last executing test programs: 2m37.570088245s ago: executing program 1 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000f77da3db9f7efd09f83e238c9594121844d74e1e76db9c4e9e57fabc6ef0bf02f26d4d410dfb0705c6cbebbb0046defc48d80805b44ce5c0650cb371a11913ad7f993629dceaae8c05bce558e6f5b5fb5b1f2c6963dd11e793be8d821bfb1bd64f4f369a9c2c2323569928323d5da34961f9f9218212f21e6afc89e1c02b8f168f1e189a2b5ff0aa534e5b1a78078395bb5d0eb5c3c55ed504d2f27f69e306ad4d", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r7, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r9 = dup(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffc00}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8001}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', r5, 0x25, r9, 0x8, &(0x7f00000003c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[{0x2, 0x1, 0xe, 0x7}, {0x3, 0x1, 0xa, 0x4}, {0x0, 0x3, 0x9, 0x9}, {0x0, 0x4, 0x5, 0x2}, {0x1, 0x5, 0x0, 0x8}], 0x10, 0x65a, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r10, 0x0, 0x2}, 0x18) time(0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x3a, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) 2m37.424819036s ago: executing program 1 (id=133): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000240)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@base={0xa, 0x8, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2m37.399080488s ago: executing program 1 (id=135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='rss_stat\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x20}, &(0x7f0000002000), &(0x7f0000000000)) 2m37.330239243s ago: executing program 1 (id=136): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0xb476}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x1}, {0x100}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 2m37.185240024s ago: executing program 1 (id=137): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) syz_open_dev$vcsa(0x0, 0x1, 0x4000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)=')}[L\x00') socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 2m36.886488227s ago: executing program 1 (id=140): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 2m36.863499508s ago: executing program 32 (id=140): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 2m18.894672746s ago: executing program 2 (id=361): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) 2m17.898792791s ago: executing program 2 (id=372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x123, 0x234}, 0x14}, 0x1, 0x0, 0x0, 0x200440d5}, 0x0) 2m17.814682617s ago: executing program 2 (id=374): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'wg1\x00', 0x40001}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000580)={0x1, 'dummy0\x00'}, 0x18) 2m17.774396571s ago: executing program 2 (id=378): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@quota}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x1c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) 2m17.345481273s ago: executing program 2 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) 2m16.640928687s ago: executing program 2 (id=389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x0, 0x8b, 0x8}}, @void}}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@supported_rates={0x1, 0x2, [{0x9}, {0x1b, 0x1}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}}, 0x0) 2m16.240275977s ago: executing program 33 (id=389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x0, 0x8b, 0x8}}, @void}}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@supported_rates={0x1, 0x2, [{0x9}, {0x1b, 0x1}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}}, 0x0) 3.492373566s ago: executing program 0 (id=3133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000f77da3db9f7efd09f83e238c9594121844d74e1e76db9c4e9e57fabc6ef0bf02f26d4d410dfb0705c6cbebbb0046defc48d80805b44ce5c0650cb371a11913ad7f993629dceaae8c05bce558e6f5b5fb5b1f2c6963dd11e793be8d821bfb1bd64f4f369a9c2c2323569928323d5da34961f9f9218212f21e6afc89e1c02b8f168f1e189a2b5ff0aa534e5b1a78078395bb5d0eb5c3c55ed504d2f27f69e306ad4d", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r7, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r11 = dup(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffc00}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8001}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', r5, 0x25, r11, 0x8, &(0x7f00000003c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[{0x2, 0x1, 0xe, 0x7}, {0x3, 0x1, 0xa, 0x4}, {0x0, 0x3, 0x9, 0x9}, {0x0, 0x4, 0x5, 0x2}, {0x1, 0x5, 0x0, 0x8}], 0x10, 0x65a, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r12, 0x0, 0x2}, 0x18) time(0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x3a, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) 3.076594837s ago: executing program 0 (id=3136): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a0100000000000000000001000000090001007379"], 0xfc}}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x40000000004) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x2000000000000000}, 0x18) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) writev(r8, &(0x7f0000001a00)=[{&(0x7f0000000300)="85", 0x1}], 0x1) 2.340223814s ago: executing program 6 (id=3147): r0 = inotify_init1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x14, 0x12, 0x879, 0x8, 0x20, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x6004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000300)={0x40, 0x3, 0x8001}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000000)) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) close(r0) 1.434907111s ago: executing program 5 (id=3154): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9, 0xf7}]}}}]}, 0x48}}, 0x0) 1.219827028s ago: executing program 6 (id=3156): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 1.151578573s ago: executing program 3 (id=3161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0xc377, 0x9, {{0x6, 0x4, 0x1, 0x5, 0x18, 0x65, 0x0, 0x9b, 0x4, 0x0, @broadcast, @remote, {[@generic={0x83, 0x2}]}}}}}) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x48f0, 0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r4}, 0x18) r5 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r5, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782da02b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) r6 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040191}, 0x4088) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x5) socket$inet(0x2, 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x1) flock(r8, 0x2) futex(&(0x7f0000000480)=0x1, 0xb, 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x0) 1.125794795s ago: executing program 4 (id=3162): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 1.109246166s ago: executing program 5 (id=3163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r4, 0x0) ftruncate(r4, 0xc17a) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.102833757s ago: executing program 6 (id=3164): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, r1, 0x2, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)}, 0x48005) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r7, {0xfff8, 0x4}, {0x0, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) 1.096936637s ago: executing program 4 (id=3165): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf10, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, 0x0, 0x0, 0x1200, 0x0, 0x3) 1.076958569s ago: executing program 5 (id=3166): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000800700000001000112090000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = add_key(&(0x7f0000000780)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0xf) keyctl$read(0xb, r0, &(0x7f0000000800)=""/148, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x20000000000000}) fcntl$lock(r8, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x200000007}) fcntl$lock(r8, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x5, 0x0, 0x0, 0x3, 0x8b008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x1, @perf_config_ext={0x5}, 0x1a, 0x40, 0x0, 0x3, 0x1, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.065956409s ago: executing program 0 (id=3167): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000011000100900051230000400007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a801800058014000680080001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000132ae57f60014001a80100005800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a00000000000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f60014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 1.047294971s ago: executing program 4 (id=3168): creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x1346ae0b}}]}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9, 0xf7}]}}}]}, 0x48}}, 0x0) 1.032709972s ago: executing program 0 (id=3169): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x250, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa7}, @TCA_ROUTE4_TO={0x8, 0x2, 0x2b}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0xa}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xad}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}, @filter_kind_options=@f_route={{0xa}, {0x1d8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1cc, 0x6, [@m_connmark={0x1c8, 0x7, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x2, 0x2, 0x80}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xfffffff7, 0x2, 0x3, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcb62, 0x10000, 0xffffffffffffffff, 0x5d}, 0x91}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1ff, 0x20000000, 0x9, 0x8}, 0x5ca0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x24, 0x8, 0x0, 0x0, 0xfffffff7}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x4, 0x7, 0x1}, 0x6a96}}]}, {0xed, 0x6, "12955dec644140aca7cce292ffa629c5755dcfd230e61674325790c0ae8d32d83760cc37347d83f1b8e472ebc51188fc06270ccd8705c93713c54050bb38ee3acc775d65c259242330332c469e2470bcaf5f5255f573d40e65f31ccbb75031260b14060b008211e450cd3fe1e4ed4da26dd2dc9daf9a975b6d79258f10417a30126a10bfb99753c52577c52eb195dca1480917e26d3bc1b3bfabc9b94bbd5df649d68aba7923b51d5bc4683dc18a0699400bf6473388ce51c49a78748381381935d4b7ba91d57be864e35ba4fd51c7006054e03362c6e5bf840ed998b9ea5dfa834551ec287c3b7bb6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.002395434s ago: executing program 0 (id=3170): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000e27f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x40000000004) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x2000000000000000}, 0x18) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) writev(r7, &(0x7f0000001a00)=[{&(0x7f0000000300)="85", 0x1}], 0x1) 914.228871ms ago: executing program 5 (id=3171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r2) 879.655074ms ago: executing program 6 (id=3172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, 0x0, 0x0, 0x1200, 0x0, 0x3) 802.646489ms ago: executing program 6 (id=3173): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x24048850) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r5}, 0x69) 801.937009ms ago: executing program 6 (id=3174): r0 = inotify_init1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x14, 0x12, 0x879, 0x8, 0x20, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x6004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000300)={0x40, 0x3, 0x8001}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"88e4ce0b9bc292fa691a6684f2fc0a68", 0x0, 0x0, {0xffffffffdc247b69, 0x40}, {0x100, 0x1}, 0x6, [0x8, 0xa1, 0x200, 0x2, 0x8, 0x3, 0xfff, 0x5, 0x4, 0x100, 0x8, 0x9, 0x7, 0x2, 0x81, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000000)=r8) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) close(r0) 762.223443ms ago: executing program 4 (id=3175): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 500.900852ms ago: executing program 4 (id=3176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r4, 0x0) ftruncate(r4, 0xc17a) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 489.271413ms ago: executing program 5 (id=3177): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 448.939976ms ago: executing program 5 (id=3178): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a0100000000000000000001000000090001007379"], 0xfc}}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x40000000004) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x2000000000000000}, 0x18) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) writev(r8, &(0x7f0000001a00)=[{&(0x7f0000000300)="85", 0x1}], 0x1) 448.256026ms ago: executing program 4 (id=3179): r0 = inotify_init1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x14, 0x12, 0x879, 0x8, 0x20, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x6004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000300)={0x40, 0x3, 0x8001}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"88e4ce0b9bc292fa691a6684f2fc0a68", 0x0, 0x0, {0xffffffffdc247b69, 0x40}, {0x100, 0x1}, 0x6, [0x8, 0xa1, 0x200, 0x2, 0x8, 0x3, 0xfff, 0x5, 0x4, 0x100, 0x8, 0x9, 0x7, 0x2, 0x81, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000000)=r9) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) close(r0) 281.318219ms ago: executing program 3 (id=3180): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x250, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa7}, @TCA_ROUTE4_TO={0x8, 0x2, 0x2b}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0xa}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xad}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}, @filter_kind_options=@f_route={{0xa}, {0x1d8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1cc, 0x6, [@m_connmark={0x1c8, 0x7, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x2, 0x2, 0x80}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xfffffff7, 0x2, 0x3, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcb62, 0x10000, 0xffffffffffffffff, 0x5d}, 0x91}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1ff, 0x20000000, 0x9, 0x8}, 0x5ca0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x24, 0x8, 0x0, 0x0, 0xfffffff7}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x4, 0x7, 0x1}, 0x6a96}}]}, {0xed, 0x6, "12955dec644140aca7cce292ffa629c5755dcfd230e61674325790c0ae8d32d83760cc37347d83f1b8e472ebc51188fc06270ccd8705c93713c54050bb38ee3acc775d65c259242330332c469e2470bcaf5f5255f573d40e65f31ccbb75031260b14060b008211e450cd3fe1e4ed4da26dd2dc9daf9a975b6d79258f10417a30126a10bfb99753c52577c52eb195dca1480917e26d3bc1b3bfabc9b94bbd5df649d68aba7923b51d5bc4683dc18a0699400bf6473388ce51c49a78748381381935d4b7ba91d57be864e35ba4fd51c7006054e03362c6e5bf840ed998b9ea5dfa834551ec287c3b7bb6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 280.573429ms ago: executing program 3 (id=3181): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x1346ae0b}}]}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9, 0xf7}]}}}]}, 0x48}}, 0x0) 115.619802ms ago: executing program 0 (id=3182): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0) 92.354623ms ago: executing program 3 (id=3183): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x248, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2b}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0xa}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xad}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}, @filter_kind_options=@f_route={{0xa}, {0x1d8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1cc, 0x6, [@m_connmark={0x1c8, 0x7, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x2, 0x2, 0x80}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xfffffff7, 0x2, 0x3, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcb62, 0x10000, 0xffffffffffffffff, 0x5d}, 0x91}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1ff, 0x20000000, 0x9, 0x8}, 0x5ca0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x24, 0x8, 0x0, 0x0, 0xfffffff7}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x4, 0x7, 0x1}, 0x6a96}}]}, {0xed, 0x6, "12955dec644140aca7cce292ffa629c5755dcfd230e61674325790c0ae8d32d83760cc37347d83f1b8e472ebc51188fc06270ccd8705c93713c54050bb38ee3acc775d65c259242330332c469e2470bcaf5f5255f573d40e65f31ccbb75031260b14060b008211e450cd3fe1e4ed4da26dd2dc9daf9a975b6d79258f10417a30126a10bfb99753c52577c52eb195dca1480917e26d3bc1b3bfabc9b94bbd5df649d68aba7923b51d5bc4683dc18a0699400bf6473388ce51c49a78748381381935d4b7ba91d57be864e35ba4fd51c7006054e03362c6e5bf840ed998b9ea5dfa834551ec287c3b7bb6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 18.396319ms ago: executing program 3 (id=3184): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x24048850) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r5}, 0x69) 0s ago: executing program 3 (id=3185): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, 0x0, 0x0, 0x1200, 0x0, 0x3) kernel console output (not intermixed with test programs): couldn't find an available UDC or it's busy [ 62.212062][ T4783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.269010][ T4792] sd 0:0:1:0: device reset [ 63.013944][ T4834] loop5: detected capacity change from 0 to 256 [ 63.160246][ T4843] loop3: detected capacity change from 0 to 1024 [ 63.165426][ T4834] FAT-fs (loop5): codepage cp775 not found [ 63.176459][ T4845] loop0: detected capacity change from 0 to 1024 [ 63.194273][ T4843] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.364: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 63.232621][ T4845] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.427332][ T4874] loop3: detected capacity change from 0 to 512 [ 63.459639][ T4874] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.857653][ T4902] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 63.857743][ T4901] IPVS: stopping master sync thread 4902 ... [ 63.923928][ T4910] loop2: detected capacity change from 0 to 1024 [ 63.932498][ T4910] EXT4-fs: Ignoring removed nobh option [ 63.938182][ T4910] EXT4-fs: Ignoring removed bh option [ 64.008729][ T4904] loop3: detected capacity change from 0 to 512 [ 64.016395][ T4904] EXT4-fs (loop3): filesystem is read-only [ 64.022399][ T4904] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 64.039550][ T4904] EXT4-fs (loop3): filesystem is read-only [ 64.045539][ T4904] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.058608][ T4904] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.375: bg 0: block 64: padding at end of block bitmap is not set [ 64.126426][ T4910] loop2: detected capacity change from 1024 to 64 [ 64.239686][ T4918] syzkaller1: entered promiscuous mode [ 64.245287][ T4918] syzkaller1: entered allmulticast mode [ 64.279766][ T4904] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 64.289428][ T4911] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.344986][ T3299] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 64.365257][ T3299] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 64.379084][ T3299] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 64.392725][ T3299] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 64.397290][ T4904] EXT4-fs (loop3): 1 orphan inode deleted [ 64.407429][ T3299] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 64.435617][ T3299] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 64.471141][ T3299] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 64.492565][ T4925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.527407][ T4925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.536654][ T3299] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 64.552080][ T3299] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 64.567856][ T3299] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 64.701141][ T4913] kmmpd-loop2: attempt to access beyond end of device [ 64.701141][ T4913] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 64.714688][ T4913] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 65.078998][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.395475][ T4947] loop0: detected capacity change from 0 to 2048 [ 65.537123][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 65.537137][ T29] audit: type=1400 audit(1739626204.788:659): avc: denied { mount } for pid=4946 comm="syz.0.390" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 65.566413][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.589278][ T4947] syz.0.390: attempt to access beyond end of device [ 65.589278][ T4947] loop0: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 65.629707][ T4957] mmap: syz.5.394 (4957) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.643949][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.667940][ T29] audit: type=1400 audit(1739626204.908:660): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 65.724972][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.823439][ T4974] loop5: detected capacity change from 0 to 1024 [ 65.862844][ T4974] EXT4-fs mount: 18 callbacks suppressed [ 65.862858][ T4974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.891744][ T4974] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.398: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 65.987380][ T11] bridge_slave_1: left allmulticast mode [ 65.993047][ T11] bridge_slave_1: left promiscuous mode [ 65.998822][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.022292][ T11] bridge_slave_0: left allmulticast mode [ 66.028038][ T11] bridge_slave_0: left promiscuous mode [ 66.033853][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.482432][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.499041][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.519922][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.536727][ T11] bond0 (unregistering): Released all slaves [ 66.616268][ T11] hsr_slave_0: left promiscuous mode [ 66.628396][ T11] hsr_slave_1: left promiscuous mode [ 66.637217][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.644708][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.752799][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.760333][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.780791][ T11] veth1_macvtap: left promiscuous mode [ 66.795404][ T11] veth0_macvtap: left promiscuous mode [ 66.801599][ T11] veth1_vlan: left promiscuous mode [ 66.806984][ T11] veth0_vlan: left promiscuous mode [ 66.838087][ T29] audit: type=1400 audit(1739626206.088:661): avc: denied { bind } for pid=5003 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.857334][ T29] audit: type=1400 audit(1739626206.088:662): avc: denied { name_bind } for pid=5003 comm="syz.3.403" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 66.878964][ T29] audit: type=1400 audit(1739626206.088:663): avc: denied { node_bind } for pid=5003 comm="syz.3.403" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 66.944633][ T29] audit: type=1400 audit(1739626206.188:664): avc: denied { nlmsg_write } for pid=5014 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 66.965236][ T29] audit: type=1400 audit(1739626206.188:665): avc: denied { nlmsg_read } for pid=5014 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 66.985688][ T29] audit: type=1400 audit(1739626206.188:666): avc: denied { audit_write } for pid=5014 comm="syz.4.405" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.007017][ T11] team0 (unregistering): Port device team_slave_1 removed [ 67.007735][ T5017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.022901][ T5017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.030832][ T11] team0 (unregistering): Port device team_slave_0 removed [ 67.073250][ T5002] netlink: 'syz.0.402': attribute type 12 has an invalid length. [ 67.089570][ T29] audit: type=1400 audit(1739626206.338:667): avc: denied { watch watch_reads } for pid=4989 comm="syz.5.401" path="/proc/92" dev="proc" ino=8641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 67.123256][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 67.281643][ T4959] chnl_net:caif_netlink_parms(): no params data found [ 67.314992][ T5030] loop4: detected capacity change from 0 to 4096 [ 67.322138][ T5030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.348971][ T5030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.420658][ T4959] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.427794][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.437196][ T4959] bridge_slave_0: entered allmulticast mode [ 67.443854][ T4959] bridge_slave_0: entered promiscuous mode [ 67.451660][ T4959] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.458822][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.465243][ T29] audit: type=1400 audit(1739626206.708:668): avc: denied { append } for pid=5029 comm="syz.4.409" path="/85/file1/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.466513][ T4959] bridge_slave_1: entered allmulticast mode [ 67.496667][ T4959] bridge_slave_1: entered promiscuous mode [ 67.628310][ T4959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.642169][ T4959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.666546][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.800217][ T4959] team0: Port device team_slave_0 added [ 67.807112][ T4959] team0: Port device team_slave_1 added [ 67.861441][ T4959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.868504][ T4959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.894510][ T4959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.969106][ T4959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.976110][ T4959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.002137][ T4959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.070937][ T4959] hsr_slave_0: entered promiscuous mode [ 68.080110][ T4959] hsr_slave_1: entered promiscuous mode [ 68.088689][ T4959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.096623][ T4959] Cannot create hsr debugfs directory [ 68.411661][ T5093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.496247][ T5093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.511138][ T5098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.532000][ T5098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.560991][ T5105] loop5: detected capacity change from 0 to 512 [ 68.569616][ T5105] EXT4-fs (loop5): filesystem is read-only [ 68.585340][ T5105] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 68.617197][ T5105] EXT4-fs (loop5): filesystem is read-only [ 68.623067][ T5105] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.628635][ T4959] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 68.638291][ T5105] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.423: bg 0: block 64: padding at end of block bitmap is not set [ 68.654200][ T5105] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 68.663139][ T5105] EXT4-fs (loop5): 1 orphan inode deleted [ 68.669215][ T5105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.669532][ T4959] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 68.690887][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.699319][ T4959] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 68.712594][ T4959] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 68.767407][ T5123] loop5: detected capacity change from 0 to 512 [ 68.773347][ T4959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.789561][ T5123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.791162][ T4959] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.811688][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.818763][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.825250][ T5123] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.838368][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.845695][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.862671][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.962286][ T4959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.003615][ T5158] loop4: detected capacity change from 0 to 2048 [ 69.015018][ T5151] bridge_slave_0: left allmulticast mode [ 69.020876][ T5151] bridge_slave_0: left promiscuous mode [ 69.026642][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.067593][ T5151] bridge_slave_1: left allmulticast mode [ 69.073355][ T5151] bridge_slave_1: left promiscuous mode [ 69.079079][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.118491][ T5151] bond0: (slave bond_slave_0): Releasing backup interface [ 69.128779][ T5151] bond0: (slave bond_slave_1): Releasing backup interface [ 69.182874][ T5151] team0: Port device team_slave_0 removed [ 69.199497][ T5176] random: crng reseeded on system resumption [ 69.554218][ T5151] team0: Port device team_slave_1 removed [ 69.566096][ T5151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.573533][ T5151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.595417][ T5151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.602919][ T5151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.848686][ T5202] loop5: detected capacity change from 0 to 512 [ 69.867550][ T4959] veth0_vlan: entered promiscuous mode [ 69.876989][ T5202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.882875][ T4959] veth1_vlan: entered promiscuous mode [ 69.903769][ T4959] veth0_macvtap: entered promiscuous mode [ 69.911445][ T5202] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.911824][ T4959] veth1_macvtap: entered promiscuous mode [ 69.948746][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.959265][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.969086][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.979602][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.989501][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.999956][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.014195][ T4959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.024461][ T5211] netlink: 'syz.3.436': attribute type 12 has an invalid length. [ 70.036585][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.047095][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.056942][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.067400][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.077432][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.087927][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.100901][ T4959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.111683][ T4959] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.120587][ T4959] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.129301][ T4959] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.138064][ T4959] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.152672][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.187453][ T5217] loop3: detected capacity change from 0 to 2048 [ 70.235704][ T5217] loop3: p1 < > p4 [ 70.241164][ T5217] loop3: p4 size 8388608 extends beyond EOD, truncated [ 70.389689][ T5227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.398906][ T5227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.532084][ T3000] loop3: p1 < > p4 [ 70.539124][ T3000] loop3: p4 size 8388608 extends beyond EOD, truncated [ 70.703408][ T3676] udevd[3676]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 70.714984][ T3684] udevd[3684]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 70.864865][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 70.864880][ T29] audit: type=1400 audit(1739626210.108:690): avc: denied { bind } for pid=5248 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.263937][ T29] audit: type=1400 audit(1739626210.508:691): avc: denied { create } for pid=5269 comm="syz.6.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.424634][ T5280] netlink: 'syz.5.451': attribute type 1 has an invalid length. [ 71.432366][ T5280] netlink: 224 bytes leftover after parsing attributes in process `syz.5.451'. [ 71.434896][ T29] audit: type=1400 audit(1739626210.668:692): avc: denied { write } for pid=5282 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 71.678020][ T29] audit: type=1400 audit(1739626210.928:693): avc: denied { read } for pid=5299 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.752279][ T5312] loop4: detected capacity change from 0 to 1024 [ 71.889441][ T5312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.016637][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.421412][ T5361] loop3: detected capacity change from 0 to 1024 [ 72.434566][ T5361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.475348][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.507335][ T5368] loop6: detected capacity change from 0 to 512 [ 72.514788][ T5368] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 72.589681][ T5368] EXT4-fs (loop6): 1 truncate cleaned up [ 72.595758][ T5368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.799794][ T5371] syz.0.485 (5371) used greatest stack depth: 9440 bytes left [ 72.829103][ T5381] loop0: detected capacity change from 0 to 2048 [ 72.847894][ T5381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.176702][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.323623][ T5403] loop6: detected capacity change from 0 to 1024 [ 73.347595][ T5403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.415508][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.743062][ T29] audit: type=1400 audit(1739626212.988:694): avc: denied { mounton } for pid=5431 comm="syz.3.508" path="/114/bus" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.107277][ T5446] tipc: Started in network mode [ 74.112190][ T5446] tipc: Node identity 3, cluster identity 4711 [ 74.118441][ T5446] tipc: Node number set to 3 [ 74.128483][ T29] audit: type=1400 audit(1739626213.358:695): avc: denied { bind } for pid=5445 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.163915][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.177915][ T29] audit: type=1400 audit(1739626213.408:696): avc: denied { listen } for pid=5450 comm="syz.3.515" lport=40953 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.200764][ T29] audit: type=1400 audit(1739626213.428:697): avc: denied { accept } for pid=5450 comm="syz.3.515" lport=40953 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.204504][ T5456] loop3: detected capacity change from 0 to 512 [ 74.223606][ T29] audit: type=1400 audit(1739626213.428:698): avc: denied { getopt } for pid=5450 comm="syz.3.515" lport=40953 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 74.255320][ T29] audit: type=1400 audit(1739626213.498:699): avc: denied { connect } for pid=5447 comm="syz.4.514" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.277899][ T5456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.290648][ T5456] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.317965][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.345532][ T5461] loop0: detected capacity change from 0 to 1024 [ 74.377908][ T5461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.396395][ T5461] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.452797][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.555076][ T5486] loop0: detected capacity change from 0 to 512 [ 74.609257][ T5487] loop4: detected capacity change from 0 to 1024 [ 74.641356][ T5497] vlan2: entered allmulticast mode [ 74.646616][ T5497] bond0: entered allmulticast mode [ 74.651745][ T5497] bond_slave_0: entered allmulticast mode [ 74.657517][ T5497] bond_slave_1: entered allmulticast mode [ 74.666750][ T5497] bridge0: port 3(vlan2) entered blocking state [ 74.673168][ T5497] bridge0: port 3(vlan2) entered disabled state [ 74.694088][ T5486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.705934][ T5497] vlan2: entered promiscuous mode [ 74.711689][ T5497] bond0: entered promiscuous mode [ 74.712016][ T5487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.716741][ T5497] bond_slave_0: entered promiscuous mode [ 74.732349][ T5486] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.734438][ T5497] bond_slave_1: entered promiscuous mode [ 74.744890][ T5487] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.751271][ T5497] bridge0: port 3(vlan2) entered blocking state [ 74.767227][ T5497] bridge0: port 3(vlan2) entered forwarding state [ 74.797528][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.813180][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.934308][ T5535] gtp0: entered promiscuous mode [ 74.978806][ T5541] loop0: detected capacity change from 0 to 512 [ 75.008310][ T5541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.024491][ T5541] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.058633][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.188137][ T5575] loop3: detected capacity change from 0 to 512 [ 75.219577][ T5575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.253998][ T5575] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.308961][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.481302][ T5616] loop6: detected capacity change from 0 to 1024 [ 75.503174][ T5616] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.548935][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.709118][ T5642] loop6: detected capacity change from 0 to 1024 [ 75.737740][ T5642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.764974][ T5652] loop0: detected capacity change from 0 to 1024 [ 75.804924][ T5652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.821639][ T5652] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.842635][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.878178][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.896058][ T5664] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.943986][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 75.943999][ T29] audit: type=1400 audit(1739626215.188:708): avc: denied { bind } for pid=5662 comm="syz.5.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.982591][ T5664] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.026937][ T5685] loop6: detected capacity change from 0 to 1024 [ 76.057766][ T5685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.074920][ T5692] loop4: detected capacity change from 0 to 1024 [ 76.081974][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.098028][ T5664] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.110111][ T5692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.127319][ T5692] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.157802][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.177692][ T5664] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.245426][ T5664] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.260632][ T5664] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.283284][ T5717] loop4: detected capacity change from 0 to 1024 [ 76.283370][ T5664] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.291941][ T5717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.342943][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.366542][ T5723] loop3: detected capacity change from 0 to 1024 [ 76.381622][ T5664] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.417942][ T5723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.437423][ T5723] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.452899][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 76.478906][ T5735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.486526][ T5735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.495900][ T5735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.503386][ T5735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.511229][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.558366][ T5745] loop5: detected capacity change from 0 to 1024 [ 76.581082][ T5745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.603546][ T29] audit: type=1400 audit(1739626215.848:709): avc: denied { setattr } for pid=5744 comm="syz.5.638" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.659836][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.662212][ T5759] loop6: detected capacity change from 0 to 512 [ 76.696696][ T5759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.721335][ T5759] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.755994][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.809837][ T5780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 76.829582][ T5780] bridge_slave_1: left allmulticast mode [ 76.835594][ T5780] bridge_slave_1: left promiscuous mode [ 76.841404][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.854943][ T5780] bridge_slave_0: left allmulticast mode [ 76.860851][ T5780] bridge_slave_0: left promiscuous mode [ 76.866631][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.885882][ T29] audit: type=1400 audit(1739626216.128:710): avc: denied { name_bind } for pid=5792 comm="syz.5.659" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 77.131027][ T29] audit: type=1400 audit(1739626216.378:711): avc: denied { getopt } for pid=5833 comm="syz.6.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.156043][ T5834] netlink: 20 bytes leftover after parsing attributes in process `syz.6.680'. [ 77.213180][ T29] audit: type=1400 audit(1739626216.458:712): avc: denied { write } for pid=5847 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.354355][ T5865] vlan2: entered allmulticast mode [ 77.359632][ T5865] bond0: entered allmulticast mode [ 77.529513][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.708'. [ 77.556384][ T5899] vlan2: entered allmulticast mode [ 77.561535][ T5899] bond0: entered allmulticast mode [ 77.566680][ T5899] bond_slave_0: entered allmulticast mode [ 77.572485][ T5899] bond_slave_1: entered allmulticast mode [ 77.743489][ T5924] loop3: detected capacity change from 0 to 512 [ 77.906914][ T5924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.962337][ T5924] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.090008][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.199709][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 78.213299][ T5953] vlan2: left promiscuous mode [ 78.218157][ T5953] bond0: left promiscuous mode [ 78.222944][ T5953] bond_slave_0: left promiscuous mode [ 78.228485][ T5953] bond_slave_1: left promiscuous mode [ 78.234908][ T5953] bridge0: port 3(vlan2) entered disabled state [ 78.247374][ T5953] bridge_slave_1: left allmulticast mode [ 78.253065][ T5953] bridge_slave_1: left promiscuous mode [ 78.258856][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.267094][ T5953] bridge_slave_0: left allmulticast mode [ 78.272763][ T5953] bridge_slave_0: left promiscuous mode [ 78.278515][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.764956][ T6129] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=251 sclass=netlink_audit_socket pid=6129 comm=syz.0.805 [ 80.056451][ T6161] tipc: Started in network mode [ 80.061349][ T6161] tipc: Node identity 869b27d8837, cluster identity 4711 [ 80.068482][ T6161] tipc: Enabled bearer , priority 0 [ 80.113132][ T6161] syzkaller0: entered promiscuous mode [ 80.118850][ T6161] syzkaller0: entered allmulticast mode [ 80.131940][ T6161] tipc: Resetting bearer [ 80.146076][ T6160] tipc: Resetting bearer [ 80.165764][ T6160] tipc: Disabling bearer [ 80.745028][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 80.765260][ T6243] bridge_slave_1: left allmulticast mode [ 80.770945][ T6243] bridge_slave_1: left promiscuous mode [ 80.776765][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.786215][ T6243] bridge_slave_0: left allmulticast mode [ 80.791937][ T6243] bridge_slave_0: left promiscuous mode [ 80.797972][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.895077][ T29] audit: type=1400 audit(1739626220.138:713): avc: denied { setopt } for pid=6253 comm="syz.5.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.534861][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.884'. [ 81.677647][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 81.699058][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'. [ 81.728708][ T6382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.742406][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 81.769932][ T6382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.827879][ T6382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.950647][ T29] audit: type=1400 audit(1739626221.198:714): avc: denied { getopt } for pid=6419 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 81.976686][ T6382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.191382][ T6382] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.267076][ T6382] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.335248][ T6382] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.347109][ T6382] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.814547][ T29] audit: type=1400 audit(1739626222.058:715): avc: denied { read } for pid=6525 comm="syz.3.948" path="socket:[14591]" dev="sockfs" ino=14591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.911140][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 82.933613][ T29] audit: type=1400 audit(1739626222.178:716): avc: denied { write } for pid=6547 comm="syz.5.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.043596][ T29] audit: type=1400 audit(1739626222.268:717): avc: denied { setopt } for pid=6547 comm="syz.5.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.067594][ T6561] syzkaller1: entered promiscuous mode [ 83.073115][ T6561] syzkaller1: entered allmulticast mode [ 83.150438][ T6558] pim6reg: entered allmulticast mode [ 83.157509][ T6558] pim6reg: left allmulticast mode [ 83.688074][ T6618] syzkaller1: entered promiscuous mode [ 83.693698][ T6618] syzkaller1: entered allmulticast mode [ 84.054121][ T6663] pim6reg: entered allmulticast mode [ 84.076689][ T6663] pim6reg: left allmulticast mode [ 84.584006][ T6723] pim6reg: entered allmulticast mode [ 84.608801][ T6723] pim6reg: left allmulticast mode [ 85.118605][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 85.128969][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 85.300241][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1064'. [ 85.312762][ T6834] bridge_slave_1: left allmulticast mode [ 85.318509][ T6834] bridge_slave_1: left promiscuous mode [ 85.324334][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.341614][ T6834] bridge_slave_0: left allmulticast mode [ 85.347371][ T6834] bridge_slave_0: left promiscuous mode [ 85.353118][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.361090][ T6836] loop0: detected capacity change from 0 to 512 [ 85.388809][ T6836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.403798][ T6836] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.490536][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.667507][ T6870] xt_NFQUEUE: number of total queues is 0 [ 85.699445][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 86.400071][ T6901] pim6reg: entered allmulticast mode [ 86.406309][ T6901] pim6reg: left allmulticast mode [ 86.590659][ T29] audit: type=1400 audit(1739626225.838:718): avc: denied { bind } for pid=6913 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 86.615057][ T29] audit: type=1400 audit(1739626225.838:719): avc: denied { bind } for pid=6913 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.635183][ T29] audit: type=1400 audit(1739626225.838:720): avc: denied { create } for pid=6913 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 86.655774][ T29] audit: type=1400 audit(1739626225.838:721): avc: denied { bind } for pid=6913 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 86.675822][ T29] audit: type=1400 audit(1739626225.838:722): avc: denied { create } for pid=6913 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 86.696638][ T29] audit: type=1400 audit(1739626225.838:723): avc: denied { bind } for pid=6913 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 86.804730][ T6932] loop5: detected capacity change from 0 to 4096 [ 86.811941][ T6932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.831312][ T6932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.899276][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.909607][ T6936] loop3: detected capacity change from 0 to 2048 [ 86.929241][ T6936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.843315][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1123'. [ 87.852954][ T6979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.860467][ T6979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.892015][ T6979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.899534][ T6979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.938013][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.970965][ T6986] loop3: detected capacity change from 0 to 1024 [ 87.978685][ T6986] EXT4-fs: Ignoring removed nobh option [ 87.984278][ T6986] EXT4-fs: Ignoring removed bh option [ 88.009417][ T6986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.068514][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.998452][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1161'. [ 89.063029][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 89.063199][ T29] audit: type=1400 audit(1739626228.308:725): avc: denied { recv } for pid=4959 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.1.142 dest=54948 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 89.133430][ T7084] loop4: detected capacity change from 0 to 2048 [ 89.156838][ T7084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.218864][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1173'. [ 89.291410][ T7101] loop3: detected capacity change from 0 to 1024 [ 89.298275][ T7101] EXT4-fs: Ignoring removed nobh option [ 89.303927][ T7101] EXT4-fs: Ignoring removed bh option [ 89.331892][ T7101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.370318][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.482181][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1184'. [ 89.668424][ T7135] loop5: detected capacity change from 0 to 1024 [ 89.676278][ T7135] EXT4-fs: Ignoring removed nobh option [ 89.681946][ T7135] EXT4-fs: Ignoring removed bh option [ 89.707333][ T7135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.838326][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 89.848042][ T7147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.855606][ T7147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.865394][ T7147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.872894][ T7147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.945556][ T29] audit: type=1400 audit(1739626229.138:726): avc: denied { execmem } for pid=7150 comm="syz.5.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 90.252392][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 90.451343][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'. [ 90.684666][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1222'. [ 90.896901][ T7218] vlan3: entered allmulticast mode [ 90.902062][ T7218] bond0: entered allmulticast mode [ 90.907358][ T7218] bond_slave_0: entered allmulticast mode [ 90.913127][ T7218] bond_slave_1: entered allmulticast mode [ 91.595564][ T7244] xt_NFQUEUE: number of total queues is 0 [ 92.393614][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1251'. [ 93.143905][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1262'. [ 93.582580][ T7343] xt_NFQUEUE: number of total queues is 0 [ 94.512596][ T7376] xt_NFQUEUE: number of total queues is 0 [ 94.635187][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'. [ 95.286511][ T7403] loop0: detected capacity change from 0 to 512 [ 95.347930][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1304'. [ 95.370072][ T7403] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.636128][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1314'. [ 95.712146][ T7440] xt_NFQUEUE: number of total queues is 0 [ 96.019155][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1316'. [ 96.051135][ T7448] loop5: detected capacity change from 0 to 2048 [ 96.068557][ T7448] EXT4-fs mount: 4 callbacks suppressed [ 96.068642][ T7448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.096710][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.177962][ T7458] loop5: detected capacity change from 0 to 512 [ 96.196956][ T7458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.209694][ T7458] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.256912][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.841977][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1333'. [ 97.064552][ T7514] xt_NFQUEUE: number of total queues is 0 [ 97.339630][ T7520] loop5: detected capacity change from 0 to 512 [ 97.487692][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 97.546655][ T7520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.577361][ T7520] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.636014][ T7541] loop3: detected capacity change from 0 to 2048 [ 97.653359][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.663224][ T7541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.686592][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.859040][ T7569] loop6: detected capacity change from 0 to 512 [ 97.878284][ T7569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.891041][ T7569] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.969091][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.978281][ T7573] loop3: detected capacity change from 0 to 2048 [ 97.997702][ T7573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.010607][ T7575] loop6: detected capacity change from 0 to 512 [ 98.022844][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.037744][ T7575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.050781][ T7575] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.079972][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 98.117641][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.279092][ T7593] xt_NFQUEUE: number of total queues is 0 [ 98.866362][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1379'. [ 99.087182][ T7647] pim6reg: entered allmulticast mode [ 99.096055][ T7647] pim6reg: left allmulticast mode [ 99.350548][ T7666] xt_NFQUEUE: number of total queues is 0 [ 100.282431][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1417'. [ 101.151122][ T7750] xt_NFQUEUE: number of total queues is 0 [ 101.349292][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'. [ 102.820545][ T7793] xt_NFQUEUE: number of total queues is 0 [ 103.348919][ T7810] loop6: detected capacity change from 0 to 512 [ 103.426058][ T7810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.444588][ T7824] xt_NFQUEUE: number of total queues is 0 [ 103.566018][ T7810] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.978469][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.037522][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1459'. [ 104.051398][ T7851] pim6reg: entered allmulticast mode [ 104.059493][ T7851] pim6reg: left allmulticast mode [ 104.444628][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1471'. [ 104.662250][ T7887] xt_NFQUEUE: number of total queues is 0 [ 105.245324][ T7897] loop6: detected capacity change from 0 to 512 [ 105.321502][ T7897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.359385][ T7897] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.433003][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1482'. [ 105.477713][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.578382][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1490'. [ 105.587538][ T7925] loop4: detected capacity change from 0 to 2048 [ 105.607743][ T7925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.632237][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.675379][ T7938] loop4: detected capacity change from 0 to 512 [ 105.687626][ T7938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.700715][ T7938] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.758912][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.768275][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1497'. [ 105.820673][ T7955] loop5: detected capacity change from 0 to 512 [ 105.838730][ T7955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.851712][ T7955] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.882778][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.016556][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1509'. [ 106.115428][ T7984] xt_NFQUEUE: number of total queues is 0 [ 106.418451][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1522'. [ 107.459146][ T8044] xt_NFQUEUE: number of total queues is 0 [ 107.707229][ T29] audit: type=1400 audit(1739626246.948:727): avc: denied { create } for pid=8050 comm="syz.3.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.739933][ T8049] pim6reg: entered allmulticast mode [ 107.787511][ T8054] pim6reg: left allmulticast mode [ 107.803593][ T29] audit: type=1400 audit(1739626246.978:728): avc: denied { write } for pid=8050 comm="syz.3.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.943323][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 108.124946][ T8081] xt_NFQUEUE: number of total queues is 0 [ 109.047578][ T8119] pim6reg: entered allmulticast mode [ 109.093015][ T8119] pim6reg: left allmulticast mode [ 109.300044][ T8136] xt_NFQUEUE: number of total queues is 0 [ 109.446329][ T8140] loop3: detected capacity change from 0 to 512 [ 109.518691][ T29] audit: type=1400 audit(1739626248.748:729): avc: denied { nlmsg_write } for pid=8141 comm="syz.4.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.560598][ T8140] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.659556][ T8140] EXT4-fs (loop3): failed to initialize system zone (-117) [ 109.700126][ T8140] EXT4-fs (loop3): mount failed [ 109.905924][ T8150] loop3: detected capacity change from 0 to 512 [ 109.926886][ T8150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.939663][ T8150] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.021747][ T8157] xt_NFQUEUE: number of total queues is 0 [ 110.037962][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.368948][ T8170] xt_NFQUEUE: number of total queues is 0 [ 110.943648][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 111.184374][ T8215] loop4: detected capacity change from 0 to 512 [ 111.199216][ T8215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.216891][ T8215] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.248216][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1601'. [ 111.308259][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.540138][ T8230] xt_NFQUEUE: number of total queues is 0 [ 112.065741][ T8248] loop3: detected capacity change from 0 to 512 [ 112.086745][ T8248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.099523][ T8248] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.114567][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'. [ 112.124182][ T8258] loop6: detected capacity change from 0 to 512 [ 112.149549][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.170354][ T8258] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.195800][ T8258] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.364325][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.383228][ T8273] pim6reg: entered allmulticast mode [ 112.393556][ T8286] loop3: detected capacity change from 0 to 512 [ 112.420078][ T8286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.441001][ T8286] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.452018][ T8273] pim6reg: left allmulticast mode [ 112.537005][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.240177][ T8306] xt_NFQUEUE: number of total queues is 0 [ 113.913356][ T8325] loop5: detected capacity change from 0 to 512 [ 113.966909][ T8325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.995662][ T8325] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.167538][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.183085][ T8339] loop4: detected capacity change from 0 to 512 [ 114.196893][ T8340] xt_NFQUEUE: number of total queues is 0 [ 114.669852][ T8339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.737663][ T8339] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.857410][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.136135][ T8364] loop5: detected capacity change from 0 to 512 [ 115.282863][ T8364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.295817][ T8364] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.357992][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.374658][ T8379] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1657'. [ 115.436597][ T8382] loop5: detected capacity change from 0 to 512 [ 115.444153][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1659'. [ 115.617473][ T8382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.630701][ T8382] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.848695][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.108393][ T8399] loop4: detected capacity change from 0 to 512 [ 116.228753][ T8399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.256209][ T8399] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.293731][ T8410] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1669'. [ 116.321081][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.634438][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'. [ 116.749902][ T8443] loop3: detected capacity change from 0 to 512 [ 116.827801][ T8443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.841204][ T8443] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.869774][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.039307][ T8453] xt_NFQUEUE: number of total queues is 0 [ 117.214723][ T8457] loop5: detected capacity change from 0 to 512 [ 117.229280][ T8455] xt_NFQUEUE: number of total queues is 0 [ 117.287409][ T8457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.367503][ T8457] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.742637][ T8465] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1688'. [ 117.849550][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.171288][ T8481] loop4: detected capacity change from 0 to 512 [ 118.195296][ T8481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.214417][ T8481] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.390324][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.667216][ T8501] loop3: detected capacity change from 0 to 512 [ 118.697129][ T8501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.738203][ T8501] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.880956][ T8510] loop0: detected capacity change from 0 to 512 [ 118.919842][ T8510] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.957325][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.966640][ T8510] EXT4-fs (loop0): failed to initialize system zone (-117) [ 118.982892][ T8510] EXT4-fs (loop0): mount failed [ 119.072014][ T8521] loop0: detected capacity change from 0 to 512 [ 119.092966][ T8521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.134783][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1713'. [ 119.147218][ T29] audit: type=1400 audit(1739626258.378:730): avc: denied { nlmsg_read } for pid=8528 comm="syz.6.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.186115][ T8521] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.220517][ T8537] loop5: detected capacity change from 0 to 512 [ 119.245740][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.256773][ T8537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.269612][ T8537] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.289064][ T8544] pim6reg: entered allmulticast mode [ 119.297365][ T8544] pim6reg: left allmulticast mode [ 119.322276][ T8548] loop0: detected capacity change from 0 to 512 [ 119.330627][ T8548] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.331212][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.358655][ T8548] EXT4-fs (loop0): failed to initialize system zone (-117) [ 119.366205][ T8548] EXT4-fs (loop0): mount failed [ 119.398696][ T8554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.407504][ T8554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.416482][ T8554] xt_hashlimit: max too large, truncated to 1048576 [ 119.512153][ T8566] loop5: detected capacity change from 0 to 512 [ 119.547625][ T8572] loop4: detected capacity change from 0 to 512 [ 119.576343][ T8566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.586041][ T8572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.589687][ T8566] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.601922][ T8572] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.632390][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.670286][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.716343][ T8583] loop4: detected capacity change from 0 to 512 [ 119.723196][ T8583] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.744431][ T8583] EXT4-fs (loop4): failed to initialize system zone (-117) [ 119.752039][ T8583] EXT4-fs (loop4): mount failed [ 119.944230][ T8600] pim6reg: entered allmulticast mode [ 119.954609][ T8600] pim6reg: left allmulticast mode [ 120.185476][ T8618] loop5: detected capacity change from 0 to 512 [ 120.210584][ T8618] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 120.222375][ T8618] EXT4-fs (loop5): failed to initialize system zone (-117) [ 120.265423][ T8618] EXT4-fs (loop5): mount failed [ 120.281211][ T8624] xt_NFQUEUE: number of total queues is 0 [ 120.838940][ T8638] xt_NFQUEUE: number of total queues is 0 [ 120.904148][ T8661] loop5: detected capacity change from 0 to 512 [ 120.913707][ T8661] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 121.005035][ T8661] EXT4-fs (loop5): failed to initialize system zone (-117) [ 121.013910][ T8661] EXT4-fs (loop5): mount failed [ 121.111830][ T8683] xt_hashlimit: max too large, truncated to 1048576 [ 121.391752][ T8696] xt_NFQUEUE: number of total queues is 0 [ 121.413404][ T8695] pim6reg: entered allmulticast mode [ 121.587552][ T8695] pim6reg: left allmulticast mode [ 121.728502][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 121.910972][ T8709] loop4: detected capacity change from 0 to 512 [ 121.920819][ T8709] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.956774][ T8709] EXT4-fs (loop4): failed to initialize system zone (-117) [ 121.977713][ T8709] EXT4-fs (loop4): mount failed [ 122.065449][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1785'. [ 122.143390][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1789'. [ 122.247159][ T8739] pim6reg: entered allmulticast mode [ 122.264716][ T8739] pim6reg: left allmulticast mode [ 122.307839][ T8743] xt_hashlimit: max too large, truncated to 1048576 [ 122.422822][ T8749] xt_NFQUEUE: number of total queues is 0 [ 122.550857][ T8756] loop3: detected capacity change from 0 to 512 [ 122.560248][ T8756] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.635525][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1799'. [ 122.651515][ T8761] xt_NFQUEUE: number of total queues is 0 [ 122.753169][ T8756] EXT4-fs (loop3): failed to initialize system zone (-117) [ 122.788553][ T8756] EXT4-fs (loop3): mount failed [ 122.861537][ T29] audit: type=1400 audit(1739626262.108:731): avc: denied { read } for pid=8767 comm="syz.5.1802" lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.152372][ T8775] xt_hashlimit: max too large, truncated to 1048576 [ 123.415777][ T8787] pim6reg: entered allmulticast mode [ 123.428273][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 123.447616][ T8787] pim6reg: left allmulticast mode [ 123.505652][ T8797] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 123.558815][ T8803] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1813'. [ 123.615825][ T8797] netlink: 'syz.4.1813': attribute type 9 has an invalid length. [ 123.654051][ T8808] xt_hashlimit: max too large, truncated to 1048576 [ 124.319426][ T8803] batadv_slave_1: entered promiscuous mode [ 124.536653][ T29] audit: type=1326 audit(1739626263.788:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.4.1813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc65ce8cde9 code=0x0 [ 124.726158][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'. [ 124.890910][ T8794] batadv_slave_1: left promiscuous mode [ 124.972751][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1826'. [ 125.096929][ T8843] xt_NFQUEUE: number of total queues is 0 [ 125.218193][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1834'. [ 126.117862][ T8876] xt_NFQUEUE: number of total queues is 0 [ 126.382213][ T8879] loop5: detected capacity change from 0 to 512 [ 126.410906][ T8879] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 126.547416][ T8879] EXT4-fs (loop5): failed to initialize system zone (-117) [ 126.584170][ T8879] EXT4-fs (loop5): mount failed [ 126.826741][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1852'. [ 127.654348][ T8922] loop0: detected capacity change from 0 to 512 [ 127.739544][ T8922] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 127.925716][ T8922] EXT4-fs (loop0): failed to initialize system zone (-117) [ 127.936959][ T8922] EXT4-fs (loop0): mount failed [ 128.160813][ T8948] xt_NFQUEUE: number of total queues is 0 [ 128.251036][ T8935] pim6reg: entered allmulticast mode [ 128.274332][ T8935] pim6reg: left allmulticast mode [ 128.874394][ T8971] xt_NFQUEUE: number of total queues is 0 [ 129.508742][ T8979] loop0: detected capacity change from 0 to 512 [ 129.581844][ T8979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.600219][ T8979] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.847514][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.877403][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1885'. [ 130.086529][ T9011] xt_NFQUEUE: number of total queues is 0 [ 130.129884][ T9012] pim6reg: entered allmulticast mode [ 130.142743][ T9012] pim6reg: left allmulticast mode [ 130.811609][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1890'. [ 131.065528][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1893'. [ 131.287458][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1898'. [ 131.339205][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1903'. [ 131.367670][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1906'. [ 131.420675][ T9063] xt_NFQUEUE: number of total queues is 0 [ 132.396484][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1913'. [ 132.449523][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1917'. [ 132.750883][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1927'. [ 133.040386][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1930'. [ 133.954967][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 134.282016][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1948'. [ 134.315897][ T9188] xt_NFQUEUE: number of total queues is 0 [ 134.444817][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1953'. [ 134.711974][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1961'. [ 134.871435][ T9239] loop6: detected capacity change from 0 to 512 [ 134.905540][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 134.919433][ T9239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.955903][ T9239] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.011779][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.172540][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 135.463324][ T9279] loop0: detected capacity change from 0 to 512 [ 135.503931][ T9279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.598354][ T9279] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.629562][ T9284] xt_NFQUEUE: number of total queues is 0 [ 135.663861][ T9285] xt_NFQUEUE: number of total queues is 0 [ 135.677003][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.277499][ T9301] xt_NFQUEUE: number of total queues is 0 [ 136.841070][ T9321] loop5: detected capacity change from 0 to 512 [ 136.857375][ T9321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.870649][ T9321] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.040796][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.262732][ T9333] xt_NFQUEUE: number of total queues is 0 [ 137.573566][ T9346] __nla_validate_parse: 2 callbacks suppressed [ 137.573582][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 137.646664][ T9357] xt_NFQUEUE: number of total queues is 0 [ 138.036617][ T9365] xt_NFQUEUE: number of total queues is 0 [ 138.675230][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2015'. [ 139.133564][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2020'. [ 139.200991][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2027'. [ 139.346100][ T9424] xt_NFQUEUE: number of total queues is 0 [ 139.400430][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2038'. [ 139.513058][ T9446] pim6reg: entered allmulticast mode [ 139.519187][ T9446] pim6reg: left allmulticast mode [ 139.571110][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2043'. [ 139.701406][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'. [ 140.352010][ T9495] pim6reg: entered allmulticast mode [ 140.366805][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2062'. [ 140.376071][ T9495] pim6reg: left allmulticast mode [ 140.403850][ T9515] loop5: detected capacity change from 0 to 512 [ 140.427489][ T9515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.440075][ T9515] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.461916][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.599489][ T9533] xt_NFQUEUE: number of total queues is 0 [ 140.670239][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2077'. [ 140.687659][ T9552] loop4: detected capacity change from 0 to 512 [ 140.730654][ T9552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.743782][ T9560] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 140.753461][ T9552] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.776831][ T9560] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2081'. [ 140.778897][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.803276][ T9560] netlink: 'syz.3.2081': attribute type 9 has an invalid length. [ 140.854560][ T9568] xt_hashlimit: max too large, truncated to 1048576 [ 140.936558][ T9571] batadv_slave_1: entered promiscuous mode [ 140.954844][ T29] audit: type=1326 audit(1739626280.198:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.3.2081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84dce0cde9 code=0x0 [ 141.570506][ T9557] batadv_slave_1: left promiscuous mode [ 141.613184][ T9599] loop6: detected capacity change from 0 to 512 [ 141.687537][ T9599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.731496][ T9599] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.819378][ T9606] xt_hashlimit: max too large, truncated to 1048576 [ 141.882159][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.082600][ T9629] pim6reg: entered allmulticast mode [ 142.092696][ T9625] xt_NFQUEUE: number of total queues is 0 [ 142.099717][ T9629] pim6reg: left allmulticast mode [ 142.241282][ T9638] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 142.252743][ T9638] netlink: 'syz.4.2111': attribute type 9 has an invalid length. [ 142.489456][ T9647] loop6: detected capacity change from 0 to 512 [ 142.530816][ T9644] xt_hashlimit: max too large, truncated to 1048576 [ 142.561386][ T9647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.592353][ T9647] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.634801][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.722462][ T9659] __nla_validate_parse: 3 callbacks suppressed [ 142.722507][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'. [ 143.129580][ T9684] loop0: detected capacity change from 0 to 512 [ 143.157063][ T9684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.169682][ T9684] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.232335][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.144390][ T9717] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2139'. [ 144.353551][ T9740] xt_NFQUEUE: number of total queues is 0 [ 145.179323][ T9764] xt_NFQUEUE: number of total queues is 0 [ 145.304735][ T9767] xt_hashlimit: max too large, truncated to 1048576 [ 145.991688][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2162'. [ 146.002008][ T29] audit: type=1400 audit(1739626285.258:734): avc: denied { watch_reads } for pid=9792 comm="syz.5.2165" path="/392" dev="tmpfs" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 146.289126][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2179'. [ 147.397828][ T9888] xt_hashlimit: max too large, truncated to 1048576 [ 147.415491][ T9890] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 147.468571][ T9890] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2201'. [ 147.589127][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 147.626368][ T9915] vlan3: entered allmulticast mode [ 147.631612][ T9915] bond0: entered allmulticast mode [ 147.636787][ T9915] bond_slave_0: entered allmulticast mode [ 147.642518][ T9915] bond_slave_1: entered allmulticast mode [ 147.655453][ T9915] bridge0: port 1(vlan3) entered blocking state [ 147.661885][ T9915] bridge0: port 1(vlan3) entered disabled state [ 147.669499][ T9915] bond_slave_0: entered promiscuous mode [ 147.675206][ T9915] bond_slave_1: entered promiscuous mode [ 147.946064][ T9941] xt_NFQUEUE: number of total queues is 0 [ 147.966830][ T9943] xt_hashlimit: max too large, truncated to 1048576 [ 148.000799][ T9945] loop6: detected capacity change from 0 to 1024 [ 148.025992][ T9945] EXT4-fs: Ignoring removed orlov option [ 148.052568][ T9945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.528929][ T9957] xt_NFQUEUE: number of total queues is 0 [ 148.876954][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.098031][ T9970] xt_NFQUEUE: number of total queues is 0 [ 149.343062][ T9996] xt_NFQUEUE: number of total queues is 0 [ 149.373813][ T9989] loop5: detected capacity change from 0 to 1024 [ 149.400597][ T9989] EXT4-fs: Ignoring removed orlov option [ 149.413106][T10000] loop0: detected capacity change from 0 to 512 [ 149.438897][T10000] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.473988][ T9989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.502288][T10000] EXT4-fs (loop0): failed to initialize system zone (-117) [ 149.518387][T10000] EXT4-fs (loop0): mount failed [ 149.914930][T10016] xt_NFQUEUE: number of total queues is 0 [ 150.128337][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.374035][T10042] xt_NFQUEUE: number of total queues is 0 [ 150.832223][T10054] xt_NFQUEUE: number of total queues is 0 [ 151.119149][T10067] xt_NFQUEUE: number of total queues is 0 [ 151.742254][T10118] xt_hashlimit: max too large, truncated to 1048576 [ 151.805874][T10119] xt_NFQUEUE: number of total queues is 0 [ 152.894493][T10132] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 152.937813][T10132] netlink: 'syz.5.2299': attribute type 9 has an invalid length. [ 152.992350][T10131] xt_NFQUEUE: number of total queues is 0 [ 153.188155][T10153] xt_NFQUEUE: number of total queues is 0 [ 153.707221][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2314'. [ 154.031260][T10179] xt_hashlimit: max too large, truncated to 1048576 [ 154.250584][T10194] xt_NFQUEUE: number of total queues is 0 [ 154.457460][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2326'. [ 154.619480][T10209] xt_NFQUEUE: number of total queues is 0 [ 154.863263][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2333'. [ 155.058995][T10228] loop4: detected capacity change from 0 to 512 [ 155.092956][T10228] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.117916][T10228] EXT4-fs (loop4): failed to initialize system zone (-117) [ 155.125586][T10228] EXT4-fs (loop4): mount failed [ 155.130834][T10233] pim6reg: entered allmulticast mode [ 155.150635][T10233] pim6reg: left allmulticast mode [ 155.165495][T10235] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2341'. [ 155.394923][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2357'. [ 155.405024][T10268] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2356'. [ 155.471625][ T29] audit: type=1400 audit(1739626294.708:735): avc: denied { ioctl } for pid=10271 comm="syz.6.2359" path="socket:[29208]" dev="sockfs" ino=29208 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 155.644175][T10289] xt_NFQUEUE: number of total queues is 0 [ 155.655117][T10287] xt_NFQUEUE: number of total queues is 0 [ 155.816862][T10297] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2368'. [ 156.253867][T10316] pim6reg: entered allmulticast mode [ 156.261177][T10316] pim6reg: left allmulticast mode [ 156.331092][T10319] loop0: detected capacity change from 0 to 512 [ 156.398360][T10325] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 156.420058][T10319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.432874][T10319] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.443380][T10325] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2378'. [ 156.443730][T10325] netlink: 'syz.3.2378': attribute type 9 has an invalid length. [ 156.481933][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.556350][T10334] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2381'. [ 156.738796][T10351] pim6reg: entered allmulticast mode [ 156.752916][T10351] pim6reg: left allmulticast mode [ 156.810515][T10359] xt_NFQUEUE: number of total queues is 0 [ 156.909004][T10360] xt_NFQUEUE: number of total queues is 0 [ 157.654800][T10371] loop3: detected capacity change from 0 to 512 [ 157.679900][T10371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.710102][T10369] pim6reg: entered allmulticast mode [ 157.726581][T10369] pim6reg: left allmulticast mode [ 157.745190][T10371] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.939100][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.258980][T10399] xt_NFQUEUE: number of total queues is 0 [ 158.385624][T10405] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 158.460765][T10412] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2409'. [ 158.481255][T10405] netlink: 'syz.3.2408': attribute type 9 has an invalid length. [ 158.963412][T10438] xt_NFQUEUE: number of total queues is 0 [ 158.990367][T10441] __nla_validate_parse: 1 callbacks suppressed [ 158.990394][T10441] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2422'. [ 159.262926][T10450] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 159.286099][T10450] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2426'. [ 159.318467][T10450] netlink: 'syz.0.2426': attribute type 9 has an invalid length. [ 159.873683][T10473] xt_hashlimit: max too large, truncated to 1048576 [ 160.269174][T10499] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 160.293932][T10499] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2447'. [ 160.324164][T10499] netlink: 'syz.0.2447': attribute type 9 has an invalid length. [ 160.487402][T10524] xt_NFQUEUE: number of total queues is 0 [ 160.519795][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2450'. [ 160.989599][T10562] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 161.112397][T10562] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2470'. [ 161.121932][T10562] netlink: 'syz.0.2470': attribute type 9 has an invalid length. [ 161.133754][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2468'. [ 161.510863][T10608] xt_hashlimit: max too large, truncated to 1048576 [ 161.653433][T10622] xt_NFQUEUE: number of total queues is 0 [ 161.945049][T10639] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2502'. [ 162.094151][T10637] xt_NFQUEUE: number of total queues is 0 [ 162.144811][T10641] xt_NFQUEUE: number of total queues is 0 [ 162.825745][T10653] xt_hashlimit: max too large, truncated to 1048576 [ 163.151256][T10675] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2518'. [ 163.170048][T10671] xt_NFQUEUE: number of total queues is 0 [ 163.259207][T10685] xt_hashlimit: max too large, truncated to 1048576 [ 163.353839][T10691] loop0: detected capacity change from 0 to 512 [ 163.366479][T10691] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 163.440479][T10691] EXT4-fs (loop0): failed to initialize system zone (-117) [ 163.449763][T10691] EXT4-fs (loop0): mount failed [ 163.670860][T10710] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2534'. [ 163.735911][T10715] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 163.747065][T10715] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2536'. [ 163.757330][T10715] netlink: 'syz.3.2536': attribute type 9 has an invalid length. [ 163.992313][T10729] loop6: detected capacity change from 0 to 512 [ 164.000023][T10729] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 164.010866][T10729] EXT4-fs (loop6): failed to initialize system zone (-117) [ 164.018358][T10729] EXT4-fs (loop6): mount failed [ 164.108426][T10740] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2547'. [ 164.205437][T10751] loop5: detected capacity change from 0 to 512 [ 164.217048][T10751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.243898][T10751] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.399292][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.615849][T10763] xt_NFQUEUE: number of total queues is 0 [ 165.006914][T10780] xt_hashlimit: max too large, truncated to 1048576 [ 165.392733][T10798] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 165.419476][T10798] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2569'. [ 165.428892][T10798] netlink: 'syz.0.2569': attribute type 9 has an invalid length. [ 165.463761][T10804] loop4: detected capacity change from 0 to 512 [ 165.476711][T10804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.489339][T10804] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.527485][T10808] xt_hashlimit: max too large, truncated to 1048576 [ 165.547770][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.696588][T10834] xt_hashlimit: max too large, truncated to 1048576 [ 165.880100][T10863] xt_hashlimit: max too large, truncated to 1048576 [ 165.998781][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2603'. [ 166.258755][T10896] xt_hashlimit: max too large, truncated to 1048576 [ 166.484993][T10908] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 166.500960][T10908] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2617'. [ 166.510551][T10908] netlink: 'syz.0.2617': attribute type 9 has an invalid length. [ 167.044182][T10926] xt_hashlimit: max too large, truncated to 1048576 [ 167.071593][T10932] loop4: detected capacity change from 0 to 512 [ 167.118975][T10932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.132125][T10932] ext4 filesystem being mounted at /525/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.306484][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.429837][T10964] xt_hashlimit: max too large, truncated to 1048576 [ 167.693121][T10994] xt_hashlimit: max too large, truncated to 1048576 [ 167.945680][T11026] xt_hashlimit: max too large, truncated to 1048576 [ 168.279765][T11039] loop5: detected capacity change from 0 to 512 [ 168.289078][T11039] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.355720][T11039] EXT4-fs (loop5): failed to initialize system zone (-117) [ 168.363377][T11039] EXT4-fs (loop5): mount failed [ 168.900209][T11065] loop0: detected capacity change from 0 to 512 [ 168.919006][T11065] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.933213][T11065] EXT4-fs (loop0): failed to initialize system zone (-117) [ 168.948268][T11065] EXT4-fs (loop0): mount failed [ 168.956763][T11071] xt_NFQUEUE: number of total queues is 0 [ 168.982020][T11075] loop3: detected capacity change from 0 to 512 [ 168.989657][T11075] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 169.000651][T11075] EXT4-fs (loop3): failed to initialize system zone (-117) [ 169.008170][T11075] EXT4-fs (loop3): mount failed [ 169.277760][T11092] xt_NFQUEUE: number of total queues is 0 [ 169.858723][T11108] loop5: detected capacity change from 0 to 512 [ 169.865936][T11108] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 169.877082][T11108] EXT4-fs (loop5): failed to initialize system zone (-117) [ 169.884427][T11108] EXT4-fs (loop5): mount failed [ 170.174474][T11140] loop0: detected capacity change from 0 to 512 [ 170.181714][T11140] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.201167][T11140] EXT4-fs (loop0): failed to initialize system zone (-117) [ 170.208694][T11140] EXT4-fs (loop0): mount failed [ 170.269981][T11145] xt_NFQUEUE: number of total queues is 0 [ 170.478556][T11149] xt_NFQUEUE: number of total queues is 0 [ 170.492297][T11151] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 170.618267][T11151] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2722'. [ 170.674509][T11151] netlink: 'syz.3.2722': attribute type 9 has an invalid length. [ 170.838738][T11162] pim6reg: entered allmulticast mode [ 170.850931][T11162] pim6reg: left allmulticast mode [ 170.901499][T11168] loop3: detected capacity change from 0 to 512 [ 170.988918][T11168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.032062][T11168] ext4 filesystem being mounted at /574/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.198829][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.211179][T11183] loop0: detected capacity change from 0 to 512 [ 171.223959][T11183] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.250378][T11183] EXT4-fs (loop0): failed to initialize system zone (-117) [ 171.257758][T11183] EXT4-fs (loop0): mount failed [ 171.356146][T11202] loop4: detected capacity change from 0 to 512 [ 171.439493][T11202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.452341][T11202] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.464267][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2744'. [ 171.543723][T11214] xt_NFQUEUE: number of total queues is 0 [ 171.569186][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.098959][T11222] loop3: detected capacity change from 0 to 512 [ 172.107498][T11222] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 172.121064][T11223] xt_NFQUEUE: number of total queues is 0 [ 172.122111][T11222] EXT4-fs (loop3): failed to initialize system zone (-117) [ 172.140217][T11222] EXT4-fs (loop3): mount failed [ 172.491033][T11239] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2754'. [ 172.569519][T11239] netlink: 'syz.3.2754': attribute type 9 has an invalid length. [ 172.687633][T11248] loop0: detected capacity change from 0 to 512 [ 172.710160][T11248] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.788519][T11248] EXT4-fs (loop0): failed to initialize system zone (-117) [ 172.860663][T11248] EXT4-fs (loop0): mount failed [ 173.167162][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2774'. [ 173.190016][T11282] loop0: detected capacity change from 0 to 512 [ 173.212354][T11282] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.240807][T11282] EXT4-fs (loop0): failed to initialize system zone (-117) [ 173.255581][T11282] EXT4-fs (loop0): mount failed [ 173.476801][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2786'. [ 173.523075][T11322] loop3: detected capacity change from 0 to 512 [ 173.530009][T11322] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 173.540892][T11322] EXT4-fs (loop3): failed to initialize system zone (-117) [ 173.548197][T11322] EXT4-fs (loop3): mount failed [ 173.616570][T11324] xt_NFQUEUE: number of total queues is 0 [ 173.693401][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2794'. [ 173.789941][T11347] loop0: detected capacity change from 0 to 512 [ 173.810422][T11347] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.850810][T11347] EXT4-fs (loop0): failed to initialize system zone (-117) [ 173.864049][T11353] loop6: detected capacity change from 0 to 512 [ 173.871531][T11347] EXT4-fs (loop0): mount failed [ 173.877032][T11353] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 173.913804][T11353] EXT4-fs (loop6): failed to initialize system zone (-117) [ 173.949563][T11353] EXT4-fs (loop6): mount failed [ 174.097120][T11361] xt_NFQUEUE: number of total queues is 0 [ 174.579174][T11375] chnl_net:caif_netlink_parms(): no params data found [ 174.627777][T11405] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2817'. [ 174.709264][T11375] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.716415][T11375] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.718502][T11414] syz.4.2821 (11414) used greatest stack depth: 9392 bytes left [ 174.738721][T11375] bridge_slave_0: entered allmulticast mode [ 174.745521][T11375] bridge_slave_0: entered promiscuous mode [ 174.752802][T11419] 9pnet_fd: Insufficient options for proto=fd [ 174.759596][T11375] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.766786][T11375] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.774036][T11375] bridge_slave_1: entered allmulticast mode [ 174.780413][T11375] bridge_slave_1: entered promiscuous mode [ 174.792874][T11419] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2823'. [ 174.803248][T11419] netlink: 'syz.4.2823': attribute type 9 has an invalid length. [ 174.857434][T11375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.876763][T11375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.895646][T11375] team0: Port device team_slave_0 added [ 174.902103][T11375] team0: Port device team_slave_1 added [ 174.918493][T11375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.925582][T11375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.951859][T11375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.965005][T11375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.972022][T11375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.998024][T11375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.041862][T11375] hsr_slave_0: entered promiscuous mode [ 175.048230][T11375] hsr_slave_1: entered promiscuous mode [ 175.054416][T11375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.062326][T11375] Cannot create hsr debugfs directory [ 175.218932][T11435] pim6reg: entered allmulticast mode [ 175.240231][T11435] pim6reg: left allmulticast mode [ 175.271214][T11375] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.365760][T11375] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.414129][T11444] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2832'. [ 175.442929][T11375] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.463846][T11446] 9pnet_fd: Insufficient options for proto=fd [ 175.482313][T11446] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2833'. [ 175.515695][T11446] netlink: 'syz.6.2833': attribute type 9 has an invalid length. [ 175.532309][T11375] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.993909][ T1958] bond0: left allmulticast mode [ 175.998877][ T1958] bond_slave_0: left allmulticast mode [ 176.004329][ T1958] bond_slave_1: left allmulticast mode [ 176.438437][ T1958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.448375][ T1958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.458734][ T1958] bond0 (unregistering): Released all slaves [ 176.499740][T11375] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.522689][ T1958] tipc: Left network mode [ 176.522813][T11375] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.540618][T11375] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.550368][T11375] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.570930][ T1958] hsr_slave_0: left promiscuous mode [ 176.577887][ T1958] hsr_slave_1: left promiscuous mode [ 176.583517][ T1958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.590969][ T1958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.600160][ T1958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.607616][ T1958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.618785][ T1958] veth1_macvtap: left promiscuous mode [ 176.624294][ T1958] veth0_macvtap: left promiscuous mode [ 176.630296][ T1958] veth1_vlan: left promiscuous mode [ 176.635877][ T1958] veth0_vlan: left promiscuous mode [ 176.707737][ T1958] team0 (unregistering): Port device team_slave_1 removed [ 176.722456][ T1958] team0 (unregistering): Port device team_slave_0 removed [ 176.779867][T11375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.803743][T11375] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.832032][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.839149][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.852039][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.859165][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.866763][ T29] audit: type=1400 audit(1739626316.108:736): avc: denied { egress } for pid=8 comm="kworker/0:0" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 176.888944][ T29] audit: type=1400 audit(1739626316.108:737): avc: denied { sendto } for pid=8 comm="kworker/0:0" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 176.911205][T11375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.918445][T11504] netlink: 'syz.0.2851': attribute type 9 has an invalid length. [ 176.927079][T11499] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2851'. [ 177.096295][T11375] veth0_vlan: entered promiscuous mode [ 177.102468][T11523] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2857'. [ 177.126118][T11375] veth1_vlan: entered promiscuous mode [ 177.159193][T11375] veth0_macvtap: entered promiscuous mode [ 177.181931][T11375] veth1_macvtap: entered promiscuous mode [ 177.198302][ T1958] IPVS: stop unused estimator thread 0... [ 177.217826][T11375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.232155][T11375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.241391][T11375] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.250225][T11375] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.259130][T11375] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.268161][T11375] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.519107][T11552] xt_NFQUEUE: number of total queues is 0 [ 177.622162][T11554] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2868'. [ 177.647252][T11554] netlink: 'syz.6.2868': attribute type 9 has an invalid length. [ 178.072871][T11579] xt_NFQUEUE: number of total queues is 0 [ 178.427006][T11592] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2884'. [ 178.437210][T11592] netlink: 'syz.5.2884': attribute type 9 has an invalid length. [ 178.758684][T11610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2892'. [ 178.823403][T11618] xt_NFQUEUE: number of total queues is 0 [ 178.942731][T11625] netlink: 'syz.3.2898': attribute type 9 has an invalid length. [ 179.301055][T11645] xt_NFQUEUE: number of total queues is 0 [ 179.840096][T11664] xt_NFQUEUE: number of total queues is 0 [ 180.032812][T11673] pim6reg: entered allmulticast mode [ 180.065295][T11673] pim6reg: left allmulticast mode [ 180.527992][T11691] xt_NFQUEUE: number of total queues is 0 [ 180.541181][T11695] loop5: detected capacity change from 0 to 1024 [ 180.549070][T11695] EXT4-fs: Ignoring removed orlov option [ 180.574243][T11695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.586678][T11703] xt_hashlimit: max too large, truncated to 1048576 [ 181.287559][T11729] xt_NFQUEUE: number of total queues is 0 [ 181.385143][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.432301][T11733] xt_hashlimit: max too large, truncated to 1048576 [ 181.777975][T11753] xt_NFQUEUE: number of total queues is 0 [ 182.317282][T11771] xt_NFQUEUE: number of total queues is 0 [ 182.418256][T11774] xt_hashlimit: max too large, truncated to 1048576 [ 182.671101][T11788] pim6reg: entered allmulticast mode [ 182.683825][T11788] pim6reg: left allmulticast mode [ 182.983590][T11802] xt_NFQUEUE: number of total queues is 0 [ 183.076923][T11803] xt_NFQUEUE: number of total queues is 0 [ 183.085746][T11805] loop0: detected capacity change from 0 to 1024 [ 183.092505][T11805] EXT4-fs: Ignoring removed orlov option [ 183.110398][T11805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.820047][T11815] xt_NFQUEUE: number of total queues is 0 [ 183.855387][T11819] xt_hashlimit: max too large, truncated to 1048576 [ 183.888787][T11821] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2967'. [ 183.898224][T11821] netlink: 'syz.4.2967': attribute type 9 has an invalid length. [ 183.940077][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.982657][T11824] pim6reg: entered allmulticast mode [ 184.203218][T11845] xt_NFQUEUE: number of total queues is 0 [ 184.796192][T11852] xt_NFQUEUE: number of total queues is 0 [ 185.268225][T11859] loop5: detected capacity change from 0 to 1024 [ 185.284739][T11859] EXT4-fs: Ignoring removed orlov option [ 185.297838][T11863] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2985'. [ 185.317084][T11863] netlink: 'syz.4.2985': attribute type 9 has an invalid length. [ 185.326338][T11859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.422189][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.444549][T11876] pim6reg: left allmulticast mode [ 185.528182][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.588690][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.644294][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.658987][T11864] chnl_net:caif_netlink_parms(): no params data found [ 185.768136][T11864] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.775247][T11864] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.786203][T11864] bridge_slave_0: entered allmulticast mode [ 185.792673][T11864] bridge_slave_0: entered promiscuous mode [ 185.807809][T11864] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.814966][T11864] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.822731][T11864] bridge_slave_1: entered allmulticast mode [ 185.829300][T11864] bridge_slave_1: entered promiscuous mode [ 185.858369][T11864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.869775][ T55] bond_slave_0: left promiscuous mode [ 185.875193][ T55] bond_slave_1: left promiscuous mode [ 185.880683][ T55] bridge0: port 1(vlan3) entered disabled state [ 185.974357][ T55] bond0: left allmulticast mode [ 185.979379][ T55] bond_slave_0: left allmulticast mode [ 185.984860][ T55] bond_slave_1: left allmulticast mode [ 186.048995][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.058828][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.068304][ T55] bond0 (unregistering): Released all slaves [ 186.077381][T11864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.117781][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.135928][T11864] team0: Port device team_slave_0 added [ 186.150379][T11864] team0: Port device team_slave_1 added [ 186.166541][T11905] loop5: detected capacity change from 0 to 512 [ 186.215738][T11905] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 186.240476][T11905] EXT4-fs (loop5): failed to initialize system zone (-117) [ 186.243142][ T55] hsr_slave_0: left promiscuous mode [ 186.254144][T11906] xt_NFQUEUE: number of total queues is 0 [ 186.260079][ T55] hsr_slave_1: left promiscuous mode [ 186.260180][T11905] EXT4-fs (loop5): mount failed [ 186.284429][ T55] veth1_macvtap: left promiscuous mode [ 186.291095][ T55] veth0_macvtap: left promiscuous mode [ 186.296820][ T55] veth1_vlan: left promiscuous mode [ 186.302159][ T55] veth0_vlan: left promiscuous mode [ 186.620808][T11917] xt_NFQUEUE: number of total queues is 0 [ 186.995025][ T55] team0 (unregistering): Port device team_slave_1 removed [ 187.004630][ T55] team0 (unregistering): Port device team_slave_0 removed [ 187.038695][T11923] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3001'. [ 187.063530][T11864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.070609][T11864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.096536][T11864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.117628][T11864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.124601][T11864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.150617][T11864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.254802][T11938] loop4: detected capacity change from 0 to 512 [ 187.278251][T11938] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.297693][T11864] hsr_slave_0: entered promiscuous mode [ 187.303836][T11864] hsr_slave_1: entered promiscuous mode [ 187.310215][T11938] EXT4-fs (loop4): failed to initialize system zone (-117) [ 187.321232][T11864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.329499][T11864] Cannot create hsr debugfs directory [ 187.339284][T11938] EXT4-fs (loop4): mount failed [ 187.554335][T11960] pim6reg: entered allmulticast mode [ 187.567557][T11974] pim6reg: entered allmulticast mode [ 187.582780][T11974] pim6reg: left allmulticast mode [ 187.612516][T11960] pim6reg: left allmulticast mode [ 187.633324][T11984] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3013'. [ 187.643332][T11984] netlink: 'syz.3.3013': attribute type 9 has an invalid length. [ 187.820527][T11864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.837698][T11864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.865627][T12006] loop4: detected capacity change from 0 to 512 [ 187.892072][T11864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.919327][T11864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.931549][T12006] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.030801][T12006] EXT4-fs (loop4): failed to initialize system zone (-117) [ 188.039584][T12006] EXT4-fs (loop4): mount failed [ 188.099105][T12015] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3019'. [ 188.281095][T11864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.313862][T11864] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.327338][T12020] loop4: detected capacity change from 0 to 1024 [ 188.336778][ T1958] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.343870][ T1958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.365719][T12020] EXT4-fs: Ignoring removed orlov option [ 188.379702][ T1958] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.386808][ T1958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.407127][T12020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.522969][T12015] xt_NFQUEUE: number of total queues is 0 [ 188.532999][T11864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.796612][T11864] veth0_vlan: entered promiscuous mode [ 188.851900][T11864] veth1_vlan: entered promiscuous mode [ 188.920002][T11864] veth0_macvtap: entered promiscuous mode [ 188.942750][T11864] veth1_macvtap: entered promiscuous mode [ 188.964210][T11864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.974699][T11864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.986164][T11864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.997691][T11864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.008166][T11864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.019178][T11864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.029009][T11864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.037821][T11864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.046535][T11864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.055297][T11864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.150042][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.370826][T12094] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 189.386487][T12094] netlink: 'syz.3.3037': attribute type 9 has an invalid length. [ 189.435918][T12096] xt_NFQUEUE: number of total queues is 0 [ 189.772355][T12100] xt_NFQUEUE: number of total queues is 0 [ 189.875697][T12077] chnl_net:caif_netlink_parms(): no params data found [ 189.962646][ T11] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.987675][T12077] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.994783][T12077] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.014673][T12077] bridge_slave_0: entered allmulticast mode [ 190.021887][T12077] bridge_slave_0: entered promiscuous mode [ 190.032649][ T11] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.044324][T12077] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.051673][T12077] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.078682][T12077] bridge_slave_1: entered allmulticast mode [ 190.123620][T12077] bridge_slave_1: entered promiscuous mode [ 190.148337][T12077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.163076][ T11] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.200591][T12077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.228143][ T11] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.241765][T12077] team0: Port device team_slave_0 added [ 190.252951][T12077] team0: Port device team_slave_1 added [ 190.305855][T12077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.312840][T12077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.338822][T12077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.359075][T12077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.366110][T12077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.392088][T12077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.409193][T12127] xt_NFQUEUE: number of total queues is 0 [ 190.783763][ T11] bond0: left allmulticast mode [ 190.788672][ T11] bond_slave_0: left allmulticast mode [ 190.794144][ T11] bond_slave_1: left allmulticast mode [ 190.897512][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.913485][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.923847][ T11] bond0 (unregistering): Released all slaves [ 190.963176][ T11] tipc: Left network mode [ 190.965005][T12077] hsr_slave_0: entered promiscuous mode [ 190.974202][T12077] hsr_slave_1: entered promiscuous mode [ 190.980487][T12077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.995685][T12077] Cannot create hsr debugfs directory [ 191.015411][ T11] hsr_slave_0: left promiscuous mode [ 191.021745][ T11] hsr_slave_1: left promiscuous mode [ 191.034770][ T11] veth1_macvtap: left promiscuous mode [ 191.041402][ T11] veth0_macvtap: left promiscuous mode [ 191.047068][ T11] veth1_vlan: left promiscuous mode [ 191.057606][ T11] veth0_vlan: left promiscuous mode [ 191.207136][ T11] team0 (unregistering): Port device team_slave_1 removed [ 191.223539][ T11] team0 (unregistering): Port device team_slave_0 removed [ 191.689898][T12161] xt_NFQUEUE: number of total queues is 0 [ 192.418062][T12211] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3064'. [ 192.430930][T12077] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.444732][T12213] pim6reg: entered allmulticast mode [ 192.450900][T12211] netlink: 'syz.6.3064': attribute type 9 has an invalid length. [ 192.461039][T12077] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.495979][T12213] pim6reg: left allmulticast mode [ 192.515057][T12077] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.523681][T12077] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.572872][T12221] xt_NFQUEUE: number of total queues is 0 [ 192.597382][T12077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.626680][T12077] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.663269][T12077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.673760][T12077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.729311][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.736514][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.771863][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.779076][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.025190][T12077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.259386][T12077] veth0_vlan: entered promiscuous mode [ 193.267536][T12077] veth1_vlan: entered promiscuous mode [ 193.281674][T12077] veth0_macvtap: entered promiscuous mode [ 193.289888][T12077] veth1_macvtap: entered promiscuous mode [ 193.300018][T12077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.310535][T12077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.320375][T12077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.330815][T12077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.397376][T12305] xt_NFQUEUE: number of total queues is 0 [ 193.397647][T12077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.434267][T12077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.444880][T12077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.454863][T12077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.465326][T12077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.478020][T12077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.490263][T12077] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.499006][T12077] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.507721][T12077] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.516564][T12077] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.583655][T12314] loop5: detected capacity change from 0 to 1024 [ 193.590691][T12314] EXT4-fs: Ignoring removed orlov option [ 193.621428][T12314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.251175][T12336] xt_NFQUEUE: number of total queues is 0 [ 194.629418][T12348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12348 comm=syz.6.3089 [ 194.936087][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.959460][T12358] xt_NFQUEUE: number of total queues is 0 [ 195.059941][T12376] loop3: detected capacity change from 0 to 1024 [ 195.085099][T12376] EXT4-fs: Ignoring removed orlov option [ 195.109656][T12376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.197193][T12386] pim6reg: entered allmulticast mode [ 195.204360][T12386] pim6reg: left allmulticast mode [ 195.323818][T12390] xt_NFQUEUE: number of total queues is 0 [ 196.096282][T12412] xt_NFQUEUE: number of total queues is 0 [ 196.341282][T11375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.676154][T12429] xt_NFQUEUE: number of total queues is 0 [ 196.764223][T12437] loop4: detected capacity change from 0 to 1024 [ 196.781916][T12437] EXT4-fs: Ignoring removed orlov option [ 196.806090][T12437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.994019][T12455] pim6reg: entered allmulticast mode [ 197.004771][T12456] xt_NFQUEUE: number of total queues is 0 [ 197.023296][T12455] pim6reg: left allmulticast mode [ 197.212174][T12460] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3125'. [ 197.444558][T12465] xt_NFQUEUE: number of total queues is 0 [ 198.393144][T12485] xt_NFQUEUE: number of total queues is 0 [ 198.639961][T12487] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3136'. [ 198.871573][T12077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.914549][T12490] xt_NFQUEUE: number of total queues is 0 [ 199.372499][T12517] loop6: detected capacity change from 0 to 1024 [ 199.390664][T12507] pim6reg: entered allmulticast mode [ 199.406214][T12517] EXT4-fs: Ignoring removed orlov option [ 199.407775][T12507] pim6reg: left allmulticast mode [ 199.445980][T12517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.682008][T12530] xt_NFQUEUE: number of total queues is 0 [ 199.758359][T12532] xt_hashlimit: max too large, truncated to 1048576 [ 200.416922][T12536] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3154'. [ 200.427190][T12536] netlink: 'syz.5.3154': attribute type 9 has an invalid length. [ 200.467924][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.615040][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3167'. [ 200.632356][T12568] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 200.653407][T12568] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3168'. [ 200.663145][T12568] netlink: 'syz.4.3168': attribute type 9 has an invalid length. [ 200.686268][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3164'. [ 200.849037][T12583] xt_NFQUEUE: number of total queues is 0 [ 200.938690][T12585] loop6: detected capacity change from 0 to 1024 [ 200.946202][T12585] EXT4-fs: Ignoring removed orlov option [ 200.961611][T12585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.234006][T12598] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3178'. [ 201.338050][T12599] loop4: detected capacity change from 0 to 1024 [ 201.344647][T12599] EXT4-fs: Ignoring removed orlov option [ 201.353211][T12599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.424162][T12605] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 201.436053][T12605] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3181'. [ 201.445846][T12605] netlink: 'syz.3.3181': attribute type 9 has an invalid length. [ 201.464314][T12606] xt_NFQUEUE: number of total queues is 0 [ 201.734914][T12585] ================================================================== [ 201.743028][T12585] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 201.746474][T12617] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 201.750241][T12585] [ 201.750250][T12585] write to 0xffff8881067b38a4 of 4 bytes by task 12589 on cpu 0: [ 201.750266][T12585] __xa_set_mark+0x182/0x1b0 [ 201.767204][T12617] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3186'. [ 201.769807][T12585] __folio_mark_dirty+0x3b5/0x4e0 [ 201.777827][T12617] netlink: 'syz.3.3186': attribute type 9 has an invalid length. [ 201.783374][T12585] mark_buffer_dirty+0x134/0x230 [ 201.801047][T12585] block_write_end+0x123/0x210 [ 201.805821][T12585] ext4_write_end+0x148/0x770 [ 201.810498][T12585] generic_perform_write+0x33c/0x4a0 [ 201.815783][T12585] ext4_buffered_write_iter+0x1ed/0x3c0 [ 201.821349][T12585] ext4_file_write_iter+0x383/0xf20 [ 201.826557][T12585] iter_file_splice_write+0x5f1/0x980 [ 201.831934][T12585] direct_splice_actor+0x160/0x2c0 [ 201.837055][T12585] splice_direct_to_actor+0x302/0x670 [ 201.842442][T12585] do_splice_direct+0xd7/0x150 [ 201.847215][T12585] do_sendfile+0x398/0x660 [ 201.851632][T12585] __x64_sys_sendfile64+0x110/0x150 [ 201.856835][T12585] x64_sys_call+0xfbd/0x2dc0 [ 201.861431][T12585] do_syscall_64+0xc9/0x1c0 [ 201.865951][T12585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.871866][T12585] [ 201.874188][T12585] read to 0xffff8881067b38a4 of 4 bytes by task 12585 on cpu 1: [ 201.881817][T12585] xas_find_marked+0x608/0x650 [ 201.886594][T12585] find_get_entry+0x54/0x390 [ 201.891181][T12585] filemap_get_folios_tag+0x9e/0x210 [ 201.896470][T12585] file_write_and_wait_range+0x204/0x2f0 [ 201.902111][T12585] generic_buffers_fsync_noflush+0x46/0x120 [ 201.908004][T12585] ext4_sync_file+0x1ff/0x6c0 [ 201.912691][T12585] vfs_fsync_range+0x116/0x130 [ 201.917467][T12585] ext4_buffered_write_iter+0x358/0x3c0 [ 201.923061][T12585] ext4_file_write_iter+0x383/0xf20 [ 201.928267][T12585] iter_file_splice_write+0x5f1/0x980 [ 201.933646][T12585] direct_splice_actor+0x160/0x2c0 [ 201.938761][T12585] splice_direct_to_actor+0x302/0x670 [ 201.944129][T12585] do_splice_direct+0xd7/0x150 [ 201.948899][T12585] do_sendfile+0x398/0x660 [ 201.953315][T12585] __x64_sys_sendfile64+0x110/0x150 [ 201.958523][T12585] x64_sys_call+0xfbd/0x2dc0 [ 201.963127][T12585] do_syscall_64+0xc9/0x1c0 [ 201.967632][T12585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.973535][T12585] [ 201.975853][T12585] value changed: 0x04000021 -> 0x0e000021 [ 201.981565][T12585] [ 201.983882][T12585] Reported by Kernel Concurrency Sanitizer on: [ 201.990034][T12585] CPU: 1 UID: 0 PID: 12585 Comm: syz.6.3174 Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 202.000793][T12585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 202.010853][T12585] ================================================================== [ 202.137159][ T4959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.272053][T12077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.