.459068][ T3324] generic_shutdown_super+0xe6/0x210 [ 55.464375][ T3324] kill_block_super+0x2a/0x70 [ 55.469074][ T3324] ext4_kill_sb+0x42/0x80 [ 55.473445][ T3324] deactivate_locked_super+0x72/0x1c0 [ 55.478834][ T3324] deactivate_super+0x97/0xa0 [ 55.483523][ T3324] cleanup_mnt+0x269/0x2e0 [ 55.487945][ T3324] __cleanup_mnt+0x19/0x20 [ 55.492367][ T3324] task_work_run+0x12e/0x1a0 [ 55.496976][ T3324] exit_to_user_mode_loop+0xe4/0x100 [ 55.502269][ T3324] do_syscall_64+0x1d6/0x200 [ 55.506880][ T3324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.512778][ T3324] [ 55.515099][ T3324] value changed: 0x01 -> 0x00 [ 55.519774][ T3324] [ 55.522100][ T3324] Reported by Kernel Concurrency Sanitizer on: [ 55.528249][ T3324] CPU: 1 UID: 0 PID: 3324 Comm: syz-executor Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(voluntary) [ 55.540506][ T3324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.550569][ T3324] ================================================================== [ 55.559103][ T4547] loop2: detected capacity change from 0 to 8192 [ 55.571178][ T4549] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 55.592258][ T4549] SELinux: failed to load policy