last executing test programs: 2.391020451s ago: executing program 2 (id=389): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) flock(r0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xff, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000740)={[{@i_version}, {@journal_async_commit}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x20000}}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x561, &(0x7f0000001740)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8000c62) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 2.195331913s ago: executing program 2 (id=392): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="48000000100003050000000000bbd72242000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050003"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1, 0x803, 0x0) pwrite64(r0, &(0x7f00000003c0)="51443766e98ffb6a020883581a9c5c9de0c6f2af8b92d8799f599b4bfbe531137e1cf35b7020c9c74fc11fbe69f30738d4ecd14bbc8e34e5816819e162f9210d0d01bb43092aef0925f0cf299c4a2707eee89cb3d8015a1769379d12a774bb82fc99d8621d65f004855286d5dea767804d925e02d095b658f4596bb415cfa00bb731297c67cd43c1e1dbc85cb42b3075fa8fc0ef94626f0c3d4c75147106d2d01733100649fd221969be54871cb123", 0xaf, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 1.271617814s ago: executing program 4 (id=407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x1e, 0x80004, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) memfd_create(0x0, 0x1e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000005000000520d00000900000084000200", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000400000000000020000000c00"/28], 0x50) connect$inet(r1, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, 0x0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1e, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x0, 0x3, 0x4, 0x5, 0x8, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x3, 0xb, 0x7, 0xfffffffffffffff0, 0x10}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5d72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.258433094s ago: executing program 2 (id=418): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) flock(r0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xff, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000740)={[{@i_version}, {@journal_async_commit}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x20000}}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x561, &(0x7f0000001740)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8000c62) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 1.145943976s ago: executing program 4 (id=411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.035172877s ago: executing program 4 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$kcm(0xa, 0x1, 0x106) fcntl$lock(r3, 0x7, &(0x7f0000000200)={0x1, 0x2, 0x7fff, 0x8, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xbbb839bceb8aff2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kmem_cache_free\x00', r5, 0x0, 0xa}, 0x18) close(r3) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 1.034702917s ago: executing program 2 (id=414): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="48000000100003050000000000bbd72242000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050003"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1, 0x803, 0x0) pwrite64(r0, &(0x7f00000003c0)="51443766e98ffb6a020883581a9c5c9de0c6f2af8b92d8799f599b4bfbe531137e1cf35b7020c9c74fc11fbe69f30738d4ecd14bbc8e34e5816819e162f9210d0d01bb43092aef0925f0cf299c4a2707eee89cb3d8015a1769379d12a774bb82fc99d8621d65f004855286d5dea767804d925e02d095b658f4596bb415cfa00bb731297c67cd43c1e1dbc85cb42b3075fa8fc0ef94626f0c3d4c75147106d2d01733100649fd221969be54871cb123", 0xaf, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 1.017256528s ago: executing program 4 (id=415): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x9}, 0x18) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) 949.567988ms ago: executing program 4 (id=419): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x5}, 0x18) connect$inet(r0, 0x0, 0x0) close(r0) set_mempolicy(0x8000, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x8, 0x6, 0x30, 0x6}, {0x5, 0x7, 0x1, 0x5}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) syslog(0x2, &(0x7f0000000180)=""/89, 0x45) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000009000000060000000000000c03000000070000000000000e03000000000000000000000002000008f7ff00000000005600000000000000000000000000000000002e5f6100"], 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x79cd}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6, 0x3}, &(0x7f0000000100)=0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x9, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x7f}, {0x0, 0xc3, 0x8000}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x2, 0x0, 0x40000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffe, 0x4000000, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x724a969d}, {0x0, 0x0, 0x7fffffff, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3}, {0x0, 0x3}, {0x80}, {0x0, 0x0, 0x5, 0x5, 0x4}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x10000000}, {0xe, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x3}, {0x0, 0x0, 0x400000, 0x8510}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xeacd}, {}, {0x0, 0x800}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x82}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {0xfff}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x1}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1, 0x3c}, {}, {0x0, 0x0, 0x0, 0x67d, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x2004}, {0x0, 0x0, 0x0, 0x0, 0xdc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x40000, 0x590, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r7 = io_uring_setup(0x1fc3, &(0x7f00000002c0)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r8, 0x5607, 0x5) close_range(r7, 0xffffffffffffffff, 0x0) 778.547891ms ago: executing program 4 (id=424): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x40000) 574.121023ms ago: executing program 3 (id=430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff69, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r5, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) writev(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000b40)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000b80)=0x2c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0xffff}, {@in=@rand_addr=0x64010101, 0x2, 0x32}, @in6=@loopback, {0x0, 0x3, 0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000f00e00641100fc010000000000000000000000000000ff020000000000000000000000000001"], 0x0) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0xfffc, r9}]) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) io_getevents(r10, 0x7f, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)={r11, r12+60000000}) 518.722124ms ago: executing program 0 (id=433): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x44, @loopback, 0xffffffff}, 0x1c) 491.368764ms ago: executing program 0 (id=434): syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x130, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0xb}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xac, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}]}, @TCA_CGROUP_EMATCHES={0x9c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xffff}, {0x4, 0x5, 0x2, "779c437a56"}}}]}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x41, 0x2, 0x1}, {0xef}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0xcdf4}, {{0x4, 0x1, 0x0, 0x1}, {0x2}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x1e96}, {{0x100}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0xb}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x25, 0x73, 0x1}, {0x1, 0xd6}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x80, 0x7, 0x400}, {{0x4, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000706010500f608080006ff0000400a08ab064000007fff0500010007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0c4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x3a) sendfile(r10, r9, 0x0, 0x20000023893) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"/307], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x85) 482.090814ms ago: executing program 3 (id=435): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x40000) 428.383274ms ago: executing program 0 (id=436): creat(&(0x7f0000000000)='./file0\x00', 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x459, &(0x7f0000000900)="$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") 428.242905ms ago: executing program 3 (id=437): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x1b, &(0x7f0000000440)=@raw=[@call={0x85, 0x0, 0x0, 0x69}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x1, 0x4, 0x2, 0x1, 0x18}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @ldst={0x1, 0x2, 0x1, 0x2, 0x8, 0xfffffffffffffffc, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x7fff, 0xeb, &(0x7f0000000540)=""/235, 0x80fec743d2623cdc, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0xa, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)=[{0x1, 0x5, 0xe, 0xa}, {0x5, 0x1, 0xd, 0x3}, {0x3, 0x5, 0xb, 0x8}, {0x3, 0x2, 0xd, 0x9}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x33, 0xb5, &(0x7f00000002c0)="d80bf6da0657dd63587c156466afb90bc95330017afd71fd446a1d182e3a74ab3bc61ff02debb224c7bc0154e04e1e223c469d", &(0x7f0000000780)=""/181, 0x2, 0x0, 0x2f, 0x74, &(0x7f0000000840)="927a0192ef068f6cd22a8ec8ffe6d657f60f57efa3ed66bb9304284580ed73dcfd9e834bb953470b5809ad0e1b28b5", &(0x7f0000000880)="7a91700771fd947b1803064fc9acf2bed990654ff76c8930adb7ab87482247ea3a17c49c4545865940aa47bfeade26194076e53986f926bf51967700a520de3243c526f5d368051c96a3be319a344f1551a64e7efea9386d93152e0b8ff76546c38b9ecc75d832ffd9368eef7ec1f4bb47cb4e6a", 0x3}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x4b3a, 0x3) 424.148705ms ago: executing program 1 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$kcm(0xa, 0x1, 0x106) fcntl$lock(r3, 0x7, &(0x7f0000000200)={0x1, 0x2, 0x7fff, 0x8, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xbbb839bceb8aff2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kmem_cache_free\x00', r5, 0x0, 0xa}, 0x18) close(r3) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 401.065635ms ago: executing program 3 (id=439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff69, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r5, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) writev(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000b40)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000b80)=0x2c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0xffff}, {@in=@rand_addr=0x64010101, 0x2, 0x32}, @in6=@loopback, {0x0, 0x3, 0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000f00e00641100fc010000000000000000000000000000ff020000000000000000000000000001"], 0x0) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0xfffc, r9}]) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) io_getevents(r10, 0x7f, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)={r11, r12+60000000}) 347.949295ms ago: executing program 1 (id=440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, 0x0) 320.710496ms ago: executing program 1 (id=441): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x9}, 0x18) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) 310.870976ms ago: executing program 0 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x1e, 0x80004, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) memfd_create(0x0, 0x1e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000005000000520d00000900000084000200", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000400000000000020000000c00"/28], 0x50) connect$inet(r1, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, 0x0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1e, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x0, 0x3, 0x4, 0x5, 0x8, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x3, 0xb, 0x7, 0xfffffffffffffff0, 0x10}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5d72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 280.668526ms ago: executing program 0 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff69, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r5, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) writev(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000b40)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000b80)=0x2c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0xffff}, {@in=@rand_addr=0x64010101, 0x2, 0x32}, @in6=@loopback, {0x0, 0x3, 0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000f00e00641100fc010000000000000000000000000000ff020000000000000000000000000001"], 0x0) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0xfffc, r9}]) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) io_getevents(r10, 0x7f, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)={r11, r12+60000000}) 261.874767ms ago: executing program 1 (id=444): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) flock(r0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xff, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000740)={[{@i_version}, {@journal_async_commit}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x20000}}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x561, &(0x7f0000001740)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8000c62) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 175.777248ms ago: executing program 2 (id=445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff69, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r5, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) writev(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000b40)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000b80)=0x2c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0xffff}, {@in=@rand_addr=0x64010101, 0x2, 0x32}, @in6=@loopback, {0x0, 0x3, 0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000f00e00641100fc010000000000000000000000000000ff020000000000000000000000000001"], 0x0) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0xfffc, r9}]) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) io_getevents(r10, 0x7f, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)={r11, r12+60000000}) 152.774528ms ago: executing program 3 (id=446): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x40000) 60.274309ms ago: executing program 3 (id=447): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x9}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) 58.847679ms ago: executing program 0 (id=448): syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x130, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0xb}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xac, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}]}, @TCA_CGROUP_EMATCHES={0x9c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xffff}, {0x4, 0x5, 0x2, "779c437a56"}}}]}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x41, 0x2, 0x1}, {0xef}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0xcdf4}, {{0x4, 0x1, 0x0, 0x1}, {0x2}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x1e96}, {{0x100}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0xb}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x25, 0x73, 0x1}, {0x1, 0xd6}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x80, 0x7, 0x400}, {{0x4, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000706010500f608080006ff0000400a08ab064000007fff0500010007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0c4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x3a) sendfile(r10, r9, 0x0, 0x20000023893) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"/307], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x85) 58.638569ms ago: executing program 1 (id=449): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x1b, &(0x7f0000000440)=@raw=[@call={0x85, 0x0, 0x0, 0x69}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x1, 0x4, 0x2, 0x1, 0x18}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @ldst={0x1, 0x2, 0x1, 0x2, 0x8, 0xfffffffffffffffc, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x7fff, 0xeb, &(0x7f0000000540)=""/235, 0x80fec743d2623cdc, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0xa, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)=[{0x1, 0x5, 0xe, 0xa}, {0x5, 0x1, 0xd, 0x3}, {0x3, 0x5, 0xb, 0x8}, {0x3, 0x2, 0xd, 0x9}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x33, 0xb5, &(0x7f00000002c0)="d80bf6da0657dd63587c156466afb90bc95330017afd71fd446a1d182e3a74ab3bc61ff02debb224c7bc0154e04e1e223c469d", &(0x7f0000000780)=""/181, 0x2, 0x0, 0x2f, 0x74, &(0x7f0000000840)="927a0192ef068f6cd22a8ec8ffe6d657f60f57efa3ed66bb9304284580ed73dcfd9e834bb953470b5809ad0e1b28b5", &(0x7f0000000880)="7a91700771fd947b1803064fc9acf2bed990654ff76c8930adb7ab87482247ea3a17c49c4545865940aa47bfeade26194076e53986f926bf51967700a520de3243c526f5d368051c96a3be319a344f1551a64e7efea9386d93152e0b8ff76546c38b9ecc75d832ffd9368eef7ec1f4bb47cb4e6a", 0x3}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x4b3a, 0x3) 17.70021ms ago: executing program 1 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$kcm(0xa, 0x1, 0x106) fcntl$lock(r3, 0x7, &(0x7f0000000200)={0x1, 0x2, 0x7fff, 0x8, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xbbb839bceb8aff2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kmem_cache_free\x00', r5, 0x0, 0xa}, 0x18) close(r3) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10030600e0ff020004004788aa", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 0s ago: executing program 2 (id=451): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x7, 0x1}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "23eabaa3c5bee431", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket(0x1e, 0x4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb2", 0xb}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = syz_io_uring_setup(0xbc2, &(0x7f0000001480)={0x0, 0x1066, 0x40, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r9, 0x47f8, 0x20, 0x0, 0x0, 0x0) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) write$selinux_access(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) dup(r12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 29.162254][ T29] audit: type=1400 audit(1745942553.769:82): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.163336][ T3293] cgroup: Unknown subsys name 'net' [ 29.185074][ T29] audit: type=1400 audit(1745942553.769:83): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.212455][ T29] audit: type=1400 audit(1745942553.799:84): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.351144][ T3293] cgroup: Unknown subsys name 'cpuset' [ 29.357345][ T3293] cgroup: Unknown subsys name 'rlimit' [ 29.508980][ T29] audit: type=1400 audit(1745942554.109:85): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.532394][ T29] audit: type=1400 audit(1745942554.109:86): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.553451][ T29] audit: type=1400 audit(1745942554.109:87): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.574778][ T29] audit: type=1400 audit(1745942554.109:88): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.595080][ T29] audit: type=1400 audit(1745942554.109:89): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.620011][ T29] audit: type=1400 audit(1745942554.109:90): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.627622][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.652262][ T29] audit: type=1400 audit(1745942554.259:91): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 29.745594][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.632994][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 31.689123][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 31.786011][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.793291][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.800898][ T3303] bridge_slave_0: entered allmulticast mode [ 31.807531][ T3303] bridge_slave_0: entered promiscuous mode [ 31.816262][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.823403][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.830578][ T3303] bridge_slave_1: entered allmulticast mode [ 31.837081][ T3303] bridge_slave_1: entered promiscuous mode [ 31.860756][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.867883][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.875067][ T3309] bridge_slave_0: entered allmulticast mode [ 31.881633][ T3309] bridge_slave_0: entered promiscuous mode [ 31.890273][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.897423][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.904630][ T3309] bridge_slave_1: entered allmulticast mode [ 31.911104][ T3309] bridge_slave_1: entered promiscuous mode [ 31.923738][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.932988][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 31.958558][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.980997][ T3303] team0: Port device team_slave_0 added [ 31.986743][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 31.996900][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.007396][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.027574][ T3303] team0: Port device team_slave_1 added [ 32.047533][ T3309] team0: Port device team_slave_0 added [ 32.076143][ T3309] team0: Port device team_slave_1 added [ 32.089910][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.097163][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.123225][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.145205][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.152233][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.178306][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.201526][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.208585][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.234666][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.271583][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.278564][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.304971][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.326682][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.333871][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.341268][ T3311] bridge_slave_0: entered allmulticast mode [ 32.347563][ T3311] bridge_slave_0: entered promiscuous mode [ 32.356052][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.363287][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.370555][ T3311] bridge_slave_1: entered allmulticast mode [ 32.377309][ T3311] bridge_slave_1: entered promiscuous mode [ 32.383624][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.390757][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.397998][ T3310] bridge_slave_0: entered allmulticast mode [ 32.404879][ T3310] bridge_slave_0: entered promiscuous mode [ 32.417074][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 32.430794][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.437970][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.445466][ T3310] bridge_slave_1: entered allmulticast mode [ 32.452186][ T3310] bridge_slave_1: entered promiscuous mode [ 32.465240][ T3309] hsr_slave_0: entered promiscuous mode [ 32.471215][ T3309] hsr_slave_1: entered promiscuous mode [ 32.503482][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.519646][ T3303] hsr_slave_0: entered promiscuous mode [ 32.526019][ T3303] hsr_slave_1: entered promiscuous mode [ 32.532194][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.539757][ T3303] Cannot create hsr debugfs directory [ 32.554356][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.564629][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.587381][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.604393][ T3311] team0: Port device team_slave_0 added [ 32.635040][ T3311] team0: Port device team_slave_1 added [ 32.667217][ T3310] team0: Port device team_slave_0 added [ 32.674019][ T3310] team0: Port device team_slave_1 added [ 32.693346][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.700490][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.707770][ T3315] bridge_slave_0: entered allmulticast mode [ 32.714311][ T3315] bridge_slave_0: entered promiscuous mode [ 32.722601][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.729757][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.736967][ T3315] bridge_slave_1: entered allmulticast mode [ 32.743590][ T3315] bridge_slave_1: entered promiscuous mode [ 32.776750][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.783879][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.810227][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.826168][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.833193][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.859221][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.880440][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.887718][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.914019][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.925111][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.932095][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.958371][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.977903][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.988412][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.011135][ T3315] team0: Port device team_slave_0 added [ 33.019735][ T3315] team0: Port device team_slave_1 added [ 33.054094][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.061097][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.087058][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.106658][ T3310] hsr_slave_0: entered promiscuous mode [ 33.112855][ T3310] hsr_slave_1: entered promiscuous mode [ 33.118694][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.126340][ T3310] Cannot create hsr debugfs directory [ 33.142395][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.149533][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.175493][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.195581][ T3311] hsr_slave_0: entered promiscuous mode [ 33.201712][ T3311] hsr_slave_1: entered promiscuous mode [ 33.207481][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.215329][ T3311] Cannot create hsr debugfs directory [ 33.259263][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.285745][ T3315] hsr_slave_0: entered promiscuous mode [ 33.291982][ T3315] hsr_slave_1: entered promiscuous mode [ 33.297850][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.305481][ T3315] Cannot create hsr debugfs directory [ 33.311564][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.322739][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.333955][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.387302][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.396560][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.425655][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.445649][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.514346][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.523579][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.533403][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.542673][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.567070][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.599493][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.607710][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.616816][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.626532][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.636166][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.655034][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.662165][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.671386][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.678466][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.722123][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.732508][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.741564][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.750589][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.782856][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.822413][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.831410][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.856445][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.863631][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.874634][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.893687][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.900996][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.917844][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.925147][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.936816][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.945949][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.962406][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.969484][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.980436][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.999827][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.016169][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.036493][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.046905][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.059611][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.066774][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.075666][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.082726][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.091463][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.098524][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.107382][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.114450][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.181348][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.235029][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.263735][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.288134][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.302491][ T3309] veth0_vlan: entered promiscuous mode [ 34.318982][ T3309] veth1_vlan: entered promiscuous mode [ 34.332686][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.365819][ T3309] veth0_macvtap: entered promiscuous mode [ 34.390361][ T3309] veth1_macvtap: entered promiscuous mode [ 34.422006][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.444881][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.461853][ T3309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.470642][ T3309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.479377][ T3309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.488172][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.505444][ T3311] veth0_vlan: entered promiscuous mode [ 34.523554][ T3310] veth0_vlan: entered promiscuous mode [ 34.535766][ T3303] veth0_vlan: entered promiscuous mode [ 34.543168][ T3311] veth1_vlan: entered promiscuous mode [ 34.562149][ T3310] veth1_vlan: entered promiscuous mode [ 34.581397][ T3315] veth0_vlan: entered promiscuous mode [ 34.589356][ T3303] veth1_vlan: entered promiscuous mode [ 34.598770][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 34.598835][ T29] audit: type=1400 audit(1745942559.199:110): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.zaEp7I/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.601281][ T3315] veth1_vlan: entered promiscuous mode [ 34.610918][ T29] audit: type=1400 audit(1745942559.209:111): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.634536][ T3311] veth0_macvtap: entered promiscuous mode [ 34.634795][ T29] audit: type=1400 audit(1745942559.209:112): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.zaEp7I/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.665468][ T3310] veth0_macvtap: entered promiscuous mode [ 34.687953][ T29] audit: type=1400 audit(1745942559.209:113): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.708635][ T3303] veth0_macvtap: entered promiscuous mode [ 34.716181][ T29] audit: type=1400 audit(1745942559.209:114): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.zaEp7I/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.716211][ T29] audit: type=1400 audit(1745942559.209:115): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.zaEp7I/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.732509][ T3311] veth1_macvtap: entered promiscuous mode [ 34.748800][ T29] audit: type=1400 audit(1745942559.209:116): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.786064][ T3310] veth1_macvtap: entered promiscuous mode [ 34.810629][ T29] audit: type=1400 audit(1745942559.409:117): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.821789][ T3303] veth1_macvtap: entered promiscuous mode [ 34.833687][ T29] audit: type=1400 audit(1745942559.419:118): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="gadgetfs" ino=3728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.849368][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.872490][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.883250][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.894824][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.905298][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.915207][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.925743][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.937685][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.946188][ T3315] veth0_macvtap: entered promiscuous mode [ 34.953467][ T3315] veth1_macvtap: entered promiscuous mode [ 34.961326][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.971489][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.986416][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.998521][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.007507][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.017977][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.027813][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.038278][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.049307][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.059395][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.059705][ T29] audit: type=1400 audit(1745942559.659:119): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.068151][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.101065][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.109768][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.132074][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.141515][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.150220][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.159147][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.175091][ T3443] ref_ctr increment failed for inode: 0x12 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810450d800 [ 35.188551][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.191513][ T3442] uprobe: syz.0.1:3442 failed to unregister, leaking uprobe [ 35.199134][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.216242][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.226682][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.236506][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.247513][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.258043][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.266086][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.276619][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.286488][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.296957][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.306917][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.317489][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.327413][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.337997][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.349138][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.364158][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.374671][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.384610][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.395273][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.405211][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.416012][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.428681][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.438451][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.447317][ T3310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.456063][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.464801][ T3310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.476328][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.486812][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.496665][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.507094][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.516928][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.527630][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.537462][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.547982][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.558522][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.569053][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.577929][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.586717][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.595438][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.745329][ T3462] loop2: detected capacity change from 0 to 512 [ 35.764393][ T3457] loop3: detected capacity change from 0 to 2048 [ 35.790615][ T3460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 35.806879][ T3462] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.825723][ T3457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.918057][ T3472] loop0: detected capacity change from 0 to 512 [ 35.918324][ T3457] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.925395][ T3462] EXT4-fs (loop2): 1 orphan inode deleted [ 35.945197][ T295] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 35.946748][ T3462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.969765][ T3472] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.979280][ T3457] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 35.991710][ T3457] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.991710][ T3457] [ 36.001435][ T3457] EXT4-fs (loop3): Total free blocks count 0 [ 36.007435][ T3457] EXT4-fs (loop3): Free/Dirty block details [ 36.013365][ T3457] EXT4-fs (loop3): free_blocks=2415919104 [ 36.017753][ T3460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 36.019086][ T3457] EXT4-fs (loop3): dirty_blocks=32 [ 36.033104][ T3457] EXT4-fs (loop3): Block reservation details [ 36.039162][ T3457] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 36.041782][ T3462] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.153546][ C0] hrtimer: interrupt took 37060 ns [ 36.153865][ T3472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.196426][ T3457] syz.3.4 (3457) used greatest stack depth: 9512 bytes left [ 36.209812][ T3472] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.223421][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.225503][ T3483] IPv4: Oversized IP packet from 127.202.26.0 [ 36.250892][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 36.300173][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.313970][ T10] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 36.389925][ T3485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15'. [ 36.474819][ T3485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15'. [ 36.530628][ T3507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20'. [ 36.546429][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.588516][ T3507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20'. [ 36.621014][ T3517] loop1: detected capacity change from 0 to 2048 [ 36.631852][ T3517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.665828][ T3517] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.710663][ T3517] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 36.723115][ T3517] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.723115][ T3517] [ 36.732811][ T3517] EXT4-fs (loop1): Total free blocks count 0 [ 36.738849][ T3517] EXT4-fs (loop1): Free/Dirty block details [ 36.744972][ T3517] EXT4-fs (loop1): free_blocks=2415919104 [ 36.750738][ T3517] EXT4-fs (loop1): dirty_blocks=32 [ 36.755896][ T3517] EXT4-fs (loop1): Block reservation details [ 36.762021][ T3517] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 36.779586][ T3517] syz.1.23 (3517) used greatest stack depth: 9416 bytes left [ 36.807396][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.903847][ T3536] loop0: detected capacity change from 0 to 2048 [ 36.913679][ T3534] IPv4: Oversized IP packet from 127.202.26.0 [ 36.937988][ T3536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.974517][ T3536] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.982982][ T3540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'. [ 36.998714][ T3536] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 37.011157][ T3536] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.011157][ T3536] [ 37.021025][ T3536] EXT4-fs (loop0): Total free blocks count 0 [ 37.027168][ T3536] EXT4-fs (loop0): Free/Dirty block details [ 37.033229][ T3536] EXT4-fs (loop0): free_blocks=2415919104 [ 37.038955][ T3536] EXT4-fs (loop0): dirty_blocks=32 [ 37.044222][ T3536] EXT4-fs (loop0): Block reservation details [ 37.050227][ T3536] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 37.057192][ T3542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'. [ 37.110473][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.175665][ T3549] loop1: detected capacity change from 0 to 512 [ 37.183649][ T3549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.208197][ T3549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.221406][ T3549] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.234275][ T3381] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.280219][ T3560] loop0: detected capacity change from 0 to 512 [ 37.308720][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.349574][ T3567] loop3: detected capacity change from 0 to 512 [ 37.371282][ T3560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.372753][ T3565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.39'. [ 37.403215][ T3567] EXT4-fs: Ignoring removed oldalloc option [ 37.409697][ T3560] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.435913][ T3574] loop2: detected capacity change from 0 to 512 [ 37.463520][ T3567] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.40: Parent and EA inode have the same ino 15 [ 37.475989][ T3574] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.495793][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.505984][ T3567] EXT4-fs (loop3): Remounting filesystem read-only [ 37.512634][ T3567] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.525793][ T3567] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 37.549584][ T3579] ref_ctr increment failed for inode: 0x4b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810450ee00 [ 37.561179][ T3567] EXT4-fs (loop3): 1 orphan inode deleted [ 37.567353][ T3567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.580498][ T3578] uprobe: syz.1.43:3578 failed to unregister, leaking uprobe [ 37.588689][ T3567] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.609095][ T3574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.640135][ T3574] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.681512][ T3381] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.693057][ T3584] loop3: detected capacity change from 0 to 512 [ 37.702808][ T3584] EXT4-fs: Ignoring removed oldalloc option [ 37.722325][ T3586] loop0: detected capacity change from 0 to 512 [ 37.743365][ T3586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.744364][ T3584] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.45: Parent and EA inode have the same ino 15 [ 37.785494][ T3584] EXT4-fs (loop3): Remounting filesystem read-only [ 37.792147][ T3584] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 37.803492][ T3584] EXT4-fs (loop3): 1 orphan inode deleted [ 37.810036][ T3584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.823253][ T3584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.824612][ T3586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.870707][ T3586] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.894055][ T3448] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.940057][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.028373][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.129393][ T3600] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 38.158772][ T3600] loop0: detected capacity change from 0 to 128 [ 38.204869][ T3600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 38.213326][ T3600] System zones: 1-3, 19-19, 35-36 [ 38.219145][ T3600] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.233179][ T3600] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.390903][ T3610] ref_ctr increment failed for inode: 0x46 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005c200 [ 38.427103][ T3609] uprobe: syz.2.53:3609 failed to unregister, leaking uprobe [ 38.632788][ T3616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.56'. [ 38.696498][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.761541][ T3625] ref_ctr increment failed for inode: 0x5b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810450b180 [ 38.802657][ T3624] uprobe: syz.2.61:3624 failed to unregister, leaking uprobe [ 38.874481][ T3636] IPv4: Oversized IP packet from 127.202.26.0 [ 39.017266][ T3655] loop2: detected capacity change from 0 to 512 [ 39.024837][ T3655] EXT4-fs: Ignoring removed oldalloc option [ 39.061398][ T3655] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.71: Parent and EA inode have the same ino 15 [ 39.124354][ T3655] EXT4-fs (loop2): Remounting filesystem read-only [ 39.131013][ T3655] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 39.167120][ T3655] EXT4-fs (loop2): 1 orphan inode deleted [ 39.181915][ T3655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.215529][ T3655] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.262144][ T3667] loop0: detected capacity change from 0 to 512 [ 39.278152][ T3667] EXT4-fs: Ignoring removed bh option [ 39.283851][ T3667] EXT4-fs: Ignoring removed bh option [ 39.297977][ T3669] IPv4: Oversized IP packet from 127.202.26.0 [ 39.304638][ T3667] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 39.353139][ T3667] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 39.388164][ T3667] xt_TPROXY: Can be used only with -p tcp or -p udp [ 39.711463][ T3696] loop2: detected capacity change from 0 to 512 [ 39.744505][ T3696] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.784331][ T3696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.800481][ T3696] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.833607][ T1041] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 39.860317][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.906625][ T3702] IPv4: Oversized IP packet from 127.202.26.0 [ 40.095229][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 40.095245][ T29] audit: type=1400 audit(1745942564.699:484): avc: denied { getopt } for pid=3707 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.137685][ T29] audit: type=1400 audit(1745942564.729:485): avc: denied { mount } for pid=3707 comm="syz.2.90" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 40.199463][ T29] audit: type=1400 audit(1745942564.799:486): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 40.340234][ T29] audit: type=1326 audit(1745942564.939:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c443be969 code=0x7ffc0000 [ 40.363700][ T29] audit: type=1326 audit(1745942564.939:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c443be969 code=0x7ffc0000 [ 40.401311][ T29] audit: type=1326 audit(1745942564.999:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.95" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c443be969 code=0x0 [ 40.424035][ T29] audit: type=1326 audit(1745942565.009:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c443be969 code=0x7ffc0000 [ 40.447336][ T29] audit: type=1326 audit(1745942565.009:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c443be969 code=0x7ffc0000 [ 40.470530][ T29] audit: type=1326 audit(1745942565.009:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c443be969 code=0x7ffc0000 [ 40.497775][ T29] audit: type=1326 audit(1745942565.059:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c443be969 code=0x7ffc0000 [ 40.537603][ T3722] ref_ctr increment failed for inode: 0x7b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005d800 [ 40.564049][ T3721] uprobe: syz.0.96:3721 failed to unregister, leaking uprobe [ 40.730033][ T3727] IPv4: Oversized IP packet from 127.202.26.0 [ 40.804250][ T3729] loop0: detected capacity change from 0 to 512 [ 40.820855][ T3729] EXT4-fs: Ignoring removed oldalloc option [ 40.841451][ T3729] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.99: Parent and EA inode have the same ino 15 [ 40.870479][ T3729] EXT4-fs (loop0): Remounting filesystem read-only [ 40.877113][ T3729] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 40.900409][ T3729] EXT4-fs (loop0): 1 orphan inode deleted [ 40.906473][ T3729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.922728][ T3729] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.982731][ T3734] loop1: detected capacity change from 0 to 1024 [ 40.993556][ T3734] ======================================================= [ 40.993556][ T3734] WARNING: The mand mount option has been deprecated and [ 40.993556][ T3734] and is ignored by this kernel. Remove the mand [ 40.993556][ T3734] option from the mount to silence this warning. [ 40.993556][ T3734] ======================================================= [ 41.047185][ T3734] EXT4-fs: Ignoring removed i_version option [ 41.053298][ T3734] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.067701][ T3734] EXT4-fs: Ignoring removed nobh option [ 41.077553][ T3740] loop0: detected capacity change from 0 to 512 [ 41.116613][ T3734] EXT4-fs: Mount option(s) incompatible with ext2 [ 41.130516][ T3740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.147125][ T3740] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.262297][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.320947][ T3760] loop0: detected capacity change from 0 to 512 [ 41.342723][ T3760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.364331][ T3764] loop1: detected capacity change from 0 to 512 [ 41.376370][ T3764] EXT4-fs: Ignoring removed oldalloc option [ 41.384444][ T3760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.420268][ T3760] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.439131][ T3764] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.114: Parent and EA inode have the same ino 15 [ 41.452175][ T36] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 41.469586][ T3764] EXT4-fs (loop1): Remounting filesystem read-only [ 41.476286][ T3764] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 41.494209][ T3764] EXT4-fs (loop1): 1 orphan inode deleted [ 41.500610][ T3764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.514430][ T3764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.529989][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.566122][ T3779] IPv4: Oversized IP packet from 127.202.26.0 [ 41.607125][ T3783] loop0: detected capacity change from 0 to 1024 [ 41.642173][ T3783] EXT4-fs: Ignoring removed i_version option [ 41.648428][ T3783] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.680714][ T3783] EXT4-fs: Ignoring removed nobh option [ 41.686751][ T3783] EXT4-fs: Mount option(s) incompatible with ext2 [ 41.775235][ T3806] loop2: detected capacity change from 0 to 128 [ 41.782854][ T3809] netlink: 'syz.0.132': attribute type 7 has an invalid length. [ 41.790560][ T3809] __nla_validate_parse: 4 callbacks suppressed [ 41.790572][ T3809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 41.790895][ T3804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.130'. [ 41.841899][ T3806] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.847321][ T3804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.130'. [ 41.867132][ T3806] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.953787][ T3818] IPv4: Oversized IP packet from 127.202.26.0 [ 42.053433][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.143392][ T3830] bridge0: entered promiscuous mode [ 42.149529][ T3830] macsec1: entered allmulticast mode [ 42.155006][ T3830] bridge0: entered allmulticast mode [ 42.187641][ T3830] bridge0: port 3(macsec1) entered blocking state [ 42.194230][ T3830] bridge0: port 3(macsec1) entered disabled state [ 42.201750][ T3830] bridge0: left allmulticast mode [ 42.206820][ T3830] bridge0: left promiscuous mode [ 42.456738][ T3872] ref_ctr increment failed for inode: 0xf8 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005d280 [ 42.469814][ T3870] uprobe: syz.2.157:3870 failed to unregister, leaking uprobe [ 42.487296][ T3874] loop3: detected capacity change from 0 to 512 [ 42.495222][ T3874] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.512109][ T3874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.524764][ T3874] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.538342][ T3370] hid-generic 0000:0004:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 42.602407][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.627619][ T3885] loop2: detected capacity change from 0 to 1024 [ 42.641631][ T3885] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.655305][ T3885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.664098][ T3887] ref_ctr increment failed for inode: 0xc0 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888104509600 [ 42.682133][ T3886] uprobe: syz.3.162:3886 failed to unregister, leaking uprobe [ 42.865474][ T3908] loop0: detected capacity change from 0 to 512 [ 42.868899][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.883753][ T3909] ref_ctr increment failed for inode: 0xd0 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888104509600 [ 42.895371][ T3906] uprobe: syz.3.171:3906 failed to unregister, leaking uprobe [ 42.909310][ T3913] IPv4: Oversized IP packet from 127.202.26.0 [ 42.916661][ T3908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.929819][ T3908] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.952425][ T3915] loop2: detected capacity change from 0 to 512 [ 42.962480][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.979900][ T3915] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.017274][ T3915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.039879][ T3915] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.056807][ T3382] hid-generic 0000:0004:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 43.122240][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.158339][ T3934] loop1: detected capacity change from 0 to 1024 [ 43.194186][ T3934] EXT4-fs: Ignoring removed bh option [ 43.224990][ T3934] EXT4-fs: inline encryption not supported [ 43.231594][ T3934] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.243872][ T3934] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 43.252968][ T3944] FAULT_INJECTION: forcing a failure. [ 43.252968][ T3944] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.266109][ T3944] CPU: 1 UID: 0 PID: 3944 Comm: syz.2.184 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 43.266172][ T3944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.266189][ T3944] Call Trace: [ 43.266197][ T3944] [ 43.266207][ T3944] __dump_stack+0x1d/0x30 [ 43.266232][ T3944] dump_stack_lvl+0xe8/0x140 [ 43.266255][ T3944] dump_stack+0x15/0x1b [ 43.266284][ T3944] should_fail_ex+0x265/0x280 [ 43.266365][ T3944] should_fail+0xb/0x20 [ 43.266400][ T3944] should_fail_usercopy+0x1a/0x20 [ 43.266476][ T3944] _copy_from_iter+0xcf/0xdd0 [ 43.266498][ T3944] ? __build_skb_around+0x1a0/0x200 [ 43.266537][ T3944] ? __alloc_skb+0x223/0x320 [ 43.266567][ T3944] netlink_sendmsg+0x471/0x6b0 [ 43.266651][ T3944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.266759][ T3944] __sock_sendmsg+0x142/0x180 [ 43.266785][ T3944] ____sys_sendmsg+0x31e/0x4e0 [ 43.266851][ T3944] ___sys_sendmsg+0x17b/0x1d0 [ 43.266890][ T3944] __x64_sys_sendmsg+0xd4/0x160 [ 43.266918][ T3944] x64_sys_call+0x2999/0x2fb0 [ 43.266941][ T3944] do_syscall_64+0xd0/0x1a0 [ 43.267031][ T3944] ? clear_bhb_loop+0x25/0x80 [ 43.267061][ T3944] ? clear_bhb_loop+0x25/0x80 [ 43.267081][ T3944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.267102][ T3944] RIP: 0033:0x7f2c443be969 [ 43.267117][ T3944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.267139][ T3944] RSP: 002b:00007f2c42a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.267311][ T3944] RAX: ffffffffffffffda RBX: 00007f2c445e5fa0 RCX: 00007f2c443be969 [ 43.267325][ T3944] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.267336][ T3944] RBP: 00007f2c42a27090 R08: 0000000000000000 R09: 0000000000000000 [ 43.267347][ T3944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.267358][ T3944] R13: 0000000000000000 R14: 00007f2c445e5fa0 R15: 00007fff01aec798 [ 43.267436][ T3944] [ 43.277395][ T3934] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 2: comm syz.1.181: lblock 2 mapped to illegal pblock 2 (length 1) [ 43.485743][ T3934] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 48: comm syz.1.181: lblock 0 mapped to illegal pblock 48 (length 1) [ 43.504907][ T3934] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.181: Failed to acquire dquot type 0 [ 43.516903][ T3934] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 43.536156][ T3934] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.181: mark_inode_dirty error [ 43.554263][ T3934] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 43.572513][ T3934] EXT4-fs (loop1): 1 orphan inode deleted [ 43.578949][ T3934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.593041][ T12] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.614877][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 0 [ 43.619666][ T3957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.190'. [ 43.634305][ T3934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.181'. [ 43.646824][ T3957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.190'. [ 43.656527][ T3955] loop4: detected capacity change from 0 to 1024 [ 43.663711][ T3955] EXT4-fs: Ignoring removed i_version option [ 43.669792][ T3955] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.676559][ T3955] EXT4-fs: Ignoring removed nobh option [ 43.683443][ T3955] EXT4-fs: Mount option(s) incompatible with ext2 [ 43.691552][ T3934] netlink: 'syz.1.181': attribute type 10 has an invalid length. [ 43.699351][ T3934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.181'. [ 43.714520][ T3934] dummy0: entered promiscuous mode [ 43.726631][ T3960] loop0: detected capacity change from 0 to 512 [ 43.727683][ T3934] bridge0: port 3(dummy0) entered blocking state [ 43.739554][ T3934] bridge0: port 3(dummy0) entered disabled state [ 43.748495][ T3960] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.756958][ T3934] dummy0: entered allmulticast mode [ 43.776167][ T3934] bridge0: port 3(dummy0) entered blocking state [ 43.782705][ T3934] bridge0: port 3(dummy0) entered forwarding state [ 43.805059][ T3960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.822971][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.826541][ T3960] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.833502][ T3303] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 43.866145][ T1041] hid-generic 0000:0004:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 43.881603][ T3303] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 43.891424][ T3303] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 43.940676][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.010787][ T3973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'. [ 44.030166][ T3973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'. [ 44.070939][ T3986] loop0: detected capacity change from 0 to 128 [ 44.086619][ T3988] ref_ctr increment failed for inode: 0xba offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888104509600 [ 44.098280][ T3986] FAT-fs (loop0): bogus number of reserved sectors [ 44.104948][ T3987] uprobe: syz.1.202:3987 failed to unregister, leaking uprobe [ 44.112480][ T3986] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 44.121987][ T3986] FAT-fs (loop0): Can't find a valid FAT filesystem [ 44.212719][ T3998] loop1: detected capacity change from 0 to 512 [ 44.220802][ T3998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.252283][ T3998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.265033][ T3998] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.278081][ T3382] hid-generic 0000:0004:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 44.316696][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.722131][ T4025] ref_ctr increment failed for inode: 0xf9 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005c200 [ 44.733665][ T4024] uprobe: syz.1.217:4024 failed to unregister, leaking uprobe [ 44.865779][ T4028] loop1: detected capacity change from 0 to 512 [ 44.873180][ T4028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.893420][ T4028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.906074][ T4028] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.924910][ T36] hid-generic 0000:0004:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 44.986853][ T4037] IPv4: Oversized IP packet from 127.202.26.0 [ 45.081771][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.150128][ T4048] loop1: detected capacity change from 0 to 512 [ 45.227359][ T4048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.275934][ T29] kauditd_printk_skb: 994 callbacks suppressed [ 45.275950][ T29] audit: type=1326 audit(1745942569.879:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8e7de969 code=0x7ffc0000 [ 45.292875][ T4048] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.320494][ T29] audit: type=1326 audit(1745942569.879:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8e7de969 code=0x7ffc0000 [ 45.343901][ T29] audit: type=1326 audit(1745942569.879:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad8e7de969 code=0x7ffc0000 [ 45.367297][ T29] audit: type=1326 audit(1745942569.879:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8e7de969 code=0x7ffc0000 [ 45.390801][ T29] audit: type=1326 audit(1745942569.879:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8e7de969 code=0x7ffc0000 [ 45.414155][ T29] audit: type=1326 audit(1745942569.879:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad8e7de969 code=0x7ffc0000 [ 45.437561][ T29] audit: type=1326 audit(1745942569.879:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8e7de969 code=0x7ffc0000 [ 45.461051][ T29] audit: type=1326 audit(1745942569.879:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8e7de969 code=0x7ffc0000 [ 45.484691][ T29] audit: type=1326 audit(1745942569.879:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad8e7de969 code=0x7ffc0000 [ 45.495147][ T4061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.230'. [ 45.508020][ T29] audit: type=1326 audit(1745942569.879:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8e7de969 code=0x7ffc0000 [ 45.540650][ T4057] uprobe: syz.3.229:4057 failed to unregister, leaking uprobe [ 45.552022][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.639010][ T4070] loop0: detected capacity change from 0 to 1024 [ 45.647324][ T4070] EXT4-fs: Ignoring removed i_version option [ 45.653523][ T4070] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.663469][ T4070] EXT4-fs: Ignoring removed nobh option [ 45.675984][ T4072] SELinux: syz.1.232 (4072) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 45.697398][ T4070] EXT4-fs: Mount option(s) incompatible with ext2 [ 45.700788][ T4072] loop1: detected capacity change from 0 to 512 [ 45.704646][ T4073] usb usb6: usbfs: process 4073 (syz.3.234) did not claim interface 0 before use [ 45.715108][ T4072] ext4: Unknown parameter 'bh.journal_checksum' [ 45.885342][ T4086] IPv4: Oversized IP packet from 127.202.26.0 [ 45.923524][ T4091] loop0: detected capacity change from 0 to 512 [ 45.955375][ T4091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.969325][ T4091] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.993356][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.029017][ T4099] ref_ctr increment failed for inode: 0x158 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888119f09b80 [ 46.049464][ T4098] uprobe: syz.0.244:4098 failed to unregister, leaking uprobe [ 46.108268][ T4106] loop4: detected capacity change from 0 to 1024 [ 46.115832][ T4106] EXT4-fs: Ignoring removed i_version option [ 46.121902][ T4106] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.129084][ T4106] EXT4-fs: Ignoring removed nobh option [ 46.136582][ T4106] EXT4-fs: Mount option(s) incompatible with ext2 [ 46.195102][ T4118] IPv4: Oversized IP packet from 127.202.26.0 [ 46.231856][ T4122] loop3: detected capacity change from 0 to 512 [ 46.243997][ T4122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.262438][ T4122] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.298588][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.351590][ T4133] loop2: detected capacity change from 0 to 512 [ 46.379305][ T4133] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.402412][ T4133] EXT4-fs (loop2): 1 truncate cleaned up [ 46.409781][ T4133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.426859][ T4133] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.443724][ T4133] EXT4-fs error (device loop2): __ext4_iget:5025: inode #12: block 2: comm syz.2.258: invalid block [ 46.463340][ T4133] EXT4-fs (loop2): Remounting filesystem read-only [ 46.492086][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.525997][ T4143] ref_ctr increment failed for inode: 0xb5 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005c780 [ 46.574477][ T4149] IPv4: Oversized IP packet from 127.202.26.0 [ 46.592440][ T4142] uprobe: syz.4.261:4142 failed to unregister, leaking uprobe [ 46.614116][ T4152] loop3: detected capacity change from 0 to 1024 [ 46.626195][ T4152] EXT4-fs: Ignoring removed i_version option [ 46.632284][ T4152] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.637744][ T4156] loop1: detected capacity change from 0 to 512 [ 46.650447][ T4152] EXT4-fs: Ignoring removed nobh option [ 46.706324][ T4152] EXT4-fs: Mount option(s) incompatible with ext2 [ 46.852295][ T4156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.867062][ T4156] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.993251][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.062074][ T4228] netlink: 'syz.3.271': attribute type 3 has an invalid length. [ 47.173270][ T4233] __nla_validate_parse: 4 callbacks suppressed [ 47.173288][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 47.377922][ T4236] loop1: detected capacity change from 0 to 512 [ 47.424134][ T4236] EXT4-fs: Ignoring removed orlov option [ 47.457732][ T4236] EXT4-fs: Ignoring removed orlov option [ 47.487074][ T4236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.544761][ T4236] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 47.560672][ T4236] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.584888][ T4236] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.273: bg 0: block 248: padding at end of block bitmap is not set [ 47.614896][ T4251] ref_ctr increment failed for inode: 0x13b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888119f0c200 [ 47.636388][ T4236] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.273: Failed to acquire dquot type 1 [ 47.674504][ T4250] uprobe: syz.2.276:4250 failed to unregister, leaking uprobe [ 47.691972][ T4236] EXT4-fs (loop1): 1 truncate cleaned up [ 47.712085][ T4236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.740864][ T4236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.813348][ T4236] syz.1.273 (4236) used greatest stack depth: 9216 bytes left [ 47.960034][ T4270] loop3: detected capacity change from 0 to 2048 [ 47.968282][ T4268] IPv4: Oversized IP packet from 127.202.26.0 [ 48.046056][ T4270] loop3: p1 < > p4 [ 48.046149][ T4274] loop2: detected capacity change from 0 to 512 [ 48.057217][ T4270] loop3: p4 size 8388608 extends beyond EOD, truncated [ 48.086094][ T4274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.123620][ T3005] loop3: p1 < > p4 [ 48.131527][ T3005] loop3: p4 size 8388608 extends beyond EOD, truncated [ 48.139833][ T4274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.187693][ T4274] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.211361][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 48.228692][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 48.233304][ T3370] hid-generic 0000:0004:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 48.291236][ T4286] geneve0: entered allmulticast mode [ 48.310395][ T4286] tipc: Started in network mode [ 48.315320][ T4286] tipc: Node identity _, cluster identity 4711 [ 48.392777][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.591814][ T4308] IPv4: Oversized IP packet from 127.202.26.0 [ 48.783144][ T4323] loop3: detected capacity change from 0 to 512 [ 48.814162][ T4323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.862348][ T4323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.911974][ T4323] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.936042][ T3370] hid-generic 0000:0004:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 49.027567][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.074464][ T4332] loop3: detected capacity change from 0 to 1024 [ 49.099278][ T4332] EXT4-fs: Ignoring removed i_version option [ 49.105394][ T4332] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.121862][ T4332] EXT4-fs: Ignoring removed nobh option [ 49.143673][ T4332] EXT4-fs: Mount option(s) incompatible with ext2 [ 49.322473][ T4342] netlink: 'syz.1.316': attribute type 21 has an invalid length. [ 49.477572][ T4350] ref_ctr increment failed for inode: 0x1c4 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888119f0d800 [ 49.504903][ T4349] uprobe: syz.3.320:4349 failed to unregister, leaking uprobe [ 49.588031][ T4355] loop1: detected capacity change from 0 to 512 [ 49.596530][ T4355] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.606276][ T4355] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 49.650378][ T4355] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 49.686229][ T4355] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 49.695096][ T4355] System zones: 0-2, 18-18, 34-34 [ 49.709933][ T4355] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 49.747719][ T4355] EXT4-fs (loop1): 1 truncate cleaned up [ 49.754323][ T4355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.783265][ T4368] mmap: syz.4.328 (4368) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.795265][ T4355] wireguard0: entered promiscuous mode [ 49.800835][ T4355] wireguard0: entered allmulticast mode [ 49.866534][ T4377] loop4: detected capacity change from 0 to 512 [ 49.874348][ T4377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.904386][ T4377] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.917410][ T3382] hid-generic 0000:0004:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 49.921602][ T4370] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 50.032372][ T4387] loop2: detected capacity change from 0 to 512 [ 50.048638][ T4387] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.075819][ T4387] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.090834][ T3382] hid-generic 0000:0004:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 50.304626][ T4408] netlink: 44 bytes leftover after parsing attributes in process `syz.2.342'. [ 50.314360][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.321595][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.421042][ T4411] vhci_hcd: invalid port number 96 [ 50.426209][ T4411] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 50.507174][ T4411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 50.516247][ T29] kauditd_printk_skb: 1067 callbacks suppressed [ 50.516263][ T29] audit: type=1400 audit(1745942575.109:2560): avc: denied { write } for pid=4413 comm="syz.1.344" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.550416][ T4411] netlink: 2 bytes leftover after parsing attributes in process `syz.2.343'. [ 50.570013][ T4416] loop1: detected capacity change from 0 to 1024 [ 50.607615][ T4416] ext4: Unknown parameter 'noacl' [ 50.640498][ T4414] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 50.650894][ T4418] vhci_hcd: invalid port number 96 [ 50.655131][ T29] audit: type=1400 audit(1745942575.169:2561): avc: denied { setopt } for pid=4413 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.656013][ T4418] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 50.675496][ T29] audit: type=1400 audit(1745942575.249:2562): avc: denied { relabelto } for pid=4413 comm="syz.1.344" name="67" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 50.708527][ T29] audit: type=1400 audit(1745942575.249:2563): avc: denied { associate } for pid=4413 comm="syz.1.344" name="67" dev="tmpfs" ino=372 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 50.740544][ T29] audit: type=1400 audit(1745942575.289:2564): avc: denied { write } for pid=4413 comm="syz.1.344" name="67" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 50.766577][ T29] audit: type=1400 audit(1745942575.289:2565): avc: denied { add_name } for pid=4413 comm="syz.1.344" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 50.792875][ T29] audit: type=1400 audit(1745942575.289:2566): avc: denied { associate } for pid=4413 comm="syz.1.344" name="blkio.bfq.avg_queue_size" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.817244][ T29] audit: type=1400 audit(1745942575.349:2567): avc: denied { remove_name } for pid=3303 comm="syz-executor" name="blkio.bfq.avg_queue_size" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 50.845772][ T29] audit: type=1400 audit(1745942575.349:2568): avc: denied { unlink } for pid=3303 comm="syz-executor" name="blkio.bfq.avg_queue_size" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.869865][ T29] audit: type=1400 audit(1745942575.349:2569): avc: denied { rmdir } for pid=3303 comm="syz-executor" name="67" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 50.895929][ T4421] netlink: 44 bytes leftover after parsing attributes in process `syz.2.345'. [ 50.949342][ T4426] ref_ctr increment failed for inode: 0x185 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888119f0e300 [ 51.003389][ T4425] uprobe: syz.1.348:4425 failed to unregister, leaking uprobe [ 51.114316][ T4434] loop1: detected capacity change from 0 to 512 [ 51.175538][ T4439] loop1: detected capacity change from 0 to 512 [ 51.192117][ T4439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.214097][ T4443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.355'. [ 51.224244][ T4441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.354'. [ 51.250391][ T4439] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.261194][ T4443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.355'. [ 51.278166][ T4441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.354'. [ 51.288656][ T3382] hid-generic 0000:0004:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 51.587860][ T4466] ref_ctr increment failed for inode: 0x1a0 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005d280 [ 51.640751][ T4465] uprobe: syz.1.363:4465 failed to unregister, leaking uprobe [ 51.668629][ T4472] loop3: detected capacity change from 0 to 1024 [ 51.694003][ T4472] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.742678][ T4474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.366'. [ 51.762126][ T4474] futex_wake_op: syz.4.366 tries to shift op by -1; fix this program [ 51.780441][ T4474] loop4: detected capacity change from 0 to 128 [ 51.851510][ T4480] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 51.867244][ T4474] loop4: detected capacity change from 0 to 128 [ 51.892757][ T4474] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.909224][ T4192] tipc: Subscription rejected, illegal request [ 51.934113][ T4480] tipc: Cannot configure node identity twice [ 51.942267][ T4474] loop4: detected capacity change from 0 to 512 [ 51.973591][ T4474] EXT4-fs (loop4): too many log groups per flexible block group [ 51.981370][ T4474] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 52.034920][ T4474] EXT4-fs (loop4): mount failed [ 52.140457][ T4509] loop3: detected capacity change from 0 to 1024 [ 52.162911][ T4509] EXT4-fs: Ignoring removed i_version option [ 52.163495][ T4515] loop1: detected capacity change from 0 to 128 [ 52.169173][ T4509] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.205284][ T4509] EXT4-fs: Ignoring removed nobh option [ 52.229356][ T4509] EXT4-fs: Mount option(s) incompatible with ext2 [ 52.283839][ T4527] syz.1.377: attempt to access beyond end of device [ 52.283839][ T4527] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 52.304252][ T4527] syz.1.377: attempt to access beyond end of device [ 52.304252][ T4527] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 52.320727][ T4529] ref_ctr increment failed for inode: 0x22a offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005c780 [ 52.332707][ T4528] uprobe: syz.3.379:4528 failed to unregister, leaking uprobe [ 52.365333][ T4527] syz.1.377: attempt to access beyond end of device [ 52.365333][ T4527] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 52.408990][ T4538] syz.2.381: attempt to access beyond end of device [ 52.408990][ T4538] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 52.426000][ T4538] x_tables: duplicate underflow at hook 4 [ 52.455325][ T4535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.380'. [ 52.479721][ T4527] syz.1.377: attempt to access beyond end of device [ 52.479721][ T4527] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 52.528505][ T4549] syz.1.377: attempt to access beyond end of device [ 52.528505][ T4549] loop1: rw=2049, sector=745, nr_sectors = 56 limit=128 [ 52.536971][ T4535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.380'. [ 52.685814][ T4527] syz.1.377: attempt to access beyond end of device [ 52.685814][ T4527] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 52.704292][ T4549] syz.1.377: attempt to access beyond end of device [ 52.704292][ T4549] loop1: rw=2049, sector=809, nr_sectors = 8 limit=128 [ 52.723084][ T4549] syz.1.377: attempt to access beyond end of device [ 52.723084][ T4549] loop1: rw=2049, sector=825, nr_sectors = 8 limit=128 [ 52.744721][ T4571] loop2: detected capacity change from 0 to 1024 [ 52.753126][ T4571] EXT4-fs: Ignoring removed i_version option [ 52.759291][ T4571] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.766031][ T4549] syz.1.377: attempt to access beyond end of device [ 52.766031][ T4549] loop1: rw=2049, sector=841, nr_sectors = 8 limit=128 [ 52.802609][ T4571] EXT4-fs: Ignoring removed nobh option [ 52.812671][ T4571] EXT4-fs: Mount option(s) incompatible with ext2 [ 52.969830][ T4602] ref_ctr increment failed for inode: 0x11d offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888119f09080 [ 53.015148][ T4604] loop1: detected capacity change from 0 to 512 [ 53.031396][ T4600] uprobe: syz.4.393:4600 failed to unregister, leaking uprobe [ 53.050209][ T4604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.086591][ T4604] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.100843][ T36] hid-generic 0000:0004:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 53.260169][ T4624] loop4: detected capacity change from 0 to 1024 [ 53.288424][ T4624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.608558][ T4639] loop4: detected capacity change from 0 to 512 [ 53.615658][ T4639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.663777][ T4639] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.713647][ T3382] hid-generic 0000:0004:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 53.863682][ T4650] loop2: detected capacity change from 0 to 1024 [ 53.887849][ T4654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 53.904241][ T4654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 53.917580][ T4650] EXT4-fs: Ignoring removed i_version option [ 53.923799][ T4650] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.938558][ T4650] EXT4-fs: Ignoring removed nobh option [ 53.961589][ T4650] EXT4-fs: Mount option(s) incompatible with ext2 [ 53.982418][ T4658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 54.227312][ T4683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.421'. [ 54.242850][ T4687] loop3: detected capacity change from 0 to 512 [ 54.254397][ T4683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.421'. [ 54.263941][ T4687] EXT4-fs: Ignoring removed oldalloc option [ 54.298079][ T4687] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.422: Parent and EA inode have the same ino 15 [ 54.333995][ T4691] ref_ctr increment failed for inode: 0x1f4 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005f900 [ 54.346747][ T4687] EXT4-fs (loop3): Remounting filesystem read-only [ 54.353326][ T4687] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 54.365282][ T4690] uprobe: syz.1.423:4690 failed to unregister, leaking uprobe [ 54.372865][ T4687] EXT4-fs (loop3): 1 orphan inode deleted [ 54.409921][ T4695] x_tables: duplicate underflow at hook 4 [ 54.502609][ T4705] loop3: detected capacity change from 0 to 512 [ 54.509511][ T4705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.533634][ T4705] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.570420][ T36] hid-generic 0000:0004:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 54.621837][ T4715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.434'. [ 54.638566][ T4715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.434'. [ 54.687975][ T4724] loop0: detected capacity change from 0 to 512 [ 54.702520][ T4724] EXT4-fs: Ignoring removed oldalloc option [ 54.713114][ T4724] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.436: Parent and EA inode have the same ino 15 [ 54.726067][ T4724] EXT4-fs (loop0): Remounting filesystem read-only [ 54.732742][ T4724] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 54.743101][ T4726] loop3: detected capacity change from 0 to 512 [ 54.743470][ T4724] EXT4-fs (loop0): 1 orphan inode deleted [ 54.753790][ T4726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.793820][ T4726] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.824022][ T3378] hid-generic 0000:0004:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 54.848468][ T4739] loop1: detected capacity change from 0 to 1024 [ 54.856111][ T4739] EXT4-fs: Ignoring removed i_version option [ 54.861856][ T4737] loop0: detected capacity change from 0 to 512 [ 54.862204][ T4739] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.875040][ T4739] EXT4-fs: Ignoring removed nobh option [ 54.879175][ T4737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.889596][ T4739] EXT4-fs: Mount option(s) incompatible with ext2 [ 54.931477][ T4737] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.945964][ T4745] loop2: detected capacity change from 0 to 512 [ 54.954251][ T3382] hid-generic 0000:0004:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 54.954737][ T4745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.994723][ T4745] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.012882][ T3382] hid-generic 0000:0004:0000.0016: hidraw1: HID v0.00 Device [syz0] on syz1 [ 55.049107][ T4751] ref_ctr increment failed for inode: 0x29b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888119f0e880 [ 55.066040][ T4750] uprobe: syz.3.447:4750 failed to unregister, leaking uprobe [ 55.087618][ T4755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.448'. [ 55.120340][ T4755] ================================================================== [ 55.128461][ T4755] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 55.135502][ T4755] [ 55.137833][ T4755] write to 0xffff888237d1ae60 of 8 bytes by interrupt on cpu 1: [ 55.145461][ T4755] hrtimer_interrupt+0x193/0x460 [ 55.150426][ T4755] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 55.156327][ T4755] sysvec_apic_timer_interrupt+0x32/0x80 [ 55.161983][ T4755] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 55.167991][ T4755] [ 55.170320][ T4755] read to 0xffff888237d1ae60 of 8 bytes by task 4755 on cpu 0: [ 55.177967][ T4755] print_cpu+0x30b/0x680 [ 55.182223][ T4755] timer_list_show+0x107/0x170 [ 55.187000][ T4755] seq_read_iter+0x627/0x940 [ 55.191595][ T4755] proc_reg_read_iter+0x10d/0x180 [ 55.196635][ T4755] copy_splice_read+0x3c1/0x5f0 [ 55.201495][ T4755] splice_direct_to_actor+0x26c/0x680 [ 55.206877][ T4755] do_splice_direct+0xda/0x150 [ 55.211746][ T4755] do_sendfile+0x380/0x640 [ 55.216183][ T4755] __x64_sys_sendfile64+0x105/0x150 [ 55.221397][ T4755] x64_sys_call+0xb39/0x2fb0 [ 55.226004][ T4755] do_syscall_64+0xd0/0x1a0 [ 55.230606][ T4755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.236505][ T4755] [ 55.238831][ T4755] value changed: 0x0000000cd4374700 -> 0x7fffffffffffffff [ 55.245936][ T4755] [ 55.248262][ T4755] Reported by Kernel Concurrency Sanitizer on: [ 55.254413][ T4755] CPU: 0 UID: 0 PID: 4755 Comm: syz.0.448 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 55.266841][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 55.276909][ T4755] ==================================================================