last executing test programs: 1m31.247540543s ago: executing program 4 (id=2441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgsnd(0x0, 0x0, 0x2000, 0x0) 1m31.205650498s ago: executing program 4 (id=2442): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 1m31.068346511s ago: executing program 4 (id=2445): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4004) socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x329, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {0x0}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, &(0x7f0000000240)) 1m30.992501349s ago: executing program 4 (id=2449): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x12, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x0, 0x4) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000780)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000002000000000000000000180000000800000000000000fc0000009500000000000000"], &(0x7f0000000d40)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x49c5}, 0x94) ioprio_set$pid(0x2, 0x0, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x248, 0x3a, 'syzkaller\x00', 0x3a, '\xf6+', 0x3a, './file1', 0x3a, [0x50, 0x46]}, 0x35) r7 = syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3800204, &(0x7f0000003240)=ANY=[], 0x3, 0x33c, &(0x7f00000002c0)="$eJzs3M1LI2ccwPFfXk0imhxKSwvFh/bSXoaY9lwaikJpoKKmVAvCqJM2ZJpIJlhSStVTr6X3ngo9iEdvQus/4KW37mUve8tlYQ8ry7JZ5s28amI2blz9fmCZZ57n+c08T57J8pvBSePb338sFSytoNckGFMSEBE5F0lJUHwBbxt0ylFpty8fTz/5//2VtfWvsrncwrJSi9nVTzJKqdm5f376Je51O5mSs9RG43Hm0dnbZ+82Xqz+ULRU0VLlSk3parPysKZvmobaLlolTakl09AtQxXLllF12ytue8Gs7OzUlV7enknsVA3LUnq5rkpGXdUqqlatK/17vVhWmqapmYRgAHtBl/XsiNFbYx4Nbki1mtVDIhLvackfTmRAAABgorrz/6Cd0o+U/8usk//bnVv5/9EHp7Xpb45nT+zYjcZJtF/+/+kD91gd+X9MREbJ//+Ua+T/vRnR/ZI/XB49/8ftMBftqQp07Nn5f8L7/joOvjtKOwXyfwAAAAAAAAAAAAAAAAAAAAAA3gTnzWay2Wwm/a3/r/UKgbePO+my9Z8SkZi9+k3W/y5bWVuXmPPinr3G5m+7+d28u/U6nIqIKYakI85u84Jd9t88UraU/GvuOfHP7G3IackWpOjEz0tSUm58yIuyy4tf5hbmlcuLv3hNKdEen5GkvNV9fjc+0xlvj39vNx+Vjz5si9ckKf9tSUVM2XbO3Yr/dV6pL77OdcXH3ZMAAAAAAHAHaEoFvNvnVOf9r3uXrmlK9W93f2UkW3AeExmSlqQ8739/nu57fx5Ovhee9OwBAAAAALgfrPrPJd00jeoVhbgM7jN6ITxc52hXTeSqzqG2GQ47nqjzIEPkVef115CfakfB/0OKjqaYVznaePz5j2299ttrgjJEVLh78HN2hbrm2Q+8iVzU+I+Nopd8zrLUe5zgFVdCZGzX8zt//P10fF+Qz479K2Bw54NBB4xfciHFuq86pxC56f93AAAAALx+raTfr/m8vTkwkUEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDP3MhP+nUVJj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LZ4GQAA///hFPFh") r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x609e495c}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r8, 0x0, 0x4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffb, 0xfffffffc}, 0x0) sendfile(r10, r10, 0x0, 0x800000009) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x9c}}, 0xc884) socket$xdp(0x2c, 0x3, 0x0) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r11, 0x13) waitid(0x1, r11, 0x0, 0x2, 0x0) waitid(0x1, r11, 0x0, 0x2, 0x0) sendmmsg$unix(r10, &(0x7f00000012c0)=[{{&(0x7f0000000980)=@file={0x9bcd0660693a1384, './file1/file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000a00)="8c25028b0bb373b8f9c6846c53d32bcb8f150e00a4f25045166747a239999ba8eb3d1d70133246f619d2be0e11cfedb22da8ab8804f8e3b00b59c1faa62908c759dd819d973306a70d9be58d98df663f5807f6b01117cf071514ebe5eb30e6cc8b03af2da2859dc11809a6b661cb5f60c3d24496ce50bcaaab16ff5572f76ff15864b1c4ec9a4c1c92fbd82d9c441248d006b9c2dda195e98a1be6be51fa788df6ee271c1bc8271abc425f548fa037741776baae6cd641783439e10e813d8b40342d6d", 0xc3}, {&(0x7f0000000b00)="1d967f388e769709798d39e24ee3ef6201bb36ed445b321d8cdf9582e3fad716c1541d8348257e4cce9e74c3d020ecf3b1db5d8d248def9a028755a961bda2ac624d8a5e0047bd419c3f562cd473b8b5b50f79a246eb52b076aa8c9915b787ab2025a63440a91592629f8fd09929afdc09ba25", 0x73}, {&(0x7f0000000b80)="d0efc8e3372d4e227d97aa6d484ece6fc17982cab942a3709345794de66f82c5ecc558bf6887016c36584bc1af7819035a8c10be5aa6bc2537d3bc6628e675b15f4a8bd6796accc23ac8366ef61af26447d3445187e5cb145650500efcbfce58249f421f5884e883225bcc08ded65b743ac16cc99f3470cab7db12da64b2", 0x7e}, {&(0x7f0000000e80)="92f75a973985083f32267b3e3177b6fb4ac56c40eb335f48cab399bf60e51c736c17864285a1879bcec058e99a8a4e10a8d4f198f012f49ce90c5502e873087efeb88df4ff521312e2e2d035af51ee74a9ec0d9542d72ae66080dcb9e417a281a0bac0b8a3f12cc63d5467f82d91c9", 0x6f}], 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r9, @ANYRESHEX=r6, @ANYRES32, @ANYRES32=r6, @ANYBLOB="000060623d0174c34f59dc1fd9ee7cd8fcd21679520cd1b6bf794fffbfbff4965e46cb50c5d10c278c6568bde79a33a765f233c1aa569bd0e34558939d8fcf02f19f2713e0eea5d4ccb18bfa5ad2315cbb8a11c9da265bccbc53dd49ec0ca60bedd2d1b2b3a252e386a7f46459078524d85018d751f1dd73a9f4e917a20aa03ddb171aed70", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES8=r4, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f0000000fc0)=@file={0x0, './file1/file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000600)="ff15414eab14f2134b598a7dc4d2e4c1943be9268d056f6e0c07f3e471d057af8702e16abf87ad1381ff05e5671c117a2dd913b38d82", 0x36}, {&(0x7f0000001040)="fdcb090d4bb24c9fa88f14276678d7faab85cc2fc2e731f66a94e38354115dbec9e623a94d5dd1e582bf95029fda98abed1002da20495685c26cbcc6ec1d5b2a700e8bb6f291c025084d727471f0bff0b55746f05230084546f409e45e813d4bd0c903efc3f088fbb49c0cec488d3135021f94cf50043f70a43a0404ba0bb6bec1333fe800e141016440b0dd317f3de5ec9258d4d563ae7caeadd72ae33d67", 0x9f}, {&(0x7f0000000680)="45e090a93e306a853483fe44d54234a6e9384fbb09cc7882221ac1d6f847012a3d54d634c986434da8eec39c051c6bb03fdf3df0eb69665fa28b", 0x3a}, {&(0x7f0000000740)="7f9768a1", 0x4}, {&(0x7f00000011c0)="1d99a52f3cf74e956e57016a6d410a522c0f9cd0c28d204c7a9944e521e1291ed0d636e9ebe7352d252163c9194fe378bf7392491775b96aac4dd316f62dcd7bd605f5dbd397740a417567a15d043d1fcef0bcbf8d0b7e032c3f6ef9170c", 0x5e}, {&(0x7f0000000c00)="64acdde004bc", 0x6}], 0x6, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {r11, 0xee00}}}], 0x20, 0x10}}], 0x2, 0x0) 1m30.071123382s ago: executing program 4 (id=2473): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xf5ff, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x9, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb9a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x800009, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0xfffffffd, 0x0, 0xb3c, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x26c, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m29.365943482s ago: executing program 4 (id=2490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0x100000000000000}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x38) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 1m29.365740012s ago: executing program 32 (id=2490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0x100000000000000}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x38) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 6.290477579s ago: executing program 0 (id=3695): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r6, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)="f14889c2ad234ad6f0c149453a02006fc36d89b8225b5e5e5025ff2c8e73ef0911ca3b8fa59a43c606a3bbd98f34d26946c9aec0130f641fdd493d24bacf69c8178118496625e10b77cd241975d5b92e22fa0211abf6a8352f49ea15a12ae696589acb2538041e4004ffcf4b665355ae32678e0a835674f59f5aef3af78ae748f2e816cd276102000000d4e5f6725f5bd3272455ccceaca844e37aebee85da630c66f4fa6e6607b31080e04a1e", 0xad}, {&(0x7f00000002c0)="c295dc6bb8959e0fd25b8ecb94b1d0c18cbf3fafb4b1fe3be8e22540e88aaabcce46fb5e4207f76d8555e693b8efba3d3e204506975d8167015cebd750e1a8a915a19a35cbdd39c91dfefa0fa8a22c01285334b55418fb876eeaaf6bb17cd1ed777d46bd6840dd880800018e8c3bce", 0x6f}, {&(0x7f0000000180)="209a34cac1b8e6b621cb929cda5b583c7ce00f604e550dc2ba334d3be076134308e9c69a07c1cf03f4d2fe263bbb", 0x2e}], 0x3}, 0x20000044) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r7}, 0x10) 5.669385881s ago: executing program 1 (id=3696): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x101100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 5.505766397s ago: executing program 5 (id=3697): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000c"], 0x50) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 5.386924709s ago: executing program 2 (id=3698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f00000005c0)={0x2000a210}) epoll_wait(r5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.970307021s ago: executing program 0 (id=3699): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) 4.893693729s ago: executing program 5 (id=3700): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 4.631501065s ago: executing program 1 (id=3702): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 4.569453991s ago: executing program 0 (id=3703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd0fffc02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r5], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@dellinkprop={0x74, 0x6c, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x30004, 0x2800}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0xffffffffffffff55}, {0x14, 0x35, 'ip6_vti0\x00'}, {0x14, 0x35, 'bridge_slave_0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000", @ANYBLOB], 0x48) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x46, 0x2d1, &(0x7f0000000740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x14}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x3ff}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x440c5}, 0x240408d0) 3.913793227s ago: executing program 5 (id=3704): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) 3.8804189s ago: executing program 2 (id=3705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pivot_root(0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r6 = socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x21, &(0x7f0000000540), 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10) sendmsg$tipc(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48854) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) 2.436309235s ago: executing program 1 (id=3706): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 2.073711712s ago: executing program 0 (id=3708): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r3, 0x0, 0x3, 0x1}}, 0x20) 2.047549064s ago: executing program 1 (id=3709): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00'}, 0x18) socket$rds(0x15, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) socket(0x10, 0x803, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000018}) 1.949343254s ago: executing program 0 (id=3710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x476}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4014094) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000680)='@\x00\x00\x00\x00\x00', 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000810b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4008800) 1.909657468s ago: executing program 2 (id=3712): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000001200)=""/147, 0x93}], 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x4, "0006007208000800"}) syz_open_pts(r1, 0x42) r2 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xfffffffd, 0x1000, 0xfffffffe, 0xcb}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r6, 0xc0a85322, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000600)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6d6163637972696c6c69632c756e695f786c6174653d302c696f636861727365743d757466382c757466383d302c7574ff0f3d462c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c636865636b3d72656c617865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c74696d655f6f66667365743d3078666666666666666666666666666262322c00"], 0x1, 0x363, &(0x7f0000000280)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @broadcast}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000000)={0x1d, r9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x40) 1.904822079s ago: executing program 3 (id=3713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) 1.902981429s ago: executing program 0 (id=3714): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000700)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) inotify_init() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) timerfd_create(0x8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 919.957237ms ago: executing program 5 (id=3715): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 919.275358ms ago: executing program 3 (id=3716): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 380.453102ms ago: executing program 3 (id=3717): socket(0x40000000015, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x10ed}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}}, 0x0) 378.909332ms ago: executing program 5 (id=3718): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x2800002, &(0x7f0000000340)=ANY=[@ANYBLOB='overriderockperm,check=relaxed,session=0x000000000000004b,check=strict,nocompress,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c00d5a63fcc"], 0x0, 0x519, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) 294.97249ms ago: executing program 1 (id=3719): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') 213.607598ms ago: executing program 3 (id=3720): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) 195.87795ms ago: executing program 1 (id=3721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000f80)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000000740)=[@rights={{0x30, 0x1, 0x1, [r1, r5, r1, r0, r1, r2, r5, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x70, 0x40000000}}, {{&(0x7f0000000840)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000d00)=[{&(0x7f00000008c0)="73013ef034be1b260798697391738d562c16b58eda0637b57e57e2816f968ee00b0152596f4b68a20ccc67e23abbb5247039301e7fc292a3a7ac0d637d44fb1a7a17ca7097d83c82f8aa13d7a2830a45a371c027362ee14bf4d61a65130b3c81219754b55c30f61896eeac04f0fd2ffc4ccbbd4c38ecea6fa462f0b8446bd777bc472597069e2ecb151921542092fb3f3c95b9c86e234c5d8077a5119418e7edc4b1bab76354e3133e198c51fb9e12083f3408c6844b1e13031fc47e3400f210177be474a2562523785de75e33320fc05b9c3cd082a456bc08f61f068c4f2b7efecbcb", 0xe3}, {&(0x7f00000007c0)="7b120c771f40de87d036fd115c8730f972a8f082d6965d7a628449be5df04a3973ad016dd4e14029b937abb8396cbe15d6ada4bc9858a8f5a32e4d", 0x3b}, {&(0x7f0000002000)="fbc0ca9e8f6cb82c0005cdaa10f1d3a2afb62cdcf664479977de4c276b22c903cac948ffebbc186c6854fcf9f3fe506b027452d45addec5dd20141d17beb081adfbc9118d6d2101722370f41df4fef6b1935df84aa0d9232ff8bda2ff3a752152abbfd1ee7ac037382b98e814a5e2eeb86ce7199037d3984eb72434750c206d0e2e9c20a2f31d9d6f69a9738202934ee3df34a19cb61fd0aac281c442cfebe302c66279a35438850a7d6ec02a15d1b4ecea2194f016bfcb9d27645dd274f9b5b134974437bee4221f8ce0d31a0c85a180027325b3394ef48be420935a1aa84397d8d292b2081e8ea28622d75ecfffd5bcc8b07bd5ea5b146d881776fa265040bc2efa57c5ca0f1be8580032690f56c22c985b0093444ac81f034dda5d686ebbdd3098a9f0c40322bc19e367c7e8842a8da53b084bbab53dccf38376ffb31ee84291d9b5a6cc3517ed05f576ee73179e32016711070b95480aeb0181a4331a95eb782d8eb5012efcdedb4b04a6824c6d2d8bd5fa5cbf40f81b87ed4099914cec6c4c35169431654db07f5b8e7b810e93cfec334b6e14996ece1321cb9cf74df911e340be0087866ee07db24690fea4bf61c16d5ccfd26fcccbc7e4da84ac7f421edfc6d2e6923c01d4bcdb58273e0180a7f5fa6f5bb20ffd63ae0bcd1e25b7fbd6de43b7174c0e5eae7d14a4969aa7008849ba12c4be5ff1cea1b7245f0d1749fb1f1af7f1a4604e478e741d30bde3686b019acad727ba67d0eb1fe01f15cc3ce5d4497bc8054858b08c16bdab7320e1cb746b17a22e2d78fa62322803adc798ce14e01b1f1908d9306896fe327349ead9a00cb3f17051bf973748ea55e4eea74a3ebb5017d28e654857b5b280c16d35914e35fcf5098ac67ab3adb1c6d3228919b21bc4a61e36077d6b477c808e97fd13b1797ab46307427dd49c733d2c12ac8f990dc0b89f161b924f173fb08bedff9c7feb8b6ed9baa657ae20a171162ff75b21a35bc7801997e864a00980679b37bf05e9570aba2a7ab908f15064479b0faf3416ad52694f7f570d118dcfb1749bdb0b7fe06d372cb92120416774728da9c6fac36d76fd336a7f3d61e14a20c1f4242cb41b0eb16ffd75bbec46923a73a4acf255c279bb59d9f4c1be39fc94b75c4f690a0cb50709c43cd12f60c853b6c8baae072d2fc0acd00f2d4980f8038384518e90b5f57a3d665147ef812482b40609c3f7c28df09c4a17a769a1f9bcb71b4fa53f4ea452aa9d789632131aff8d4a7629f836b1082c46d05e2b75aa4afda03e44ba578f6b5c030b00e2372faf76da9efd671046e97ae458735b7af654ca44bdf6ba04cc4dd710f6a3d0bb62cb21d977b9fea09c9dd6898192a2d733cd734d83212bf00b1888351fd5b5399acd53f773e42c7d987007eafa14876ce162eb6aebd28f84b1fbd81d9278c8ae751daa868f1bc97077f3961d36d376d2561921ff6b3447833fd6ba0f226417f68dc972d0d3eaff9aad3ab344ba5114037493bb1b9a9761a17489b8bd77f08ecc6fa4809e2a93102148c355b8414185c5fb6f544f0274c0cbdb8fc27b81b651989e0f4d8ea36c76825a55c874f4d565204f07fb2f07949edefa38686d25279788c7c5e99cef8920f753ecbb5b298f43dd864bd148bed141aa54ee8126a902862f2371d3cbc52e5fd96088448c7ba20f14aa798a407a9ba15890a8a9122b916da16fd4fc14836946c1e74ab32f78bc56618cd000c317bda6f3aa1754513d3f5469aa56468d0f9ef5d20e41100590675235b832ca67a8ed5ed0e0afb275bf8687c498f41f6af3e9933823d8076a5ca9b8893a631d36f66a97385a2299edbb5784f7e886107d210e901f13596ea273c27d986e18f121e6bd420a54d7a56c4daba1785b1fa35a5fb144c40ac3f90fca897e5e8dd4406ba9aa738d58758c76e882a8fa3879092b39d5d237b91eea31b8f3979bc9500371ab57878533ca433e20d12bf75ab2bc98116d67088a44125d3ed361841d7f2228f5f995e5fe6db0e82c58e00c213d048bf6b5fe716b01ce8043e2937e22b6f6355a55d455439deea5d45b2323976e7f9414726e2f592ce2c0c99543575e16f04bc9b2b7fb2481d82bb5aacf71510a1a86fd1fe4680bd65e34af58b50eb4a80684d1c9e6753d5a542b06729e71d52f0d6955100da5ca6b940af91af18e196348cd61bdfe5f85faf90e1e3d652b445c3c84f0f51b23c630ac2b806e3ec8b55bd393ae4cfeab27ab8e8e78290c1865c2106506032aea8a5cc2af80d51882db367a8f3cdf3606bfd2d19b889327f36c285adf77632afb70ee82b35a5f550f135a78745f8159120e732e0ca5c0ea25553c30d76caae234bff71f0d8f34e4909b05ce473f830eeb9233018a4dbdafc138ae1d4cbc161adeb95415f239a21eeb6b857c16f0b781d9f12d8d4046958b218d7035a991d0e83eab0c12d37b498b622b828d8728a3415867b19a07f8511e0b2d47b3dfc4eaba1be7dfdd01baf98855cd2252d9583eba39568d0d07373587d8809873cba33193570d81e6cfcd058748eb5f7f880506789e4e737dcfac56bc51631577cc36b88fd5aa392a71ba649ee1fb551f5432a7e8c54b1a81e95ae4d7d91f0be8d332a41f0cec47a11ef5ca5ec44b3029c95264e41b9a4cd2822618a9a186faa17e78c00759dec74d3e35411c5256796f513a0eab851e1adc4e0aef474d8533d79972efa07c6b6d2591df1359583e565e2784aeb5370c65636ca920ad3fa03e501df8744719af9b42dc03cc1c2d957909b6f73f93634435db0e74d2ac476474a0b5fcd2ef3ae8db6f3633ee31547180e1d0f129561c08fe3a43b49740d614e82aaee49fbbdbac7a1ed8eb59e53b8a4f60b9d95ad0b87998c7f96aaaf5b992d1ae498f56a0154b150d40e9dab3ba8f86cdde118786d6e4fc27cb2af0392eb76ae393fa6335d1cb31344754ffbe1a785351418eeea3b4578264d02c89d5ffec15dc0c64270fe49b994f31420fe39c812580ba9d19295c673062b791844c33f348998ed9500aae773e57cb9d2796b304dfb8032c772f9d54c7c55b6b9a6c60be930e5046453261b5ca365cac49a7fc9958d775d6719ac817f9fb9dbadb2bbf1a5ebb642abf993f93cf04e441c1b388762acd9cfd3e7b06ec7126db7f3bbf7855f048811a122b1451d6e9355dd9e1cfa1dce9003755f4edbe06e804f72e039680b2684e8be35e161327fbb9789937dbebe32f5a21e37b4e0ebe045c969b1b1dd9979c1ccfe4398a0c9f9af1ab7986614f1ef8af0111309142c86543e674fc312ac5206faef9c631d307df9304a65264b134e21c374bcb9d8365392c98730adb622c33263c38fa8b9424841fc9a4dfa3124eff344b2e60667198908676c9e86424f4e123ec206026de4e002fcd18dd379362d09e8541fe5921f4fe04225988f9d88cabeebbbc5cd9d67f497fb00a7c67b5cde730f83f0a7d8c47a391417412c708823c0a19f58e771fc908e16819af66ef44181dc91ecb238c76412afceb633a731799466d049859ce39bf5c1c8b9e15f1b551829fc597393f2e14f414a51776f379666bffd7c2605ad3a8b728507641eceed9ecfd311a5a7b7684a4ea25d8e81a4c0127ce78fd2ad9519a1818a2b8b096e34e834c63578dcfe79e1fd457c0fad5efc4e581e05c197ca20ea93227c97dc21c9611990515cf201d4b843a558c774cdbe3c6bbf3177817a23e24767dae952ac2d60c810ce174245c2deecacf6e7274c0988e8afb43ab8b7ee98a612a8477eaf2c302bb62f75512f6192b1ff647849276f6db01cb13c98a563c42f3d073f14d39ce2add6f60a45c3b5f660995fa688d81da5b57f823a616db88f591250093ec893cc9233341e5b782809a75b44d92bf88c2e16dc3cd4261d431ee42939e780a3b2ac5bd8c91fd2193851af688fc4ca8f005a7d7c2275cf3658ab13dcca1b0dfcaff4ced8aafea5a56715392440f9090a842f4ac9660be29706ac6669dbe4f02d7d90e66498fe9abf02d0943d82b1eb0ef6468a57777a964b91cfbe9b62762c7cee00c3b76de0a2054b6f5c735ce5a202a6b11f4e71b28f72bd6c42d7221686a6c2615ba373126262bfec4bf919b883cb6efa5e0ca96fe03bf5dd9685120ad816d7f999fcb8c8673e0c2cfff5d5bbf3d0b6271fc71a4da5ce2992dd1725af8c984933e16cd68a72ec372c4c5febbd61d806ffa63c7faf4d8d05b191ae9491cb77cb61579b86ea54ea761ffcf79993598cdbd28f9936a1033c7b25db352fbd105902758336c2cef375fd85437cb8d7704a629e6720a56687c6b13452572f0a20a9030fde6e24fb3a4a706cc355083aa330bd509326c01cfb36347d97d31bafed4a8c60c1377c9fd247aab67a1d9d83166ac2e3602fe935e135b5c4994d1ee1cc40261f42e4ca0a6d779ad3191013d1aec3e2aefe40dd738edc91bdf464d77bb48fa1768531f4196af7bd0c0e9f65a4ba47b93f49eb7521a77c03417776852226b8b4a3c09485866e5a1df2231394bf69d5652f189ebe509387289f4f7c8db2dcbd32cfb771240c4f79876d3735df9a7d4bd5b5f312e3570496ce7f9426493d698f38ce107554c1f5106cf15d8795bbddd4ffb4100bd63ea143831c31a43e184385bc0689bf0e88d164ce2d243fad79e580c6b29134725a73563a2dc34abccdaa0d2d10745e2beb2a3cbc11ceb1fdb7e33e4eb98f61a98568f2d9c97f145f460337fd4f84c7451b94233fdbd9dcad47a77a78a33dfd0ba2bc16658fdfb4051e27c8171dbc294ebc4e1a87642c2812e971cc9aa49c655a9a41c623aeafe42b20ce5db7b086a93e8318f5f2cbe1355de18538bfec3fec3cd6b070a42475ea8356d137d79fa4e1e90fe0aa4c987ff92770301dfe3ffa370f1bd1002adb8e8589c13b58d528e7867e6056def78513ab622fb4836e521d2924b37f0ce5c9445a4b664040ac3058662546bac4831979addecc09d88997dbbae534fdeaed037670926dd2b5ce98b0c9d43d7dae708312075f32e9f9addccea30cb456faf6ac444aef3a112fb4a81e67bfe547ab83868dae071ea5b10cd44df30d79792fee4dbf6242c92fafa0a555154bfd70df12d5c119a7b8d3df0a8ce8bb6948570f481b10089abda0a9effcd9ffcbff17ba9ca90c988c756989667e3e6290d682ff4ed9bb5c33339274dc7912c06095e4b133e704b71ecf508cae4ad746c539b94c738a9ffde54b2b12998023bc8b0f1e5b261f42136d99c1941a37ce8e16cb45966fe6e69edbf4b1573c4124c5427d926cd344eba15738841e06d469c5f90c3de79bece9eb2616bf56f9f48312428faa3d18f468aafe06adfa7ff51bcd88ccc3bd06fb90fed00484be7b492b6040538f1adc10160b2ffb4338e4e6376e1a67c5a64ebfff9fb93cef1cc9644df2b05c2dde672ee124e46c85e6e4a7bb02bfc47c152b17acd6eb71adde7f1d49a1b50389e5214cd5541e209d2f64b1b02b54ed41f3fb447a0031eb3e8fe5934bf7433aad263c6d5bbe81803e675c81314c5a3e5652e75ff3c8663682969adbdc6a4dba123f111d8bb9141771e02d6bdabc45c988be7bb3fb63fe21064edb33121c625a5df8284c664c458cc5a4b5d77e2f5e472584eb06d347319462d8b1d6611d4a65e5ccfa9c0ff8874cc14bfbd8a77e5f8443b61a832817c125963ccf8c7da74811022fb27d2147ccac4e7f4239e0c0e9f3ff4f618edfec00d03d849923d605dd6977105685f4b86f012182fd76813a7b1153baf66b96a0cc6b541860cb6db5cf7045bc2b616a61ce6ebf5e6ee68d", 0x1000}, {&(0x7f0000003000)="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", 0x1000}, {&(0x7f0000000b00)="38ef68ab2a0d3ebdab70e16aa4c2ce533798d8c270e0dea130e82c2960e6d70b16ed620e508b6ddcea9ab62d0662d229ba74bd2f2cd608af695cae5ec818c3f6", 0x40}, {&(0x7f0000000b40)="02180dec34bb6090ba5c79af", 0xc}, {&(0x7f0000000b80)="76e651083e1bb6f1b9b349c5f493c48f455ef6f0585a30d09e967da4a6aced5795baa58260d7f03a562f373e8e042ef5b48443b6a24011aaf133a3170bf431b153fccaae7aef4c8332acd76493b0d2e0a8bc247127cd61cff0f403849f6965fb7694f3116f559087acfefaec58d081245882fe57f517d266e52c7dc8e6a8b49d14587a6028dd3dea7a887b1a7c16af263e91d070ec8412a27842c31b3ca178f526505931f8c0c3c4e9da581b07e5c4afaa8f06baa6dd462ab4ce", 0xba}, {&(0x7f0000000c40)="e5e74d71954f155be6dcaf33cd7ce8c009fc9c6927bf65b91987311d0fa77749933f22e2b1c5bb258e67d55bd630fb7d30a58ab31294408a786e8137b1f19e2f463c54d26f6d5f28824f62f7cd2ecbcaede1858e1426d765b5799dea1df05ce16b2ac17def4731fe3073ee01298b1f4c156b42e0bb11c95d7c24ac6a331b0f65d18f088e63db33d0fc4a4e79ce97fda7c4f22fa7d3541559f25f", 0x9a}], 0x8, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x60, 0x4000}}], 0x2, 0x4845) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x78f37a8a4fa76f1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xfd, 0x2, 0x0, 0x0, 0x100, 0x52420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0, 0x3}, 0x100002, 0x0, 0x4, 0x4, 0x3f62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 178.477342ms ago: executing program 3 (id=3722): syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@min_batch_time={'min_batch_time', 0x3d, 0xf}}, {@nogrpid}, {@bh}]}, 0xff, 0x523, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x102) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) write$cgroup_subtree(r0, 0x0, 0x32600) 169.911173ms ago: executing program 2 (id=3723): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 38.747966ms ago: executing program 2 (id=3724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x476}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4014094) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000680)='@\x00\x00\x00\x00\x00', 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000810b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4008800) 37.900456ms ago: executing program 5 (id=3725): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f14a18", 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 3.63204ms ago: executing program 3 (id=3726): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004001) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1801c36ba58a54420000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='afs_sent_data\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r5, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/uts\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f00000023c0)=r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x963cc2, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000180)={0x3, 0x0, 0x5, 0x9}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c000057eb4500", @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006000900000005000200fc000000"], 0x3c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast2, @multicast1}, &(0x7f0000000440)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000680)={'syztnl2\x00', r7, 0x0, 0x80, 0x4ca, 0x3, {{0x9, 0x4, 0x3, 0x2, 0x24, 0x65, 0x0, 0x7, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @cipso={0x86, 0xe, 0x3, [{0x0, 0x5, '\x00Pi'}, {0x2, 0x3, '#'}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000c40)=ANY=[@ANYBLOB="08020000", @ANYRES16=r11, @ANYBLOB="000228bd7000fedbdf25130000001c00018008000100", @ANYRES32=r12, @ANYBLOB="080003000100000008000100", @ANYRES32=r7, @ANYBLOB="2c00018008000100", @ANYRES32=r7, @ANYBLOB="0800030000000000080003000000000008000300010000000800030000000000600001801400020064756d6d7930000000000000000000000800030002000000080003000200000008000300020000000800030001000000140002007866726d3000000000000000000000001400020076657468315f746f5f627269646765002800018008000100", @ANYRES32=r7, @ANYBLOB="08000300010000001400020076657468305f746f5f687372000000004c00018008000100", @ANYRES32=r13, @ANYBLOB="140002000000000000000000000000000000000014000200766c616e3100000000000000000000000800030000000000080003000200000008000300000000006c0001801400020076657468315f6d6163767461700000000800030002000000140002006970366772653000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="0800030003000000080003000200000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300020000006c0001801400020069705f76746930000000000000000000080003000300000008000100", @ANYRES32=r7, @ANYBLOB="080003000200000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="080003000200000008000100", @ANYRES32=r7, @ANYBLOB="0800010c00", @ANYRES32=r13, @ANYBLOB="1400020065727370616e30000000000000000000"], 0x208}, 0x1, 0x0, 0x0, 0x8805}, 0x40080) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fddbdf25040000000c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="2000018008000100", @ANYRES32=r7, @ANYBLOB="14000200766c616e3100000000000000000000003000018008000100", @ANYRES32=r7, @ANYBLOB="14000200736974300000000000000000000000000800", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000100", @ANYRES32=r7, @ANYBLOB="7800018008000100", @ANYRES32=r7, @ANYBLOB="14000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800030000000000140002006272696467653000000000000000000008000115f0ad279f95fc7c2d691c14d72c9db873416db48296d2dbf347afb3fa760e6de40b279a", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x11c}, 0x1, 0x0, 0x0, 0x2804c011}, 0x85) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8804) bpf$PROG_LOAD(0x5, 0x0, 0x0) r14 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r14, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) 0s ago: executing program 2 (id=3727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): ability 0, space 0, times 0 [ 161.101717][T11844] CPU: 0 UID: 0 PID: 11844 Comm: syz.1.2967 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.101747][T11844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 161.101759][T11844] Call Trace: [ 161.101765][T11844] [ 161.101775][T11844] __dump_stack+0x1d/0x30 [ 161.101803][T11844] dump_stack_lvl+0xe8/0x140 [ 161.101829][T11844] dump_stack+0x15/0x1b [ 161.101869][T11844] should_fail_ex+0x265/0x280 [ 161.101965][T11844] should_fail+0xb/0x20 [ 161.101985][T11844] should_fail_usercopy+0x1a/0x20 [ 161.102010][T11844] _copy_from_user+0x1c/0xb0 [ 161.102033][T11844] __sys_sendto+0x19e/0x330 [ 161.102160][T11844] __x64_sys_sendto+0x76/0x90 [ 161.102192][T11844] x64_sys_call+0x2d14/0x3000 [ 161.102222][T11844] do_syscall_64+0xd2/0x200 [ 161.102244][T11844] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 161.102316][T11844] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 161.102397][T11844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.102455][T11844] RIP: 0033:0x7fd336b1f6c9 [ 161.102470][T11844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.102489][T11844] RSP: 002b:00007fd33557f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 161.102513][T11844] RAX: ffffffffffffffda RBX: 00007fd336d75fa0 RCX: 00007fd336b1f6c9 [ 161.102534][T11844] RDX: 0000000000000011 RSI: 0000200000000680 RDI: 0000000000000003 [ 161.102545][T11844] RBP: 00007fd33557f090 R08: 0000200000000200 R09: 0000000000000014 [ 161.102557][T11844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.102568][T11844] R13: 00007fd336d76038 R14: 00007fd336d75fa0 R15: 00007ffc533c2a38 [ 161.102588][T11844] [ 161.136158][T11835] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2964: Invalid block bitmap block 0 in block_group 0 [ 161.140303][T11848] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 161.142248][T11835] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2964: Failed to acquire dquot type 0 [ 161.204886][T11850] loop2: detected capacity change from 0 to 1024 [ 161.225006][T11851] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2966'. [ 161.242298][T11850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.349821][T10364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.361344][T11850] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c01c, mo2=0002] [ 161.369730][T11850] System zones: 0-1, 3-36 [ 161.375009][T11850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.393655][T11859] loop5: detected capacity change from 0 to 512 [ 161.401724][T11859] EXT4-fs: Ignoring removed bh option [ 161.407657][T11850] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 161.413752][T11861] loop1: detected capacity change from 0 to 512 [ 161.423841][T11861] EXT4-fs: Ignoring removed bh option [ 161.431932][T11859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.445253][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.456518][T11861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.470349][T10364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.480709][T11861] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2974'. [ 161.498791][T11867] loop5: detected capacity change from 0 to 1024 [ 161.507022][T11867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.514685][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.518500][T11867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c01c, mo2=0002] [ 161.532082][T11867] System zones: 0-1, 3-36 [ 161.537424][T11867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.553672][T11872] loop1: detected capacity change from 0 to 128 [ 161.560436][T11867] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 161.561981][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2977'. [ 161.571149][T11873] blktrace: Concurrent blktraces are not allowed on loop4 [ 161.593419][T11872] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29460 sclass=netlink_xfrm_socket pid=11872 comm=syz.1.2977 [ 161.606768][T10364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.637251][T11877] netlink: 'syz.1.2979': attribute type 4 has an invalid length. [ 161.650176][T11877] netlink: 'syz.1.2979': attribute type 4 has an invalid length. [ 161.689032][T11883] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 161.695205][T11885] loop5: detected capacity change from 0 to 128 [ 161.719057][T11885] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29460 sclass=netlink_xfrm_socket pid=11885 comm=syz.5.2983 [ 161.761562][T11889] loop1: detected capacity change from 0 to 1024 [ 161.768456][T11889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.788294][T11889] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c01c, mo2=0002] [ 161.796720][T11889] System zones: 0-1, 3-36 [ 161.803382][T11889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.822794][T11889] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 161.864174][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.924683][T11905] loop3: detected capacity change from 0 to 512 [ 161.934256][T11905] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2988: error while reading EA inode 32 err=-116 [ 161.956958][T11905] EXT4-fs (loop3): Remounting filesystem read-only [ 161.983040][T11905] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 161.998506][T11902] loop1: detected capacity change from 0 to 2048 [ 162.005061][T11905] EXT4-fs (loop3): 1 orphan inode deleted [ 162.012521][T11905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.026803][T11902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.040001][T11905] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.099681][T11911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.108693][T11911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.121465][T11911] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2989: bg 0: block 345: padding at end of block bitmap is not set [ 162.136528][T11911] EXT4-fs (loop1): Remounting filesystem read-only [ 162.603957][T11916] netlink: 'syz.5.2992': attribute type 4 has an invalid length. [ 162.616450][T11916] netlink: 'syz.5.2992': attribute type 4 has an invalid length. [ 162.651915][T11922] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 162.661984][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.710881][T11928] loop3: detected capacity change from 0 to 1024 [ 162.733513][T11930] pimreg: entered allmulticast mode [ 162.739276][T11928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.750113][T11928] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c01c, mo2=0002] [ 162.763407][T11930] pimreg: left allmulticast mode [ 162.777545][T11928] System zones: 0-1, 3-36 [ 162.782945][T11928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.798390][T11928] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 162.871802][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.925412][T11937] loop5: detected capacity change from 0 to 512 [ 162.936560][T11937] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3001: error while reading EA inode 32 err=-116 [ 162.949374][T11937] EXT4-fs (loop5): Remounting filesystem read-only [ 162.975481][T11937] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 162.986969][T11957] netlink: 'syz.0.3004': attribute type 1 has an invalid length. [ 163.006780][T11957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.013520][T11937] EXT4-fs (loop5): 1 orphan inode deleted [ 163.026772][T11937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.043658][T11957] macvlan0: entered promiscuous mode [ 163.050548][T11957] bond1: entered promiscuous mode [ 163.051428][T11937] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.056733][T11957] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 163.079041][T11957] bond1: left promiscuous mode [ 163.091886][T11963] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1536) ! [ 163.116613][T11965] loop1: detected capacity change from 0 to 1024 [ 163.123533][T11965] EXT4-fs: Ignoring removed nobh option [ 163.129744][T11965] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.145499][T11965] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.3008: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 163.172291][T11965] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3008: couldn't read orphan inode 11 (err -117) [ 163.190588][T11965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.205023][T11965] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3008: Invalid block bitmap block 0 in block_group 0 [ 163.219959][T11965] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3008: Failed to acquire dquot type 0 [ 163.247345][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.289892][ T29] kauditd_printk_skb: 785 callbacks suppressed [ 163.289910][ T29] audit: type=1326 audit(170.554:40487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 163.319735][ T29] audit: type=1326 audit(170.554:40488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 163.342996][ T29] audit: type=1326 audit(170.554:40489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 163.366687][ T29] audit: type=1326 audit(170.554:40490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 163.390057][ T29] audit: type=1326 audit(170.554:40491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 163.414128][ T29] audit: type=1326 audit(170.554:40492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 163.421501][T11985] loop1: detected capacity change from 0 to 512 [ 163.441811][ T29] audit: type=1326 audit(170.565:40493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 163.452597][T11985] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3015: error while reading EA inode 32 err=-116 [ 163.473969][ T29] audit: type=1326 audit(170.565:40494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 163.509799][ T29] audit: type=1326 audit(170.565:40495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 163.532948][ T29] audit: type=1326 audit(170.565:40496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 163.535358][T11985] EXT4-fs (loop1): Remounting filesystem read-only [ 163.563498][T11985] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 163.573813][T11985] EXT4-fs (loop1): 1 orphan inode deleted [ 163.580121][T11985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.592811][T11985] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.646389][T11990] loop1: detected capacity change from 0 to 512 [ 163.653486][T11990] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 163.683673][T11992] loop1: detected capacity change from 0 to 512 [ 163.690489][T11992] EXT4-fs: Ignoring removed bh option [ 163.694499][T11994] loop5: detected capacity change from 0 to 512 [ 163.705790][T11994] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 163.713367][T11992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.734594][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.754151][T11994] __nla_validate_parse: 5 callbacks suppressed [ 163.754174][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3019'. [ 163.771051][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3019'. [ 163.781249][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3019'. [ 163.791083][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3019'. [ 163.848280][T12008] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3023'. [ 163.861721][T12011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3025'. [ 163.901016][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3028'. [ 163.904564][T12015] loop1: detected capacity change from 0 to 2048 [ 163.922680][T12015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.020961][T12020] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3027: bg 0: block 345: padding at end of block bitmap is not set [ 164.063047][T12020] EXT4-fs (loop1): Remounting filesystem read-only [ 164.086258][T12032] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 164.142099][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.161395][T12034] loop3: detected capacity change from 0 to 512 [ 164.187887][T12034] EXT4-fs: Ignoring removed bh option [ 164.199108][T12034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.236489][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3037'. [ 164.248104][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3038'. [ 164.265972][T12046] ip6t_rpfilter: unknown options [ 164.287841][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.315598][T12049] loop5: detected capacity change from 0 to 512 [ 164.369144][T12049] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 164.438215][T12064] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 164.535103][T12077] loop2: detected capacity change from 0 to 512 [ 164.570202][T12077] EXT4-fs: Ignoring removed bh option [ 164.616446][T12077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.632733][T12083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3052'. [ 164.706644][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.775359][T12079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.782742][T12090] loop2: detected capacity change from 0 to 512 [ 164.787637][T12052] lo speed is unknown, defaulting to 1000 [ 164.796025][T12079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.812590][T12052] lo speed is unknown, defaulting to 1000 [ 164.818447][T12090] EXT4-fs: Ignoring removed bh option [ 164.854669][T12090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.932344][T12098] Invalid ELF header type: 2 != 1 [ 164.984891][T12101] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1536) ! [ 165.029198][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.142995][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.167710][T12052] chnl_net:caif_netlink_parms(): no params data found [ 165.195074][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.268813][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.287530][T12119] ip6t_rpfilter: unknown options [ 165.307421][T12052] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.314993][T12052] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.344099][T12052] bridge_slave_0: entered allmulticast mode [ 165.358685][T12120] loop1: detected capacity change from 0 to 512 [ 165.366816][T12052] bridge_slave_0: entered promiscuous mode [ 165.373827][T12052] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.381036][T12052] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.388505][T12052] bridge_slave_1: entered allmulticast mode [ 165.395352][T12052] bridge_slave_1: entered promiscuous mode [ 165.414409][T12052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.429928][T12124] loop2: detected capacity change from 0 to 2048 [ 165.438205][T12052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.469983][T12052] team0: Port device team_slave_0 added [ 165.478832][T12052] team0: Port device team_slave_1 added [ 165.499303][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.510951][T12120] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3063: error while reading EA inode 32 err=-116 [ 165.526680][T12124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.542037][T12120] EXT4-fs (loop1): Remounting filesystem read-only [ 165.549030][T12120] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 165.549466][T12052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.567275][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.578500][T12120] EXT4-fs (loop1): 1 orphan inode deleted [ 165.595505][T12052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.602443][T12120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.631305][T12052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.638339][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.664402][T12052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.675339][T12120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.680580][T12129] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3065: bg 0: block 345: padding at end of block bitmap is not set [ 165.730249][T12052] hsr_slave_0: entered promiscuous mode [ 165.738801][T12129] EXT4-fs (loop2): Remounting filesystem read-only [ 165.758472][T12052] hsr_slave_1: entered promiscuous mode [ 165.765643][T12052] debugfs: 'hsr0' already exists in 'hsr' [ 165.771517][T12052] Cannot create hsr debugfs directory [ 165.809183][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.899598][T12144] loop1: detected capacity change from 0 to 1024 [ 165.908008][T12144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.916609][T12144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c01c, mo2=0002] [ 165.925056][T12144] System zones: 0-1, 3-36 [ 165.931749][T12144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.946465][ T52] bond0 (unregistering): Released all slaves [ 165.978531][T12144] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 166.036893][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.082158][T12160] loop5: detected capacity change from 0 to 512 [ 166.100058][T12161] loop1: detected capacity change from 0 to 512 [ 166.116703][T12161] EXT4-fs: Ignoring removed bh option [ 166.124603][T12160] EXT4-fs: Ignoring removed bh option [ 166.142945][T12161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.187654][ T52] hsr_slave_0: left promiscuous mode [ 166.194209][ T52] hsr_slave_1: left promiscuous mode [ 166.208663][T12160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.225992][ T52] veth1_macvtap: left promiscuous mode [ 166.232520][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.241590][ T52] veth0_macvtap: left promiscuous mode [ 166.255454][ T52] veth1_vlan: left promiscuous mode [ 166.261394][ T52] veth0_vlan: left promiscuous mode [ 166.287262][T10364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.351078][ T52] pimreg (unregistering): left allmulticast mode [ 166.384504][T12184] loop2: detected capacity change from 0 to 512 [ 166.393597][T12184] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.403528][T12184] EXT4-fs (loop2): inodes count not valid: 4 vs 32 [ 166.432264][ T12] smc: removing ib device sz1 [ 166.445274][ T9] lo speed is unknown, defaulting to 1000 [ 166.451120][ T9] sz1: Port: 1 Link DOWN [ 166.477214][T12187] loop5: detected capacity change from 0 to 512 [ 166.509264][T12187] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3085: error while reading EA inode 32 err=-116 [ 166.526569][T12187] EXT4-fs (loop5): Remounting filesystem read-only [ 166.540662][T12187] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 166.566694][T12187] EXT4-fs (loop5): 1 orphan inode deleted [ 166.585789][T12187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.607290][T12187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.648748][T12194] IPVS: Unknown mcast interface: ipvlan1 [ 166.662654][T12204] loop1: detected capacity change from 0 to 512 [ 166.684094][T12204] EXT4-fs: Ignoring removed bh option [ 166.709321][T12204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.737828][T12052] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.786351][T12201] loop2: detected capacity change from 0 to 512 [ 166.794266][T12052] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.810515][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.810644][T12052] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.819562][T12212] net_ratelimit: 148 callbacks suppressed [ 166.819577][T12212] netlink: zone id is out of range [ 166.837196][T12212] netlink: zone id is out of range [ 166.842972][T12212] netlink: zone id is out of range [ 166.846223][T12052] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.848232][T12212] netlink: zone id is out of range [ 166.856845][T12201] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3093: error while reading EA inode 32 err=-116 [ 166.860808][T12212] netlink: zone id is out of range [ 166.877715][T12212] netlink: zone id is out of range [ 166.879446][T12201] EXT4-fs (loop2): Remounting filesystem read-only [ 166.884144][T12212] netlink: zone id is out of range [ 166.890447][T12201] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 166.894686][T12212] netlink: zone id is out of range [ 166.907143][T12201] EXT4-fs (loop2): 1 orphan inode deleted [ 166.909950][T12212] netlink: zone id is out of range [ 166.909961][T12212] netlink: zone id is out of range [ 166.937233][T12201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.950827][T12201] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.971350][ T52] IPVS: stop unused estimator thread 0... [ 166.989135][ T52] ------------[ cut here ]------------ [ 166.994763][ T52] WARNING: CPU: 1 PID: 52 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 167.004482][ T52] Modules linked in: [ 167.008462][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.018272][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.028403][ T52] Workqueue: netns cleanup_net [ 167.033219][ T52] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 167.038860][ T52] Code: 48 8d bb 70 0e 00 00 e8 85 3d b7 fc 48 8b bb 70 0e 00 00 e8 89 ec c3 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 18 e4 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 0a e4 9b fc 90 0f 0b 90 4c 89 f7 e8 4e [ 167.058627][ T52] RSP: 0018:ffffc900001bbc60 EFLAGS: 00010293 [ 167.064822][ T52] RAX: ffffffff84bb6688 RBX: ffff888109e90000 RCX: ffff8881010da100 [ 167.072816][ T52] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888109e90e40 [ 167.077899][T12052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.080990][ T52] RBP: ffffffff86c91080 R08: 0001ffff8684810f R09: 0000000000000000 [ 167.095662][ T52] R10: ffffc900001bbbe8 R11: 0001c900001bbbe8 R12: ffffffff86c910a0 [ 167.103843][ T52] R13: ffff888109e90028 R14: ffff888109e90e40 R15: ffff888109e90000 [ 167.111926][ T52] FS: 0000000000000000(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 167.120889][ T52] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.123281][T12052] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.127963][ T52] CR2: 000000110c297816 CR3: 000000013437c000 CR4: 00000000003506f0 [ 167.142679][ T52] Call Trace: [ 167.145986][ T52] [ 167.148953][ T52] xfrm_net_exit+0x2d/0x60 [ 167.153608][ T52] ops_undo_list+0x27b/0x410 [ 167.158237][ T52] cleanup_net+0x2f4/0x4f0 [ 167.163047][ T52] process_scheduled_works+0x4ce/0x9d0 [ 167.168608][ T52] worker_thread+0x582/0x770 [ 167.173372][ T52] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 167.176657][ T2044] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.179316][ T52] kthread+0x489/0x510 [ 167.186578][ T2044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.190647][ T52] ? finish_task_switch+0xad/0x2b0 [ 167.203009][ T52] ? __pfx_worker_thread+0x10/0x10 [ 167.208248][ T52] ? __pfx_kthread+0x10/0x10 [ 167.213158][ T52] ret_from_fork+0x122/0x1b0 [ 167.217988][ T52] ? __pfx_kthread+0x10/0x10 [ 167.219305][T12219] loop1: detected capacity change from 0 to 8192 [ 167.222668][ T52] ret_from_fork_asm+0x1a/0x30 [ 167.233866][ T52] [ 167.236926][ T52] ---[ end trace 0000000000000000 ]--- [ 167.260196][ T2044] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.267402][ T2044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.320870][T12052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.460666][T12052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.472660][T12242] loop5: detected capacity change from 0 to 512 [ 167.486241][T12242] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 167.545270][T12247] loop2: detected capacity change from 0 to 512 [ 167.564884][T12247] EXT4-fs: Ignoring removed bh option [ 167.646450][T12052] veth0_vlan: entered promiscuous mode [ 167.653478][T12259] ip6t_rpfilter: unknown options [ 167.661834][T12052] veth1_vlan: entered promiscuous mode [ 167.696728][T12052] veth0_macvtap: entered promiscuous mode [ 167.713683][T12052] veth1_macvtap: entered promiscuous mode [ 167.745213][T12052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.771004][T12052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.786240][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.803283][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.821629][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.832659][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.917040][T12286] loop2: detected capacity change from 0 to 512 [ 167.932482][T12286] EXT4-fs: Ignoring removed bh option [ 167.981950][T12299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.989424][T12299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.997060][T12299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.004569][T12299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.054258][ T29] kauditd_printk_skb: 765 callbacks suppressed [ 168.054303][ T29] audit: type=1326 audit(175.552:41262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12302 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 168.101927][ T29] audit: type=1326 audit(175.563:41263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12302 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 168.125255][ T29] audit: type=1326 audit(175.594:41264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12302 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 168.148262][ T29] audit: type=1326 audit(175.594:41265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12302 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 168.171665][ T29] audit: type=1326 audit(175.594:41266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12302 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 168.195182][ T29] audit: type=1326 audit(175.594:41267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12302 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bfdcdb779 code=0x7ffc0000 [ 168.195409][T12306] loop3: detected capacity change from 0 to 1024 [ 168.218456][ T29] audit: type=1326 audit(175.594:41268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12302 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 168.247913][ T29] audit: type=1326 audit(175.594:41269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12302 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 168.270975][ T29] audit: type=1326 audit(175.594:41270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12302 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 168.271407][T12306] EXT4-fs: Ignoring removed nobh option [ 168.294246][ T29] audit: type=1326 audit(175.594:41271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12302 comm="syz.5.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 168.344133][T12306] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.460819][T12306] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.3127: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 168.552098][T12306] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3127: couldn't read orphan inode 11 (err -117) [ 168.569818][T12327] __nla_validate_parse: 11 callbacks suppressed [ 168.569836][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3131'. [ 168.607656][T12310] loop5: detected capacity change from 0 to 512 [ 168.644645][T12310] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3128: error while reading EA inode 32 err=-116 [ 168.661880][T12310] EXT4-fs (loop5): Remounting filesystem read-only [ 168.668957][T12310] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 168.680286][T12310] EXT4-fs (loop5): 1 orphan inode deleted [ 168.702523][T12306] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3127: Invalid block bitmap block 0 in block_group 0 [ 168.715000][T12313] lo speed is unknown, defaulting to 1000 [ 168.734061][T12306] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3127: Failed to acquire dquot type 0 [ 168.791142][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.809253][T12341] loop1: detected capacity change from 0 to 512 [ 168.835637][T12341] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.870530][T12341] EXT4-fs (loop1): 1 truncate cleaned up [ 168.871611][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.900022][T12351] loop5: detected capacity change from 0 to 512 [ 168.906710][T12351] EXT4-fs: Ignoring removed bh option [ 168.937049][T12313] chnl_net:caif_netlink_parms(): no params data found [ 168.977699][T12360] loop1: detected capacity change from 0 to 512 [ 168.989449][T12360] EXT4-fs: Ignoring removed bh option [ 169.007966][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.047379][T12313] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.055802][T12313] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.074339][T12313] bridge_slave_0: entered allmulticast mode [ 169.087841][T12313] bridge_slave_0: entered promiscuous mode [ 169.098891][T12373] loop1: detected capacity change from 0 to 164 [ 169.105401][T12375] loop3: detected capacity change from 0 to 512 [ 169.108142][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.124353][T12313] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.133335][T12313] bridge_slave_1: entered allmulticast mode [ 169.141889][T12373] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.3146'. [ 169.142133][T12313] bridge_slave_1: entered promiscuous mode [ 169.163516][T12369] pimreg: entered allmulticast mode [ 169.169331][T12375] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 169.181389][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.200351][T12376] pimreg: left allmulticast mode [ 169.207759][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 169.228259][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 169.247186][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 169.256683][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 169.267739][T12313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.304166][T12313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.353990][T12388] hub 2-0:1.0: USB hub found [ 169.359497][T12380] loop1: detected capacity change from 0 to 2048 [ 169.370673][T12388] hub 2-0:1.0: 8 ports detected [ 169.382124][T12313] team0: Port device team_slave_0 added [ 169.403588][T12313] team0: Port device team_slave_1 added [ 169.422180][ T52] bridge_slave_1: left allmulticast mode [ 169.427929][ T52] bridge_slave_1: left promiscuous mode [ 169.433592][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.518038][T12391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.550871][ T52] bridge_slave_0: left allmulticast mode [ 169.556659][ T52] bridge_slave_0: left promiscuous mode [ 169.562473][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.587881][T12391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.657851][T12397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.711803][T12397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.916179][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.937212][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.960483][ T52] bond0 (unregistering): Released all slaves [ 170.018533][T12313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.026732][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.053198][T12313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.096831][T12313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.103869][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.130192][T12313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.267418][ T52] hsr_slave_0: left promiscuous mode [ 170.273632][ T52] hsr_slave_1: left promiscuous mode [ 170.281749][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.289262][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.322596][T12408] ip6t_rpfilter: unknown options [ 170.332453][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.339928][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.370312][ T52] veth1_macvtap: left promiscuous mode [ 170.375832][ T52] veth0_macvtap: left promiscuous mode [ 170.388634][T12412] loop3: detected capacity change from 0 to 1024 [ 170.405906][T12412] EXT4-fs: Ignoring removed nobh option [ 170.415994][T12412] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.425711][ T52] veth1_vlan: left promiscuous mode [ 170.437782][T12415] netlink: 'syz.1.3156': attribute type 4 has an invalid length. [ 170.454842][ T52] veth0_vlan: left promiscuous mode [ 170.460967][T12412] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.3158: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 170.479947][T12413] loop5: detected capacity change from 0 to 512 [ 170.503065][T12412] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3158: couldn't read orphan inode 11 (err -117) [ 170.544238][T12412] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3158: Invalid block bitmap block 0 in block_group 0 [ 170.562302][T12413] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3155: error while reading EA inode 32 err=-116 [ 170.567918][T12412] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3158: Failed to acquire dquot type 0 [ 170.586926][ T52] pimreg (unregistering): left allmulticast mode [ 170.596115][T12413] EXT4-fs (loop5): Remounting filesystem read-only [ 170.624390][T12413] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 170.655246][T12413] EXT4-fs (loop5): 1 orphan inode deleted [ 170.683967][ T12] smc: removing ib device syz! [ 170.731300][T12313] hsr_slave_0: entered promiscuous mode [ 170.737799][T12313] hsr_slave_1: entered promiscuous mode [ 170.972510][T12434] loop3: detected capacity change from 0 to 2048 [ 170.984986][T12437] loop1: detected capacity change from 0 to 512 [ 171.016665][T12437] EXT4-fs: Ignoring removed bh option [ 171.137279][T12445] loop5: detected capacity change from 0 to 512 [ 171.151260][T12446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.171082][T12445] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 171.226165][T12446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.295660][T12313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.324429][T12313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.388873][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3168'. [ 171.389393][T12446] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3165: bg 0: block 345: padding at end of block bitmap is not set [ 171.398790][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3168'. [ 171.443611][T12446] EXT4-fs (loop3): Remounting filesystem read-only [ 171.454759][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3168'. [ 171.464542][T12313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.475618][T12313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.496528][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3168'. [ 171.553674][T12313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.568243][T12313] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.577769][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.585074][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.596192][T12458] loop5: detected capacity change from 0 to 512 [ 171.615551][T12313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.626066][T12313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.627286][T12460] loop1: detected capacity change from 0 to 1024 [ 171.641228][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.650122][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.675383][T12458] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 171.684111][T12460] EXT4-fs: Ignoring removed nobh option [ 171.720280][T12460] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.724244][T12313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.761672][T12460] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.3170: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 171.802922][T12460] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3170: couldn't read orphan inode 11 (err -117) [ 171.827640][T12460] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3170: Invalid block bitmap block 0 in block_group 0 [ 171.865344][T12460] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3170: Failed to acquire dquot type 0 [ 171.913212][T12313] veth0_vlan: entered promiscuous mode [ 171.940195][T12313] veth1_vlan: entered promiscuous mode [ 171.964623][T12313] veth0_macvtap: entered promiscuous mode [ 171.973627][T12313] veth1_macvtap: entered promiscuous mode [ 171.986662][T12313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.999587][T12313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.010610][ T2044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.023610][ T2044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.035921][ T2044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.057094][ T2044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.094161][T12489] warn_alloc: 2 callbacks suppressed [ 172.094180][T12489] syz.2.3129: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 172.114326][T12489] CPU: 1 UID: 0 PID: 12489 Comm: syz.2.3129 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.114365][T12489] Tainted: [W]=WARN [ 172.114374][T12489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.114389][T12489] Call Trace: [ 172.114440][T12489] [ 172.114449][T12489] __dump_stack+0x1d/0x30 [ 172.114472][T12489] dump_stack_lvl+0xe8/0x140 [ 172.114492][T12489] dump_stack+0x15/0x1b [ 172.114527][T12489] warn_alloc+0x12b/0x1a0 [ 172.114566][T12489] ? __rcu_read_unlock+0x4f/0x70 [ 172.114598][T12489] __vmalloc_node_range_noprof+0x9d/0xed0 [ 172.114634][T12489] ? __futex_wait+0x1fa/0x260 [ 172.114662][T12489] ? __pfx_futex_wake_mark+0x10/0x10 [ 172.114727][T12489] ? __rcu_read_unlock+0x4f/0x70 [ 172.114751][T12489] ? avc_has_perm_noaudit+0x1b1/0x200 [ 172.114772][T12489] ? should_fail_ex+0x30/0x280 [ 172.114788][T12480] loop1: detected capacity change from 0 to 1024 [ 172.114864][T12489] ? xskq_create+0x36/0xe0 [ 172.114903][T12489] vmalloc_user_noprof+0x7d/0xb0 [ 172.114949][T12489] ? xskq_create+0x80/0xe0 [ 172.114981][T12489] xskq_create+0x80/0xe0 [ 172.115036][T12489] xsk_init_queue+0x95/0xf0 [ 172.115069][T12489] xsk_setsockopt+0x3f5/0x640 [ 172.115115][T12489] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.115145][T12489] __sys_setsockopt+0x184/0x200 [ 172.115193][T12489] __x64_sys_setsockopt+0x64/0x80 [ 172.115239][T12489] x64_sys_call+0x20ec/0x3000 [ 172.115325][T12489] do_syscall_64+0xd2/0x200 [ 172.115381][T12489] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 172.115420][T12489] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 172.115467][T12489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.115498][T12489] RIP: 0033:0x7f2b0588f6c9 [ 172.115519][T12489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.115611][T12489] RSP: 002b:00007f2b042f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 172.115636][T12489] RAX: ffffffffffffffda RBX: 00007f2b05ae5fa0 RCX: 00007f2b0588f6c9 [ 172.115654][T12489] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 172.115671][T12489] RBP: 00007f2b05911f91 R08: 0000000000000004 R09: 0000000000000000 [ 172.115760][T12489] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.115778][T12489] R13: 00007f2b05ae6038 R14: 00007f2b05ae5fa0 R15: 00007ffff8e73c48 [ 172.115804][T12489] [ 172.115813][T12489] Mem-Info: [ 172.127223][T12480] EXT4-fs: Ignoring removed bh option [ 172.130324][T12489] active_anon:15314 inactive_anon:3 isolated_anon:0 [ 172.130324][T12489] active_file:30299 inactive_file:2323 isolated_file:0 [ 172.130324][T12489] unevictable:0 dirty:563 writeback:0 [ 172.130324][T12489] slab_reclaimable:3642 slab_unreclaimable:25203 [ 172.130324][T12489] mapped:39612 shmem:10466 pagetables:1604 [ 172.130324][T12489] sec_pagetables:0 bounce:0 [ 172.130324][T12489] kernel_misc_reclaimable:0 [ 172.130324][T12489] free:1805999 free_pcp:32178 free_cma:0 [ 172.140760][T12480] EXT4-fs: inline encryption not supported [ 172.143858][T12489] Node 0 active_anon:61256kB inactive_anon:12kB active_file:121196kB inactive_file:9292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158448kB dirty:2252kB writeback:0kB shmem:41864kB kernel_stack:3840kB pagetables:6416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 172.181569][T12480] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 172.185269][T12489] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.264866][T12480] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 172.265621][T12489] lowmem_reserve[]: [ 172.272692][T12480] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.3173: lblock 2 mapped to illegal pblock 2 (length 1) [ 172.277258][T12489] 0 2881 7859 7859 [ 172.277287][T12489] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 172.282088][T12480] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3173: lblock 0 mapped to illegal pblock 48 (length 1) [ 172.301395][T12489] lowmem_reserve[]: 0 0 4978 4978 [ 172.490976][T12480] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3173: Failed to acquire dquot type 0 [ 172.493017][T12489] Node 0 [ 172.556490][T12489] Normal free:4261908kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:85732kB inactive_anon:12kB active_file:121196kB inactive_file:9292kB unevictable:0kB writepending:2252kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:100508kB local_pcp:56616kB free_cma:0kB [ 172.562211][T12480] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 172.573135][T12489] lowmem_reserve[]: [ 172.597669][T12480] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.3173: mark_inode_dirty error [ 172.608588][T12489] 0 0 0 0 [ 172.636571][T12489] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.641815][T12480] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 172.649679][T12489] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 172.675961][T12489] Node 0 Normal: 1272*4kB (UME) 433*8kB (UME) 367*16kB (UM) 166*32kB (UME) 43*64kB (UME) 40*128kB (UE) 34*256kB (UM) 66*512kB (UM) 21*1024kB (UME) 20*2048kB (U) 1008*4096kB (UM) = 4261336kB [ 172.695154][T12489] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 172.704681][T12489] 49554 total pagecache pages [ 172.709479][T12489] 3 pages in swap cache [ 172.713684][T12489] Free swap = 124984kB [ 172.717889][T12489] Total swap = 124996kB [ 172.722080][T12489] 2097051 pages RAM [ 172.725901][T12489] 0 pages HighMem/MovableOnly [ 172.730590][T12489] 81087 pages reserved [ 172.730658][T12480] EXT4-fs (loop1): 1 orphan inode deleted [ 172.740556][ T2044] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 172.761269][ T2044] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 172.873249][T12475] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3173: lblock 0 mapped to illegal pblock 48 (length 1) [ 172.892060][T12507] loop2: detected capacity change from 0 to 512 [ 172.901682][T12475] __quota_error: 255 callbacks suppressed [ 172.901702][T12475] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 172.923299][T12507] EXT4-fs: Ignoring removed bh option [ 173.047686][T12518] loop2: detected capacity change from 0 to 2048 [ 173.063595][ T29] audit: type=1326 audit(180.812:41518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 173.094276][ T29] audit: type=1326 audit(180.844:41519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 173.117353][ T29] audit: type=1326 audit(180.844:41520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 173.140714][ T29] audit: type=1326 audit(180.854:41521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 173.164161][ T29] audit: type=1326 audit(180.854:41522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 173.187184][ T29] audit: type=1326 audit(180.854:41523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 173.193116][T12525] pimreg: entered allmulticast mode [ 173.210283][ T29] audit: type=1326 audit(180.854:41524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 173.242984][T12529] pimreg: left allmulticast mode [ 173.313726][T12530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.345190][ T29] audit: type=1326 audit(180.896:41525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 173.368262][ T29] audit: type=1326 audit(180.896:41526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 173.420416][T12532] loop1: detected capacity change from 0 to 512 [ 173.429584][T12530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.456327][T12532] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3189: error while reading EA inode 32 err=-116 [ 173.472391][T12530] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3187: bg 0: block 345: padding at end of block bitmap is not set [ 173.487824][T12532] EXT4-fs (loop1): Remounting filesystem read-only [ 173.489912][T12540] ip6t_rpfilter: unknown options [ 173.494469][T12532] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 173.494512][T12532] EXT4-fs (loop1): 1 orphan inode deleted [ 173.519084][T12530] EXT4-fs (loop2): Remounting filesystem read-only [ 173.605190][T12534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.626904][T12534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.687332][T12547] loop5: detected capacity change from 0 to 256 [ 173.699102][T12547] vfat: Unknown parameter 'ut˙' [ 173.723142][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3193'. [ 173.741038][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'. [ 173.768501][T12550] Invalid ELF header type: 2 != 1 [ 173.974908][T12554] loop1: detected capacity change from 0 to 164 [ 173.984036][T12554] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.3196'. [ 173.993467][T12554] net_ratelimit: 305 callbacks suppressed [ 173.993485][T12554] netlink: zone id is out of range [ 174.004728][T12554] netlink: zone id is out of range [ 174.010296][T12554] netlink: zone id is out of range [ 174.015483][T12554] netlink: zone id is out of range [ 174.020788][T12554] netlink: zone id is out of range [ 174.025913][T12554] netlink: zone id is out of range [ 174.031105][T12554] netlink: zone id is out of range [ 174.036343][T12554] netlink: zone id is out of range [ 174.041551][T12554] netlink: zone id is out of range [ 174.046845][T12554] netlink: zone id is out of range [ 174.103943][T12559] ip6t_rpfilter: unknown options [ 174.142306][T12563] loop1: detected capacity change from 0 to 512 [ 174.160320][T12563] EXT4-fs: Ignoring removed bh option [ 174.339419][T12571] lo speed is unknown, defaulting to 1000 [ 174.458151][T12580] loop5: detected capacity change from 0 to 512 [ 174.465764][T12580] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 174.703651][T12596] loop2: detected capacity change from 0 to 512 [ 174.855146][T12590] loop5: detected capacity change from 0 to 256 [ 174.903461][T12590] FAT-fs (loop5): Directory bread(block 64) failed [ 174.912547][T12590] FAT-fs (loop5): Directory bread(block 65) failed [ 174.922566][T12590] FAT-fs (loop5): Directory bread(block 66) failed [ 174.929383][T12590] FAT-fs (loop5): Directory bread(block 67) failed [ 174.936113][T12590] FAT-fs (loop5): Directory bread(block 68) failed [ 174.942669][T12590] FAT-fs (loop5): Directory bread(block 69) failed [ 174.949221][T12590] FAT-fs (loop5): Directory bread(block 70) failed [ 174.955796][T12590] FAT-fs (loop5): Directory bread(block 71) failed [ 174.962420][T12590] FAT-fs (loop5): Directory bread(block 72) failed [ 174.969128][T12590] FAT-fs (loop5): Directory bread(block 73) failed [ 174.982253][T12602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.990877][T12602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.017664][T12590] bio_check_eod: 1162 callbacks suppressed [ 175.017681][T12590] syz.5.3211: attempt to access beyond end of device [ 175.017681][T12590] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 175.037654][T12590] syz.5.3211: attempt to access beyond end of device [ 175.037654][T12590] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 175.133544][T12619] Invalid ELF header type: 2 != 1 [ 175.209962][T12627] loop3: detected capacity change from 0 to 512 [ 175.255341][T12627] EXT4-fs: Ignoring removed bh option [ 175.283189][T12629] loop5: detected capacity change from 0 to 512 [ 175.319378][T12629] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3226: error while reading EA inode 32 err=-116 [ 175.333600][T12634] loop2: detected capacity change from 0 to 164 [ 175.342675][T12634] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.3227'. [ 175.359864][T12629] EXT4-fs (loop5): Remounting filesystem read-only [ 175.368530][T12629] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 175.386052][T12629] EXT4-fs (loop5): 1 orphan inode deleted [ 175.440990][T12650] 9pnet_fd: p9_fd_create_unix (12650): problem connecting socket: ./file0: -30 [ 175.450376][T12652] loop2: detected capacity change from 0 to 512 [ 175.456926][T12650] loop5: detected capacity change from 0 to 512 [ 175.487608][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3233'. [ 175.496689][T12650] netlink: 'syz.5.3233': attribute type 30 has an invalid length. [ 175.509032][ T297] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.528756][ T297] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.541972][T12656] loop3: detected capacity change from 0 to 256 [ 175.545830][ T297] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.548885][T12656] vfat: Unknown parameter 'ut˙' [ 175.559148][ T297] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.603670][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3232'. [ 175.623477][T12658] loop5: detected capacity change from 0 to 2048 [ 175.721095][T12663] loop2: detected capacity change from 0 to 136 [ 175.740790][T12666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.758620][T12663] tmpfs: Unsupported parameter 'huge' [ 175.759290][T12666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.794562][T12313] rock: directory entry would overflow storage [ 175.801901][T12313] rock: sig=0x4f50, size=4, remaining=3 [ 175.807628][T12313] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 175.836587][T12666] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3235: bg 0: block 345: padding at end of block bitmap is not set [ 175.855990][T12313] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 175.870421][T12666] EXT4-fs (loop5): Remounting filesystem read-only [ 175.891253][T12670] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.3240'. [ 175.896368][T12672] loop2: detected capacity change from 0 to 1024 [ 175.925183][T12672] EXT4-fs: Ignoring removed nobh option [ 175.941631][T12672] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 175.971933][T12672] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.3239: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 176.021125][T12677] netlink: 'syz.0.3243': attribute type 4 has an invalid length. [ 176.033645][T12672] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3239: couldn't read orphan inode 11 (err -117) [ 176.087396][T12672] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3239: Invalid block bitmap block 0 in block_group 0 [ 176.129360][T12672] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3239: Failed to acquire dquot type 0 [ 176.196365][T12687] loop2: detected capacity change from 0 to 512 [ 176.514490][T12703] pimreg: entered allmulticast mode [ 176.531466][T12703] pimreg: left allmulticast mode [ 176.531816][T12705] netlink: 'syz.0.3255': attribute type 4 has an invalid length. [ 176.610446][T12685] loop1: detected capacity change from 0 to 32768 [ 176.655442][T12685] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 176.683612][T12685] loop1: p1 start 460800 is beyond EOD, truncated [ 176.690245][T12685] loop1: p2 size 83886080 extends beyond EOD, truncated [ 176.733454][T12685] loop1: p5 start 460800 is beyond EOD, truncated [ 176.740011][T12685] loop1: p6 size 83886080 extends beyond EOD, truncated [ 176.799380][T12726] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.3261'. [ 176.808765][T12726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3261'. [ 176.883540][T12731] loop3: detected capacity change from 0 to 256 [ 176.895910][T12731] vfat: Unknown parameter 'ut˙' [ 176.905830][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3259'. [ 176.923703][T12728] loop2: detected capacity change from 0 to 512 [ 176.935683][T12732] loop5: detected capacity change from 0 to 512 [ 176.952128][T12728] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3263: error while reading EA inode 32 err=-116 [ 176.979325][T12728] EXT4-fs (loop2): Remounting filesystem read-only [ 176.992013][T12732] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3258: error while reading EA inode 32 err=-116 [ 177.018317][T12728] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 177.041533][T12732] EXT4-fs (loop5): Remounting filesystem read-only [ 177.051945][T12728] EXT4-fs (loop2): 1 orphan inode deleted [ 177.060085][T12732] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 177.124484][T12732] EXT4-fs (loop5): 1 orphan inode deleted [ 177.211349][T12744] netlink: 'syz.1.3268': attribute type 4 has an invalid length. [ 177.284316][T12748] $H˙: renamed from bond0 (while UP) [ 177.295527][T12748] $H˙: entered promiscuous mode [ 177.300607][T12748] bond_slave_0: entered promiscuous mode [ 177.306535][T12748] bond_slave_1: entered promiscuous mode [ 177.413835][T12756] loop1: detected capacity change from 0 to 512 [ 177.428773][T12760] loop2: detected capacity change from 0 to 512 [ 177.437531][T12756] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3271: error while reading EA inode 32 err=-116 [ 177.462526][T12760] EXT4-fs: Ignoring removed bh option [ 177.468798][T12756] EXT4-fs (loop1): Remounting filesystem read-only [ 177.476999][T12756] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 177.533859][T12756] EXT4-fs (loop1): 1 orphan inode deleted [ 177.665371][ T29] kauditd_printk_skb: 979 callbacks suppressed [ 177.665386][ T29] audit: type=1326 audit(185.652:42504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.1.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd336b16567 code=0x7ffc0000 [ 177.694730][ T29] audit: type=1326 audit(185.652:42505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.1.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd336abb779 code=0x7ffc0000 [ 177.766610][T12791] loop2: detected capacity change from 0 to 512 [ 177.767628][T12795] loop3: detected capacity change from 0 to 512 [ 177.781713][ T29] audit: type=1326 audit(185.652:42506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.1.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 177.797406][T12795] EXT4-fs: Ignoring removed bh option [ 177.804922][ T29] audit: type=1326 audit(185.663:42507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.1.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd336b16567 code=0x7ffc0000 [ 177.833186][ T29] audit: type=1326 audit(185.663:42508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.1.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd336abb779 code=0x7ffc0000 [ 177.856092][ T29] audit: type=1326 audit(185.663:42509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.1.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 177.879657][ T29] audit: type=1326 audit(185.673:42510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.1.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd336b16567 code=0x7ffc0000 [ 177.902841][ T29] audit: type=1326 audit(185.673:42511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.1.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd336abb779 code=0x7ffc0000 [ 177.925769][ T29] audit: type=1326 audit(185.673:42512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.1.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd336b1f6c9 code=0x7ffc0000 [ 177.948608][ T29] audit: type=1326 audit(185.684:42513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.1.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd336b16567 code=0x7ffc0000 [ 177.990036][T12791] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3277: error while reading EA inode 32 err=-116 [ 178.037117][T12791] EXT4-fs (loop2): Remounting filesystem read-only [ 178.052233][T12806] loop5: detected capacity change from 0 to 256 [ 178.092283][T12791] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 178.097446][T12806] vfat: Unknown parameter 'ut˙' [ 178.102816][T12791] EXT4-fs (loop2): 1 orphan inode deleted [ 178.193595][T12817] loop1: detected capacity change from 0 to 512 [ 178.201246][T12817] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 178.243184][T12825] ip6t_rpfilter: unknown options [ 178.257139][T12827] pimreg: entered allmulticast mode [ 178.266701][T12829] loop1: detected capacity change from 0 to 512 [ 178.274403][T12829] EXT4-fs: Ignoring removed bh option [ 178.275817][T12827] pimreg: left allmulticast mode [ 178.386969][T12843] pimreg: entered allmulticast mode [ 178.393518][T12843] pimreg: left allmulticast mode [ 178.543671][T12866] __nla_validate_parse: 7 callbacks suppressed [ 178.543692][T12866] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3317'. [ 178.565858][T12864] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.3316'. [ 178.600421][T12871] loop5: detected capacity change from 0 to 512 [ 178.618685][T12871] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 178.649989][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3319'. [ 178.714771][T12885] pimreg: entered allmulticast mode [ 178.720630][T12885] pimreg: left allmulticast mode [ 178.736265][T12873] hub 2-0:1.0: USB hub found [ 178.741227][T12888] loop3: detected capacity change from 0 to 164 [ 178.743100][T12873] hub 2-0:1.0: 8 ports detected [ 178.753185][T12889] loop2: detected capacity change from 0 to 512 [ 178.763914][T12888] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.3327'. [ 178.772675][T12889] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3318: error while reading EA inode 32 err=-116 [ 178.783538][T12888] net_ratelimit: 721 callbacks suppressed [ 178.783559][T12888] netlink: zone id is out of range [ 178.791875][T12889] EXT4-fs (loop2): Remounting filesystem read-only [ 178.796788][T12888] netlink: zone id is out of range [ 178.808778][T12889] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 178.826844][T12889] EXT4-fs (loop2): 1 orphan inode deleted [ 178.827714][T12888] netlink: zone id is out of range [ 178.837833][T12888] netlink: zone id is out of range [ 178.842947][T12888] netlink: zone id is out of range [ 178.848097][T12888] netlink: zone id is out of range [ 178.853255][T12888] netlink: zone id is out of range [ 178.858557][T12888] netlink: zone id is out of range [ 178.863838][T12888] netlink: zone id is out of range [ 178.869502][T12888] netlink: zone id is out of range [ 178.956809][T12903] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3332'. [ 179.058879][T12912] loop5: detected capacity change from 0 to 512 [ 179.112078][T12912] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 179.198259][T12920] loop1: detected capacity change from 0 to 1024 [ 179.219490][T12920] EXT4-fs: Ignoring removed nobh option [ 179.249727][T12920] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.287115][T12920] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.3339: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 179.352400][T12920] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3339: couldn't read orphan inode 11 (err -117) [ 179.366368][T12932] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3345'. [ 179.476063][T12945] loop1: detected capacity change from 0 to 512 [ 179.510734][T12945] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 179.525636][T12951] loop5: detected capacity change from 0 to 2048 [ 179.651780][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3355'. [ 179.713524][T12967] loop5: detected capacity change from 0 to 1024 [ 179.787224][T12967] EXT4-fs: Ignoring removed nobh option [ 179.800313][T12967] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.827780][T12967] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.3359: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 179.857164][T12967] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3359: couldn't read orphan inode 11 (err -117) [ 179.868331][T12958] loop1: detected capacity change from 0 to 8192 [ 179.954287][T12980] loop5: detected capacity change from 0 to 512 [ 179.961601][T12980] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 180.035820][T12985] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.3366'. [ 180.454317][T13021] loop1: detected capacity change from 0 to 512 [ 180.467060][T13021] EXT4-fs: Ignoring removed bh option [ 180.572226][T13040] loop1: detected capacity change from 0 to 512 [ 180.598214][T13040] EXT4-fs: Ignoring removed bh option [ 180.646227][T13041] netlink: 'syz.2.3391': attribute type 1 has an invalid length. [ 180.655551][T13049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3387'. [ 181.005119][T13077] loop5: detected capacity change from 0 to 512 [ 181.014863][T13077] EXT4-fs: Ignoring removed bh option [ 181.240590][T13103] loop3: detected capacity change from 0 to 2048 [ 181.248127][T13088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.261420][T13088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.333335][T13109] loop5: detected capacity change from 0 to 512 [ 181.346313][T13110] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3417: bg 0: block 345: padding at end of block bitmap is not set [ 181.347489][T13109] EXT4-fs: Ignoring removed bh option [ 181.370935][T13110] EXT4-fs (loop3): Remounting filesystem read-only [ 181.442040][T13120] loop3: detected capacity change from 0 to 512 [ 181.448793][T13120] EXT4-fs: Ignoring removed bh option [ 181.495017][T13128] ip6t_rpfilter: unknown options [ 181.563476][T13137] loop5: detected capacity change from 0 to 2048 [ 181.682097][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.693215][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.710953][T13144] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3429: bg 0: block 345: padding at end of block bitmap is not set [ 181.762558][T13144] EXT4-fs (loop5): Remounting filesystem read-only [ 181.931534][T13139] loop3: detected capacity change from 0 to 32768 [ 181.989164][T13139] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 181.994614][T13139] loop3: p1 start 460800 is beyond EOD, truncated [ 182.001148][T13139] loop3: p2 size 83886080 extends beyond EOD, truncated [ 182.067909][T13139] loop3: p5 start 460800 is beyond EOD, truncated [ 182.074433][T13139] loop3: p6 size 83886080 extends beyond EOD, truncated [ 182.143443][T13150] loop2: detected capacity change from 0 to 512 [ 182.152102][T13150] EXT4-fs: Ignoring removed bh option [ 182.230865][T13154] loop3: detected capacity change from 0 to 2048 [ 182.361261][T13163] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3432: bg 0: block 345: padding at end of block bitmap is not set [ 182.393516][T13166] loop1: detected capacity change from 0 to 512 [ 182.401734][T13166] EXT4-fs: Ignoring removed bh option [ 182.408755][T13163] EXT4-fs (loop3): Remounting filesystem read-only [ 182.430852][T13170] ip6t_rpfilter: unknown options [ 182.514558][ T29] kauditd_printk_skb: 593 callbacks suppressed [ 182.514577][ T29] audit: type=1400 audit(190.744:43107): avc: denied { validate_trans } for pid=13177 comm="syz.3.3441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 182.515297][T13179] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3441'. [ 182.560931][T13183] warn_alloc: 6 callbacks suppressed [ 182.560950][T13183] syz.0.3444: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 182.569929][T13180] loop2: detected capacity change from 0 to 512 [ 182.581081][T13183] CPU: 1 UID: 0 PID: 13183 Comm: syz.0.3444 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.581147][T13183] Tainted: [W]=WARN [ 182.581156][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.581174][T13183] Call Trace: [ 182.581184][T13183] [ 182.581194][T13183] __dump_stack+0x1d/0x30 [ 182.581298][T13183] dump_stack_lvl+0xe8/0x140 [ 182.581327][T13183] dump_stack+0x15/0x1b [ 182.581384][T13183] warn_alloc+0x12b/0x1a0 [ 182.581433][T13183] ? __rcu_read_unlock+0x4f/0x70 [ 182.581464][T13183] __vmalloc_node_range_noprof+0x9d/0xed0 [ 182.581594][T13183] ? __futex_wait+0x1fa/0x260 [ 182.581623][T13183] ? __pfx_futex_wake_mark+0x10/0x10 [ 182.581652][T13183] ? __rcu_read_unlock+0x4f/0x70 [ 182.581718][T13183] ? avc_has_perm_noaudit+0x1b1/0x200 [ 182.581747][T13183] ? should_fail_ex+0x30/0x280 [ 182.581773][T13183] ? xskq_create+0x36/0xe0 [ 182.581807][T13183] vmalloc_user_noprof+0x7d/0xb0 [ 182.581889][T13183] ? xskq_create+0x80/0xe0 [ 182.581944][T13183] xskq_create+0x80/0xe0 [ 182.581976][T13183] xsk_init_queue+0x95/0xf0 [ 182.582084][T13183] xsk_setsockopt+0x3f5/0x640 [ 182.582114][T13183] ? __pfx_xsk_setsockopt+0x10/0x10 [ 182.582143][T13183] __sys_setsockopt+0x184/0x200 [ 182.582282][T13183] __x64_sys_setsockopt+0x64/0x80 [ 182.582396][T13183] x64_sys_call+0x20ec/0x3000 [ 182.582430][T13183] do_syscall_64+0xd2/0x200 [ 182.582483][T13183] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 182.582522][T13183] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 182.582599][T13183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.582630][T13183] RIP: 0033:0x7ff3855ef6c9 [ 182.582651][T13183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.582677][T13183] RSP: 002b:00007ff384057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 182.582724][T13183] RAX: ffffffffffffffda RBX: 00007ff385845fa0 RCX: 00007ff3855ef6c9 [ 182.582742][T13183] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 182.582760][T13183] RBP: 00007ff385671f91 R08: 0000000000000004 R09: 0000000000000000 [ 182.582852][T13183] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.582873][T13183] R13: 00007ff385846038 R14: 00007ff385845fa0 R15: 00007ffeca643bc8 [ 182.582897][T13183] [ 182.582907][T13183] Mem-Info: [ 182.618989][T13180] EXT4-fs: Ignoring removed bh option [ 182.621467][T13183] active_anon:34131 inactive_anon:6 isolated_anon:0 [ 182.621467][T13183] active_file:30299 inactive_file:2325 isolated_file:0 [ 182.621467][T13183] unevictable:0 dirty:507 writeback:0 [ 182.621467][T13183] slab_reclaimable:3641 slab_unreclaimable:25250 [ 182.621467][T13183] mapped:41952 shmem:28871 pagetables:1862 [ 182.621467][T13183] sec_pagetables:0 bounce:0 [ 182.621467][T13183] kernel_misc_reclaimable:0 [ 182.621467][T13183] free:1796497 free_pcp:22415 free_cma:0 [ 182.786375][T13185] hub 1-0:1.0: USB hub found [ 182.789472][T13183] Node 0 active_anon:140700kB inactive_anon:24kB active_file:121196kB inactive_file:9300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167576kB dirty:2028kB writeback:0kB shmem:119660kB kernel_stack:4000kB pagetables:7564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 182.855205][T13185] hub 1-0:1.0: 8 ports detected [ 182.880707][T13183] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.951596][T13183] lowmem_reserve[]: 0 2881 7859 7859 [ 182.958012][T13183] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 182.989281][T13183] lowmem_reserve[]: 0 0 4978 4978 [ 182.994429][T13183] Node 0 Normal free:4219144kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:144760kB inactive_anon:24kB active_file:121196kB inactive_file:9300kB unevictable:0kB writepending:2028kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:82208kB local_pcp:50440kB free_cma:0kB [ 183.029464][T13183] lowmem_reserve[]: 0 0 0 0 [ 183.034534][T13183] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.047347][T13183] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 183.063601][T13183] Node 0 Normal: 4*4kB (UE) 17*8kB (UE) 7*16kB (ME) 1*32kB (E) 5*64kB (UE) 3*128kB (UME) 3*256kB (UM) 47*512kB (UME) 21*1024kB (UME) 23*2048kB (UM) 1007*4096kB (UM) = 4219112kB [ 183.081591][T13183] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 183.091416][T13183] 63558 total pagecache pages [ 183.096216][T13183] 6 pages in swap cache [ 183.100470][T13183] Free swap = 124972kB [ 183.104652][T13183] Total swap = 124996kB [ 183.108840][T13183] 2097051 pages RAM [ 183.112676][T13183] 0 pages HighMem/MovableOnly [ 183.117405][T13183] 81087 pages reserved [ 183.210070][ T29] audit: type=1326 audit(191.469:43108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0588f6c9 code=0x7ffc0000 [ 183.233272][ T29] audit: type=1326 audit(191.469:43109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b0588f6c9 code=0x7ffc0000 [ 183.256471][ T29] audit: type=1326 audit(191.469:43110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0588f6c9 code=0x7ffc0000 [ 183.280697][ T29] audit: type=1326 audit(191.469:43111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b0588f6c9 code=0x7ffc0000 [ 183.303863][ T29] audit: type=1326 audit(191.469:43112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0588f6c9 code=0x7ffc0000 [ 183.327085][ T29] audit: type=1326 audit(191.469:43113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b0588f6c9 code=0x7ffc0000 [ 183.350486][ T29] audit: type=1326 audit(191.469:43114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0588f6c9 code=0x7ffc0000 [ 183.373697][ T29] audit: type=1326 audit(191.469:43115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b0588f6c9 code=0x7ffc0000 [ 183.396975][ T29] audit: type=1326 audit(191.469:43116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0588f6c9 code=0x7ffc0000 [ 183.453544][T13212] loop1: detected capacity change from 0 to 512 [ 183.495239][T13212] EXT4-fs: Ignoring removed bh option [ 183.548743][T13218] ip6t_rpfilter: unknown options [ 183.580484][T13220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.668483][T13220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.700751][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.715516][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.852910][T13222] xt_hashlimit: max too large, truncated to 1048576 [ 183.913401][T13234] Invalid ELF header type: 2 != 1 [ 183.989568][T13238] pimreg: entered allmulticast mode [ 184.014590][T13238] pimreg: left allmulticast mode [ 184.071789][T13244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.080461][T13244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.090549][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3463'. [ 184.099786][T13244] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3463'. [ 184.121501][T13244] bridge0: port 3(vlan2) entered blocking state [ 184.128000][T13244] bridge0: port 3(vlan2) entered disabled state [ 184.152129][T13244] vlan2: entered allmulticast mode [ 184.157335][T13244] bridge0: entered allmulticast mode [ 184.177121][T13244] vlan2: left allmulticast mode [ 184.182166][T13244] bridge0: left allmulticast mode [ 184.238252][T13249] netlink: 'syz.1.3465': attribute type 4 has an invalid length. [ 184.642108][T13265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3473'. [ 184.671686][T13267] loop3: detected capacity change from 0 to 512 [ 184.682525][T13267] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 184.737940][T13270] netlink: 'syz.3.3476': attribute type 4 has an invalid length. [ 184.779371][T13273] loop5: detected capacity change from 0 to 512 [ 184.787175][T13273] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 184.799760][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3477'. [ 184.838832][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3477'. [ 184.884998][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3477'. [ 184.908083][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3480'. [ 184.970495][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3477'. [ 185.076064][T13282] loop3: detected capacity change from 0 to 8192 [ 185.112490][T13297] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3486'. [ 185.135652][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3478'. [ 185.289517][T13306] ip6t_rpfilter: unknown options [ 185.356701][T13313] loop1: detected capacity change from 0 to 512 [ 185.374943][T13313] EXT4-fs: Ignoring removed bh option [ 185.383900][T13304] infiniband syz!: set active [ 185.388631][T13304] infiniband syz!: added team_slave_0 [ 185.418492][T13304] RDS/IB: syz!: added [ 185.446800][T13304] smc: adding ib device syz! with port count 1 [ 185.462140][T13304] smc: ib device syz! port 1 has no pnetid [ 185.499517][T13320] loop3: detected capacity change from 0 to 512 [ 185.556457][T13320] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 185.716893][T13334] ip6t_rpfilter: unknown options [ 185.776469][T13338] loop2: detected capacity change from 0 to 512 [ 185.793861][T13332] loop3: detected capacity change from 0 to 128 [ 185.813746][T13338] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 185.940012][T13343] loop5: detected capacity change from 0 to 8192 [ 186.220561][T13363] loop1: detected capacity change from 0 to 512 [ 186.220595][T13371] ip6t_rpfilter: unknown options [ 186.241671][T13363] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3509: error while reading EA inode 32 err=-116 [ 186.264949][T13363] EXT4-fs (loop1): Remounting filesystem read-only [ 186.270901][T13377] netlink: 'syz.5.3516': attribute type 4 has an invalid length. [ 186.272293][T13363] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 186.290275][T13363] EXT4-fs (loop1): 1 orphan inode deleted [ 186.317635][T13379] loop5: detected capacity change from 0 to 512 [ 186.325248][T13379] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 186.693417][T13403] loop5: detected capacity change from 0 to 512 [ 186.709431][T13405] loop3: detected capacity change from 0 to 512 [ 186.719287][T13403] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 186.729198][T13405] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 187.047984][T13427] syz!: rxe_newlink: already configured on team_slave_0 [ 187.284386][ T29] kauditd_printk_skb: 835 callbacks suppressed [ 187.284472][ T29] audit: type=1326 audit(195.753:43952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.0.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3855e6567 code=0x7ffc0000 [ 187.313883][ T29] audit: type=1326 audit(195.753:43953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.0.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff38558b779 code=0x7ffc0000 [ 187.336798][ T29] audit: type=1326 audit(195.753:43954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.0.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 187.359683][ T29] audit: type=1326 audit(195.763:43955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.0.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3855e6567 code=0x7ffc0000 [ 187.382762][ T29] audit: type=1326 audit(195.763:43956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.0.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff38558b779 code=0x7ffc0000 [ 187.405800][ T29] audit: type=1326 audit(195.763:43957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.0.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 187.428714][ T29] audit: type=1326 audit(195.774:43958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.0.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3855e6567 code=0x7ffc0000 [ 187.451769][ T29] audit: type=1326 audit(195.774:43959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.0.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff38558b779 code=0x7ffc0000 [ 187.474732][ T29] audit: type=1326 audit(195.774:43960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.0.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 187.505154][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.516898][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.796237][ T29] audit: type=1400 audit(195.973:43961): avc: denied { ioctl } for pid=13439 comm="syz.3.3542" path="socket:[39895]" dev="sockfs" ino=39895 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.554852][T13468] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 188.888603][T13472] loop5: detected capacity change from 0 to 512 [ 188.921121][T13472] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.927669][T13472] EXT4-fs: inline encryption not supported [ 188.947953][T13472] EXT4-fs: test_dummy_encryption option not supported [ 189.133646][T13486] loop5: detected capacity change from 0 to 2048 [ 189.170985][T13486] loop5: p1 < > p4 [ 189.208880][T13486] loop5: p4 size 722688 extends beyond EOD, truncated [ 189.663442][T13499] lo speed is unknown, defaulting to 1000 [ 189.728023][T13506] loop3: detected capacity change from 0 to 512 [ 189.735908][T13506] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.765902][T13506] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 189.782068][T13506] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.3566: inode #15: comm syz.3.3566: iget: illegal inode # [ 189.944095][T13506] EXT4-fs (loop3): Remounting filesystem read-only [ 189.951152][T13506] EXT4-fs mount: 96 callbacks suppressed [ 189.951167][T13506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.019308][T12052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.478741][T13534] loop3: detected capacity change from 0 to 512 [ 191.487714][T13532] loop1: detected capacity change from 0 to 1024 [ 191.502077][T13522] loop5: detected capacity change from 0 to 4096 [ 191.513414][T13532] EXT4-fs: Ignoring removed oldalloc option [ 191.522993][T13532] EXT4-fs: Ignoring removed bh option [ 191.530576][T13534] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.537831][T13534] EXT4-fs: inline encryption not supported [ 191.547906][T13522] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 191.559560][T13534] EXT4-fs: test_dummy_encryption option not supported [ 191.687534][T13532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.031037][T13558] capability: warning: `syz.3.3583' uses 32-bit capabilities (legacy support in use) [ 192.415472][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.540299][T13563] bridge_slave_0: left allmulticast mode [ 192.546249][T13563] bridge_slave_0: left promiscuous mode [ 192.552330][T13563] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.564689][T13563] bridge_slave_1: left allmulticast mode [ 192.570558][T13563] bridge_slave_1: left promiscuous mode [ 192.577697][T13563] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.588810][T13563] bond0: (slave bond_slave_0): Releasing backup interface [ 192.606296][T13571] loop1: detected capacity change from 0 to 1024 [ 192.613664][T13571] EXT4-fs: Ignoring removed orlov option [ 192.624093][T13563] bond0: (slave bond_slave_1): Releasing backup interface [ 192.636913][T13563] team0: Port device team_slave_0 removed [ 192.646049][T13563] team0: Port device team_slave_1 removed [ 192.653124][T13563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.660915][T13563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.670656][T13563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.678498][T13563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.688851][T13563] net_ratelimit: 304 callbacks suppressed [ 192.688941][T13563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.722548][T13566] loop2: detected capacity change from 0 to 512 [ 192.736170][T13571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.759005][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 192.762612][T13566] ext2: Unknown parameter 'permit_directio' [ 192.765256][ T29] audit: type=1400 audit(201.233:43990): avc: denied { write } for pid=13556 comm="syz.3.3583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 193.945134][T13575] loop5: detected capacity change from 0 to 512 [ 194.086273][ T29] audit: type=1400 audit(201.958:43991): avc: denied { write } for pid=13565 comm="syz.5.3587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 194.150284][T13575] EXT4-fs: Ignoring removed i_version option [ 194.156485][T13575] EXT4-fs: Ignoring removed nobh option [ 194.986289][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.998572][T13582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.047388][T13582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.065544][T13575] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 195.154869][T13584] loop3: detected capacity change from 0 to 512 [ 195.162366][T13584] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.250317][T13584] EXT4-fs (loop3): 1 truncate cleaned up [ 195.257740][T13584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.287569][T13575] EXT4-fs (loop5): 1 truncate cleaned up [ 195.351962][T13575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.735514][T13588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.761383][T13588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.507710][T13605] bridge_slave_0: left allmulticast mode [ 196.514199][T13605] bridge_slave_0: left promiscuous mode [ 196.520246][T13605] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.864127][T13606] loop1: detected capacity change from 0 to 512 [ 196.871894][T13606] EXT4-fs: Ignoring removed i_version option [ 196.878722][T13606] EXT4-fs: Ignoring removed nobh option [ 196.916549][T13606] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 196.944304][T13605] bridge_slave_1: left allmulticast mode [ 196.950706][T13605] bridge_slave_1: left promiscuous mode [ 196.956894][T13605] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.969085][T13606] EXT4-fs (loop1): 1 truncate cleaned up [ 196.976366][T13606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.004899][T12052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.031618][T13605] bond0: (slave bond_slave_0): Releasing backup interface [ 197.042269][T13605] bond0: (slave bond_slave_1): Releasing backup interface [ 197.055302][T13605] team0: Port device team_slave_0 removed [ 197.064915][T13605] team0: Port device team_slave_1 removed [ 197.074603][T13605] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.412149][ T29] audit: type=1326 audit(206.168:43992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.439607][ T29] audit: type=1326 audit(206.178:43993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.466552][ T29] audit: type=1326 audit(206.178:43994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.490747][ T29] audit: type=1326 audit(206.178:43995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.515133][ T29] audit: type=1326 audit(206.178:43996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.539202][ T29] audit: type=1326 audit(206.178:43997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.564976][ T29] audit: type=1326 audit(206.178:43998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.590667][ T29] audit: type=1326 audit(206.178:43999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.620576][ T29] audit: type=1326 audit(206.178:44000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.647624][ T29] audit: type=1326 audit(206.178:44001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.671054][ T29] audit: type=1326 audit(206.178:44002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.695923][ T29] audit: type=1326 audit(206.178:44003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.719262][ T29] audit: type=1326 audit(206.178:44004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.742772][ T29] audit: type=1326 audit(206.178:44005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 197.768088][ T29] audit: type=1326 audit(206.178:44006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 198.312731][T13617] __nla_validate_parse: 22 callbacks suppressed [ 198.312753][T13617] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3601'. [ 198.783094][T13619] loop2: detected capacity change from 0 to 1024 [ 198.789907][T13619] EXT4-fs: Ignoring removed orlov option [ 198.867793][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.945308][T13619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.287890][T13627] hub 2-0:1.0: USB hub found [ 199.302533][T13627] hub 2-0:1.0: 8 ports detected [ 199.574576][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3605'. [ 201.155576][T13638] loop1: detected capacity change from 0 to 512 [ 201.162242][T13638] EXT4-fs: Ignoring removed nobh option [ 201.476782][T12313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.491960][T13638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 201.506806][T13638] EXT4-fs (loop1): 1 truncate cleaned up [ 201.514794][T13638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.011208][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 202.074528][T13653] loop3: detected capacity change from 0 to 1024 [ 202.096363][T13653] EXT4-fs: Ignoring removed oldalloc option [ 202.102466][T13653] EXT4-fs: Ignoring removed bh option [ 202.144898][T13653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.161923][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.925955][T10364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.043880][T12052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.399890][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 203.399909][ T29] audit: type=1400 audit(212.667:44046): avc: denied { firmware_load } for pid=13666 comm="syz.5.3614" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 203.677634][T13679] loop2: detected capacity change from 0 to 512 [ 203.691489][T13649] Bluetooth: hci0: command 0x1003 tx timeout [ 204.037806][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.550845][T13690] loop5: detected capacity change from 0 to 1024 [ 205.239825][T13690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.068323][T13704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.077322][T13704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.981476][T10364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.007654][T13713] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3626'. [ 207.060662][T13717] wg2: entered promiscuous mode [ 207.065750][T13717] wg2: entered allmulticast mode [ 207.080547][T13717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.090446][T13717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.326632][T13725] loop3: detected capacity change from 0 to 512 [ 207.334928][T13725] ext2: Unknown parameter 'permit_directio' [ 208.288672][T13731] loop2: detected capacity change from 0 to 4096 [ 208.303276][T13731] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 210.193026][ T29] audit: type=1400 audit(219.806:44047): avc: denied { setopt } for pid=13730 comm="syz.2.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.692807][T13766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.726887][T13766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.766324][T13766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.804395][T13766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.603749][ T29] audit: type=1400 audit(221.287:44048): avc: denied { getopt } for pid=13774 comm="syz.1.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 211.958961][ T29] audit: type=1326 audit(221.654:44049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 211.982857][ T29] audit: type=1326 audit(221.654:44050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 212.006485][ T29] audit: type=1326 audit(221.654:44051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 212.044574][T13788] 9pnet_fd: Insufficient options for proto=fd [ 212.073207][ T29] audit: type=1326 audit(221.654:44052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 212.097676][ T29] audit: type=1326 audit(221.654:44053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 212.122487][ T29] audit: type=1326 audit(221.654:44054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3855ef6c9 code=0x7ffc0000 [ 212.145759][ T29] audit: type=1400 audit(221.686:44055): avc: denied { append } for pid=13786 comm="syz.3.3650" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 212.442110][T13790] loop3: detected capacity change from 0 to 512 [ 212.443992][ T29] audit: type=1400 audit(222.158:44056): avc: denied { map } for pid=13791 comm="syz.2.3652" path="/proc/240/net/ptype" dev="proc" ino=4026532406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 212.502940][T13790] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3651: inode has both inline data and extents flags [ 212.523308][T13790] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3651: couldn't read orphan inode 15 (err -117) [ 212.535644][T13796] loop5: detected capacity change from 0 to 8192 [ 212.537876][T13790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.297235][T12052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.580566][T13840] loop3: detected capacity change from 0 to 1024 [ 213.601751][T13840] EXT4-fs: Ignoring removed orlov option [ 213.649314][ T3395] hid (null): unknown global tag 0xe [ 213.664580][ T3395] hid-generic 0090:8000:0007.0002: unknown global tag 0xe [ 213.672064][ T3395] hid-generic 0090:8000:0007.0002: item 0 1 1 14 parsing failed [ 213.714178][ T3395] hid-generic 0090:8000:0007.0002: probe with driver hid-generic failed with error -22 [ 213.827930][T13849] loop5: detected capacity change from 0 to 2048 [ 213.863376][T13849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.877289][T13851] loop1: detected capacity change from 0 to 1024 [ 213.884883][T13851] EXT4-fs: Ignoring removed oldalloc option [ 213.890968][T13851] EXT4-fs: Ignoring removed bh option [ 213.908663][T13851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.008254][T13840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.044715][T12052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.055892][T10364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.090923][T11511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.305098][ T2044] Bluetooth: hci0: Frame reassembly failed (-84) [ 215.319713][T13888] SELinux: failed to load policy [ 215.801472][T13902] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3691'. [ 215.811594][T13900] lo speed is unknown, defaulting to 1000 [ 215.890287][T13905] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 216.501511][T13909] loop3: detected capacity change from 0 to 512 [ 216.514054][T13909] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3693: inode has both inline data and extents flags [ 216.684831][T13909] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3693: couldn't read orphan inode 15 (err -117) [ 216.928892][T13909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.267545][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 217.699227][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 217.699243][ T29] audit: type=1400 audit(227.681:44059): avc: denied { bind } for pid=13921 comm="syz.5.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 218.000150][ T29] audit: type=1400 audit(227.964:44060): avc: denied { listen } for pid=13921 comm="syz.5.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 218.309966][T12052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.332451][T13933] loop5: detected capacity change from 0 to 1024 [ 218.340598][T13933] EXT4-fs: Ignoring removed orlov option [ 218.354905][T13891] Bluetooth: hci0: Frame reassembly failed (-84) [ 218.373449][T13933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.621823][T13946] loop3: detected capacity change from 0 to 128 [ 218.732888][T13945] lo speed is unknown, defaulting to 1000 [ 218.962307][T13949] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 218.971074][T13949] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 219.087206][T13950] syz.3.3701: attempt to access beyond end of device [ 219.087206][T13950] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 219.094660][T10364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.101442][T13950] syz.3.3701: attempt to access beyond end of device [ 219.101442][T13950] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 219.385974][T13950] syz.3.3701: attempt to access beyond end of device [ 219.385974][T13950] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 219.400559][T13950] syz.3.3701: attempt to access beyond end of device [ 219.400559][T13950] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 219.433309][T13950] syz.3.3701: attempt to access beyond end of device [ 219.433309][T13950] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 220.089758][T13950] syz.3.3701: attempt to access beyond end of device [ 220.089758][T13950] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 220.477773][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 220.486276][T13649] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 220.816325][ T29] audit: type=1400 audit(230.956:44061): avc: denied { read } for pid=13951 comm="syz.2.3705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.927591][T13981] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 222.026220][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 222.043266][T13978] loop2: detected capacity change from 0 to 256 [ 222.050062][T13978] vfat: Unknown parameter 'ut˙' [ 222.056907][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3712'. [ 222.071827][ T29] audit: type=1326 audit(232.269:44062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 222.095182][ T29] audit: type=1326 audit(232.279:44063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 222.119064][ T29] audit: type=1326 audit(232.279:44064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 222.144492][ T29] audit: type=1326 audit(232.279:44065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 222.168698][ T29] audit: type=1326 audit(232.279:44066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 222.194006][ T29] audit: type=1326 audit(232.279:44067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 222.219454][ T29] audit: type=1326 audit(232.279:44068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 222.569223][ T29] audit: type=1326 audit(232.678:44069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 222.595261][ T29] audit: type=1326 audit(232.689:44070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 222.620514][ T29] audit: type=1326 audit(232.689:44071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 222.644289][ T29] audit: type=1326 audit(232.689:44072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 222.669489][ T29] audit: type=1326 audit(232.689:44073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 222.694166][ T29] audit: type=1326 audit(232.689:44074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bfdd3f6c9 code=0x7ffc0000 [ 222.726662][T13993] loop5: detected capacity change from 0 to 164 [ 222.735751][T13991] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.3718'. [ 222.751289][T13991] netlink: zone id is out of range [ 222.758493][T13991] netlink: zone id is out of range [ 222.773178][T13991] netlink: zone id is out of range [ 222.779313][T13991] netlink: zone id is out of range [ 222.785046][T13991] netlink: zone id is out of range [ 222.791805][T13991] netlink: zone id is out of range [ 222.798600][T13991] netlink: zone id is out of range [ 222.804929][T13991] netlink: zone id is out of range [ 222.811590][T13991] netlink: zone id is out of range [ 222.817193][T13991] netlink: zone id is out of range [ 222.829701][T14004] loop3: detected capacity change from 0 to 512 [ 222.836835][T14004] EXT4-fs: Ignoring removed bh option [ 222.908429][T14004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.942407][T14012] loop5: detected capacity change from 0 to 1024 [ 222.950386][T14012] EXT4-fs: Ignoring removed oldalloc option [ 222.956420][T14012] EXT4-fs: Ignoring removed bh option [ 222.963565][T12052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.982846][T14008] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 222.985701][T14017] warn_alloc: 4 callbacks suppressed [ 222.985725][T14017] syz.3.3726: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 223.012456][T14017] CPU: 0 UID: 0 PID: 14017 Comm: syz.3.3726 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 223.012495][T14017] Tainted: [W]=WARN [ 223.012504][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.012556][T14017] Call Trace: [ 223.012565][T14017] [ 223.012608][T14017] __dump_stack+0x1d/0x30 [ 223.012634][T14017] dump_stack_lvl+0xe8/0x140 [ 223.012657][T14017] dump_stack+0x15/0x1b [ 223.012675][T14017] warn_alloc+0x12b/0x1a0 [ 223.012797][T14017] ? __rcu_read_unlock+0x4f/0x70 [ 223.012839][T14017] __vmalloc_node_range_noprof+0x9d/0xed0 [ 223.012872][T14017] ? __futex_wait+0x1fa/0x260 [ 223.012953][T14017] ? __pfx_futex_wake_mark+0x10/0x10 [ 223.012978][T14017] ? __rcu_read_unlock+0x4f/0x70 [ 223.013017][T14017] ? avc_has_perm_noaudit+0x1b1/0x200 [ 223.013042][T14017] ? should_fail_ex+0x30/0x280 [ 223.013064][T14017] ? xskq_create+0x36/0xe0 [ 223.013096][T14017] vmalloc_user_noprof+0x7d/0xb0 [ 223.013152][T14017] ? xskq_create+0x80/0xe0 [ 223.013182][T14017] xskq_create+0x80/0xe0 [ 223.013266][T14017] xsk_init_queue+0x95/0xf0 [ 223.013416][T14017] xsk_setsockopt+0x3f5/0x640 [ 223.013453][T14017] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.013515][T14017] __sys_setsockopt+0x184/0x200 [ 223.013559][T14017] __x64_sys_setsockopt+0x64/0x80 [ 223.013604][T14017] x64_sys_call+0x20ec/0x3000 [ 223.013701][T14017] do_syscall_64+0xd2/0x200 [ 223.013730][T14017] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 223.013810][T14017] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 223.013849][T14017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.013879][T14017] RIP: 0033:0x7f6fa7d1f6c9 [ 223.013901][T14017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.014002][T14017] RSP: 002b:00007f6fa677f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.014029][T14017] RAX: ffffffffffffffda RBX: 00007f6fa7f75fa0 RCX: 00007f6fa7d1f6c9 [ 223.014048][T14017] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 223.014067][T14017] RBP: 00007f6fa7da1f91 R08: 0000000000000004 R09: 0000000000000000 [ 223.014086][T14017] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.014105][T14017] R13: 00007f6fa7f76038 R14: 00007f6fa7f75fa0 R15: 00007ffdf06114b8 [ 223.014133][T14017] [ 223.014144][T14017] Mem-Info: [ 223.264586][T14017] active_anon:11927 inactive_anon:8 isolated_anon:0 [ 223.264586][T14017] active_file:30299 inactive_file:2329 isolated_file:0 [ 223.264586][T14017] unevictable:0 dirty:161 writeback:0 [ 223.264586][T14017] slab_reclaimable:3642 slab_unreclaimable:26352 [ 223.264586][T14017] mapped:32829 shmem:3199 pagetables:1922 [ 223.264586][T14017] sec_pagetables:0 bounce:0 [ 223.264586][T14017] kernel_misc_reclaimable:0 [ 223.264586][T14017] free:1829281 free_pcp:10117 free_cma:0 [ 223.312381][T14017] Node 0 active_anon:47708kB inactive_anon:32kB active_file:121196kB inactive_file:9316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131316kB dirty:644kB writeback:0kB shmem:12796kB kernel_stack:4096kB pagetables:7688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.313714][T14012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.341196][T14017] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.383807][T14017] lowmem_reserve[]: 0 2881 7859 7859 [ 223.389440][T14017] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 223.424102][T14017] lowmem_reserve[]: 0 0 4978 4978 [ 223.429419][T14017] Node 0 Normal free:4355012kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47640kB inactive_anon:32kB active_file:121196kB inactive_file:9304kB unevictable:0kB writepending:700kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:36828kB local_pcp:2140kB free_cma:0kB [ 223.463557][T14017] lowmem_reserve[]: 0 0 0 0 [ 223.468425][T14017] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 223.481717][T14017] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 223.498108][T14017] Node 0 Normal: 1665*4kB (UM) 636*8kB (UE) 1498*16kB (UME) 1166*32kB (UME) 654*64kB (UME) 254*128kB (UME) 74*256kB (UME) 37*512kB (UME) 6*1024kB (UME) 17*2048kB (UM) 1008*4096kB (UME) = 4355012kB [ 223.517875][T14017] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 223.527194][T14017] 35804 total pagecache pages [ 223.531898][T14017] 8 pages in swap cache [ 223.536285][T14017] Free swap = 124792kB [ 223.540529][T14017] Total swap = 124996kB [ 223.544771][T14017] 2097051 pages RAM [ 223.548659][T14017] 0 pages HighMem/MovableOnly [ 223.553883][T14017] 81087 pages reserved [ 223.613315][T14021] ================================================================== [ 223.622624][T14021] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 223.630559][T14021] [ 223.632996][T14021] write to 0xffff888100717254 of 4 bytes by task 14012 on cpu 0: [ 223.640982][T14021] xas_clear_mark+0x16b/0x180 [ 223.645690][T14021] __folio_start_writeback+0x231/0x390 [ 223.651292][T14021] ext4_bio_write_folio+0x5ad/0x9f0 [ 223.656514][T14021] mpage_process_page_bufs+0x4a1/0x620 [ 223.662437][T14021] mpage_prepare_extent_to_map+0x786/0xc00 [ 223.668813][T14021] ext4_do_writepages+0x708/0x2750 [ 223.674417][T14021] ext4_writepages+0x176/0x300 [ 223.679480][T14021] do_writepages+0x1c6/0x310 [ 223.684116][T14021] file_write_and_wait_range+0x156/0x2c0 [ 223.689953][T14021] generic_buffers_fsync_noflush+0x45/0x120 [ 223.697023][T14021] ext4_sync_file+0x1ab/0x690 [ 223.702457][T14021] vfs_fsync_range+0x10d/0x130 [ 223.707789][T14021] ext4_buffered_write_iter+0x34f/0x3c0 [ 223.713702][T14021] ext4_file_write_iter+0x387/0xf60 [ 223.719523][T14021] iter_file_splice_write+0x666/0xa60 [ 223.725526][T14021] direct_splice_actor+0x156/0x2a0 [ 223.730835][T14021] splice_direct_to_actor+0x312/0x680 [ 223.736223][T14021] do_splice_direct+0xda/0x150 [ 223.741271][T14021] do_sendfile+0x380/0x650 [ 223.746611][T14021] __x64_sys_sendfile64+0x105/0x150 [ 223.751841][T14021] x64_sys_call+0x2bb4/0x3000 [ 223.757319][T14021] do_syscall_64+0xd2/0x200 [ 223.761850][T14021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.768114][T14021] [ 223.770727][T14021] read to 0xffff888100717254 of 4 bytes by task 14021 on cpu 1: [ 223.779395][T14021] xas_find_marked+0x5dc/0x620 [ 223.784642][T14021] find_get_entry+0x5d/0x380 [ 223.789272][T14021] filemap_get_folios_tag+0x92/0x210 [ 223.795412][T14021] filemap_fdatawait_range+0x88/0x1d0 [ 223.800999][T14021] __writeback_single_inode+0xdb/0x7c0 [ 223.807876][T14021] writeback_single_inode+0x16d/0x3f0 [ 223.814740][T14021] sync_inode_metadata+0x5b/0x90 [ 223.819898][T14021] generic_buffers_fsync_noflush+0xd9/0x120 [ 223.826177][T14021] ext4_sync_file+0x1ab/0x690 [ 223.831436][T14021] vfs_fsync_range+0x10d/0x130 [ 223.836451][T14021] ext4_buffered_write_iter+0x34f/0x3c0 [ 223.842204][T14021] ext4_file_write_iter+0x387/0xf60 [ 223.847416][T14021] iter_file_splice_write+0x666/0xa60 [ 223.853241][T14021] direct_splice_actor+0x156/0x2a0 [ 223.858558][T14021] splice_direct_to_actor+0x312/0x680 [ 223.863965][T14021] do_splice_direct+0xda/0x150 [ 223.869017][T14021] do_sendfile+0x380/0x650 [ 223.873560][T14021] __x64_sys_sendfile64+0x105/0x150 [ 223.878973][T14021] x64_sys_call+0x2bb4/0x3000 [ 223.883703][T14021] do_syscall_64+0xd2/0x200 [ 223.888950][T14021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.894977][T14021] [ 223.897408][T14021] value changed: 0x0e000021 -> 0x04000021 [ 223.903319][T14021] [ 223.905731][T14021] Reported by Kernel Concurrency Sanitizer on: [ 223.912084][T14021] CPU: 1 UID: 0 PID: 14021 Comm: syz.5.3725 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 223.924993][T14021] Tainted: [W]=WARN [ 223.928993][T14021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.940986][T14021] ================================================================== [ 223.978773][T13649] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 223.985468][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 224.113418][T10364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.