last executing test programs: 4.346042145s ago: executing program 1 (id=117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0xb, 0x35) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = io_uring_setup(0x36, &(0x7f0000000340)={0x0, 0x94f9, 0x407, 0x0, 0x253}) getpriority(0x2, 0x80000000) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000201010300000000000000000200000a04100180060012400001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8050) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac01000095f385bd832b4469d88b21c323", @ANYRES16=r6, @ANYBLOB="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"], 0x1ac}}, 0x4004804) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x4, 0x6, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, @private2, 0x7, 0x8, 0x2, 0x7a}}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x256, 0x3, 0x2, 0x28c9, r1, 0x5, '\x00', r9, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYBLOB="8cd3c395291cfe8a0b86dbd7be626447d4d2e6dcf5da0df49e8cc7ec8ee23dcefcb12110dc518512d51f165c5ac9549cad3105c93930978a53", @ANYRESOCT=r4, @ANYRES32=r7, @ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x28, 0x4, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) 3.507115147s ago: executing program 1 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x100}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="d33cf48f692b1613ecc68989ada5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_migrate_pages_start\x00', r8}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000940)=""/235, 0xeb}, {&(0x7f0000000a40)=""/241, 0xf1}, {&(0x7f0000000b40)=""/225, 0xe1}, {&(0x7f0000000c40)=""/216, 0xd8}, {&(0x7f00000004c0)=""/33, 0x21}], 0x6}, 0x4}], 0x1, 0x10120, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x1, 0x9, 0x4, 0x7}, &(0x7f00000001c0)=0xffffffffffffff79) socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, 0x0, 0x0) 2.802670907s ago: executing program 2 (id=130): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x6, 0x9, 0x0, 0x200002b0, 0x200082e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[]}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x1a0, 0x0, 0xd0, 0xd0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'vcan0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @mcast1, [0x0, 0xff000000], [], 'macvtap0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x340}}, {{@ipv6={@private0, @mcast1, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'veth0_to_hsr\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [0x0, 0xff000000], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000000)=0x9, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x6}, 0xfffffffffffffd66) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x20000400) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) fcntl$lock(r7, 0x7, 0x0) io_uring_setup(0x761, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0003000002000000000400"/28], 0x50) 2.784599818s ago: executing program 3 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) getitimer(0x0, &(0x7f0000000000)) 2.684369559s ago: executing program 3 (id=132): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) fstat(r2, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000000640), 0x6, 0xc000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000100400000008000700e0000002080002000500000008000800ac1e0001060001"], 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SDREQ(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000001300)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x91360cc6897247e}, 0x4000000) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$inet(0x2, 0x1, 0xd) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r13}, 0x18) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901ffdf0000009500000000000000bf91000000000000b702000001000000850180000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r14}, 0x18) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 2.541390422s ago: executing program 1 (id=133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getcwd(&(0x7f0000000380)=""/131, 0x83) socket$unix(0x1, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x3, 0xfffffffd, @loopback}, 0x1c) connect$l2tp(r1, &(0x7f0000000580)={0x2, 0x0, @private=0xa010100, 0x4}, 0x10) io_pgetevents(0x0, 0x7ffffffc, 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)={0x77359400}, &(0x7f0000000300)={&(0x7f0000000280)={[0x100000000]}, 0x8}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)}}], 0x2, 0x10) shutdown(r3, 0x2) 2.236300506s ago: executing program 2 (id=135): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18006c60e243000cf1ffffffffffffff950000000000000085ef99671f23e1da281b626572c8576783bb4b30d5e2020579ed7fbb24232cf477749012d90d6a2d6a2d55903b0e8d3b4704559f926f268941fde82f11432b01e89bededde4ddd2e4b74e9bc9ea4f665eaddcd53b79e90d82bedb08a318db9040480c0ae70374b64c5629bddacf65c4d4c089b075218cb0b2d1801e886569eabd9670b530f0ce57138f10a4fd5c7504a0259b7625734693ebb85de30312084ae7f41e8bda112b3463cd36753b225c697dba586099959f9dc3de46ce7a4bd74eae30000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100080018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0xe80, 0x0, &(0x7f00000005c0)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0800000000000000000000ca0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='system_u:object_r:modules_dep_t:s0 unconfWned 00000000000000000004\x00'], 0x43) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2}, {0x60}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0xfffffffffffffceb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.214976777s ago: executing program 0 (id=136): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 2.198976107s ago: executing program 3 (id=137): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) fstat(r2, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000000640), 0x6, 0xc000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000100400000008000700e0000002080002000500000008000800ac1e0001060001"], 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SDREQ(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000001300)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x91360cc6897247e}, 0x4000000) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$inet(0x2, 0x1, 0xd) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r13}, 0x18) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901ffdf0000009500000000000000bf91000000000000b702000001000000850180000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r14}, 0x18) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 2.184503717s ago: executing program 1 (id=138): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000380)="e9", 0x1}], 0x1, 0x7fff, 0x0, 0x41) faccessat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x28, 0x200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) socket$inet6(0xa, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) 2.157455887s ago: executing program 1 (id=139): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x800000000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$tipc(0x1e, 0x5, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) 1.710924474s ago: executing program 3 (id=142): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000891) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) futex_waitv(&(0x7f0000001ac0)=[{0x287, &(0x7f0000000280)=0x8000, 0x82}, {0x10, &(0x7f00000002c0), 0x2}, {0x8000, &(0x7f0000000300)=0x7, 0x2}, {0x6, &(0x7f0000000340)=0xd075, 0x80}, {0xfff, &(0x7f0000000380)=0x7, 0x2}, {0x2a, &(0x7f00000003c0)=0x3, 0x82}, {0x8, &(0x7f0000000400)=0x1, 0x2}, {0x5, &(0x7f0000000440)=0x800, 0x82}, {0x6, &(0x7f0000000480)=0x2, 0x2}, {0x1, &(0x7f00000004c0)=0xfff, 0x82}, {0x8, &(0x7f0000000540)=0x81, 0x2}, {0x2, &(0x7f0000000580)=0x2c5, 0x82}, {0xfffffffffffffffa, &(0x7f0000000600)=0x8, 0x2}, {0x6, &(0x7f0000000200)=0xffffffffffffffff, 0x82}, {0x1, &(0x7f0000000680)=0x5, 0x82}, {0x400, &(0x7f00000006c0)=0x5, 0x41}, {0x8, &(0x7f0000000700)=0x10, 0x2}, {0x3, &(0x7f0000000740)=0xc2d100000000000, 0x82}, {0x1, &(0x7f0000000780)=0x5, 0x82}, {0x80000000, 0x0, 0x82}, {0x5, &(0x7f0000000840)=0x6, 0x82}, {0x1d, &(0x7f0000000880)=0x40, 0x82}, {0xffffffff7fffffff, &(0x7f00000008c0)=0x5, 0x2}, {0xb, &(0x7f0000000900)=0xb, 0x82}, {0x1ff, &(0x7f0000000940)=0x6, 0x2}, {0xfcb, &(0x7f0000000980)=0x3, 0x2}, {0x4, &(0x7f00000009c0)=0x4, 0x2}, {0x81, &(0x7f0000000a00)=0x40, 0x82}, {0x3, &(0x7f0000000a40)=0x1, 0x80}, {0x1, &(0x7f0000000a80)=0x3, 0x2}, {0x6, &(0x7f0000000ac0)=0x6, 0x6f56143aabde4a7a}, {0x191fca1d, &(0x7f0000000b00)=0x1, 0x2}, {0x69, &(0x7f0000000b40), 0x82}, {0x9, &(0x7f0000000b80)=0xfffffffffffffc01, 0x82}, {0x5, &(0x7f0000000bc0)=0x4, 0x2}, {0x6, &(0x7f0000000c00)=0x2, 0x2}, {0xa, &(0x7f0000000c40)=0x100000001, 0x2}, {0x7, &(0x7f0000000c80)=0xfce, 0x82}, {0x2, &(0x7f0000000e00)=0x7fff, 0x2}, {0x50, &(0x7f0000000e40)=0x3ff, 0x2}, {0x8, &(0x7f0000000e80)=0x800, 0x2}, {0x4, &(0x7f0000000ec0), 0x82}, {0x401, &(0x7f0000000f00)=0x1, 0x82}, {0xbe6, &(0x7f0000001a00)=0x185, 0x2}, {0x7, &(0x7f0000001a40)=0xfac, 0x2}, {0xfffffffffffff455, &(0x7f0000001a80)=0xe, 0x2}], 0x2e, 0x0, &(0x7f0000001f40)={0x77359400}, 0x1) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) perf_event_open(&(0x7f0000000f80)={0x3, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x1, r3, 0x0) r7 = getpid() r8 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r7, 0x0, 0xffffffffffffffff, 0x0) r9 = getpid() r10 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r9, 0x0, r8, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x0) chdir(&(0x7f0000000240)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f100000000b000000030000000900000000"], &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000, 0x0, @void, @value}, 0x28) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 1.661326365s ago: executing program 0 (id=143): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.443787808s ago: executing program 4 (id=145): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x48002) 1.33564123s ago: executing program 4 (id=146): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x6, 0x9, 0x0, 0x200002b0, 0x200082e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[]}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x1a0, 0x0, 0xd0, 0xd0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'vcan0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @mcast1, [0x0, 0xff000000], [], 'macvtap0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x340}}, {{@ipv6={@private0, @mcast1, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'veth0_to_hsr\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [0x0, 0xff000000], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000000)=0x9, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x6}, 0xfffffffffffffd66) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x20000400) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) fcntl$lock(r7, 0x7, 0x0) io_uring_setup(0x761, &(0x7f0000000300)={0x0, 0xb3c7, 0x2000, 0xfffffffd, 0x37c, 0x0, r7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0003000002000000000400"/28], 0x50) 1.243828701s ago: executing program 2 (id=147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x62}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0xeeb2f000) r1 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @loopback}, &(0x7f00000000c0)=0xc) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), &(0x7f0000001180)={0x0, 0xfb, 0xa2, 0x6, 0xa, "a7c55ef7e343d9dcca3e8784cbf7c672", "4ee8754ca1500a509d1cd83c0b3d96882568dc3e59ce21e23a501c7fb985c9436303f703aa0afb54fca08490bd5c627f5b828ca81581fe5d715066630b96ae3396ac786c0661b936b8c4cd0f8b16da66f232219c1d6781e0501a3dbb3ce5f6ed45d9bddda47bb6535f7fb004ab4cbf3ba05ffd3bdec2e2c8494e59e356aba29bc661cf7e00d540c04974b248da"}, 0xa2, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) syslog(0x2, &(0x7f0000000180)=""/4096, 0x1000) 1.215706782s ago: executing program 0 (id=148): quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') (fail_nth: 9) 1.082164174s ago: executing program 0 (id=149): openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2275, &(0x7f00000018c0)) 1.081268364s ago: executing program 3 (id=150): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='svcrdma_no_rwctx_err\x00', r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9528}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x84702, 0x330269f53da8c4de) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x50000, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f00000003c0)=""/6, 0x6, 0x0, &(0x7f0000000400)=""/43, 0x2b}}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="00e56413530feb2a0bdaa366e49f040000", @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf25010000000800010000000000"], 0x1c}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pI4 \x00'}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32=r9, @ANYRESOCT=r6, @ANYRES32=r10], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r11, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r5, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000840)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r12, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000640)='%-010d \x00'}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r14}, 0x4) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r15}, 0x10) r16 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}, {&(0x7f0000000500)="905783db451f", 0x6}], 0x2}, 0x2008854) r17 = dup3(0xffffffffffffffff, r0, 0x80000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB="c472af578693ed835a35c65649ab6f9393d281f00c90a3e5de6113fa35d79da890dbf31e6a51e8c87b4c353cde516f776c268abe10b06b5d8db0018ab37b2965ce873afc980a60626769f439adc9dc3c709a7d76c4a11eb4dbd67016a18365d2034fc7b4d41e3b03acea0395ddcebb26ec4e488b056c83cf83d8a56efa6da2845a191a73609f69fbab9040cf79403e9c", @ANYRES32=r1, @ANYBLOB="0000000006000000"], &(0x7f0000000280)='GPL\x00', 0x190c, 0xba, &(0x7f0000000900)=""/186, 0x41100, 0x2, '\x00', r4, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0x3, 0xffff, 0xa}, 0x10, r6, 0x0, 0x0, &(0x7f00000006c0)=[r9, 0xffffffffffffffff, r10, r11, r13, r17, 0xffffffffffffffff], 0x0, 0x10, 0x4948, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) 1.019737195s ago: executing program 0 (id=151): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(r2, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) unshare(0x22020600) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) open_by_handle_at(r5, 0x0, 0x200000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9feb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) lsm_get_self_attr(0x65, &(0x7f00000000c0)={0x0, 0x0, 0x27, 0x7, ""/7}, &(0x7f0000000140)=0x27, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 922.549396ms ago: executing program 0 (id=152): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000440)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0xe4, 0x51b, &(0x7f00000018c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) eventfd2(0xce79, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="380000001a00000125bd7000fbdbdf250a14800e00022000003400000000000200004db400000106008726f2da55150003000000cfdc103ea845515e86acde20e2c2d11e37bc0fa42d69d817f538b3c3a5a1ec3f09cf891675447f45bb74159f45e91919e4774e212407794826f70673b80fbbf5557792c77e825b2e235a1340a8ca464cf634dcf54c162240278d21d01e500b927ed2d62628643a109d57cfdf0c3165feeb61dec4437f0b1008395c482c6007b01c176e905e04bca5e14bf14adc8e6e58becc64a08a7dd33ea5444a378ee4dfed061dbd2f72cbbdabe5f10774e819f9ce6bbdb4dd2d0000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0xffffffe2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 919.998466ms ago: executing program 4 (id=153): syz_emit_ethernet(0x4e, 0x0, 0x0) syslog(0x2, &(0x7f0000000180)=""/4096, 0x1000) (fail_nth: 3) 806.677918ms ago: executing program 2 (id=154): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 674.22002ms ago: executing program 3 (id=155): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000880)='mountinfo\x00') socket$netlink(0x10, 0x3, 0x4) r1 = syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(r1, 0x0, 0xa4001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 531.575232ms ago: executing program 4 (id=156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x48002) 347.564065ms ago: executing program 4 (id=157): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@journal_checksum}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xffff}}, {@barrier_val={'barrier', 0x3d, 0x80000001}}, {@dioread_nolock}, {@nolazytime}, {@dax}], [], 0x2c}, 0x84, 0x4c9, &(0x7f0000001900)="$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") truncate(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{}, 0x1}) mmap$usbmon(&(0x7f0000db8000/0x3000)=nil, 0x3000, 0x200000b, 0x100010, 0xffffffffffffffff, 0xc14) 223.627767ms ago: executing program 1 (id=158): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18006c60e243000cf1ffffffffffffff950000000000000085ef99671f23e1da281b626572c8576783bb4b30d5e2020579ed7fbb24232cf477749012d90d6a2d6a2d55903b0e8d3b4704559f926f268941fde82f11432b01e89bededde4ddd2e4b74e9bc9ea4f665eaddcd53b79e90d82bedb08a318db9040480c0ae70374b64c5629bddacf65c4d4c089b075218cb0b2d1801e886569eabd9670b530f0ce57138f10a4fd5c7504a0259b7625734693ebb85de30312084ae7f41e8bda112b3463cd36753b225c697dba586099959f9dc3de46ce7a4bd74eae30000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100080018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0xe80, 0x0, &(0x7f00000005c0)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0800000000000000000000ca0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='system_u:object_r:modules_dep_t:s0 unconfWned 00000000000000000004\x00'], 0x43) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2}, {0x60}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0xfffffffffffffceb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 109.621138ms ago: executing program 2 (id=159): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 37.5355ms ago: executing program 4 (id=160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getcwd(&(0x7f0000000380)=""/131, 0x83) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x3, 0xfffffffd, @loopback}, 0x1c) connect$l2tp(r1, &(0x7f0000000580)={0x2, 0x0, @private=0xa010100, 0x4}, 0x10) io_pgetevents(0x0, 0x7ffffffc, 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)={0x77359400}, &(0x7f0000000300)={&(0x7f0000000280)={[0x100000000]}, 0x8}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)}}], 0x2, 0x10) 0s ago: executing program 2 (id=161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, 0x0, 0x105002, 0xdf) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) getitimer(0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 33.467704][ T29] audit: type=1400 audit(1750145711.601:62): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.468955][ T3298] cgroup: Unknown subsys name 'net' [ 33.491612][ T29] audit: type=1400 audit(1750145711.601:63): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.519751][ T29] audit: type=1400 audit(1750145711.641:64): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.645617][ T3298] cgroup: Unknown subsys name 'cpuset' [ 33.652106][ T3298] cgroup: Unknown subsys name 'rlimit' [ 33.764673][ T29] audit: type=1400 audit(1750145711.901:65): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.788325][ T29] audit: type=1400 audit(1750145711.901:66): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.809901][ T29] audit: type=1400 audit(1750145711.901:67): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.830600][ T29] audit: type=1400 audit(1750145711.901:68): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.851686][ T29] audit: type=1400 audit(1750145711.901:69): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.860901][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.876651][ T29] audit: type=1400 audit(1750145711.901:70): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.908999][ T29] audit: type=1400 audit(1750145712.031:71): avc: denied { relabelto } for pid=3300 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.940357][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.150523][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 35.183362][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.217966][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 35.242419][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.286245][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.315338][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.322572][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.329843][ T3308] bridge_slave_0: entered allmulticast mode [ 35.336233][ T3308] bridge_slave_0: entered promiscuous mode [ 35.371188][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.378572][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.385871][ T3307] bridge_slave_0: entered allmulticast mode [ 35.392420][ T3307] bridge_slave_0: entered promiscuous mode [ 35.399491][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.407639][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.415462][ T3308] bridge_slave_1: entered allmulticast mode [ 35.424058][ T3308] bridge_slave_1: entered promiscuous mode [ 35.435584][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.442682][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.449969][ T3315] bridge_slave_0: entered allmulticast mode [ 35.457065][ T3315] bridge_slave_0: entered promiscuous mode [ 35.474014][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.481192][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.488798][ T3307] bridge_slave_1: entered allmulticast mode [ 35.495370][ T3307] bridge_slave_1: entered promiscuous mode [ 35.509182][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.516354][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.523513][ T3315] bridge_slave_1: entered allmulticast mode [ 35.530311][ T3315] bridge_slave_1: entered promiscuous mode [ 35.536955][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.544235][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.551500][ T3316] bridge_slave_0: entered allmulticast mode [ 35.557997][ T3316] bridge_slave_0: entered promiscuous mode [ 35.564873][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.572024][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.579231][ T3316] bridge_slave_1: entered allmulticast mode [ 35.585796][ T3316] bridge_slave_1: entered promiscuous mode [ 35.604749][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.630920][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.641482][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.664177][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.679306][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.689504][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.709524][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.725125][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.739891][ T3308] team0: Port device team_slave_0 added [ 35.755694][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.762793][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.770088][ T3313] bridge_slave_0: entered allmulticast mode [ 35.776833][ T3313] bridge_slave_0: entered promiscuous mode [ 35.798874][ T3307] team0: Port device team_slave_0 added [ 35.805485][ T3308] team0: Port device team_slave_1 added [ 35.817644][ T3315] team0: Port device team_slave_0 added [ 35.823650][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.830992][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.838663][ T3313] bridge_slave_1: entered allmulticast mode [ 35.845328][ T3313] bridge_slave_1: entered promiscuous mode [ 35.852042][ T3316] team0: Port device team_slave_0 added [ 35.858943][ T3316] team0: Port device team_slave_1 added [ 35.865779][ T3307] team0: Port device team_slave_1 added [ 35.877191][ T3315] team0: Port device team_slave_1 added [ 35.883160][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.890247][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.916275][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.947968][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.954986][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.980968][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.014146][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.021170][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.047727][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.059793][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.069915][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.076990][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.103021][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.114578][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.121744][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.148226][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.159480][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.166548][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.192566][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.203763][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.210813][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.237263][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.248995][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.256076][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.282140][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.294011][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.369594][ T3307] hsr_slave_0: entered promiscuous mode [ 36.375764][ T3307] hsr_slave_1: entered promiscuous mode [ 36.382908][ T3313] team0: Port device team_slave_0 added [ 36.396403][ T3308] hsr_slave_0: entered promiscuous mode [ 36.402578][ T3308] hsr_slave_1: entered promiscuous mode [ 36.408953][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.417105][ T3308] Cannot create hsr debugfs directory [ 36.424420][ T3315] hsr_slave_0: entered promiscuous mode [ 36.430767][ T3315] hsr_slave_1: entered promiscuous mode [ 36.436900][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.444630][ T3315] Cannot create hsr debugfs directory [ 36.451464][ T3313] team0: Port device team_slave_1 added [ 36.459484][ T3316] hsr_slave_0: entered promiscuous mode [ 36.465930][ T3316] hsr_slave_1: entered promiscuous mode [ 36.471815][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.479506][ T3316] Cannot create hsr debugfs directory [ 36.509282][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.516388][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.542425][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.574079][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.581228][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.607671][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.684668][ T3313] hsr_slave_0: entered promiscuous mode [ 36.691198][ T3313] hsr_slave_1: entered promiscuous mode [ 36.697491][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.705183][ T3313] Cannot create hsr debugfs directory [ 36.823966][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.841416][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.860999][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.872411][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.899989][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.908865][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.917659][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.926579][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.955161][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.965501][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.979312][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.988465][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.029245][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.039129][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.058585][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.075091][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.086303][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.107008][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.124318][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.135982][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.143172][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.158519][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.168031][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.177266][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.190400][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.197609][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.205969][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.233060][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.248741][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.256012][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.275803][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.295009][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.302132][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.335934][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.370036][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.377329][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.386797][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.393962][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.410079][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.426695][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.440611][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.469089][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.476265][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.486013][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.493210][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.511198][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.532784][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.543567][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.561619][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.572060][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.589826][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.596964][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.627588][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.638191][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.660615][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.667856][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.690605][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.718856][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.739202][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.761510][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.791966][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.892233][ T3315] veth0_vlan: entered promiscuous mode [ 37.927147][ T3315] veth1_vlan: entered promiscuous mode [ 37.968696][ T3316] veth0_vlan: entered promiscuous mode [ 37.977408][ T3308] veth0_vlan: entered promiscuous mode [ 37.989531][ T3308] veth1_vlan: entered promiscuous mode [ 38.001498][ T3315] veth0_macvtap: entered promiscuous mode [ 38.009648][ T3316] veth1_vlan: entered promiscuous mode [ 38.021519][ T3313] veth0_vlan: entered promiscuous mode [ 38.042018][ T3316] veth0_macvtap: entered promiscuous mode [ 38.049806][ T3315] veth1_macvtap: entered promiscuous mode [ 38.060736][ T3308] veth0_macvtap: entered promiscuous mode [ 38.074164][ T3316] veth1_macvtap: entered promiscuous mode [ 38.082306][ T3313] veth1_vlan: entered promiscuous mode [ 38.092492][ T3308] veth1_macvtap: entered promiscuous mode [ 38.100407][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.111578][ T3307] veth0_vlan: entered promiscuous mode [ 38.129445][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.144669][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.152511][ T3307] veth1_vlan: entered promiscuous mode [ 38.161315][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.170270][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.179073][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.188063][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.204195][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.215397][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.227455][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.238816][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.249191][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.259118][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.267999][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.281044][ T3313] veth0_macvtap: entered promiscuous mode [ 38.288396][ T3316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.297219][ T3316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.306008][ T3316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.314916][ T3316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.329766][ T3313] veth1_macvtap: entered promiscuous mode [ 38.356592][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.365001][ T3307] veth0_macvtap: entered promiscuous mode [ 38.388689][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.405868][ T3313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.414675][ T3313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.423529][ T3313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.432423][ T3313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.444070][ T3307] veth1_macvtap: entered promiscuous mode [ 38.454806][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.474999][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 38.475016][ T29] audit: type=1400 audit(1750145716.601:90): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.505302][ T29] audit: type=1400 audit(1750145716.601:91): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.539682][ T29] audit: type=1400 audit(1750145716.611:92): avc: denied { ioctl } for pid=3316 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.541037][ C1] hrtimer: interrupt took 155266 ns [ 38.565367][ T29] audit: type=1400 audit(1750145716.661:93): avc: denied { open } for pid=3477 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.589390][ T29] audit: type=1400 audit(1750145716.661:94): avc: denied { perfmon } for pid=3477 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.610179][ T29] audit: type=1400 audit(1750145716.661:95): avc: denied { kernel } for pid=3477 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.630893][ T29] audit: type=1400 audit(1750145716.721:96): avc: denied { map_create } for pid=3477 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.667949][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.677691][ T3481] loop1: detected capacity change from 0 to 512 [ 38.686346][ T3481] ======================================================= [ 38.686346][ T3481] WARNING: The mand mount option has been deprecated and [ 38.686346][ T3481] and is ignored by this kernel. Remove the mand [ 38.686346][ T3481] option from the mount to silence this warning. [ 38.686346][ T3481] ======================================================= [ 38.706616][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.756179][ T29] audit: type=1400 audit(1750145716.771:97): avc: denied { map_read map_write } for pid=3477 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.776659][ T29] audit: type=1400 audit(1750145716.771:98): avc: denied { prog_load } for pid=3477 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.787502][ T3307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.796872][ T29] audit: type=1400 audit(1750145716.771:99): avc: denied { bpf } for pid=3477 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.806205][ T3307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.835453][ T3307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.844543][ T3307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.854810][ T3481] EXT4-fs: Ignoring removed orlov option [ 38.868832][ T3481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.877577][ T3481] EXT4-fs (loop1): bad geometry: block count 16777280 exceeds size of device (64 blocks) [ 38.914371][ T3481] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.943161][ T3481] loop1: detected capacity change from 0 to 2048 [ 38.944117][ T3489] loop0: detected capacity change from 0 to 1024 [ 38.964631][ T3484] wireguard0: entered promiscuous mode [ 38.970503][ T3484] wireguard0: entered allmulticast mode [ 38.997296][ T3489] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.009334][ T3489] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.024323][ T3296] Alternate GPT is invalid, using primary GPT. [ 39.031039][ T3296] loop1: p1 p2 p3 [ 39.036738][ T3489] JBD2: no valid journal superblock found [ 39.042587][ T3489] EXT4-fs (loop0): Could not load journal inode [ 39.090949][ T3481] Alternate GPT is invalid, using primary GPT. [ 39.097682][ T3481] loop1: p1 p2 p3 [ 39.104164][ T3489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 39.113366][ T3489] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6'. [ 39.134694][ T3489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 39.153071][ T3489] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6'. [ 39.163108][ T3489] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6'. [ 39.171854][ T3493] loop2: detected capacity change from 0 to 2048 [ 39.237706][ T3493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.238970][ T3489] bond1: entered promiscuous mode [ 39.255652][ T3489] bond1: entered allmulticast mode [ 39.262434][ T3489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.285838][ T3493] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.325071][ T3493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 39.342630][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 39.355432][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 39.368848][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 39.406806][ T3508] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7: bg 0: block 345: padding at end of block bitmap is not set [ 39.430629][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 39.442719][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 39.456059][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 39.486201][ T3506] loop3: detected capacity change from 0 to 128 [ 39.538980][ T3513] vhci_hcd: invalid port number 96 [ 39.544438][ T3513] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 39.611162][ T3514] syz.3.9: attempt to access beyond end of device [ 39.611162][ T3514] loop3: rw=0, sector=97, nr_sectors = 120 limit=128 [ 39.704286][ T54] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 499 with error 117 [ 39.717739][ T54] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.717739][ T54] [ 39.738311][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.769209][ T3517] loop1: detected capacity change from 0 to 128 [ 39.793745][ T54] kworker/u8:4: attempt to access beyond end of device [ 39.793745][ T54] loop3: rw=1, sector=217, nr_sectors = 824 limit=128 [ 39.835240][ T3519] loop2: detected capacity change from 0 to 128 [ 39.867839][ T3522] syz.1.12: attempt to access beyond end of device [ 39.867839][ T3522] loop1: rw=0, sector=97, nr_sectors = 120 limit=128 [ 39.912129][ T3523] syz.2.11: attempt to access beyond end of device [ 39.912129][ T3523] loop2: rw=0, sector=97, nr_sectors = 120 limit=128 [ 39.956397][ T3525] loop3: detected capacity change from 0 to 128 [ 40.007722][ T3525] syz.3.14: attempt to access beyond end of device [ 40.007722][ T3525] loop3: rw=0, sector=97, nr_sectors = 120 limit=128 [ 40.027747][ T51] kworker/u8:3: attempt to access beyond end of device [ 40.027747][ T51] loop1: rw=1, sector=217, nr_sectors = 824 limit=128 [ 40.047571][ T2657] kworker/u8:6: attempt to access beyond end of device [ 40.047571][ T2657] loop2: rw=1, sector=217, nr_sectors = 824 limit=128 [ 40.119331][ T3532] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 40.146538][ T3534] loop1: detected capacity change from 0 to 1024 [ 40.153924][ T3534] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.165184][ T3534] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 40.177610][ T3534] JBD2: no valid journal superblock found [ 40.183469][ T3534] EXT4-fs (loop1): Could not load journal inode [ 40.192646][ T3526] kworker/u8:7: attempt to access beyond end of device [ 40.192646][ T3526] loop3: rw=1, sector=217, nr_sectors = 824 limit=128 [ 40.233349][ T3534] bond1: entered promiscuous mode [ 40.238960][ T3534] bond1: entered allmulticast mode [ 40.269872][ T3534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.317208][ T3541] loop2: detected capacity change from 0 to 512 [ 40.346294][ T3543] loop3: detected capacity change from 0 to 1024 [ 40.384382][ T3541] EXT4-fs: Ignoring removed orlov option [ 40.385831][ T3546] loop1: detected capacity change from 0 to 512 [ 40.403775][ T3541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.412966][ T3541] EXT4-fs (loop2): bad geometry: block count 16777280 exceeds size of device (64 blocks) [ 40.423533][ T3546] EXT4-fs: Ignoring removed orlov option [ 40.449198][ T3543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.460592][ T3546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.469918][ T3546] EXT4-fs (loop1): bad geometry: block count 16777280 exceeds size of device (64 blocks) [ 40.507964][ T3541] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22'. [ 40.529911][ T3546] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23'. [ 40.548255][ T3553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20'. [ 40.578793][ T3541] loop2: detected capacity change from 0 to 2048 [ 40.598523][ T3553] netem: change failed [ 40.599044][ T3546] loop1: detected capacity change from 0 to 2048 [ 40.628241][ T3543] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.20: Allocating blocks 497-513 which overlap fs metadata [ 40.646526][ T3296] Alternate GPT is invalid, using primary GPT. [ 40.652924][ T3296] loop2: p1 p2 p3 [ 40.658413][ T3509] Alternate GPT is invalid, using primary GPT. [ 40.660345][ T3542] EXT4-fs (loop3): pa ffff888106df4000: logic 128, phys. 273, len 15 [ 40.664879][ T3509] loop1: p1 p2 p3 [ 40.672907][ T3542] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 40.702013][ T3543] syz.3.20 (3543) used greatest stack depth: 10440 bytes left [ 40.718897][ T3541] Alternate GPT is invalid, using primary GPT. [ 40.725982][ T3541] loop2: p1 p2 p3 [ 40.730612][ T3546] Alternate GPT is invalid, using primary GPT. [ 40.737131][ T3546] loop1: p1 p2 p3 [ 40.743174][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.842190][ T3558] udevd[3558]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 40.844659][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 40.858241][ T3563] loop3: detected capacity change from 0 to 1024 [ 40.869816][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 40.898427][ T3546] loop1: detected capacity change from 0 to 1024 [ 40.907478][ T3541] loop2: detected capacity change from 0 to 1024 [ 40.942010][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 40.961360][ T3563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.999771][ T3557] wireguard0: entered promiscuous mode [ 41.008230][ T3557] wireguard0: entered allmulticast mode [ 41.152994][ T3575] loop0: detected capacity change from 0 to 128 [ 41.269525][ T3563] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.26: Allocating blocks 497-513 which overlap fs metadata [ 41.319512][ T3578] loop2: detected capacity change from 0 to 1024 [ 41.353562][ T3576] netem: change failed [ 41.358727][ T3578] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.367888][ T3562] EXT4-fs (loop3): pa ffff888106df4070: logic 128, phys. 273, len 15 [ 41.369737][ T3578] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.377962][ T3562] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 41.403710][ T3578] JBD2: no valid journal superblock found [ 41.410342][ T3578] EXT4-fs (loop2): Could not load journal inode [ 41.425932][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.459664][ T3578] bond1: entered promiscuous mode [ 41.465345][ T3578] bond1: entered allmulticast mode [ 41.472474][ T3578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.596699][ T3594] loop2: detected capacity change from 0 to 128 [ 41.747113][ T3601] syzkaller0: entered allmulticast mode [ 41.768599][ T3600] syzkaller0: left allmulticast mode [ 41.798797][ T3603] loop4: detected capacity change from 0 to 2048 [ 41.816373][ T3603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.841167][ T3603] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.966036][ T3607] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.42: bg 0: block 345: padding at end of block bitmap is not set [ 42.079907][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1381 with error 117 [ 42.092905][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.092905][ T37] [ 42.203476][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.367661][ T3617] wireguard0: entered promiscuous mode [ 42.374390][ T3617] wireguard0: entered allmulticast mode [ 42.387449][ T3623] loop1: detected capacity change from 0 to 128 [ 42.402924][ T3597] syz.3.35 (3597) used greatest stack depth: 10192 bytes left [ 42.469912][ T3625] loop0: detected capacity change from 0 to 128 [ 42.558742][ T3624] syz.0.48: attempt to access beyond end of device [ 42.558742][ T3624] loop0: rw=0, sector=97, nr_sectors = 120 limit=128 [ 42.580183][ T3627] loop1: detected capacity change from 0 to 1024 [ 42.611578][ T3627] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.623402][ T3627] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.637874][ T3627] JBD2: no valid journal superblock found [ 42.643845][ T3627] EXT4-fs (loop1): Could not load journal inode [ 42.661829][ T3627] bond2: entered promiscuous mode [ 42.668554][ T3627] bond2: entered allmulticast mode [ 42.676467][ T3627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 42.726904][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.726904][ T12] loop0: rw=1, sector=217, nr_sectors = 824 limit=128 [ 42.880949][ T3640] loop2: detected capacity change from 0 to 1024 [ 43.025256][ T3640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.057096][ T3640] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.140288][ T3642] wireguard0: entered promiscuous mode [ 43.152125][ T3642] wireguard0: entered allmulticast mode [ 43.164021][ T3647] loop1: detected capacity change from 0 to 512 [ 43.182228][ T3648] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 3: comm syz.2.54: lblock 3 mapped to illegal pblock 3 (length 13) [ 43.189148][ T3650] loop4: detected capacity change from 0 to 1024 [ 43.215275][ T3647] journal_path: Non-blockdev passed as './bus' [ 43.221974][ T3647] EXT4-fs: error: could not find journal device path [ 43.235767][ T3650] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.247163][ T3650] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.270403][ T3648] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 43.283016][ T3648] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.283016][ T3648] [ 43.286324][ T3650] JBD2: no valid journal superblock found [ 43.298509][ T3650] EXT4-fs (loop4): Could not load journal inode [ 43.356020][ T3651] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.54: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.389192][ T3653] Zero length message leads to an empty skb [ 43.405984][ T3651] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.54: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.441480][ T3651] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.54: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.457131][ T3651] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.54: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.473104][ T3651] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.54: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.493548][ T3653] loop1: detected capacity change from 0 to 1024 [ 43.506802][ T3653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.531009][ T3651] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.54: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.557224][ T3651] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.54: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.573613][ T3653] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 43.581999][ T3653] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 43.592564][ T3651] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.54: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.626910][ T3651] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.54: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.652554][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.658172][ T3668] loop0: detected capacity change from 0 to 1024 [ 43.678621][ T3667] loop4: detected capacity change from 0 to 128 [ 43.693943][ T3668] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.705455][ T3668] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.716887][ T3668] JBD2: no valid journal superblock found [ 43.722952][ T3668] EXT4-fs (loop0): Could not load journal inode [ 43.825690][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.825990][ T3668] bond2: entered promiscuous mode [ 43.840064][ T3668] bond2: entered allmulticast mode [ 43.847726][ T3668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 43.868874][ T3673] can0: slcan on ttyS3. [ 43.877023][ T29] kauditd_printk_skb: 735 callbacks suppressed [ 43.877084][ T29] audit: type=1400 audit(1750145722.011:835): avc: denied { read } for pid=3037 comm="dhcpcd" name="n25" dev="tmpfs" ino=1305 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.906994][ T29] audit: type=1400 audit(1750145722.011:836): avc: denied { open } for pid=3037 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1305 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.934535][ T29] audit: type=1400 audit(1750145722.071:837): avc: denied { getattr } for pid=3037 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1305 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.968933][ T3675] loop2: detected capacity change from 0 to 128 [ 43.989969][ T29] audit: type=1326 audit(1750145722.101:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8d32e929 code=0x7ffc0000 [ 44.016459][ T29] audit: type=1326 audit(1750145722.101:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fab8d32e929 code=0x7ffc0000 [ 44.043878][ T29] audit: type=1326 audit(1750145722.101:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8d32e929 code=0x7ffc0000 [ 44.069280][ T29] audit: type=1326 audit(1750145722.101:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fab8d3307bc code=0x7ffc0000 [ 44.093910][ T29] audit: type=1326 audit(1750145722.101:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fab8d3306f4 code=0x7ffc0000 [ 44.118204][ T29] audit: type=1326 audit(1750145722.101:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8d32e929 code=0x7ffc0000 [ 44.142482][ T29] audit: type=1326 audit(1750145722.101:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab8d32e929 code=0x7ffc0000 [ 44.279592][ T3690] loop2: detected capacity change from 0 to 128 [ 44.305439][ T3689] loop4: detected capacity change from 0 to 512 [ 44.366211][ T3689] EXT4-fs: Ignoring removed orlov option [ 44.403477][ T3689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.412173][ T3689] EXT4-fs (loop4): bad geometry: block count 16777280 exceeds size of device (64 blocks) [ 44.478019][ T3689] __nla_validate_parse: 9 callbacks suppressed [ 44.478040][ T3689] netlink: 60 bytes leftover after parsing attributes in process `syz.4.68'. [ 44.533213][ T3689] loop4: detected capacity change from 0 to 2048 [ 44.577841][ T3689] Alternate GPT is invalid, using primary GPT. [ 44.584762][ T3689] loop4: p1 p2 p3 [ 44.608284][ T3709] wireguard0: entered promiscuous mode [ 44.617325][ T3709] wireguard0: entered allmulticast mode [ 44.747564][ T3570] udevd[3570]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 44.753225][ T3558] udevd[3558]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 44.764237][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 44.781261][ T3689] loop4: detected capacity change from 0 to 1024 [ 44.804645][ T3669] can0 (unregistered): slcan off ttyS3. [ 44.898587][ T3718] loop1: detected capacity change from 0 to 1024 [ 44.952049][ T3718] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.964539][ T3718] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.048484][ T3718] JBD2: no valid journal superblock found [ 45.055748][ T3718] EXT4-fs (loop1): Could not load journal inode [ 45.436814][ T3769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.85'. [ 45.446082][ T3769] netlink: 108 bytes leftover after parsing attributes in process `syz.4.85'. [ 45.470473][ T3769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.85'. [ 45.499878][ T3769] netlink: 108 bytes leftover after parsing attributes in process `syz.4.85'. [ 45.508900][ T3769] netlink: 84 bytes leftover after parsing attributes in process `syz.4.85'. [ 45.530140][ T3771] bond3: entered promiscuous mode [ 45.535324][ T3771] bond3: entered allmulticast mode [ 45.544683][ T3771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 45.589997][ T3776] IPv6: Can't replace route, no match found [ 45.643231][ T3780] loop4: detected capacity change from 0 to 1024 [ 45.693321][ T3780] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.704900][ T3780] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.736181][ T3780] JBD2: no valid journal superblock found [ 45.742121][ T3780] EXT4-fs (loop4): Could not load journal inode [ 45.763713][ T3784] syzkaller0: entered promiscuous mode [ 45.769358][ T3784] syzkaller0: entered allmulticast mode [ 45.796987][ T3780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.89'. [ 45.805922][ T3780] netlink: 108 bytes leftover after parsing attributes in process `syz.4.89'. [ 45.841564][ T3780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.89'. [ 45.860347][ T3780] netlink: 108 bytes leftover after parsing attributes in process `syz.4.89'. [ 45.929274][ T3797] atomic_op ffff88811a076d28 conn xmit_atomic 0000000000000000 [ 46.025875][ T3797] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.119782][ T3809] loop4: detected capacity change from 0 to 2048 [ 46.163164][ T3809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.176509][ T3815] loop3: detected capacity change from 0 to 512 [ 46.185034][ T3815] EXT4-fs: Ignoring removed orlov option [ 46.197399][ T3809] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.197797][ T3815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.216343][ T3815] EXT4-fs (loop3): bad geometry: block count 16777280 exceeds size of device (64 blocks) [ 46.336024][ T3815] loop3: detected capacity change from 0 to 2048 [ 46.344980][ T3817] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.102: bg 0: block 345: padding at end of block bitmap is not set [ 46.399040][ T3819] IPv6: Can't replace route, no match found [ 46.425520][ T3815] Alternate GPT is invalid, using primary GPT. [ 46.432077][ T3815] loop3: p1 p2 p3 [ 46.443163][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 694 with error 117 [ 46.455855][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.455855][ T12] [ 46.459794][ T2998] Alternate GPT is invalid, using primary GPT. [ 46.472196][ T2998] loop3: p1 p2 p3 [ 46.496617][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.496710][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.519006][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 46.534575][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 46.565367][ T3824] loop0: detected capacity change from 0 to 128 [ 46.565722][ T3815] loop3: detected capacity change from 0 to 1024 [ 46.637379][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 46.639660][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.662297][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 46.675595][ T3824] bio_check_eod: 4 callbacks suppressed [ 46.675621][ T3824] syz.0.107: attempt to access beyond end of device [ 46.675621][ T3824] loop0: rw=0, sector=97, nr_sectors = 120 limit=128 [ 46.678976][ T3826] loop2: detected capacity change from 0 to 1024 [ 46.712332][ T3826] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.723377][ T3826] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.769869][ T3826] JBD2: no valid journal superblock found [ 46.776022][ T3826] EXT4-fs (loop2): Could not load journal inode [ 46.808886][ T378] kworker/u8:5: attempt to access beyond end of device [ 46.808886][ T378] loop0: rw=1, sector=217, nr_sectors = 824 limit=128 [ 46.833349][ T3836] IPVS: stopping master sync thread 3837 ... [ 46.834536][ T3837] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 46.876983][ T3841] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.907743][ T3836] syzkaller0: entered promiscuous mode [ 46.914558][ T3836] syzkaller0: entered allmulticast mode [ 47.038476][ T3847] IPv6: Can't replace route, no match found [ 47.107718][ T3849] loop3: detected capacity change from 0 to 2048 [ 47.145169][ T3849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.158301][ T3849] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.223057][ T3860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3860 comm=syz.1.117 [ 47.295016][ T3861] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.118: bg 0: block 345: padding at end of block bitmap is not set [ 47.320025][ T3862] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3862 comm=syz.1.117 [ 47.358019][ T3864] vhci_hcd: invalid port number 96 [ 47.363226][ T3864] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 47.391897][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 668 with error 117 [ 47.404606][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.404606][ T12] [ 47.434792][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 684 with max blocks 1 with error 28 [ 47.447707][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.447707][ T12] [ 47.458243][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 47.464345][ T12] EXT4-fs (loop3): Free/Dirty block details [ 47.470334][ T12] EXT4-fs (loop3): free_blocks=0 [ 47.475372][ T12] EXT4-fs (loop3): dirty_blocks=16 [ 47.480625][ T12] EXT4-fs (loop3): Block reservation details [ 47.640894][ T3873] loop3: detected capacity change from 0 to 128 [ 47.722479][ T3874] vhci_hcd: invalid port number 96 [ 47.728069][ T3874] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 47.743783][ T3875] syz.3.121: attempt to access beyond end of device [ 47.743783][ T3875] loop3: rw=0, sector=97, nr_sectors = 120 limit=128 [ 47.929663][ T51] kworker/u8:3: attempt to access beyond end of device [ 47.929663][ T51] loop3: rw=1, sector=217, nr_sectors = 824 limit=128 [ 48.236332][ T3893] loop3: detected capacity change from 0 to 2048 [ 48.244752][ T3890] loop4: detected capacity change from 0 to 1024 [ 48.253545][ T3890] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 48.264614][ T3890] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 48.286431][ T3893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.304537][ T3890] JBD2: no valid journal superblock found [ 48.310571][ T3890] EXT4-fs (loop4): Could not load journal inode [ 48.317775][ T3893] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.369795][ T3897] loop4: detected capacity change from 0 to 512 [ 48.387285][ T3897] EXT4-fs: Ignoring removed orlov option [ 48.400870][ T3898] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.128: bg 0: block 345: padding at end of block bitmap is not set [ 48.417641][ T3897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.426589][ T3897] EXT4-fs (loop4): bad geometry: block count 16777280 exceeds size of device (64 blocks) [ 48.456813][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 782 with error 117 [ 48.470233][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.470233][ T51] [ 48.525546][ T3897] loop4: detected capacity change from 0 to 2048 [ 48.542667][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 798 with max blocks 1 with error 28 [ 48.555389][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.555389][ T51] [ 48.566728][ T51] EXT4-fs (loop3): Total free blocks count 0 [ 48.573046][ T51] EXT4-fs (loop3): Free/Dirty block details [ 48.578992][ T51] EXT4-fs (loop3): free_blocks=0 [ 48.584000][ T51] EXT4-fs (loop3): dirty_blocks=16 [ 48.589289][ T51] EXT4-fs (loop3): Block reservation details [ 48.632842][ T3296] Alternate GPT is invalid, using primary GPT. [ 48.639659][ T3296] loop4: p1 p2 p3 [ 48.661614][ T3897] Alternate GPT is invalid, using primary GPT. [ 48.668166][ T3897] loop4: p1 p2 p3 [ 48.742733][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 48.808343][ T3897] loop4: detected capacity change from 0 to 1024 [ 48.839164][ T3912] loop3: detected capacity change from 0 to 1024 [ 48.894091][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 48.894106][ T29] audit: type=1326 audit(1750145727.021:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3901 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8d32e929 code=0x7ffc0000 [ 48.925119][ T29] audit: type=1326 audit(1750145727.031:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3896 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79aa70e929 code=0x7ffc0000 [ 48.946140][ T3912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.948849][ T29] audit: type=1326 audit(1750145727.031:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3896 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79aa70e929 code=0x7ffc0000 [ 48.984258][ T29] audit: type=1326 audit(1750145727.031:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3896 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79aa710847 code=0x7ffc0000 [ 49.007567][ T29] audit: type=1326 audit(1750145727.031:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3896 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f79aa7107bc code=0x7ffc0000 [ 49.034561][ T29] audit: type=1326 audit(1750145727.031:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3896 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f79aa7106f4 code=0x7ffc0000 [ 49.060104][ T29] audit: type=1326 audit(1750145727.031:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3896 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f79aa7106f4 code=0x7ffc0000 [ 49.083946][ T29] audit: type=1326 audit(1750145727.031:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3896 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f79aa70d58a code=0x7ffc0000 [ 49.107193][ T29] audit: type=1326 audit(1750145727.031:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3896 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79aa70e929 code=0x7ffc0000 [ 49.131087][ T29] audit: type=1326 audit(1750145727.031:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3896 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79aa70e929 code=0x7ffc0000 [ 49.156450][ T3907] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 49.164880][ T3907] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 49.269772][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.310333][ T3928] loop1: detected capacity change from 0 to 2048 [ 49.337094][ T3931] vhci_hcd: invalid port number 96 [ 49.342650][ T3931] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 49.351224][ T3923] wireguard0: entered promiscuous mode [ 49.360678][ T3923] wireguard0: entered allmulticast mode [ 49.399945][ T3928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.424596][ T3928] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.488448][ T3930] loop3: detected capacity change from 0 to 1024 [ 49.637190][ T3930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.662905][ T3930] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 49.671283][ T3930] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 49.703424][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.743994][ T3948] loop3: detected capacity change from 0 to 2048 [ 49.791873][ T3948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.865957][ T3950] wireguard0: entered promiscuous mode [ 49.874067][ T3950] wireguard0: entered allmulticast mode [ 49.936789][ T3948] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.009148][ T3948] __nla_validate_parse: 18 callbacks suppressed [ 50.009222][ T3948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 50.180737][ T3963] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.142: bg 0: block 345: padding at end of block bitmap is not set [ 50.260479][ T54] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 688 with error 117 [ 50.273918][ T54] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.273918][ T54] [ 50.355001][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.467989][ T3977] netlink: 'syz.3.150': attribute type 13 has an invalid length. [ 50.476354][ T3977] netlink: 152 bytes leftover after parsing attributes in process `syz.3.150'. [ 50.496704][ T3977] erspan0: refused to change device tx_queue_len [ 50.521312][ T3979] loop0: detected capacity change from 0 to 512 [ 50.547508][ T3977] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 50.571299][ T3979] EXT4-fs: Ignoring removed orlov option [ 50.577287][ T3983] FAULT_INJECTION: forcing a failure. [ 50.577287][ T3983] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 50.592445][ T3983] CPU: 0 UID: 0 PID: 3983 Comm: syz.4.153 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 50.592474][ T3983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.592490][ T3983] Call Trace: [ 50.592498][ T3983] [ 50.592507][ T3983] __dump_stack+0x1d/0x30 [ 50.592607][ T3983] dump_stack_lvl+0xe8/0x140 [ 50.592629][ T3983] dump_stack+0x15/0x1b [ 50.592648][ T3983] should_fail_ex+0x265/0x280 [ 50.592740][ T3983] should_fail_alloc_page+0xf2/0x100 [ 50.592791][ T3983] __alloc_frozen_pages_noprof+0xff/0x360 [ 50.592832][ T3983] alloc_pages_mpol+0xb3/0x250 [ 50.592870][ T3983] alloc_pages_noprof+0x90/0x130 [ 50.592954][ T3983] __pud_alloc+0x47/0x4c0 [ 50.593007][ T3983] handle_mm_fault+0x1882/0x2be0 [ 50.593109][ T3983] ? __rcu_read_unlock+0x4f/0x70 [ 50.593144][ T3983] do_user_addr_fault+0x3fe/0x1090 [ 50.593188][ T3983] exc_page_fault+0x62/0xa0 [ 50.593248][ T3983] asm_exc_page_fault+0x26/0x30 [ 50.593344][ T3983] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 50.593373][ T3983] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 50.593394][ T3983] RSP: 0018:ffffc9000ef9bcd8 EFLAGS: 00050202 [ 50.593436][ T3983] RAX: ffff88811aa1ab18 RBX: 00000000000000b3 RCX: 00000000000000b3 [ 50.593450][ T3983] RDX: 0000000000000000 RSI: ffff88811a387800 RDI: 0000200000000180 [ 50.593463][ T3983] RBP: ffffc9000ef9bd50 R08: 0000000000000029 R09: 0000000000000000 [ 50.593514][ T3983] R10: 000188811a387800 R11: 000188811a3878b2 R12: 0000200000000233 [ 50.593529][ T3983] R13: 00007ffffffff000 R14: 0000200000000180 R15: ffff88811a387800 [ 50.593551][ T3983] _copy_to_user+0x7c/0xa0 [ 50.593577][ T3983] syslog_print+0x434/0x540 [ 50.593646][ T3983] ? __pfx_autoremove_wake_function+0x10/0x10 [ 50.593692][ T3983] do_syslog+0x52b/0x7e0 [ 50.593882][ T3983] ? ksys_write+0x192/0x1a0 [ 50.593903][ T3983] __x64_sys_syslog+0x41/0x50 [ 50.593932][ T3983] x64_sys_call+0x2ea0/0x2fb0 [ 50.593959][ T3983] do_syscall_64+0xd2/0x200 [ 50.593979][ T3983] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.594011][ T3983] ? clear_bhb_loop+0x40/0x90 [ 50.594082][ T3983] ? clear_bhb_loop+0x40/0x90 [ 50.594110][ T3983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.594135][ T3983] RIP: 0033:0x7f79aa70e929 [ 50.594163][ T3983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.594282][ T3983] RSP: 002b:00007f79a8d77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 50.594307][ T3983] RAX: ffffffffffffffda RBX: 00007f79aa935fa0 RCX: 00007f79aa70e929 [ 50.594322][ T3983] RDX: 0000000000001000 RSI: 0000200000000180 RDI: 0000000000000002 [ 50.594338][ T3983] RBP: 00007f79a8d77090 R08: 0000000000000000 R09: 0000000000000000 [ 50.594352][ T3983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.594367][ T3983] R13: 0000000000000000 R14: 00007f79aa935fa0 R15: 00007ffc5b8b61b8 [ 50.594457][ T3983] [ 50.600618][ T3979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.905969][ T3989] loop3: detected capacity change from 0 to 1024 [ 50.909099][ T3979] EXT4-fs (loop0): bad geometry: block count 16777280 exceeds size of device (64 blocks) [ 50.948505][ T3985] wireguard0: entered promiscuous mode [ 50.955517][ T3985] wireguard0: entered allmulticast mode [ 50.978372][ T3989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.020420][ T3989] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.113535][ T3979] netlink: 60 bytes leftover after parsing attributes in process `syz.0.152'. [ 51.120271][ T3989] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 3: comm syz.3.155: lblock 3 mapped to illegal pblock 3 (length 13) [ 51.148185][ T3989] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 51.162670][ T3989] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.162670][ T3989] [ 51.181572][ T3997] loop4: detected capacity change from 0 to 512 [ 51.193534][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.204265][ T3996] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #15: block 3: comm syz.3.155: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.220702][ T3997] EXT4-fs: dax option not supported [ 51.249626][ T3979] loop0: detected capacity change from 0 to 2048 [ 51.269353][ T3996] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #15: block 3: comm syz.3.155: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.289135][ T3996] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #15: block 3: comm syz.3.155: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.313081][ T3996] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #15: block 3: comm syz.3.155: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.328808][ T3979] Alternate GPT is invalid, using primary GPT. [ 51.329088][ T3996] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #15: block 3: comm syz.3.155: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.336392][ T3979] loop0: p1 p2 p3 [ 51.353269][ T3996] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #15: block 3: comm syz.3.155: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.383137][ T3996] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #15: block 3: comm syz.3.155: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.400214][ T3996] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #15: block 3: comm syz.3.155: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.426900][ T3301] ================================================================== [ 51.435138][ T3301] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 51.442632][ T3301] [ 51.444995][ T3301] write to 0xffff88811a08bdf8 of 4 bytes by task 3509 on cpu 0: [ 51.452939][ T3301] touch_atime+0x1e8/0x340 [ 51.457393][ T3301] shmem_file_read_iter+0x477/0x540 [ 51.462608][ T3301] vfs_read+0x5ca/0x6f0 [ 51.466791][ T3301] ksys_read+0xda/0x1a0 [ 51.471022][ T3301] __x64_sys_read+0x40/0x50 [ 51.475564][ T3301] x64_sys_call+0x2d77/0x2fb0 [ 51.480265][ T3301] do_syscall_64+0xd2/0x200 [ 51.484809][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.490743][ T3301] [ 51.493115][ T3301] read to 0xffff88811a08bdf8 of 4 bytes by task 3301 on cpu 1: [ 51.500969][ T3301] atime_needs_update+0x25f/0x3e0 [ 51.506031][ T3301] touch_atime+0x4a/0x340 [ 51.510383][ T3301] shmem_file_read_iter+0x477/0x540 [ 51.515631][ T3301] vfs_read+0x5ca/0x6f0 [ 51.519831][ T3301] ksys_read+0xda/0x1a0 [ 51.524031][ T3301] __x64_sys_read+0x40/0x50 [ 51.528724][ T3301] x64_sys_call+0x2d77/0x2fb0 [ 51.533432][ T3301] do_syscall_64+0xd2/0x200 [ 51.537960][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.543972][ T3301] [ 51.546325][ T3301] value changed: 0x220b1c23 -> 0x2230b20b [ 51.552065][ T3301] [ 51.554400][ T3301] Reported by Kernel Concurrency Sanitizer on: [ 51.560571][ T3301] CPU: 1 UID: 0 PID: 3301 Comm: udevd Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 51.572671][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.584184][ T3301] ================================================================== [ 51.605816][ T3996] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #15: block 3: comm syz.3.155: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.623107][ T4006] vhci_hcd: invalid port number 96 [ 51.628345][ T4006] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 51.702999][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.769100][ T3979] loop0: detected capacity change from 0 to 1024