last executing test programs: 1m9.824253136s ago: executing program 32 (id=6745): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fadvise64(r2, 0x0, 0x5, 0x4) 56.511726012s ago: executing program 33 (id=7388): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x24, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROP_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 32.95448864s ago: executing program 0 (id=8416): creat(&(0x7f00000002c0)='./file0\x00', 0x109) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x10000], 0x0, 0x0, 0x1, 0x1}}, 0x40) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 32.899973865s ago: executing program 0 (id=8422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) setgid(0x0) 32.83502918s ago: executing program 0 (id=8424): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) 32.82632253s ago: executing program 0 (id=8427): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x71ae, &(0x7f00000003c0)={0x0, 0xfad8, 0x400, 0x4, 0x310}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x1, 0x4e30, 0xfffffc01, 0x1, 0x5, "6e29efcacbed690034359d09000050304205d2", 0x800, 0x9}) 32.768427495s ago: executing program 0 (id=8430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)={0x24, r2, 0x62c21a4ade68aba1, 0x70bd23, 0xfffffffd, {{0x32}, {@val={0x8, 0x117, 0x59}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 32.534131673s ago: executing program 34 (id=8431): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 32.352334508s ago: executing program 0 (id=8433): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x5875, @mcast1, 0x3}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/udplite6\x00') preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000200)=""/161, 0xa1}, {&(0x7f00000002c0)=""/109, 0x6d}], 0x2, 0xa3, 0x7) 32.351768278s ago: executing program 35 (id=8433): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x5875, @mcast1, 0x3}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/udplite6\x00') preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000200)=""/161, 0xa1}, {&(0x7f00000002c0)=""/109, 0x6d}], 0x2, 0xa3, 0x7) 27.095197449s ago: executing program 5 (id=8562): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_clone(0xa42311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x2) 27.036031874s ago: executing program 5 (id=8566): r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r3 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x2) 26.96691495s ago: executing program 5 (id=8569): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 26.907420135s ago: executing program 5 (id=8571): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) rename(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000200)='./file1\x00') 26.274223805s ago: executing program 5 (id=8587): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 25.768520176s ago: executing program 5 (id=8607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 25.696652391s ago: executing program 36 (id=8607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 25.391033206s ago: executing program 4 (id=8619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r2) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 25.250717297s ago: executing program 4 (id=8626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 25.166843174s ago: executing program 4 (id=8628): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) open(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x802, 0xa) 25.166474034s ago: executing program 4 (id=8629): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='utf8=1,utf8=1,utf8\x00\x00,utf8=1,shortname=win95,errors=remount-ro,uni_xlate=1,\x00'], 0x3, 0x236, &(0x7f0000000380)="$eJzs2r+LHGUYB/BnLomJFy574i8SEF+0UJshd7VFDrmAuKBoVoiCZOLN6rLj7rGzHKyIuUpb/wRrsbQTJaXNNf4FFnbXXJlCHEl2Y3JhLYKYXfXzafaBZ7/M8+67vLzFHL761Sf9bp13i3GsZFmsXIr9uJXFeqzEXfvxyktXf3runavvvbHVbm+/ndLlrSsbmymlc8//+P5n375wc3z23e/OfX86DtY/ODza/PXgmYPzh79f+bhXp16dBsNxKtL14XBcXK/KtNOr+3lKb1VlUZepN6jL0bF+txru7k5SMdhZW90dlXWdisEk9ctJGg/TeDRJxUdFb5DyPE9rq8Hf0fnmVtPEUXPqWjRN8/jXcfZmrP0SrcieSNmTl7Knr2XP7mfnj5qmtehR+UfY//+3+w71MxHVl3udvc70c9rf6kYvqijjYrTit7j9N5mZ1pdfb29fTHesxxfVjVn+xl7nxPH8RrRifX5+Y5pPx/OnYzXiVMQsvxmteGpO/ofY3pybPxMvv3jf8/Noxc8fxjCq2Inb2XvP/3wjpdfebD+Qv3DnewAA/zV5+tPc+1ue/1V/mn+I++ED96uTceHkYtdORD35tF9UVTn6txd3F7Qs8yxr8dic1onZb7ccEyqWoljcmcSjc2/TFz0JAAAAAAAAAAAAD+NRvE646DUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADL7Y8AAAD//+u8zfo=") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)='K', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4008014) r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x21, r0, 0x0, 0x0) 25.123479557s ago: executing program 4 (id=8631): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) capget(0x0, 0x0) 24.486070999s ago: executing program 4 (id=8644): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x2, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)={'U+', 0x5}, 0x16, 0x3) 24.451400161s ago: executing program 37 (id=8644): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x2, 0x476, &(0x7f0000000540)="$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") execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)={'U+', 0x5}, 0x16, 0x3) 16.866787859s ago: executing program 9 (id=8959): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) 16.865616369s ago: executing program 9 (id=8963): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup3(r3, r2, 0x0) 16.788074485s ago: executing program 9 (id=8968): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/if_inet6\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pread64(r0, 0x0, 0x0, 0x800000000040042) 16.757946508s ago: executing program 9 (id=8971): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x2) 16.554971854s ago: executing program 9 (id=8978): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd52}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='mm_page_free\x00', r0, 0x0, 0x8080000001}, 0x18) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1060, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 15.987329839s ago: executing program 9 (id=9002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) ioctl$USBDEVFS_DISCSIGNAL(r2, 0xc0105500, &(0x7f00000000c0)={0x880, 0x0}) 15.948457993s ago: executing program 38 (id=9002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) ioctl$USBDEVFS_DISCSIGNAL(r2, 0xc0105500, &(0x7f00000000c0)={0x880, 0x0}) 13.677661564s ago: executing program 7 (id=9096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 13.646410067s ago: executing program 7 (id=9099): r0 = syz_io_uring_setup(0x1bb, &(0x7f0000000480)={0x0, 0x99ac, 0x80, 0xffffffff, 0x353}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x53ad, 0x1df9, 0x2c, 0x0, 0x0) 13.60693461s ago: executing program 7 (id=9101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x38, r2, 0x10ada85e65c25359, 0xfffffff9, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 13.567533263s ago: executing program 7 (id=9104): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='utf8=1,utf8=1,utf8\x00\x00,utf8=1,shortname=win95,errors=remount-ro,uni_xlate=1,\x00'], 0x3, 0x236, &(0x7f0000000380)="$eJzs2r+LHGUYB/BnLomJFy574i8SEF+0UJshd7VFDrmAuKBoVoiCZOLN6rLj7rGzHKyIuUpb/wRrsbQTJaXNNf4FFnbXXJlCHEl2Y3JhLYKYXfXzafaBZ7/M8+67vLzFHL761Sf9bp13i3GsZFmsXIr9uJXFeqzEXfvxyktXf3runavvvbHVbm+/ndLlrSsbmymlc8//+P5n375wc3z23e/OfX86DtY/ODza/PXgmYPzh79f+bhXp16dBsNxKtL14XBcXK/KtNOr+3lKb1VlUZepN6jL0bF+txru7k5SMdhZW90dlXWdisEk9ctJGg/TeDRJxUdFb5DyPE9rq8Hf0fnmVtPEUXPqWjRN8/jXcfZmrP0SrcieSNmTl7Knr2XP7mfnj5qmtehR+UfY//+3+w71MxHVl3udvc70c9rf6kYvqijjYrTit7j9N5mZ1pdfb29fTHesxxfVjVn+xl7nxPH8RrRifX5+Y5pPx/OnYzXiVMQsvxmteGpO/ofY3pybPxMvv3jf8/Noxc8fxjCq2Inb2XvP/3wjpdfebD+Qv3DnewAA/zV5+tPc+1ue/1V/mn+I++ED96uTceHkYtdORD35tF9UVTn6txd3F7Qs8yxr8dic1onZb7ccEyqWoljcmcSjc2/TFz0JAAAAAAAAAAAAD+NRvE646DUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADL7Y8AAAD//+u8zfo=") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)='K', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4008014) r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x21, r0, 0x0, 0x0) 13.497167959s ago: executing program 7 (id=9106): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18, &(0x7f0000000140)={&(0x7f0000000200)="e15618bebdf8ee0062", 0x9}, 0x1, 0x0, 0x0, 0x8084}, 0x8000) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 13.210196372s ago: executing program 7 (id=9128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 13.195446763s ago: executing program 39 (id=9128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 4.61275905s ago: executing program 3 (id=9389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 4.513023229s ago: executing program 3 (id=9395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 4.48699481s ago: executing program 3 (id=9397): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="6a0cc193", 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)=[0x2], 0x0, 0x0, 0x1}}, 0x3c) 4.447613924s ago: executing program 3 (id=9403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.411201107s ago: executing program 3 (id=9405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {0x81}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 4.347206422s ago: executing program 3 (id=9409): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) 961.704263ms ago: executing program 6 (id=9549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!') 922.521327ms ago: executing program 6 (id=9551): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000370401000000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c040031810000300012800900010069706970000000002000028008000200ac1414bb06000f000200000004001300050005000100000008001f0006"], 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001680)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000680)="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", 0x5ea}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2}}}], 0x20}}], 0x1, 0x4040880) 828.991244ms ago: executing program 6 (id=9564): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 722.853352ms ago: executing program 6 (id=9557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x880, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f00000022c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 662.556757ms ago: executing program 6 (id=9559): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) flock(r1, 0x1) 609.090491ms ago: executing program 6 (id=9572): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 607.912811ms ago: executing program 8 (id=9561): sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) 604.081681ms ago: executing program 2 (id=9562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!') 596.870122ms ago: executing program 1 (id=9563): r0 = syz_io_uring_setup(0xb, &(0x7f0000000580)={0x0, 0x4d736, 0x1000, 0x100401, 0x3cc}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) io_uring_enter(r0, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 589.281453ms ago: executing program 8 (id=9565): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000370401000000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c040031810000300012800900010069706970000000002000028008000200ac1414bb06000f000200000004001300050005000100000008001f0006"], 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001680)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000680)="df4d2ce236a879ea1a91c5bf3444f5a4393f4d2adee23f3d9934d2a466cc97906710ccac50fb415ff7308b9bf286297199cda8507a988d131d211bc33bdae932db5665cc751471a715662c35045d7d8c207880e1ff1b92ed918ea29784f4bac349d6b1a24aa9b490ec2b0d29b3d234d7997bf7b7597d8689b3a5e12bebe07016bb2316c6e80772ee0f4b5aff43f08f88a928da7c9a563fb1ddb64bcd9d057fdd9d4ba584ad26d19aa2fa64b2a12ba5574751f9434e8ca59002590d37644b37793347ecaf2b3d1fecde095cf26a2bc06973978aef0f127acabdb37618f069df591c82feeb6073a7b0f25c28fcb0c8f50c8be0adcef1c7c00132cba1e2df29c451ab85e9b98a8f016d999cb6d1a695671952ad2780e4ab5612524dd472807dac4eae706dfec76cb3c0b8fc7ecc13e73e04350c442407afd9281239bde73f388237e20e9f66692af6395c4d2c4c93e32bc29a6959303b9b7a7a3b2099f9145d5896e60cbb96a7425a9a6e91dcc1ce202a47c0fe2f5c7d9c6cfd88423db4f6375b95d64e8fab22a435eba47660de90024d36c1a8118f5472a0b70cbbdc55a988904e0160aa72e441e8f382e7a0d1b9ef2a75038ea594754d6834246197c708838f32091eff58b10d79dd1285f5f0c4a6ba24822e44f913fa5f82da881d88f90f1262ce323945bad8f9a8aa283b4dfec9276490d63f64f018da5974535d39e45377d4b181f37a22a4981f21eae1149273b1d02449d8177f83b09d40a669dd69028158e0a94cdf99deee9d0b47c1240286e33afb1b894afa3143be492a941fb1e6ca7df3758a0709497369011172dc9c79f183c04a5d67c5f4a231fb9974469452c10a10c64b90d9b585950b00e0ce3d090292d534369a78e77ff4cf4136428e66b191578cab8058befb632e13dd2f3a20a8f4627e9e0a44b0b7520dbf3a9cb87a35298d267486a4c619b61d39f1e1b32614b0c68241a98d762f7a82247f25c673b3734cb531ef3e2add5560328a4a9a3d5b29ae01d559d637962c82f4b1e0d134bd764899f42d0085e86fcd358860798898bc8aa9afd49bf98ad75ef5f6d9537ea6c4b0365bec8bc2b27c54d805fe6589abbf26abc54107c8349a792e22465fc9ece41810f804559f6f8ea69d98d308296cf5f06a985bf114a9ab51815fb28de1e000bdfa06e9bea2e1351b722744e7a7f3565da1437cceca4aa635a3f3520661ca9c09a904e8f7c6613cceb16a1bdcfb6c13b83747303b2fc7d7e3df72604bea58b0024233fe072ba738f04d0d492acc6be69e9bb0b22f31e70d9debfb1d68bd588a0302e408343bea14a0390ccd7fe43ccf92e757b0211f4055d7b732053f0bbcfbbd8218e9ebe8119d0c5ee64e46f0ba73727b12ae8baa2865979de68081f5d231773dadf8fd0b223ba2e2d241e31e6b7e1e5928499fa13df52baa8b31e809d69a1d341b931584ec0cbfffc7afc97ef3aa5355cbd139f4f7d7ddeba00e82f5bcb5dd2603764f80a547206e1fe6ed1aee6f135d090cfeb4214a17c42592e31b8b3b272aaf5234ebbc53d48dcf5e7bb44571d7fc5ef70198fc568978ab0b985f7ba4d7501c662066ea6b9016b786c5b732eee6e1c1846ba764a1e2378fd31d5d544cbd0416e00e29cdd31fa40474e72f2553cb8c8d2e2f4aeaf162846cbf2ff5495e5b28a3bafba39ae91e0fc89897594018d56169aafcd76ce5ad1480a02040ef4c96dd773166a7b54c56b785700f419e9230f31d91d06bdde0df42a175b4f78212001dfc6a6d860e567975cc21a12aea34b01647f2a9b55e30fbdc7e8abb1847f9a593e0cd10b8575b2e1c8b3e58fdba9d1c5edea90a44ff6f313e258d227cf23f60844409fb1749570a68353a4bdd1e6ab7b37fdaade6ac283cd14ef01baa913609078a0a91e723ef809f249f1b7bd815e5d7fe4b4cbec31b49cb6623dc2279f6a832e9eabab415502e8f771095441ea14f9d91232f5501639ab25c174fb29c4bfedee61623db350b3f7b0b97fd8a5244b6556008f4b8d51f557f569155c830e24dd2754bd1108005638ac95466224ba7009fa571854649d08c1262cef961f649c2d94960705d133a97182f5c9c8c54a883dd0db2612e7e982cc818d15a67f1a1d464f124bd77a3cd2eec", 0x5ea}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2}}}], 0x20}}], 0x1, 0x4040880) 562.297135ms ago: executing program 1 (id=9566): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 556.641996ms ago: executing program 2 (id=9567): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x7fffffff, 0x2, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x8881}, 0x0) 540.073417ms ago: executing program 8 (id=9569): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) mq_unlink(0x0) 514.093689ms ago: executing program 1 (id=9570): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 498.15502ms ago: executing program 8 (id=9571): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x9}, 0x18) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040) 447.919224ms ago: executing program 8 (id=9573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r2) 447.529764ms ago: executing program 1 (id=9574): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x94d7, 0x0, 0x0, 0x97}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x2) 218.318803ms ago: executing program 1 (id=9575): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) 217.617913ms ago: executing program 8 (id=9585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r2) 216.823833ms ago: executing program 2 (id=9576): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x408, 0xcd, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 158.909918ms ago: executing program 2 (id=9577): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x702, &(0x7f0000001140)="$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") r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x3, {}, {0x0, 0x4}, @result={0x1, 0x2}}, {0x33, 0x1, 0xff, 0x3, @tick=0xf27, {0x3, 0x31}, {0x8}, @raw32={[0x8, 0xe2, 0x4]}}], 0x38) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/134, 0x86}], 0x1) 158.322488ms ago: executing program 2 (id=9588): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x1000}, 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 654.73µs ago: executing program 1 (id=9578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 2 (id=9590): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @opaque="fba665309d789a51f293abb53aecfb6ffdbcb5bbaa52f64f4e19b2339957caa54630352ea0cdae1411c728682bce2fa7de08b31d2f331cd32926c89500122d7b9b92902ee9"}}}}}, 0x0) kernel console output (not intermixed with test programs): 197.516719][T26429] loop5: detected capacity change from 0 to 2048 [ 197.539711][T26429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.569678][T26429] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.602439][T15450] tipc: Node number set to 2886997007 [ 197.643601][T26443] SELinux: failed to load policy [ 197.684529][T26451] __nla_validate_parse: 1 callbacks suppressed [ 197.684543][T26451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8402'. [ 197.699743][T26451] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8402'. [ 197.722116][T26446] loop6: detected capacity change from 0 to 1024 [ 197.732625][T26446] EXT4-fs: inline encryption not supported [ 197.739387][T26451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8402'. [ 197.749051][T26451] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8402'. [ 197.758120][T26451] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8402'. [ 197.773447][T26456] rdma_op ffff88810a5ea580 conn xmit_rdma 0000000000000000 [ 197.780944][T26446] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 197.899935][T26488] loop4: detected capacity change from 0 to 512 [ 197.927992][T26488] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 197.945435][T26488] EXT4-fs (loop4): mount failed [ 197.950798][T26499] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 197.960471][T26499] SELinux: failed to load policy [ 198.320230][T16894] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.376695][T16894] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.424915][T16894] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.474358][T16894] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.523740][T16894] bridge_slave_1: left allmulticast mode [ 198.529489][T16894] bridge_slave_1: left promiscuous mode [ 198.535208][T16894] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.543080][T16894] bridge_slave_0: left allmulticast mode [ 198.548825][T16894] bridge_slave_0: left promiscuous mode [ 198.554473][T16894] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.654334][T16894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.664569][T16894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.674167][T16894] bond0 (unregistering): Released all slaves [ 198.682363][T16894] bond1 (unregistering): Released all slaves [ 198.727778][T16894] hsr_slave_0: left promiscuous mode [ 198.733365][T16894] hsr_slave_1: left promiscuous mode [ 198.739252][T16894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.746746][T16894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.754223][T16894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.761696][T16894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.771786][T16894] veth1_macvtap: left promiscuous mode [ 198.777355][T16894] veth0_macvtap: left promiscuous mode [ 198.782864][T16894] veth1_vlan: left promiscuous mode [ 198.788203][T16894] veth0_vlan: left promiscuous mode [ 198.849231][T16894] team0 (unregistering): Port device team_slave_1 removed [ 198.859090][T16894] team0 (unregistering): Port device team_slave_0 removed [ 198.999955][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 199.000004][ T29] audit: type=1400 audit(1755981819.455:8272): avc: denied { mounton } for pid=26557 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 199.093671][T26557] lo speed is unknown, defaulting to 1000 [ 199.145265][T16894] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.155597][T16894] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.168614][T26557] chnl_net:caif_netlink_parms(): no params data found [ 199.208003][T16894] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.218333][T16894] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.229726][T26557] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.236844][T26557] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.244045][T26557] bridge_slave_0: entered allmulticast mode [ 199.250542][T26557] bridge_slave_0: entered promiscuous mode [ 199.257182][T26557] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.264300][T26557] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.271435][T26557] bridge_slave_1: entered allmulticast mode [ 199.277761][T26557] bridge_slave_1: entered promiscuous mode [ 199.297611][T26557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.308899][T16894] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.319389][T16894] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.331550][T26557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.352566][T26557] team0: Port device team_slave_0 added [ 199.358955][T26557] team0: Port device team_slave_1 added [ 199.379515][T16894] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.389835][T16894] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.401279][T26557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.408335][T26557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.434261][T26557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.445578][T26557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.452629][T26557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.478746][T26557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.506702][T26557] hsr_slave_0: entered promiscuous mode [ 199.512721][T26557] hsr_slave_1: entered promiscuous mode [ 199.547228][T16894] batadv1: left allmulticast mode [ 199.552331][T16894] batadv1: left promiscuous mode [ 199.557494][T16894] bridge0: port 3(batadv1) entered disabled state [ 199.565261][T16894] bridge_slave_1: left allmulticast mode [ 199.570914][T16894] bridge_slave_1: left promiscuous mode [ 199.576591][T16894] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.584348][T16894] bridge_slave_0: left allmulticast mode [ 199.590038][T16894] bridge_slave_0: left promiscuous mode [ 199.595765][T16894] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.636185][T16894] erspan0 (unregistering): left promiscuous mode [ 199.644701][T16894] gretap0 (unregistering): left promiscuous mode [ 199.690521][T16894] bond1 (unregistering): (slave bond2): Releasing backup interface [ 199.698463][T16894] bond2 (unregistering): left promiscuous mode [ 199.705210][T16894] bond1 (unregistering): Released all slaves [ 199.713862][T16894] bond2 (unregistering): Released all slaves [ 199.774036][T16894] tipc: Disabling bearer [ 199.779375][T16894] tipc: Disabling bearer [ 199.784422][T16894] tipc: Left network mode [ 199.812449][T16894] IPVS: stopping backup sync thread 5947 ... [ 199.858608][T16894] batadv_slave_1: left promiscuous mode [ 199.865997][T16894] hsr_slave_0: left promiscuous mode [ 199.873129][T16894] hsr_slave_1: left promiscuous mode [ 199.878885][T16894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.886265][T16894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.898145][T16894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.905515][T16894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.923104][T16894] veth1_macvtap: left promiscuous mode [ 199.928706][T16894] veth0_macvtap: left promiscuous mode [ 199.934413][T16894] veth1_vlan: left promiscuous mode [ 199.935424][T26926] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 199.946391][T16894] veth0_vlan: left promiscuous mode [ 200.015229][T26934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8444'. [ 200.068508][T26557] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 200.080752][T26557] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 200.097873][T26557] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 200.107260][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 200.114787][T26557] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 200.143439][ T29] audit: type=1400 audit(1755981820.652:8273): avc: denied { listen } for pid=26954 comm="syz.2.8453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 200.163976][T26922] lo speed is unknown, defaulting to 1000 [ 200.192585][ T29] audit: type=1400 audit(1755981820.705:8274): avc: denied { accept } for pid=26954 comm="syz.2.8453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 200.262078][T26557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.277067][T26986] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 200.292524][T26557] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.299944][T26901] lo speed is unknown, defaulting to 1000 [ 200.309446][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.316514][ T4403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.325386][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.325694][ T29] audit: type=1400 audit(1755981820.841:8275): avc: denied { ioctl } for pid=26991 comm="syz.4.8456" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 200.332597][ T4403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.420891][T16894] IPVS: stop unused estimator thread 0... [ 200.450815][ T29] audit: type=1326 audit(1755981820.967:8276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27017 comm="syz.5.8460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb6d8ebe9 code=0x7ffc0000 [ 200.474389][ T29] audit: type=1326 audit(1755981820.967:8277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27017 comm="syz.5.8460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb6d8ebe9 code=0x7ffc0000 [ 200.498036][ T29] audit: type=1326 audit(1755981820.967:8278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27017 comm="syz.5.8460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f3fb6d8ebe9 code=0x7ffc0000 [ 200.521566][ T29] audit: type=1326 audit(1755981820.967:8279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27017 comm="syz.5.8460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb6d8ebe9 code=0x7ffc0000 [ 200.545079][ T29] audit: type=1326 audit(1755981820.967:8280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27017 comm="syz.5.8460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb6d8ebe9 code=0x7ffc0000 [ 200.560830][T26901] chnl_net:caif_netlink_parms(): no params data found [ 200.583361][ T29] audit: type=1400 audit(1755981820.999:8281): avc: denied { name_bind } for pid=27027 comm="syz.4.8462" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 200.607064][T27105] IPv6: Can't replace route, no match found [ 200.636664][T27121] netlink: 'syz.5.8466': attribute type 1 has an invalid length. [ 200.669170][T26557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.729554][T27121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.771412][T26901] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.778518][T26901] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.806995][T26901] bridge_slave_0: entered allmulticast mode [ 200.817445][T26901] bridge_slave_0: entered promiscuous mode [ 200.849639][T26901] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.853561][T27224] netlink: 432 bytes leftover after parsing attributes in process `syz.5.8472'. [ 200.856875][T26901] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.877307][T26901] bridge_slave_1: entered allmulticast mode [ 200.884011][T26901] bridge_slave_1: entered promiscuous mode [ 200.922475][T26901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.962378][T26901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.006224][T27275] netlink: 'syz.5.8478': attribute type 10 has an invalid length. [ 201.020899][T27275] team0: Device hsr_slave_0 failed to register rx_handler [ 201.029598][T27291] loop4: detected capacity change from 0 to 1024 [ 201.044197][T26901] team0: Port device team_slave_0 added [ 201.059366][T26557] veth0_vlan: entered promiscuous mode [ 201.065430][T27291] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 201.076345][T27291] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 201.087072][T26901] team0: Port device team_slave_1 added [ 201.105544][T26557] veth1_vlan: entered promiscuous mode [ 201.115047][T27291] JBD2: no valid journal superblock found [ 201.120807][T27291] EXT4-fs (loop4): Could not load journal inode [ 201.132253][T27324] netlink: 204 bytes leftover after parsing attributes in process `syz.2.8484'. [ 201.142793][T26901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.149799][T26901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.175927][T26901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.196173][T27291] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 201.209593][T26557] veth0_macvtap: entered promiscuous mode [ 201.223865][T26557] veth1_macvtap: entered promiscuous mode [ 201.236694][T26901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.243686][T26901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.269818][T26901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.285312][T26557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.296576][T26557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.304990][T27344] binfmt_misc: register: failed to install interpreter file ./file0 [ 201.308561][T16894] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.324193][T16894] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.346480][T16894] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.355381][T16910] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.390843][T26901] hsr_slave_0: entered promiscuous mode [ 201.422313][T27380] loop4: detected capacity change from 0 to 1024 [ 201.424450][T26901] hsr_slave_1: entered promiscuous mode [ 201.429261][T27380] EXT4-fs: Ignoring removed bh option [ 201.436291][T26901] debugfs: 'hsr0' already exists in 'hsr' [ 201.440019][T27380] EXT4-fs: inline encryption not supported [ 201.445377][T26901] Cannot create hsr debugfs directory [ 201.460920][T27380] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.489966][T27380] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 201.509185][T27380] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.8490: lblock 2 mapped to illegal pblock 2 (length 1) [ 201.564637][T27380] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.8490: lblock 0 mapped to illegal pblock 48 (length 1) [ 201.637943][T27380] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.8490: Failed to acquire dquot type 0 [ 201.684315][T27380] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 201.701633][T27456] pim6reg: entered allmulticast mode [ 201.714329][T26901] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 201.725239][T26901] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 201.731997][T27380] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.8490: mark_inode_dirty error [ 201.743738][T27380] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 201.754548][T27380] EXT4-fs (loop4): 1 orphan inode deleted [ 201.756107][T27456] pim6reg: left allmulticast mode [ 201.763517][T27380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.778354][T16910] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 201.794490][T16910] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:24: Failed to release dquot type 0 [ 201.806602][T26901] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 201.815521][T26901] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 201.859853][T27380] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 201.865231][T26901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.890304][T26901] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.906224][T16910] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.913298][T16910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.925491][T16903] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.932613][T16903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.944789][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.983366][T26901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.993811][T26901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.070126][T26901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.085640][T27496] loop8: detected capacity change from 0 to 1024 [ 202.094229][T27496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.104280][T27496] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 202.113167][T27492] syzkaller1: entered promiscuous mode [ 202.118725][T27492] syzkaller1: entered allmulticast mode [ 202.127002][T27496] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 202.135187][T27496] System zones: 0-1, 3-36 [ 202.145727][T27496] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.184298][T27482] lo speed is unknown, defaulting to 1000 [ 202.200058][T26557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.341639][T26901] veth0_vlan: entered promiscuous mode [ 202.356476][T26901] veth1_vlan: entered promiscuous mode [ 202.407414][T27549] loop8: detected capacity change from 0 to 1024 [ 202.407703][T27549] EXT4-fs: Ignoring removed bh option [ 202.407737][T27549] EXT4-fs: inline encryption not supported [ 202.408685][T26901] veth0_macvtap: entered promiscuous mode [ 202.411094][T27549] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.445245][T26901] veth1_macvtap: entered promiscuous mode [ 202.468356][T27549] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 202.485822][T26901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.527956][T27549] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.8507: lblock 2 mapped to illegal pblock 2 (length 1) [ 202.549668][T26901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.567719][ T4403] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.576479][T27549] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.8507: lblock 0 mapped to illegal pblock 48 (length 1) [ 202.596127][T27549] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.8507: Failed to acquire dquot type 0 [ 202.613009][ T4403] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.623054][T27549] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 202.645063][ T4403] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.647733][T27549] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.8507: mark_inode_dirty error [ 202.674365][T16903] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.683156][T27549] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 202.683230][T27549] EXT4-fs (loop8): 1 orphan inode deleted [ 202.699352][T16909] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.737751][T15450] hid_parser_main: 6 callbacks suppressed [ 202.737770][T15450] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.744027][T16909] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:23: Failed to release dquot type 0 [ 202.751047][T15450] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.774341][T27549] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.791479][T15450] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.798952][T15450] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.806601][T15450] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.814065][T15450] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.821507][T15450] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.828980][T15450] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.836398][T15450] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.843792][T15450] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.853473][T27576] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8518'. [ 202.856996][T15450] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 202.904405][T27549] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 202.946872][T26557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.035153][T27602] ALSA: seq fatal error: cannot create timer (-19) [ 203.195763][T27632] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.316318][T27649] netlink: 'syz.8.8543': attribute type 1 has an invalid length. [ 203.418862][T27664] loop8: detected capacity change from 0 to 512 [ 203.480910][T27664] EXT4-fs (loop8): too many log groups per flexible block group [ 203.488659][T27664] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 203.498257][T27664] EXT4-fs (loop8): mount failed [ 203.505608][T27681] random: crng reseeded on system resumption [ 203.520326][T27681] vhci_hcd: invalid port number 23 [ 203.535205][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 203.569156][T27693] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8556'. [ 203.590606][T27693] netlink: 104 bytes leftover after parsing attributes in process `syz.8.8556'. [ 203.624407][T27698] loop5: detected capacity change from 0 to 512 [ 203.639517][T27698] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 203.666433][T27698] EXT4-fs (loop5): 1 truncate cleaned up [ 203.677236][T27698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.719852][T20662] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.755963][T27714] 9pnet_fd: Insufficient options for proto=fd [ 203.803406][T27722] netlink: 'syz.8.8567': attribute type 2 has an invalid length. [ 203.817605][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 203.817618][ T29] audit: type=1326 audit(1755981824.516:8343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.2.8568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 203.856942][ T29] audit: type=1326 audit(1755981824.516:8344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.2.8568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 203.880683][ T29] audit: type=1326 audit(1755981824.547:8345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.2.8568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 203.918936][ T29] audit: type=1326 audit(1755981824.547:8346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.2.8568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 203.942548][ T29] audit: type=1326 audit(1755981824.547:8347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.2.8568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 203.942909][T27734] loop5: detected capacity change from 0 to 1024 [ 203.966099][ T29] audit: type=1326 audit(1755981824.579:8348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.2.8568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 203.995898][ T29] audit: type=1326 audit(1755981824.610:8349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.2.8568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 204.013352][T27734] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 204.020233][ T29] audit: type=1326 audit(1755981824.610:8350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.2.8568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 204.028534][T27734] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 204.061579][T27734] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.8571: Failed to acquire dquot type 0 [ 204.079248][T27734] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 204.100448][T27734] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.8571: corrupted inode contents [ 204.137422][T27734] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.8571: mark_inode_dirty error [ 204.153102][T27734] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.8571: corrupted inode contents [ 204.185211][T27734] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.8571: mark_inode_dirty error [ 204.196726][T27751] SELinux: Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped). [ 204.206036][T27734] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.8571: corrupted inode contents [ 204.236351][T27734] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 204.257262][T27734] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.8571: corrupted inode contents [ 204.283503][T27734] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.8571: mark_inode_dirty error [ 204.310806][T27734] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 204.328025][T27734] EXT4-fs (loop5): 1 truncate cleaned up [ 204.347901][T27734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.420790][T27734] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 204.438165][T27734] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 204.449416][T27734] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.8571: Failed to acquire dquot type 0 [ 204.462622][T27765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8583'. [ 204.471850][T27765] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8583'. [ 204.481048][T27765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8583'. [ 204.485265][T27734] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 204.490223][T27765] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8583'. [ 204.490287][T27765] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8583'. [ 204.544575][T20662] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /366/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 204.568778][T20662] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 204.601950][T20662] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /366/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 204.628076][T27775] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 204.635865][T27775] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 204.643698][T27775] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 204.651503][T27775] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 204.659297][T27775] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 204.667053][T27775] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 204.675036][T27775] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 204.682788][T27775] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 204.690601][T27775] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 204.702763][T20662] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 204.723285][T20662] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /366/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 204.746832][T20662] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 204.767089][T20662] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /366/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 204.789085][T20662] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 204.809706][T20662] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /366/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 204.990380][T27805] netlink: 'syz.4.8601': attribute type 3 has an invalid length. [ 205.051910][T16909] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.101192][T16909] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.111637][T27827] IPv6: Can't replace route, no match found [ 205.156585][T27833] loop7: detected capacity change from 0 to 512 [ 205.169141][T16909] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.195779][T27833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.208597][T27833] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.235095][T27833] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.8613: corrupted inode contents [ 205.249411][T27833] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.8613: mark_inode_dirty error [ 205.264578][T27833] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.8613: corrupted inode contents [ 205.266567][T16909] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.278021][T27833] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.8613: mark_inode_dirty error [ 205.303390][T27833] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.8613: corrupted inode contents [ 205.316484][T27833] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.8613: mark_inode_dirty error [ 205.343485][T27833] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.8613: corrupted inode contents [ 205.369769][T16909] bridge_slave_1: left allmulticast mode [ 205.375530][T16909] bridge_slave_1: left promiscuous mode [ 205.381189][T16909] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.389292][T27875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8619'. [ 205.402554][T16909] bridge_slave_0: left allmulticast mode [ 205.408288][T16909] bridge_slave_0: left promiscuous mode [ 205.414001][T16909] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.428102][T26901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.510762][T16909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.520918][T16909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.530580][T16909] bond0 (unregistering): Released all slaves [ 205.539804][T16909] bond1 (unregistering): Released all slaves [ 205.571270][T27897] netlink: 'syz.4.8626': attribute type 21 has an invalid length. [ 205.579216][T27897] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8626'. [ 205.604614][T16909] tipc: Disabling bearer [ 205.609854][T16909] tipc: Left network mode [ 205.619187][T27830] lo speed is unknown, defaulting to 1000 [ 205.625321][T27899] pim6reg1: entered promiscuous mode [ 205.630634][T27899] pim6reg1: entered allmulticast mode [ 205.639416][T27907] loop4: detected capacity change from 0 to 128 [ 205.738891][T16909] hsr_slave_0: left promiscuous mode [ 205.765591][T16909] hsr_slave_1: left promiscuous mode [ 205.771531][T16909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.778984][T16909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.815260][T16909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.816402][T27923] loop7: detected capacity change from 0 to 512 [ 205.823230][T16909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.840738][T16909] veth1_macvtap: left promiscuous mode [ 205.876764][T16909] veth0_macvtap: left promiscuous mode [ 205.883653][T27923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.897047][T27923] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.916845][T16909] veth1_vlan: left promiscuous mode [ 205.922381][T16909] veth0_vlan: left promiscuous mode [ 206.009523][T16909] team0 (unregistering): Port device team_slave_1 removed [ 206.024002][T16909] team0 (unregistering): Port device team_slave_0 removed [ 206.238098][T27830] chnl_net:caif_netlink_parms(): no params data found [ 206.297748][T27830] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.304855][T27830] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.315734][T27830] bridge_slave_0: entered allmulticast mode [ 206.322243][T27830] bridge_slave_0: entered promiscuous mode [ 206.329717][T27830] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.336955][T27830] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.344263][T27830] bridge_slave_1: entered allmulticast mode [ 206.351020][T27830] bridge_slave_1: entered promiscuous mode [ 206.371885][T27830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.382208][T27830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.414454][T16909] IPVS: stop unused estimator thread 0... [ 206.414823][T27830] team0: Port device team_slave_0 added [ 206.439402][T27830] team0: Port device team_slave_1 added [ 206.463110][T27830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.470106][T27830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.496064][T27830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.521286][T16909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.546847][T27830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.553950][T27830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.580018][T27830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.615239][T26901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.625674][T16909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.674096][T16909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.744852][T27830] hsr_slave_0: entered promiscuous mode [ 206.758708][T27830] hsr_slave_1: entered promiscuous mode [ 206.769188][T27830] debugfs: 'hsr0' already exists in 'hsr' [ 206.775065][T27830] Cannot create hsr debugfs directory [ 206.780678][T28155] lo speed is unknown, defaulting to 1000 [ 206.791423][T16909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.997370][T28155] chnl_net:caif_netlink_parms(): no params data found [ 207.017206][T27830] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 207.052893][T27830] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 207.069013][T16909] vlan0: left promiscuous mode [ 207.074242][T16909] bridge0: port 4(vlan0) entered disabled state [ 207.089459][T16909] batadv1: left allmulticast mode [ 207.094504][T16909] batadv1: left promiscuous mode [ 207.099605][T16909] bridge0: port 3(batadv1) entered disabled state [ 207.108492][T16909] bridge_slave_1: left allmulticast mode [ 207.114233][T16909] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.124336][T16909] bridge_slave_0: left promiscuous mode [ 207.130248][T16909] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.176313][T16909] erspan0 (unregistering): left promiscuous mode [ 207.186428][T16909] gretap0 (unregistering): left promiscuous mode [ 207.233345][T16909] bond1 (unregistering): Released all slaves [ 207.242120][T16909] smc: removing net device bond0 with user defined pnetid SYZ2 [ 207.249895][T16909] bond0 (unregistering): Released all slaves [ 207.260136][T27830] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 207.269057][T27830] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 207.304948][T28507] program syz.7.8675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.314488][T28155] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.321603][T28155] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.328054][T28507] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 207.346883][T28155] bridge_slave_0: entered allmulticast mode [ 207.353573][T28155] bridge_slave_0: entered promiscuous mode [ 207.360519][T28155] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.367612][T28155] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.374969][T28155] bridge_slave_1: entered allmulticast mode [ 207.381474][T28155] bridge_slave_1: entered promiscuous mode [ 207.397913][T16909] tipc: Disabling bearer [ 207.403139][T16909] tipc: Left network mode [ 207.443332][T28155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.465735][T28155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.480619][T16909] hsr_slave_0: left promiscuous mode [ 207.496108][T16909] hsr_slave_1: left promiscuous mode [ 207.506073][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e8b200: rx timeout, send abort [ 207.507934][T16909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.521716][T16909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.541685][T16909] veth1_macvtap: left promiscuous mode [ 207.547930][T16909] veth0_macvtap: left promiscuous mode [ 207.557934][T16909] veth1_vlan: left promiscuous mode [ 207.563153][T16909] veth0_vlan: left promiscuous mode [ 207.621905][T16910] smc: removing ib device syz! [ 207.655792][T27830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.674365][ T3403] lo speed is unknown, defaulting to 1000 [ 207.680198][ T3403] infiniband syz0: ib_query_port failed (-19) [ 207.698417][T28155] team0: Port device team_slave_0 added [ 207.706804][T28155] team0: Port device team_slave_1 added [ 207.741097][T27830] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.751138][T28155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.758123][T28155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.784043][T28155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.795167][T28155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.802170][T28155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.828159][T28155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.845162][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.852261][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.865431][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.872485][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.894156][T28155] hsr_slave_0: entered promiscuous mode [ 207.902332][T28155] hsr_slave_1: entered promiscuous mode [ 207.908114][T28155] debugfs: 'hsr0' already exists in 'hsr' [ 207.913914][T28155] Cannot create hsr debugfs directory [ 207.990830][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e8b200: abort rx timeout. Force session deactivation [ 208.015796][T27830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.026032][T16909] IPVS: stop unused estimator thread 0... [ 208.122326][T27830] veth0_vlan: entered promiscuous mode [ 208.131290][T27830] veth1_vlan: entered promiscuous mode [ 208.146329][T27830] veth0_macvtap: entered promiscuous mode [ 208.153433][T27830] veth1_macvtap: entered promiscuous mode [ 208.164468][T27830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.175532][T27830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.188262][T16910] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.196999][T16910] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.206064][T16910] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.215023][T16910] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.248370][T28155] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.257387][T28155] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.266502][T28155] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.276321][T28155] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 208.288297][T28753] loop9: detected capacity change from 0 to 128 [ 208.297219][T28753] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.309811][T28753] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.321280][T28155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.335012][T28155] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.344907][T16909] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.351983][T16909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.362821][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.369910][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.396784][T27830] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.411850][T28155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.422285][T28155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.465633][T28764] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.475960][T28764] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.519131][T28155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.547025][T28764] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.557378][T28764] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.621178][T28764] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.631557][T28764] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.655229][T28155] veth0_vlan: entered promiscuous mode [ 208.663769][T28155] veth1_vlan: entered promiscuous mode [ 208.675730][T28799] syz.9.8698: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 208.678037][T28155] veth0_macvtap: entered promiscuous mode [ 208.690310][T28799] CPU: 0 UID: 0 PID: 28799 Comm: syz.9.8698 Not tainted syzkaller #0 PREEMPT(voluntary) [ 208.690342][T28799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.690407][T28799] Call Trace: [ 208.690415][T28799] [ 208.690423][T28799] __dump_stack+0x1d/0x30 [ 208.690450][T28799] dump_stack_lvl+0xe8/0x140 [ 208.690472][T28799] dump_stack+0x15/0x1b [ 208.690492][T28799] warn_alloc+0x12b/0x1a0 [ 208.690548][T28799] __vmalloc_node_range_noprof+0x9c/0xe00 [ 208.690663][T28799] ? __futex_wait+0x1ff/0x260 [ 208.690699][T28799] ? __pfx_futex_wake_mark+0x10/0x10 [ 208.690736][T28799] ? __rcu_read_unlock+0x4f/0x70 [ 208.690819][T28799] ? avc_has_perm_noaudit+0x1b1/0x200 [ 208.690881][T28799] vmalloc_user_noprof+0x7d/0xb0 [ 208.690957][T28799] ? xskq_create+0x80/0xe0 [ 208.690994][T28799] xskq_create+0x80/0xe0 [ 208.691029][T28799] xsk_init_queue+0x95/0xf0 [ 208.691065][T28799] xsk_setsockopt+0x477/0x640 [ 208.691102][T28799] ? __pfx_xsk_setsockopt+0x10/0x10 [ 208.691139][T28799] __sys_setsockopt+0x184/0x200 [ 208.691165][T28799] __x64_sys_setsockopt+0x64/0x80 [ 208.691191][T28799] x64_sys_call+0x20ec/0x2ff0 [ 208.691216][T28799] do_syscall_64+0xd2/0x200 [ 208.691312][T28799] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.691345][T28799] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 208.691416][T28799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.691459][T28799] RIP: 0033:0x7f7009beebe9 [ 208.691502][T28799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.691527][T28799] RSP: 002b:00007f700864f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.691554][T28799] RAX: ffffffffffffffda RBX: 00007f7009e15fa0 RCX: 00007f7009beebe9 [ 208.691572][T28799] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 208.691589][T28799] RBP: 00007f7009c71e19 R08: 0000000000000004 R09: 0000000000000000 [ 208.691605][T28799] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 208.691622][T28799] R13: 00007f7009e16038 R14: 00007f7009e15fa0 R15: 00007ffd0e5aac78 [ 208.691690][T28799] [ 208.691706][T28799] Mem-Info: [ 208.698042][T28155] veth1_macvtap: entered promiscuous mode [ 208.705792][T28799] active_anon:4560 inactive_anon:84 isolated_anon:0 [ 208.705792][T28799] active_file:11627 inactive_file:17694 isolated_file:0 [ 208.705792][T28799] unevictable:16825 dirty:210 writeback:0 [ 208.705792][T28799] slab_reclaimable:2478 slab_unreclaimable:29337 [ 208.705792][T28799] mapped:28950 shmem:323 pagetables:1130 [ 208.705792][T28799] sec_pagetables:0 bounce:0 [ 208.705792][T28799] kernel_misc_reclaimable:0 [ 208.705792][T28799] free:1843625 free_pcp:18599 free_cma:0 [ 208.721086][T28155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.722636][T28799] Node 0 active_anon:18240kB inactive_anon:336kB active_file:46508kB inactive_file:70776kB unevictable:67300kB isolated(anon):0kB isolated(file):0kB mapped:115800kB dirty:840kB writeback:0kB shmem:1292kB kernel_stack:3872kB pagetables:4520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 208.722683][T28799] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.728602][T28155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.731705][T28799] lowmem_reserve[]: [ 208.771082][T28801] loop7: detected capacity change from 0 to 128 [ 208.771191][T28799] 0 2883 7862 7862 [ 209.045164][T28799] Node 0 DMA32 free:2949296kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952828kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 209.075504][T28799] lowmem_reserve[]: 0 0 4978 4978 [ 209.080629][T28799] Node 0 Normal free:4409844kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18292kB inactive_anon:336kB active_file:46508kB inactive_file:70852kB unevictable:67300kB writepending:868kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:70764kB local_pcp:43196kB free_cma:0kB [ 209.113184][T28799] lowmem_reserve[]: 0 0 0 0 [ 209.117807][T28799] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 209.130506][T28799] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949296kB [ 209.146511][T28799] Node 0 Normal: 599*4kB (UME) 907*8kB (ME) 984*16kB (UM) 566*32kB (UME) 362*64kB (UME) 189*128kB (UME) 71*256kB (UME) 44*512kB (UME) 22*1024kB (UM) 12*2048kB (UME) 1033*4096kB (UM) = 4409844kB [ 209.165768][T28799] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 209.175145][T28799] 46668 total pagecache pages [ 209.179831][T28799] 169 pages in swap cache [ 209.184154][T28799] Free swap = 124320kB [ 209.188348][T28799] Total swap = 124996kB [ 209.192584][T28799] 2097051 pages RAM [ 209.196417][T28799] 0 pages HighMem/MovableOnly [ 209.201124][T28799] 80444 pages reserved [ 209.210477][ T4403] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.219405][ T4403] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.232765][T28764] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.243215][T28764] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.272777][ T4403] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.289066][ T4403] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.319465][ T4406] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.327785][ T4406] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.372603][ T4406] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.380985][ T4406] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.409596][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 209.409609][ T29] audit: type=1400 audit(1755981830.385:8442): avc: denied { mount } for pid=28824 comm="syz.8.8703" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 209.448315][ T4406] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.456666][ T4406] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.490901][ T4403] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.491662][ T29] audit: type=1400 audit(1755981830.427:8443): avc: denied { unmount } for pid=28824 comm="syz.8.8703" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 209.499210][ T4403] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.546778][T28843] __nla_validate_parse: 2 callbacks suppressed [ 209.546792][T28843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8711'. [ 209.630393][T28857] netlink: 'syz.7.8717': attribute type 10 has an invalid length. [ 209.642896][T28857] team0: Port device dummy0 added [ 209.651159][T28857] netlink: 'syz.7.8717': attribute type 10 has an invalid length. [ 209.675486][T28857] team0: Port device dummy0 removed [ 209.683308][T28857] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 209.709591][T28864] syzkaller1: entered promiscuous mode [ 209.715185][T28864] syzkaller1: entered allmulticast mode [ 209.726153][T28868] net_ratelimit: 46 callbacks suppressed [ 209.726175][T28868] openvswitch: netlink: Message has 6 unknown bytes. [ 209.899921][ T29] audit: type=1326 audit(1755981830.899:8444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28909 comm="syz.8.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10ed3ebe9 code=0x7ffc0000 [ 209.923637][ T29] audit: type=1326 audit(1755981830.899:8445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28909 comm="syz.8.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10ed3ebe9 code=0x7ffc0000 [ 209.949870][ T29] audit: type=1326 audit(1755981830.952:8446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28909 comm="syz.8.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd10ed3ebe9 code=0x7ffc0000 [ 209.973703][ T29] audit: type=1326 audit(1755981830.952:8447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28909 comm="syz.8.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10ed3ebe9 code=0x7ffc0000 [ 209.997202][ T29] audit: type=1326 audit(1755981830.952:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28909 comm="syz.8.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd10ed3ebe9 code=0x7ffc0000 [ 210.020868][ T29] audit: type=1326 audit(1755981830.952:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28909 comm="syz.8.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10ed3ebe9 code=0x7ffc0000 [ 210.044938][ T29] audit: type=1326 audit(1755981830.952:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28909 comm="syz.8.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd10ed3ebe9 code=0x7ffc0000 [ 210.074301][T28915] sctp: [Deprecated]: syz.2.8738 (pid 28915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.074301][T28915] Use struct sctp_sack_info instead [ 210.093340][ T29] audit: type=1326 audit(1755981830.952:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28909 comm="syz.8.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10ed3ebe9 code=0x7ffc0000 [ 210.130113][T28922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28922 comm=syz.8.8741 [ 210.142692][T28922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28922 comm=syz.8.8741 [ 210.240528][T28944] openvswitch: netlink: Message has 6 unknown bytes. [ 210.264738][T28949] tipc: Started in network mode [ 210.269707][T28949] tipc: Node identity ac141413, cluster identity 4711 [ 210.276833][T28949] tipc: New replicast peer: 10.1.1.2 [ 210.282416][T28949] tipc: Enabled bearer , priority 10 [ 210.514566][T28966] loop7: detected capacity change from 0 to 512 [ 210.521377][T28966] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.529486][T28966] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.536499][T28966] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 210.545896][T28966] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 210.554339][T28966] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 210.563452][T28966] EXT4-fs (loop7): 1 truncate cleaned up [ 210.569609][T28966] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.591963][T28966] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 210.612024][T26901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.790372][T28997] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8773'. [ 210.802506][T28999] veth1_to_bridge: entered promiscuous mode [ 210.811674][T28999] veth1_to_bridge: left promiscuous mode [ 210.931834][T29027] loop8: detected capacity change from 0 to 512 [ 210.942392][T29027] EXT4-fs (loop8): bad s_min_extra_isize: 65528 [ 211.109940][T29064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8803'. [ 211.119276][T29064] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8803'. [ 211.202382][T29077] loop9: detected capacity change from 0 to 512 [ 211.215063][T29077] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 211.230180][T29077] EXT4-fs (loop9): mount failed [ 211.256199][T29085] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 211.280521][T29087] sctp: [Deprecated]: syz.9.8811 (pid 29087) Use of int in max_burst socket option. [ 211.280521][T29087] Use struct sctp_assoc_value instead [ 211.346181][ T36] tipc: Node number set to 2886997011 [ 211.484593][T29129] loop9: detected capacity change from 0 to 128 [ 211.493172][T29129] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.505540][T29129] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.538733][T27830] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.605287][T29151] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8827'. [ 211.614649][T29151] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8827'. [ 211.641721][T29155] loop9: detected capacity change from 0 to 512 [ 211.648435][T29155] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.655730][T29155] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 211.673826][T29155] EXT4-fs (loop9): 1 truncate cleaned up [ 211.681904][T29161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8830'. [ 211.694195][T29155] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.753581][T27830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.835474][T29190] pimreg: entered allmulticast mode [ 211.841358][T29190] pimreg: left allmulticast mode [ 211.872262][T29202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8845'. [ 211.881541][T29202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8845'. [ 211.915852][T29204] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.8846'. [ 211.962361][T29213] loop7: detected capacity change from 0 to 512 [ 211.984870][T29216] loop8: detected capacity change from 0 to 512 [ 212.002873][T29223] loop9: detected capacity change from 0 to 1024 [ 212.011494][T29216] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 212.037888][T29223] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 212.079710][T29223] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.154781][T16909] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm kworker/u8:23: lblock 0 mapped to illegal pblock 0 (length 1) [ 212.182930][T16909] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 212.195293][T16909] EXT4-fs (loop9): This should not happen!! Data will be lost [ 212.195293][T16909] [ 212.224325][T27830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 212.261601][T29256] loop9: detected capacity change from 0 to 512 [ 212.280936][T29256] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.298302][T29261] loop1: detected capacity change from 0 to 1024 [ 212.319107][T29256] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.347961][T29261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.379264][T29261] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.391599][T27830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.404805][T29261] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.8868: lblock 3 mapped to illegal pblock 3 (length 13) [ 212.458046][T29261] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 212.470565][T29261] EXT4-fs (loop1): This should not happen!! Data will be lost [ 212.470565][T29261] [ 212.521787][T29283] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.8868: lblock 3 mapped to illegal pblock 3 (length 1) [ 212.554217][T29287] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.8868: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 212.597845][T29287] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem [ 212.624787][T29300] loop7: detected capacity change from 0 to 512 [ 212.636659][T28155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.655473][T29300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.694837][T29300] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.716873][T29309] IPVS: stopping master sync thread 29314 ... [ 212.724478][T29314] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 212.824636][T26901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.852116][T29324] vhci_hcd: invalid port number 96 [ 212.857441][T29324] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 212.988416][T29358] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 213.236606][T29397] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 213.243182][T29397] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.250727][T29397] vhci_hcd vhci_hcd.0: Device attached [ 213.301488][T29398] vhci_hcd: connection closed [ 213.301747][T16903] vhci_hcd: stop threads [ 213.310862][T16903] vhci_hcd: release socket [ 213.315295][T16903] vhci_hcd: disconnect device [ 213.381969][T29412] SELinux: failed to load policy [ 213.442311][T29429] loop7: detected capacity change from 0 to 1024 [ 213.449119][T29429] EXT4-fs: Ignoring removed orlov option [ 213.461536][T29429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.549048][T29444] SELinux: failed to load policy [ 213.697319][T29461] SELinux: ebitmap: truncated map [ 213.707013][T29461] SELinux: failed to load policy [ 213.717111][T29467] tmpfs: Bad value for 'mpol' [ 213.789529][T26901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.804868][T29477] loop1: detected capacity change from 0 to 1024 [ 213.811849][T29477] EXT4-fs: Ignoring removed orlov option [ 213.817649][T29477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.835111][T29477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.057539][T29536] loop9: detected capacity change from 0 to 512 [ 214.059068][T28155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.088297][T29536] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.122447][T29536] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.219098][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 214.219147][ T29] audit: type=1400 audit(1755981835.435:8594): avc: denied { unlink } for pid=27830 comm="syz-executor" name="file1" dev="loop9" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 214.346166][T29579] netlink: 'syz.8.8997': attribute type 3 has an invalid length. [ 214.395510][ T36] hid_parser_main: 17 callbacks suppressed [ 214.395526][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.408833][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.417104][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.424591][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.432028][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.439640][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.447117][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.454580][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.462038][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.469491][ T36] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.479382][ T36] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 214.493078][T29592] netlink: 'syz.1.8994': attribute type 1 has an invalid length. [ 214.538031][T29599] vhci_hcd: invalid port number 96 [ 214.543226][T29599] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 214.551691][ T29] audit: type=1326 audit(1755981835.771:8595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29604 comm="syz.1.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf50d1ebe9 code=0x7ffc0000 [ 214.575445][ T29] audit: type=1326 audit(1755981835.771:8596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29604 comm="syz.1.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf50d1ebe9 code=0x7ffc0000 [ 214.599388][ T29] audit: type=1326 audit(1755981835.771:8597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29604 comm="syz.1.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf50d1ebe9 code=0x7ffc0000 [ 214.614075][T29553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.623068][ T29] audit: type=1326 audit(1755981835.771:8598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29604 comm="syz.1.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf50d1ebe9 code=0x7ffc0000 [ 214.655282][ T29] audit: type=1326 audit(1755981835.771:8599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29604 comm="syz.1.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf50d1ebe9 code=0x7ffc0000 [ 214.679093][ T29] audit: type=1326 audit(1755981835.771:8600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29604 comm="syz.1.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf50d1ebe9 code=0x7ffc0000 [ 214.702686][ T29] audit: type=1326 audit(1755981835.771:8601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29604 comm="syz.1.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf50d1ebe9 code=0x7ffc0000 [ 214.726182][ T29] audit: type=1326 audit(1755981835.771:8602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29604 comm="syz.1.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf50d1ebe9 code=0x7ffc0000 [ 214.750207][ T29] audit: type=1326 audit(1755981835.771:8603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29604 comm="syz.1.8999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf50d1ebe9 code=0x7ffc0000 [ 214.756795][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 214.805859][ T4403] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.806007][T29612] loop7: detected capacity change from 0 to 2048 [ 214.834889][T29612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 214.869335][T29618] ALSA: seq fatal error: cannot create timer (-19) [ 214.888569][ T4403] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.902084][T29611] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 214.922959][T29625] 9pnet_fd: Insufficient options for proto=fd [ 214.962661][T26901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 214.982783][ T4403] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.024608][T29636] netlink: 'syz.1.9011': attribute type 1 has an invalid length. [ 215.085208][ T4403] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.132590][T29682] loop7: detected capacity change from 0 to 512 [ 215.197971][T29682] EXT4-fs (loop7): too many log groups per flexible block group [ 215.205818][T29682] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 215.219419][T29626] chnl_net:caif_netlink_parms(): no params data found [ 215.229200][T29682] EXT4-fs (loop7): mount failed [ 215.231857][ T3361] kernel write not supported for file /90/clear_refs (pid: 3361 comm: kworker/0:2) [ 215.279601][T29789] loop1: detected capacity change from 0 to 2048 [ 215.293881][ T4403] bridge_slave_1: left allmulticast mode [ 215.299580][ T4403] bridge_slave_1: left promiscuous mode [ 215.305409][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.314993][T29802] netlink: 'syz.7.9022': attribute type 13 has an invalid length. [ 215.315906][T29789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 215.322858][T29802] __nla_validate_parse: 2 callbacks suppressed [ 215.322870][T29802] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9022'. [ 215.351942][ T4403] bridge_slave_0: left allmulticast mode [ 215.357743][ T4403] bridge_slave_0: left promiscuous mode [ 215.363507][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.394008][T29788] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 215.449516][T28155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 215.464959][ T4403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.476337][ T4403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.487275][ T4403] bond0 (unregistering): Released all slaves [ 215.526881][T29844] netlink: 'syz.7.9028': attribute type 1 has an invalid length. [ 215.541671][ T36] kernel write not supported for file /241/clear_refs (pid: 36 comm: kworker/1:1) [ 215.568863][ T4403] hsr_slave_0: left promiscuous mode [ 215.591006][ T4403] hsr_slave_1: left promiscuous mode [ 215.596974][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.604396][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.621212][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.628688][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.639809][ T4403] veth1_macvtap: left promiscuous mode [ 215.645873][ T4403] veth0_macvtap: left promiscuous mode [ 215.653256][ T4403] veth1_vlan: left promiscuous mode [ 215.659014][ T4403] veth0_vlan: left promiscuous mode [ 215.706522][T29897] netlink: 'syz.1.9040': attribute type 13 has an invalid length. [ 215.714500][T29897] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9040'. [ 215.729323][T29898] loop8: detected capacity change from 0 to 2048 [ 215.747835][T29898] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 215.760585][ T4403] team0 (unregistering): Port device team_slave_1 removed [ 215.768859][T29893] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 215.783760][ T4403] team0 (unregistering): Port device team_slave_0 removed [ 215.798133][T26557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 215.818477][T29626] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.825594][T29626] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.833548][T29626] bridge_slave_0: entered allmulticast mode [ 215.840046][T29626] bridge_slave_0: entered promiscuous mode [ 215.846892][T29626] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.854008][T29626] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.861209][T29626] bridge_slave_1: entered allmulticast mode [ 215.867720][T29626] bridge_slave_1: entered promiscuous mode [ 215.897452][T29626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.898425][T29933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9041'. [ 215.917092][T29626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.926632][T29933] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9041'. [ 215.942830][T29934] random: crng reseeded on system resumption [ 215.962851][T29936] 9pnet_fd: Insufficient options for proto=fd [ 215.963014][T29934] vhci_hcd: invalid port number 23 [ 215.984551][T29626] team0: Port device team_slave_0 added [ 215.991048][T29626] team0: Port device team_slave_1 added [ 216.037731][T29626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.044721][T29626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.070637][T29626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.083346][T29626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.090386][T29626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.116366][T29626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.160449][T29626] hsr_slave_0: entered promiscuous mode [ 216.169560][T29626] hsr_slave_1: entered promiscuous mode [ 216.175751][T29626] debugfs: 'hsr0' already exists in 'hsr' [ 216.181656][T29626] Cannot create hsr debugfs directory [ 216.198550][T30043] netlink: 'syz.8.9052': attribute type 13 has an invalid length. [ 216.206421][T30043] netlink: 48 bytes leftover after parsing attributes in process `syz.8.9052'. [ 216.295667][T30107] loop7: detected capacity change from 0 to 512 [ 216.307347][T30111] 9pnet_fd: Insufficient options for proto=fd [ 216.318159][T30107] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 216.355908][T30127] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 216.364517][T30107] EXT4-fs (loop7): mount failed [ 216.561360][T29626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.570282][T29626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.579152][T29626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.587971][T29626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.605596][T30175] random: crng reseeded on system resumption [ 216.618242][T30175] vhci_hcd: invalid port number 23 [ 216.644519][T30186] 9pnet_fd: Insufficient options for proto=fd [ 216.647650][T29626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.677963][T29626] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.688839][T16910] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.695927][T16910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.707318][T16903] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.714397][T16903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.790248][T29626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.797275][T30204] sctp: [Deprecated]: syz.1.9078 (pid 30204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.797275][T30204] Use struct sctp_sack_info instead [ 216.853995][T29626] veth0_vlan: entered promiscuous mode [ 216.862106][T29626] veth1_vlan: entered promiscuous mode [ 216.877247][T29626] veth0_macvtap: entered promiscuous mode [ 216.884538][T29626] veth1_macvtap: entered promiscuous mode [ 216.895173][T29626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.905622][T29626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.915781][T16910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.924906][T16910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.934055][T16910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.944225][T16910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.027400][T30223] random: crng reseeded on system resumption [ 217.039034][T30223] vhci_hcd: invalid port number 23 [ 217.179863][T30253] netlink: 'syz.8.9100': attribute type 3 has an invalid length. [ 217.183818][T30250] program syz.3.9098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.205372][T30250] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 217.253809][T30263] loop7: detected capacity change from 0 to 128 [ 217.260072][T30265] loop8: detected capacity change from 0 to 128 [ 217.262268][T30265] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.287719][T30265] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.427975][T26557] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.528856][T30299] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9118'. [ 217.591054][T16894] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.643550][T30319] pim6reg1: entered promiscuous mode [ 217.648883][T30319] pim6reg1: entered allmulticast mode [ 217.660479][T16894] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.730968][T16894] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.797366][T16894] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.902661][T16894] bridge_slave_1: left allmulticast mode [ 217.908339][T16894] bridge_slave_1: left promiscuous mode [ 217.914076][T16894] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.923289][T16894] bridge_slave_0: left allmulticast mode [ 217.929043][T16894] bridge_slave_0: left promiscuous mode [ 217.934863][T16894] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.972378][T30463] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9138'. [ 218.015679][T16894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.025558][T16894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.035320][T16894] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 218.044201][T16894] bond0 (unregistering): Released all slaves [ 218.054956][T30327] chnl_net:caif_netlink_parms(): no params data found [ 218.107011][T16894] tipc: Disabling bearer [ 218.112537][T16894] tipc: Left network mode [ 218.121714][T16894] hsr_slave_0: left promiscuous mode [ 218.127283][T16894] hsr_slave_1: left promiscuous mode [ 218.132934][T16894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.140364][T16894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.148179][T16894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.155547][T16894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.165684][T16894] veth1_macvtap: left promiscuous mode [ 218.171462][T16894] veth0_macvtap: left promiscuous mode [ 218.177151][T16894] veth1_vlan: left promiscuous mode [ 218.182387][T16894] veth0_vlan: left promiscuous mode [ 218.196894][T30527] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30527 comm=syz.3.9140 [ 218.209468][T30527] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30527 comm=syz.3.9140 [ 218.248360][T30533] loop3: detected capacity change from 0 to 128 [ 218.259479][T16894] team0 (unregistering): Port device team_slave_1 removed [ 218.272057][T30533] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.285752][T30533] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.290207][T16894] team0 (unregistering): Port device team_slave_0 removed [ 218.329208][T30327] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.336275][T30327] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.344837][T30327] bridge_slave_0: entered allmulticast mode [ 218.351568][T30327] bridge_slave_0: entered promiscuous mode [ 218.360036][T30327] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.360567][T29626] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.367303][T30327] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.383492][T30327] bridge_slave_1: entered allmulticast mode [ 218.390031][T30327] bridge_slave_1: entered promiscuous mode [ 218.422504][T30327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.445959][T30327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.481853][T30327] team0: Port device team_slave_0 added [ 218.489021][T30327] team0: Port device team_slave_1 added [ 218.515672][T30327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.522674][T30327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.548676][T30327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.561719][T30327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.568752][T30327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.577167][T30621] netlink: 'syz.3.9150': attribute type 10 has an invalid length. [ 218.594825][T30327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.623950][T30621] team0: Port device dummy0 added [ 218.652921][T30621] netlink: 'syz.3.9150': attribute type 10 has an invalid length. [ 218.672689][T30327] hsr_slave_0: entered promiscuous mode [ 218.679148][T30327] hsr_slave_1: entered promiscuous mode [ 218.686569][T30327] debugfs: 'hsr0' already exists in 'hsr' [ 218.692352][T30327] Cannot create hsr debugfs directory [ 218.703186][T30621] team0: Port device dummy0 removed [ 218.710810][T30621] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 218.750069][T30673] loop8: detected capacity change from 0 to 128 [ 218.793004][T30710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9164'. [ 218.803123][T30710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9164'. [ 218.945018][T30750] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9159'. [ 218.987296][T30327] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 218.996948][T30327] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.006404][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 219.006422][ T29] audit: type=1326 audit(1755981840.464:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30770 comm="syz.3.9165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e943ebe9 code=0x7ffc0000 [ 219.036086][ T29] audit: type=1326 audit(1755981840.464:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30770 comm="syz.3.9165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e943ebe9 code=0x7ffc0000 [ 219.064522][T30327] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.071791][ T29] audit: type=1326 audit(1755981840.464:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30770 comm="syz.3.9165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f90e943ebe9 code=0x7ffc0000 [ 219.095480][ T29] audit: type=1326 audit(1755981840.464:8687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30770 comm="syz.3.9165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e943ebe9 code=0x7ffc0000 [ 219.119039][ T29] audit: type=1326 audit(1755981840.464:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30770 comm="syz.3.9165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e943ebe9 code=0x7ffc0000 [ 219.144959][T30327] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.170967][T30784] veth1_to_bridge: entered promiscuous mode [ 219.178564][T30784] veth1_to_bridge: left promiscuous mode [ 219.207230][T30786] pimreg: entered allmulticast mode [ 219.215171][T30327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.222460][T30786] pimreg: left allmulticast mode [ 219.237126][T30327] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.246871][T16903] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.253964][T16903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.254145][T30793] loop1: detected capacity change from 0 to 1024 [ 219.267383][T16903] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.271049][T30793] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 219.274569][T16903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.291041][T30793] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 219.300439][T30793] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.9171: Failed to acquire dquot type 0 [ 219.313538][T30793] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 219.330716][T30793] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.9171: corrupted inode contents [ 219.344759][T30793] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.9171: mark_inode_dirty error [ 219.357778][T30793] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.9171: corrupted inode contents [ 219.369905][T30793] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.9171: mark_inode_dirty error [ 219.381787][T30793] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.9171: corrupted inode contents [ 219.395636][T30793] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 219.395701][T30800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.404371][T30793] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.9171: corrupted inode contents [ 219.426611][T30793] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.9171: mark_inode_dirty error [ 219.438307][T30793] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 219.447896][T30793] EXT4-fs (loop1): 1 truncate cleaned up [ 219.455016][T30793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.460207][T30327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.487165][T30793] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 219.502290][T30793] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 219.512121][T30793] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 219.521304][T30793] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 219.530723][T30793] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.9171: Failed to acquire dquot type 0 [ 219.543907][T30793] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 219.588987][T30327] veth0_vlan: entered promiscuous mode [ 219.596452][T30327] veth1_vlan: entered promiscuous mode [ 219.610675][T30327] veth0_macvtap: entered promiscuous mode [ 219.617702][T30327] veth1_macvtap: entered promiscuous mode [ 219.627892][T30327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.638805][T30327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.649580][ T4406] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.658558][ T4406] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.667888][ T4406] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.677952][ T4406] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.720110][ T29] audit: type=1326 audit(1755981841.199:8689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30821 comm="syz.1.9182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf50d1ebe9 code=0x7ffc0000 [ 219.934211][T30847] pimreg: entered allmulticast mode [ 219.944680][T30847] pimreg: left allmulticast mode [ 220.063181][T30867] loop6: detected capacity change from 0 to 1024 [ 220.069904][T30867] EXT4-fs: Ignoring removed orlov option [ 220.244182][T30881] pimreg: entered allmulticast mode [ 220.253655][T30881] pimreg: left allmulticast mode [ 220.306765][T30893] openvswitch: netlink: Message has 6 unknown bytes. [ 220.549596][T30800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.587883][T30800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.618224][T30917] loop1: detected capacity change from 0 to 1024 [ 220.625377][T30917] EXT4-fs: Ignoring removed orlov option [ 220.649291][T30800] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.709688][T16910] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.733394][ T165] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.756139][ T165] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.774015][T30942] pimreg: entered allmulticast mode [ 220.783074][ T165] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.791404][T30942] pimreg: left allmulticast mode [ 220.801777][T30949] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9214'. [ 220.874197][T30960] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.9218'. [ 220.936083][T30982] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 220.942612][T30982] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 220.950210][T30982] vhci_hcd vhci_hcd.0: Device attached [ 220.957418][T30984] vhci_hcd: connection closed [ 220.957582][T16903] vhci_hcd: stop threads [ 220.966698][T16903] vhci_hcd: release socket [ 220.971241][T16903] vhci_hcd: disconnect device [ 220.999583][T30989] netlink: 'syz.3.9228': attribute type 3 has an invalid length. [ 221.043262][T30993] vhci_hcd: invalid port number 96 [ 221.048459][T30993] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 221.077725][T31007] loop8: detected capacity change from 0 to 1024 [ 221.084826][T31007] EXT4-fs: Ignoring removed orlov option [ 221.471450][T31038] vhci_hcd: invalid port number 96 [ 221.476630][T31038] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 221.518380][T31050] loop1: detected capacity change from 0 to 128 [ 221.525200][T31050] EXT4-fs: Ignoring removed nobh option [ 221.532916][T31050] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.619063][T31068] pimreg: entered allmulticast mode [ 221.628715][T31068] pimreg: left allmulticast mode [ 221.651598][T31077] loop8: detected capacity change from 0 to 1024 [ 221.658340][T31077] EXT4-fs: Ignoring removed orlov option [ 221.914582][T26557] EXT4-fs unmount: 10 callbacks suppressed [ 221.914669][T26557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.945860][T31107] loop8: detected capacity change from 0 to 2048 [ 221.955504][T31107] EXT4-fs: inline encryption not supported [ 221.978059][T31107] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.994951][T31107] EXT4-fs error (device loop8): ext4_ext_precache:632: inode #2: comm syz.8.9283: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 222.020719][T31119] loop6: detected capacity change from 0 to 512 [ 222.035796][T31122] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9278'. [ 222.045264][T26557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.045705][T31119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.067770][T31119] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.084406][T31126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9280'. [ 222.691581][T31131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.702008][T16894] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.739591][T16894] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.791249][T31144] loop3: detected capacity change from 0 to 1024 [ 222.821407][T31144] EXT4-fs: Ignoring removed orlov option [ 222.824211][T16894] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.831017][T31144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.893225][T16894] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.963700][T31166] loop1: detected capacity change from 0 to 512 [ 222.986575][T31167] loop8: detected capacity change from 0 to 512 [ 223.012761][T31166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.025319][T31167] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.9290: error while reading EA inode 32 err=-116 [ 223.053680][T31167] EXT4-fs (loop8): Remounting filesystem read-only [ 223.060227][T31167] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 223.072250][T31166] ext4 filesystem being mounted at /91/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.084557][T16894] bridge_slave_1: left allmulticast mode [ 223.090255][T16894] bridge_slave_1: left promiscuous mode [ 223.095938][T16894] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.123843][T31167] EXT4-fs (loop8): 1 orphan inode deleted [ 223.152940][T16894] bridge_slave_0: left allmulticast mode [ 223.158693][T16894] bridge_slave_0: left promiscuous mode [ 223.164506][T16894] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.176057][T31167] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.190312][T29626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.202000][T31167] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.202248][T28155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.310813][T31209] netlink: 'syz.1.9304': attribute type 27 has an invalid length. [ 223.334529][T31211] loop3: detected capacity change from 0 to 128 [ 223.343874][T31211] EXT4-fs: Ignoring removed nobh option [ 223.349797][T16894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.364087][T16894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.378894][T31211] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.403187][T16894] bond0 (unregistering): Released all slaves [ 223.416793][T31211] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.528198][T31209] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.535405][T31209] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.591172][T29626] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.604372][T31231] loop8: detected capacity change from 0 to 1024 [ 223.628687][T31231] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.9301: Failed to acquire dquot type 0 [ 223.644368][T31209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.654561][T31231] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 223.679519][T31209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.686982][T31231] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.9301: corrupted inode contents [ 223.721101][T31231] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #13: comm syz.8.9301: mark_inode_dirty error [ 223.759273][T16894] hsr_slave_0: left promiscuous mode [ 223.764948][T16894] hsr_slave_1: left promiscuous mode [ 223.776068][T16894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.776739][T31231] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.9301: corrupted inode contents [ 223.783627][T16894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.803172][T16894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.806726][T31231] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #13: comm syz.8.9301: mark_inode_dirty error [ 223.810628][T16894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.822742][T31231] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.9301: corrupted inode contents [ 223.842704][T31231] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 223.855580][T31231] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.9301: corrupted inode contents [ 223.871286][T31231] EXT4-fs error (device loop8): ext4_truncate:4666: inode #13: comm syz.8.9301: mark_inode_dirty error [ 223.882901][T16894] veth1_macvtap: left promiscuous mode [ 223.883450][T31231] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 223.888751][T16894] veth0_macvtap: left promiscuous mode [ 223.897961][T31231] EXT4-fs (loop8): 1 truncate cleaned up [ 223.910220][T16894] veth1_vlan: left promiscuous mode [ 223.911299][T31231] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.929459][T31247] loop3: detected capacity change from 0 to 1024 [ 223.936225][T31247] EXT4-fs: Ignoring removed orlov option [ 223.942019][T16894] veth0_vlan: left promiscuous mode [ 223.953181][T31231] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 223.963399][T31247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.002755][T31252] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 224.025034][T31252] __quota_error: 79 callbacks suppressed [ 224.025050][T31252] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 224.039881][T31252] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 224.049345][T31252] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.9301: Failed to acquire dquot type 0 [ 224.060826][T16894] team0 (unregistering): Port device team_slave_1 removed [ 224.081639][T16894] team0 (unregistering): Port device team_slave_0 removed [ 224.104410][T31252] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 224.120747][T16903] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.150553][T16910] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.164600][T26557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.184583][T16910] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.193743][T16910] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.203049][ T29] audit: type=1326 audit(1755981845.913:8767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31327 comm="syz.2.9308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 224.226627][ T29] audit: type=1326 audit(1755981845.913:8768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31327 comm="syz.2.9308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 224.240038][T31149] chnl_net:caif_netlink_parms(): no params data found [ 224.250196][ T29] audit: type=1326 audit(1755981845.913:8769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31327 comm="syz.2.9308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 224.280471][ T29] audit: type=1326 audit(1755981845.913:8770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31327 comm="syz.2.9308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 224.304429][ T29] audit: type=1326 audit(1755981845.913:8771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31327 comm="syz.2.9308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 224.328058][ T29] audit: type=1326 audit(1755981845.924:8772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31327 comm="syz.2.9308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 224.351574][ T29] audit: type=1326 audit(1755981845.924:8773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31327 comm="syz.2.9308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 224.375076][ T29] audit: type=1326 audit(1755981845.924:8774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31327 comm="syz.2.9308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 224.411988][T29626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.444552][T31149] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.451660][T31149] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.461350][T31149] bridge_slave_0: entered allmulticast mode [ 224.468390][T31149] bridge_slave_0: entered promiscuous mode [ 224.476639][T31149] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.483745][T31149] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.492932][T31149] bridge_slave_1: entered allmulticast mode [ 224.510587][T31149] bridge_slave_1: entered promiscuous mode [ 224.540095][T31149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.554489][T31149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.565858][T31445] loop8: detected capacity change from 0 to 128 [ 224.580570][T31445] EXT4-fs: Ignoring removed nobh option [ 224.590565][T31149] team0: Port device team_slave_0 added [ 224.597842][T31445] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.610408][T31149] team0: Port device team_slave_1 added [ 224.624142][T31445] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.639022][T31149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.645999][T31149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.671929][T31149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.694054][T31149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.701152][T31149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.727069][T31149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.779721][T31149] hsr_slave_0: entered promiscuous mode [ 224.786224][T26557] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.790728][T31149] hsr_slave_1: entered promiscuous mode [ 224.801213][T31149] debugfs: 'hsr0' already exists in 'hsr' [ 224.806968][T31149] Cannot create hsr debugfs directory [ 224.920690][T31603] loop3: detected capacity change from 0 to 512 [ 224.950377][T31603] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 224.960419][T31603] System zones: 0-2, 18-18, 34-35 [ 224.978486][T31603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.995783][T31603] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.022835][T29626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.137139][T31149] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 225.146003][T31149] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 225.156435][T31149] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 225.165577][T31149] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 225.185109][T31149] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.192213][T31149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.192286][T31647] loop3: detected capacity change from 0 to 32768 [ 225.219599][T31149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.230096][T16903] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.243040][T31647] loop3: p1 p3 < > [ 225.243143][T31149] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.261842][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.269089][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.280021][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.287231][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.361607][T31149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.402496][T31696] loop3: detected capacity change from 0 to 1024 [ 225.411771][T31696] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.9342: Failed to acquire dquot type 0 [ 225.423875][T31696] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 225.438864][T31696] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.9342: corrupted inode contents [ 225.451041][T31696] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.9342: mark_inode_dirty error [ 225.463577][T31696] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.9342: corrupted inode contents [ 225.476541][T31696] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.9342: mark_inode_dirty error [ 225.488019][T31696] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.9342: corrupted inode contents [ 225.497494][T31149] veth0_vlan: entered promiscuous mode [ 225.500748][T31696] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 225.508618][T31149] veth1_vlan: entered promiscuous mode [ 225.514556][T31696] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.9342: corrupted inode contents [ 225.531636][T31149] veth0_macvtap: entered promiscuous mode [ 225.532027][T31696] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.9342: mark_inode_dirty error [ 225.538874][T31149] veth1_macvtap: entered promiscuous mode [ 225.553752][T31696] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 225.559384][T31149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.568554][T31696] EXT4-fs (loop3): 1 truncate cleaned up [ 225.573971][T31149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.589121][T16903] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.593495][T31696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.598536][T16903] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.627191][T16903] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.656053][T16903] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.664539][T31715] netlink: 'syz.6.9286': attribute type 1 has an invalid length. [ 225.689550][T31696] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 225.702004][T31696] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 225.712387][T31696] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.9342: Failed to acquire dquot type 0 [ 225.724578][T31696] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 225.746429][T29626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.771206][T31728] loop1: detected capacity change from 0 to 512 [ 225.786534][T31728] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 225.794724][T31728] System zones: 0-2, 18-18, 34-35 [ 225.800740][T31728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.813347][T31728] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.841378][T28155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.898638][T31750] veth1_to_bridge: entered promiscuous mode [ 225.907276][T31753] atomic_op ffff888104333528 conn xmit_atomic 0000000000000000 [ 225.911972][T31750] veth1_to_bridge: left promiscuous mode [ 226.259631][T31819] pim6reg: entered allmulticast mode [ 226.371046][T31843] ALSA: seq fatal error: cannot create timer (-19) [ 226.418429][T31858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9406'. [ 226.428699][T31858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9406'. [ 226.447537][T31862] SELinux: syz.3.9409 (31862) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 226.521481][T31871] loop1: detected capacity change from 0 to 1024 [ 226.528620][T31871] EXT4-fs: Ignoring removed orlov option [ 226.535927][T31871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.587584][T31879] netlink: 'syz.2.9426': attribute type 1 has an invalid length. [ 226.622530][T31879] bond3: entered promiscuous mode [ 226.629440][T31879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.647120][T31879] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 226.655941][T31879] bond3: (slave batadv1): making interface the new active one [ 226.663436][T31879] batadv1: entered promiscuous mode [ 226.671727][T31879] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 226.731869][T31932] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9424'. [ 226.889586][T28155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.966495][T31954] netlink: 'syz.1.9434': attribute type 1 has an invalid length. [ 226.982840][T31954] bond1: entered promiscuous mode [ 226.988315][T31954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.007798][T31954] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 227.016167][T31954] bond1: (slave batadv1): making interface the new active one [ 227.023650][T31954] batadv1: entered promiscuous mode [ 227.032101][T31954] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 227.050650][T31996] team0 (unregistering): Port device team_slave_0 removed [ 227.071523][T31996] team0 (unregistering): Port device team_slave_1 removed [ 227.113819][T32041] netlink: 'syz.2.9441': attribute type 1 has an invalid length. [ 227.263123][T32063] loop8: detected capacity change from 0 to 512 [ 227.270072][T32063] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 227.282510][T32063] EXT4-fs (loop8): 1 truncate cleaned up [ 227.288676][T32063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.315419][T26557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.349809][T32076] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9454'. [ 227.361728][T32076] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9454'. [ 227.538476][T32096] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9472'. [ 227.994296][T32114] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9470'. [ 228.394639][T32124] loop6: detected capacity change from 0 to 1024 [ 228.396691][T32121] vlan2: entered allmulticast mode [ 228.403320][T32124] EXT4-fs: Ignoring removed orlov option [ 228.417248][T32124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.499423][T32139] loop8: detected capacity change from 0 to 128 [ 228.699384][T32175] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 228.793842][T32192] loop8: detected capacity change from 0 to 128 [ 228.803107][T31149] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.836196][T32192] syz.8.9501: attempt to access beyond end of device [ 228.836196][T32192] loop8: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 228.853995][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 228.854007][ T29] audit: type=1326 audit(1755981850.795:8909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32198 comm="syz.2.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 228.883706][ T29] audit: type=1326 audit(1755981850.806:8910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32198 comm="syz.2.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 228.907612][ T29] audit: type=1326 audit(1755981850.806:8911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32198 comm="syz.2.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 228.931249][ T29] audit: type=1326 audit(1755981850.806:8912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32198 comm="syz.2.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 228.954730][ T29] audit: type=1326 audit(1755981850.806:8913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32198 comm="syz.2.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 228.970157][T32192] syz.8.9501: attempt to access beyond end of device [ 228.970157][T32192] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 228.978200][ T29] audit: type=1326 audit(1755981850.806:8914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32198 comm="syz.2.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 229.015134][ T29] audit: type=1326 audit(1755981850.806:8915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32198 comm="syz.2.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 229.036343][T32192] syz.8.9501: attempt to access beyond end of device [ 229.036343][T32192] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 229.062376][T32192] syz.8.9501: attempt to access beyond end of device [ 229.062376][T32192] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 229.081432][ T29] audit: type=1326 audit(1755981850.995:8916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32198 comm="syz.2.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 229.099810][T32192] syz.8.9501: attempt to access beyond end of device [ 229.099810][T32192] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 229.105018][ T29] audit: type=1326 audit(1755981850.995:8917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32198 comm="syz.2.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 229.141813][ T29] audit: type=1326 audit(1755981850.995:8918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32198 comm="syz.2.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888323ebe9 code=0x7ffc0000 [ 229.143745][T32192] syz.8.9501: attempt to access beyond end of device [ 229.143745][T32192] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 229.192109][T32192] syz.8.9501: attempt to access beyond end of device [ 229.192109][T32192] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 229.207146][T32192] syz.8.9501: attempt to access beyond end of device [ 229.207146][T32192] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 229.237628][T32192] syz.8.9501: attempt to access beyond end of device [ 229.237628][T32192] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 229.256877][T32192] syz.8.9501: attempt to access beyond end of device [ 229.256877][T32192] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 229.295281][T32219] loop1: detected capacity change from 0 to 128 [ 229.382847][T32230] loop8: detected capacity change from 0 to 8192 [ 229.400513][T32230] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.416738][T32245] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9522'. [ 229.664468][T32287] netlink: 'syz.8.9539': attribute type 10 has an invalid length. [ 229.672439][T32287] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9539'. [ 229.686116][T32279] loop6: detected capacity change from 0 to 8192 [ 229.693030][T32287] dummy0: entered promiscuous mode [ 229.699005][T32287] bridge0: port 3(dummy0) entered blocking state [ 229.705421][T32287] bridge0: port 3(dummy0) entered disabled state [ 229.712208][T32287] dummy0: entered allmulticast mode [ 229.718076][T32279] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.725503][T32287] bridge0: port 3(dummy0) entered blocking state [ 229.734912][T32287] bridge0: port 3(dummy0) entered forwarding state [ 229.754107][T32292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9541'. [ 229.810173][T32302] netlink: 'syz.6.9544': attribute type 6 has an invalid length. [ 229.862653][T32315] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.909393][T32328] netlink: 'syz.2.9553': attribute type 10 has an invalid length. [ 229.919854][T32315] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.931936][T32328] dummy0: entered promiscuous mode [ 229.937538][T32328] bridge0: port 3(dummy0) entered blocking state [ 229.944045][T32328] bridge0: port 3(dummy0) entered disabled state [ 229.950769][T32328] dummy0: entered allmulticast mode [ 229.956804][T32328] bridge0: port 3(dummy0) entered blocking state [ 229.963166][T32328] bridge0: port 3(dummy0) entered forwarding state [ 229.995004][T32315] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.045388][T32315] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.096356][T32345] loop6: detected capacity change from 0 to 128 [ 230.102989][ T4406] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.120843][ T4406] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.137730][ T4406] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.165569][ T4406] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.174373][T32362] netlink: 'syz.2.9558': attribute type 6 has an invalid length. [ 230.194809][T32364] SELinux: failed to load policy [ 230.241887][T32384] netlink: 'syz.1.9566': attribute type 10 has an invalid length. [ 230.250323][T32384] dummy0: entered promiscuous mode [ 230.258411][T32384] bridge0: port 3(dummy0) entered blocking state [ 230.264926][T32384] bridge0: port 3(dummy0) entered disabled state [ 230.275333][T32384] dummy0: entered allmulticast mode [ 230.814641][T32390] ================================================================== [ 230.822724][T32390] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 230.829732][T32390] [ 230.832064][T32390] read-write to 0xffff888237c29d64 of 4 bytes by task 32411 on cpu 0: [ 230.840202][T32390] wq_worker_running+0x95/0x120 [ 230.845085][T32390] schedule_timeout+0xb7/0x170 [ 230.849853][T32390] msleep+0x50/0x90 [ 230.853667][T32390] nsim_fib_event_work+0x14a2/0x21a0 [ 230.858945][T32390] process_scheduled_works+0x4ce/0x9d0 [ 230.864398][T32390] worker_thread+0x582/0x770 [ 230.868983][T32390] kthread+0x486/0x510 [ 230.873042][T32390] ret_from_fork+0xda/0x150 [ 230.877529][T32390] ret_from_fork_asm+0x1a/0x30 [ 230.882281][T32390] [ 230.884592][T32390] read to 0xffff888237c29d64 of 4 bytes by task 32390 on cpu 1: [ 230.892235][T32390] kick_pool+0x49/0x2d0 [ 230.896395][T32390] __queue_work+0x8cb/0xb50 [ 230.900900][T32390] queue_work_on+0xd1/0x160 [ 230.905385][T32390] wg_queue_enqueue_per_peer_tx+0x119/0x270 [ 230.911280][T32390] wg_packet_encrypt_worker+0x9e1/0xb80 [ 230.916831][T32390] process_scheduled_works+0x4ce/0x9d0 [ 230.922285][T32390] worker_thread+0x582/0x770 [ 230.926883][T32390] kthread+0x486/0x510 [ 230.930945][T32390] ret_from_fork+0xda/0x150 [ 230.935444][T32390] ret_from_fork_asm+0x1a/0x30 [ 230.940194][T32390] [ 230.942503][T32390] value changed: 0x00000000 -> 0x00000001 [ 230.948208][T32390] [ 230.950513][T32390] Reported by Kernel Concurrency Sanitizer on: [ 230.956643][T32390] CPU: 1 UID: 0 PID: 32390 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 230.966524][T32390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.976572][T32390] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 230.983071][T32390] ==================================================================