last executing test programs: 2m23.352127851s ago: executing program 1 (id=2753): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) flock(r0, 0x8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0xf7, @tick=0x186b, 0x0, {0xb, 0x1}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000280), &(0x7f0000000300)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000540)={0x800, 0x80000000, 0x1, 'queue1\x00', 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x0, 0x5, 0x4}, {0x43a5, 0x5, 0x3, 0x49}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000001280)=ANY=[@ANYBLOB="bbdbe01ee902000000000000080045000d730002000000119078000000000000000000004e200d5f90780400000007740000fdffffffffffffff9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea75e4665d779112a7c9f3e0a2b34e3894bb7a4685fd9ec789a777d4b10d3c2728b2c6520abe631408398dd1"], 0x0) 2m23.313977393s ago: executing program 1 (id=2754): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) tgkill(0x0, 0x0, 0x11) 2m23.294961575s ago: executing program 1 (id=2755): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m23.282902886s ago: executing program 1 (id=2756): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x445e, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0x0, 0xfffffffd}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@isdn}) io_uring_enter(r0, 0x281c, 0x600c, 0x0, 0x0, 0xfffffffffffffff0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5ff201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000300)) ioctl$TCFLSH(r6, 0x540f, 0x300000000000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000e3ffff840000005900000095"], 0x0}, 0x94) 2m23.141037438s ago: executing program 1 (id=2757): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 2m22.720001352s ago: executing program 1 (id=2760): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) fadvise64(r1, 0x9, 0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1287, &(0x7f0000001d40)="$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") ftruncate(0xffffffffffffffff, 0x2000009) chdir(&(0x7f0000000540)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, 0x0, &(0x7f0000000840)=r3}, 0x20) syz_clone3(&(0x7f0000000340)={0x20220080, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) r6 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3d0}) close(r6) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) 2m22.719390102s ago: executing program 32 (id=2760): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) fadvise64(r1, 0x9, 0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1287, &(0x7f0000001d40)="$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") ftruncate(0xffffffffffffffff, 0x2000009) chdir(&(0x7f0000000540)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, 0x0, &(0x7f0000000840)=r3}, 0x20) syz_clone3(&(0x7f0000000340)={0x20220080, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) r6 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3d0}) close(r6) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) 1m35.538402759s ago: executing program 4 (id=3617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x17, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x1fb5}, @call={0x85, 0x0, 0x0, 0x28}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @map_fd={0x18, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000280)='syzkaller\x00', 0x100, 0x9c, &(0x7f0000000500)=""/156, 0x40f00, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1, r1, r1, 0xffffffffffffffff, r1], &(0x7f0000000640), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 1m35.488702024s ago: executing program 4 (id=3618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000600), r3, 0x1}}, 0x18) 1m35.41092967s ago: executing program 4 (id=3622): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x4800) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x1a, r4, 0x1, 0x1, 0x6, @broadcast}, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1m35.347897855s ago: executing program 4 (id=3626): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@oldalloc}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46b, &(0x7f0000000740)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSeOjpQWVhRuNJi4wmugCl7UdSMNADa2JECLFGNyYGBJdG5cm/gXujIlRVyZudW9IiLIBXdXcO/fCdJgpFKa9lfl8ktuec++ZOec793XuOTMB9KyR7E8SsS0ifouIoUZ2eYGRxr9rV85O/33l7HQSS0tv/Znk5a5eOTtdFi1ft7XIjKYR6cdJUcly86fPHJ+q12univz4won3xudPn3l29sTUsdqx2snJQ4cOHph44fnJ57oSZxbX1T0fzu3d/do7F1+fPnLx3Z++ydq7rdjeHEe3jGSB/7WUa932ZLcrq9j2pnTSX2FDWJW+iMh210B+/g9FX9zYeUPx6keVNg5YU9m9aVPnzYtLwD0siapbAFSjvNFnz7/lsk5djw3h8kuNB6As7mvF0tjSH2lRZqDl+babRiLiyOI/X2ZLrNE4BABAs0+nvzgcz7Tr/6XxQFO5HcUcynBE/D8idkbEfRGxKyLuj8jLPhgRD62y/tapoZv7P+mlOwrsNmX9vxeLua3l/b+y9xfDfUVuex7/QHJ0tl7bX3wmozGwKctPrFDHd6/8+lmnbc39v2zJ6i/7gkU7LvW3DNDNTC1M5Z3SLrh8PmJPf7v4k+szAUlE7I6IPat76x1lYvapr/d2KnTr+FfQhXmmpa+y8Baz+BejJf5SsvL85PjmqNf2j5dHxc1+/uXCm53qv6v4u+ByrfG/af+3FhlOmudr51dfx4XfP+n4THOHx386mLydzzMPFus+mFpYODURMZgczvPL1k/eeG2ZL8tnx//ovvbn/87iNVn8D0dEdhA/EhGPRsRjRdsfj4gnImLfCvH/+HLnbWX8kVa0/89HzLS9/l0//lv2/+oTfcd/+LZT/be3/w/mqdFiTX79u4V2zckuF60NvJvPDgAAAP4r0vw78Ek6dj2dpmNjje/w74r/pfW5+YWnj869f3Km8V354RhIy5GuoWI8tD5br00ki8U7NsZHJ4ux4nK89EAxbvx535Y8PzY9V5+pOHbodVs7nP+ZP/qqbh2wxra0XTs5uO4NASrQOo+eLs+ee2M9GwOsK7/Xht51i/M/Xa92AOvP/R96V7vz/1xL3lwA3Jvc/6F3Of+hR6XfV90CoELu/9CT7uZ3/WuY2LwxmlFNYqPulDwRUSbSDdEeiTVKVH1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA//+Afus0") ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002ae800000000050029000100000008000300", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) getpgrp(0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r11}, 0x18) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000002100210100000000000000000a00000000000001000000000c0018"], 0x28}}, 0x0) 1m35.145280811s ago: executing program 4 (id=3627): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000010000000000000000000004cf8a8335b4986e87e68e82f0e219109ae914f432fc8b27a1a3442db7fa4fd08d258f613f49840fe994be1a5f92f486c099052a53d6a74d83c3d7c47e194accfdb445f39f9ce9bb58e451ba941f9ad46e005deb301afb4396f96830f4ee376c456ed2663bae2d77dd034fdfd9a805761b29a99473a08b9e11e948ad0a008769e088b24b3d3bd209dbe02a973b17d38ae572cf7753ce27fb14b7670b0020267aa05074da120fac07ef188b60d576e1962f07d526c8522e70b49f92460d7a44"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000039c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r1, 0x0, 0x40002002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000900160500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140), 0x0) r8 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x0) 1m34.823471207s ago: executing program 4 (id=3630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x4000000000000}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0xa0, &(0x7f0000000240)={0xa1, 0x15, 0x6, 0x42}, 0x8, 0xffffffff, 0xd8e, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80202, 0x148) write$cgroup_type(r6, &(0x7f0000000080), 0x9) fallocate(r5, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 1m34.823228087s ago: executing program 33 (id=3630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x4000000000000}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0xa0, &(0x7f0000000240)={0xa1, 0x15, 0x6, 0x42}, 0x8, 0xffffffff, 0xd8e, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80202, 0x148) write$cgroup_type(r6, &(0x7f0000000080), 0x9) fallocate(r5, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 50.796194401s ago: executing program 2 (id=4498): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) statfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)=""/128) (fail_nth: 2) 50.414886142s ago: executing program 2 (id=4500): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0) 50.300061201s ago: executing program 2 (id=4502): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 50.233127546s ago: executing program 2 (id=4503): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1a404ac, &(0x7f0000000d80)=ANY=[@ANYBLOB="ba618c14e6c7e698de3fb8b765b993fa49575985fb77bf8cbe11f3e10fe145c3161212e5b9a65501d007df1337c25665e8404c1dc11c53041207bea7fd891761869c2d7d6a7a06c71bfcfe33d41cab42b82ecd0a1fd7f713b1fc70fee63b712bbefbb0a96138503f0163651b0512fa7aa1c1df2df969aa400e0f1901ad03d5cb2eaa2e2fd9500641a214a4ff49e005d1eeb61c2893e933bb23f2568bb02382c787f0c6642de45d21683e0bcf71115878d6e9a489bf815b4133e3d156bdd935a75e", @ANYBLOB="5e0584d98ab9a07cae177cb398fee2c48255da63f1ae64afe765132ed12cbc9bfb022226e28fb35070dc87ba1b2a3a6c20825430fcacee5452969171f4cdf23c85b7bffa4df736ccac00310973de025b31f0382cd0add86117309479fb585673aceae9ba360bada48478ccccfe4a6f24eef38a77e18f1527fe8efaaf56820321cc1f0c607438ef99fde6fc57ec4c27b82affbb7bfd4dd5e00136eecafa7e90973740aa78aa201350d4a0460c40bf274cfc068799c6d7f82a5cc82652ea98ea29f7b1538a78f7a47390d04591b868c9d40b515a43a90b87ee8d0ca9a5eefbfb6f79ea17a81fc573", @ANYRESHEX, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16, @ANYRESDEC, @ANYRESHEX], 0xfe, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB]) mount$tmpfs(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_ino']) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedn\xe5+\xf0', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r2, 0x5, &(0x7f00000002c0)={0x0, 0x2, 0xa, 0x8000000000000001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2a}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="02030002020000002cbd7000fcdbdf255cb307e3f1730f796a45b0a18e924472f6d16a3970c60f987fa7ff689249339504351b19cf0358d3c010f51b9876e0c356a25ab2234ff6237211764ab235689260539f0b51f0a2aeba9f5cca77d584fec30890c6c25361189682ef5a81010f6e9fcdede9e30ddc80e82bb06470d1436d6a0314755be21856fdfb356a727f11857de9ff3137f4387c248fc3854093b45fffffaeef32c92425b36f503b800ddbea8ebe4e9b92d8eaca7117010966e83551428066a321"], 0x10}, 0x1, 0x7}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) get_mempolicy(&(0x7f0000000300), &(0x7f0000000400), 0x2, &(0x7f0000000000/0x4000)=nil, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r5}, 0x18) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x6, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 49.357396307s ago: executing program 2 (id=4523): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=']) 49.161142493s ago: executing program 2 (id=4527): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000000005000740f200000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) 49.040697872s ago: executing program 34 (id=4527): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000000005000740f200000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) 3.368585449s ago: executing program 5 (id=5138): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 3.312141703s ago: executing program 5 (id=5139): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0xff, 0x7fff000a}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000680)=[{0x6, 0x1, 0x27, 0x9}]}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1002, @loopback, 0xffdfffff}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xffffff56, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4080) writev(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000ffffbfffffffffe100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) 1.9797795s ago: executing program 5 (id=5162): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 1.634841328s ago: executing program 5 (id=5167): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x4800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) memfd_create(0x0, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x1a, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.584050282s ago: executing program 5 (id=5171): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) open(0x0, 0x145142, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x20c042, 0x0) socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x3000046, &(0x7f0000000840)={[{@delalloc}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@bsdgroups}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@abort}, {@nodelalloc}, {@nobh}, {@user_xattr}, {@dioread_lock}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTX/sp66DMVRECntwMpeurT8m+DAfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EN/13cfhP+BfMdDBkFH0wZfKTW+6dE3atMuaznw+cMM590fOPbn3nHxPTkIC6Fuj2UMh4uWI+CaJOBIRSb5tMPKNo6v7LT+6MZUtSaysfPpXUt8vyzeeq3HcoTzzUkT89lXEqcLGcquLS7Olcjmdz/NjtbmrY9XFpdOX50oz6Ux6ZWJy8uzbkxPvvftO1+r6xoV/vv/k3odnvz6x/N0vD47eSeJcHM63NddjZ4azh5vNa0ZjNH9NhuLcE3uPP11he07S6xNgRwbydj4UWR9wJAbyVg/8/30ZEStAn0rat/9IdvVMgN3ViAMaY/vNx8EvrqWaj32ePfxgdQC0sf6Dq5+NxP762OjgcrJuZJSNd0e6UH5Wxq9/3r2TLdGVzyEAOnPzVkScGRzc2P8lef+3c2dar97fnHmyDP0f7J57WfzzZqv4p7AW/0SL+OdQi7a7E1u3/8KDLhTTVhb/vd8y/l2btBoZyHMv1GO+oeTS5XJ6Jo+GT8bQviy/2XzO2eX7bWPl5vgvW7LyG7Fgfh4PBvetP2a6VCvVP7jrgoe3Il5pGf8ma9c/aXH9s9fjQodlHE/vvtZu29b1f7ZWfop4veX1fzyjlWw+PzlWvx/GGnfFRn/fPv57u/J7Xf/s+h/cvP4jSfN8bXX7Zfy4/9+03bZ19Y/O7//h5LN6ejhfd71Uq82PRwwnH29cP/H42Ea+sX9W/5MnNu//Wt3/ByLi8w7rf/vYz692VP8eXf/pbV3/7Sfuf/TFD+3K76z/e6ueOpmvqfd/W+j0BJ/mtQMAAAAAAIC9phARhyMpFNfShUKxuPr9jmNxsFCuVGunLlUWrkxH/beyIzFUaMx0H2n6PsR4/n3YRn7iifxkRByNiG8HDtTzxalKebrXlQcAAAAAAAAAAAAAAAAAAIA94lCb3/9n/hjo9dkBz5y//Ib+tWX778Y/PQF7kvd/6F/aP/Qv7R/6l/YP/Uv7h/61rv2b9Ie+4v0f+pf2DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF114fz5bFlZfnRjKstPX1tcmK1cOz2dVmeLcwtTxanK/NXiTKUyU06LU5W5rZ6vXKlcHZ+IhetjtbRaG6suLl2cqyxcqV28PFeaSS+mQ7tSKwAAAAAAAAAAAAAAAAAAAHi+VBeXZkvlcjovIbGjxODeOA2JLid63TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGP/BQAA///oaTpO") chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f000000000000050001"], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.438038824s ago: executing program 6 (id=5181): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x4800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) memfd_create(0x0, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x1a, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.383526148s ago: executing program 6 (id=5182): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0xf) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r6 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYRESDEC=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @broadcast}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21404e, &(0x7f0000000440)={[{@nombcache}, {@noblock_validity}, {@noquota}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x524, &(0x7f00000004c0)="$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") timer_gettime(r10, 0x0) rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") socket$inet_sctp(0x2, 0x5, 0x84) r11 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) connect$unix(r5, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) write$cgroup_devices(r11, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r11, &(0x7f0000000c00)=ANY=[@ANYBLOB="62202a3a2a20720074133d8c7ca6aafc857cf66c60c45c590585fb3b152c1fcee36b8d2399c4c591ff56f6a828ce203de1aa3fa306cacb65a72527be2e365727ab4f453012491ba53550ccf27f8b3c45cc6382e572a2435ecf5b479b5237f347ede96fecffdc6b74e26d4a768434ebdf40"], 0x8) 883.523899ms ago: executing program 6 (id=5183): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000280), &(0x7f0000000300)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0) 828.745853ms ago: executing program 6 (id=5184): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0xa70410b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), 0x0, 0x0, 0x3c, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000008c0)={'erspan0\x00', &(0x7f0000000700)={'gretap0\x00', r6, 0x7800, 0x20, 0x8d, 0x3, {{0xc, 0x4, 0x1, 0x5, 0x30, 0x66, 0x0, 0x7f, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@cipso={0x86, 0x19, 0x1, [{0x6, 0x6, "d2ebb6ea"}, {0x5, 0xd, "0d39020fd6c330a355ebf2"}]}, @noop, @end]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x18) writev(r3, &(0x7f0000000440)=[{&(0x7f00000002c0)='\x00\x004', 0x3}], 0x1) 805.348835ms ago: executing program 6 (id=5185): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x200, 0x0, 0x0, 0x41000, 0x2c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) 804.333795ms ago: executing program 3 (id=5186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x4140) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 737.819811ms ago: executing program 6 (id=5187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='afs_send_data\x00', r2, 0x0, 0x7}, 0xffffff0a) r3 = openat(0xffffffffffffffff, 0x0, 0x515a02, 0x52abe154ad664fa4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x8000, 0x10) msgget$private(0x0, 0x620) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x4, 0x597, &(0x7f0000000b80)="$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") r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000300)=0x4) ioctl$PPPIOCSACTIVE(r10, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r10, 0x0, 0xff40) write$ppp(r10, &(0x7f0000000200)="bc72", 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) unshare(0x2c020400) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 686.678875ms ago: executing program 5 (id=5188): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0xff, 0x7fff000a}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000680)=[{0x6, 0x1, 0x27, 0x9}]}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1002, @loopback, 0xffdfffff}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xffffff56, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4080) writev(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000ffffbfffffffffe100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) 525.967308ms ago: executing program 0 (id=5192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6d21e50c, 0x0) 499.00868ms ago: executing program 0 (id=5193): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 498.45985ms ago: executing program 0 (id=5195): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) 424.685996ms ago: executing program 0 (id=5197): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0xa70410b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), 0x0, 0x0, 0x3c, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000008c0)={'erspan0\x00', &(0x7f0000000700)={'gretap0\x00', r6, 0x7800, 0x20, 0x8d, 0x3, {{0xc, 0x4, 0x1, 0x5, 0x30, 0x66, 0x0, 0x7f, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@cipso={0x86, 0x19, 0x1, [{0x6, 0x6, "d2ebb6ea"}, {0x5, 0xd, "0d39020fd6c330a355ebf2"}]}, @noop, @end]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x18) writev(r3, &(0x7f0000000440)=[{&(0x7f00000002c0)='\x00\x004', 0x3}], 0x1) 388.050459ms ago: executing program 0 (id=5208): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x5c37, 0x80, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55000000000300060000000000020000001c000000000000000000000002000100000000000000030d00000000030005000000000002000000ac1414000000000000000000"], 0x78}, 0x1, 0x7}, 0x10) 288.281787ms ago: executing program 3 (id=5199): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0x20, 0x3, 0x10001, {{0x1f, 0x4, 0x3, 0x1, 0x7c, 0x66, 0x0, 0x2, 0xa4a8883ca87ef0b9, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @end, @timestamp={0x44, 0x20, 0xeb, 0x0, 0xe, [0x4, 0x0, 0x5d8, 0x8, 0xffffffff, 0xffffffff, 0x8]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x1, 0xc, "266c1706636d53748839"}, {0x1, 0x2}, {0x7, 0x6, "9574d506"}, {0x6, 0x5, "9826a3"}, {0x0, 0x8, "bc8556952968"}]}, @timestamp_prespec={0x44, 0xc, 0x84, 0x3, 0x8, [{@rand_addr=0x64010101, 0xf4}]}, @ra={0x94, 0x4, 0x1}, @generic={0x0, 0x6, "c94dbadc"}, @rr={0x7, 0x7, 0x4d, [@remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000680)={'wg0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x5, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8400, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x20000000, 0x8, 0x6, 0x9, 0x0, 0x0, 0x2, 0x0, 0x4cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x7f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000000000000004100000000000"], 0x50) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0xa4}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'erspan0\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x7, 0x80, 0x3, 0x9, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x67, 0x0, 0xff, 0x4, 0x0, @broadcast, @empty, {[@noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000740)={@local}, &(0x7f0000000780)=0x14) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18140000000000000000000000ffffff7f000000000000009500000000000000384400000300000000000000000000008500000032000000959d000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xa}, 0x94) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvfrom$packet(r8, &(0x7f00000001c0)=""/109, 0x6d, 0x12163, &(0x7f0000000040)={0x11, 0x1a, 0x0, 0x1, 0x81, 0x6, @local}, 0x14) 231.881701ms ago: executing program 0 (id=5200): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r1, 0x0, 0x40000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) 210.414713ms ago: executing program 3 (id=5201): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 189.637075ms ago: executing program 3 (id=5204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6d21e50c, 0x0) 148.420348ms ago: executing program 3 (id=5205): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b2008500"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) 147.757118ms ago: executing program 7 (id=5206): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a0000000000", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 126.47299ms ago: executing program 7 (id=5207): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 110.946742ms ago: executing program 7 (id=5209): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0xa70410b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), 0x0, 0x0, 0x3c, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000008c0)={'erspan0\x00', &(0x7f0000000700)={'gretap0\x00', r6, 0x7800, 0x20, 0x8d, 0x3, {{0xc, 0x4, 0x1, 0x5, 0x30, 0x66, 0x0, 0x7f, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@cipso={0x86, 0x19, 0x1, [{0x6, 0x6, "d2ebb6ea"}, {0x5, 0xd, "0d39020fd6c330a355ebf2"}]}, @noop, @end]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x18) writev(r3, &(0x7f0000000440)=[{&(0x7f00000002c0)='\x00\x004', 0x3}], 0x1) 76.127344ms ago: executing program 7 (id=5210): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 75.396544ms ago: executing program 7 (id=5211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c8"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7bfc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 72.237994ms ago: executing program 3 (id=5212): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000000005000740f200000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) 0s ago: executing program 7 (id=5213): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000002100000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000085000000430000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r4, &(0x7f0000003740)=[{&(0x7f0000001440)='deny;', 0x5}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x1800) r6 = openat(r0, &(0x7f0000000440)='./bus\x00', 0x2, 0xc) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000d00)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032bbd7000fcdbdf25020000000e000a002a2d405d2e2d2614285c0000100007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c0006000200000000000000000c000200e0229a2d6f1e0ab93cb9b89b5607000000000000000c0006000300000000000000100007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0b8d83b34f0baaa840adc4c9b48750fe69765f9907e9ae05c94a2e89be59b219924f24c492ca98d19db94186f3c45635c852914d4f3484dd41abdd65494bba9d1a773f071d4e8c198be44a266d5be652118f4bd1804746cfe6c0bc10f46bdf0abe151f76ecac2901f56e960d357b4cde4501075cf242b60ad14c3892b446220545917489ce1998273fb8478b730c3b233555062e4662e4a681518bbd892e49e64c55626f2b0ab4356bcc315d0da0ba067d3544ccf00b9364"], 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x28008800) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='kfree\x00'}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r8, 0x0, 0x2) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r5], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r9}, 0x18) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r10, &(0x7f00000025c0)=[{&(0x7f0000000080)='4u', 0x2}], 0x1) kernel console output (not intermixed with test programs): t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 261.875260][ T29] audit: type=1400 audit(2000000369.819:14916): avc: denied { name_connect } for pid=16703 comm="syz.5.4493" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 261.904085][T16700] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.924287][ T3429] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.936328][ T3429] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.945625][ T4151] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 261.961124][ T3429] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.961683][T16700] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.4495: corrupted inode contents [ 261.976346][ T3429] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.990689][ T4151] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 262.006034][T16708] FAULT_INJECTION: forcing a failure. [ 262.006034][T16708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.019125][T16708] CPU: 1 UID: 0 PID: 16708 Comm: syz.2.4498 Not tainted syzkaller #0 PREEMPT(voluntary) [ 262.019196][T16708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.019206][T16708] Call Trace: [ 262.019212][T16708] [ 262.019219][T16708] __dump_stack+0x1d/0x30 [ 262.019239][T16708] dump_stack_lvl+0xe8/0x140 [ 262.019257][T16708] dump_stack+0x15/0x1b [ 262.019350][T16708] should_fail_ex+0x265/0x280 [ 262.019373][T16708] should_fail+0xb/0x20 [ 262.019391][T16708] should_fail_usercopy+0x1a/0x20 [ 262.019411][T16708] strncpy_from_user+0x25/0x230 [ 262.019463][T16708] ? kmem_cache_alloc_noprof+0x186/0x310 [ 262.019485][T16708] ? getname_flags+0x80/0x3b0 [ 262.019509][T16708] getname_flags+0xae/0x3b0 [ 262.019563][T16708] user_path_at+0x28/0x130 [ 262.019590][T16708] user_statfs+0x4d/0x110 [ 262.019688][T16708] __x64_sys_statfs+0x65/0xf0 [ 262.019716][T16708] ? fput+0x8f/0xc0 [ 262.019805][T16708] ? ksys_write+0x192/0x1a0 [ 262.019825][T16708] x64_sys_call+0x2a03/0x2ff0 [ 262.019846][T16708] do_syscall_64+0xd2/0x200 [ 262.019870][T16708] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 262.019925][T16708] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 262.019950][T16708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.019971][T16708] RIP: 0033:0x7f77753eebe9 [ 262.020002][T16708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.020018][T16708] RSP: 002b:00007f7773e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 262.020037][T16708] RAX: ffffffffffffffda RBX: 00007f7775615fa0 RCX: 00007f77753eebe9 [ 262.020102][T16708] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000200000000440 [ 262.020116][T16708] RBP: 00007f7773e57090 R08: 0000000000000000 R09: 0000000000000000 [ 262.020129][T16708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.020141][T16708] R13: 00007f7775616038 R14: 00007f7775615fa0 R15: 00007ffddc13d778 [ 262.020157][T16708] [ 262.228043][T16713] loop6: detected capacity change from 0 to 512 [ 262.234767][T16700] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.4495: mark_inode_dirty error [ 262.245495][T16713] EXT4-fs: Ignoring removed oldalloc option [ 262.253766][ T29] audit: type=1400 audit(2000000370.019:14917): avc: denied { create } for pid=16707 comm="syz.2.4498" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.265117][T16713] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 262.292150][ T29] audit: type=1400 audit(2000000370.361:14918): avc: denied { unlink } for pid=11316 comm="syz-executor" name="file0" dev="tmpfs" ino=1767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.317297][T16700] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.4495: corrupted inode contents [ 262.336401][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4495'. [ 262.346235][T16700] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.4495: mark_inode_dirty error [ 262.390244][T16715] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.4495: corrupted inode contents [ 262.409639][ T3391] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 262.413037][T16713] EXT4-fs (loop6): 1 truncate cleaned up [ 262.427665][ T3391] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 262.454523][T16715] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.4495: mark_inode_dirty error [ 262.503126][T16727] loop2: detected capacity change from 0 to 512 [ 262.513882][T16715] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.4495: corrupted inode contents [ 262.541120][T16727] EXT4-fs: Ignoring removed nobh option [ 262.599475][T16727] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.4503: corrupted inode contents [ 262.617812][T16727] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.4503: mark_inode_dirty error [ 262.629428][T16727] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.4503: corrupted inode contents [ 262.665879][T16744] FAULT_INJECTION: forcing a failure. [ 262.665879][T16744] name failslab, interval 1, probability 0, space 0, times 0 [ 262.678513][T16744] CPU: 1 UID: 0 PID: 16744 Comm: syz.5.4507 Not tainted syzkaller #0 PREEMPT(voluntary) [ 262.678540][T16744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.678557][T16744] Call Trace: [ 262.678564][T16744] [ 262.678572][T16744] __dump_stack+0x1d/0x30 [ 262.678591][T16744] dump_stack_lvl+0xe8/0x140 [ 262.678607][T16744] dump_stack+0x15/0x1b [ 262.678657][T16744] should_fail_ex+0x265/0x280 [ 262.678680][T16744] should_failslab+0x8c/0xb0 [ 262.678701][T16744] __kvmalloc_node_noprof+0x123/0x4e0 [ 262.678793][T16744] ? io_sqe_buffers_register+0xc2/0x530 [ 262.678827][T16744] io_sqe_buffers_register+0xc2/0x530 [ 262.678934][T16744] ? __fget_files+0x184/0x1c0 [ 262.678963][T16744] __se_sys_io_uring_register+0xa9f/0xeb0 [ 262.678987][T16744] ? fput+0x8f/0xc0 [ 262.679066][T16744] ? ksys_write+0x192/0x1a0 [ 262.679089][T16744] __x64_sys_io_uring_register+0x55/0x70 [ 262.679111][T16744] x64_sys_call+0x18a3/0x2ff0 [ 262.679174][T16744] do_syscall_64+0xd2/0x200 [ 262.679200][T16744] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 262.679297][T16744] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 262.679324][T16744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.679346][T16744] RIP: 0033:0x7f9ff1e8ebe9 [ 262.679368][T16744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.679386][T16744] RSP: 002b:00007f9ff08ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 262.679402][T16744] RAX: ffffffffffffffda RBX: 00007f9ff20b5fa0 RCX: 00007f9ff1e8ebe9 [ 262.679414][T16744] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 262.679428][T16744] RBP: 00007f9ff08ef090 R08: 0000000000000000 R09: 0000000000000000 [ 262.679441][T16744] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 262.679505][T16744] R13: 00007f9ff20b6038 R14: 00007f9ff20b5fa0 R15: 00007fffc4655928 [ 262.679522][T16744] [ 262.878174][T16727] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.4503: mark_inode_dirty error [ 262.906585][T16727] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.4503: Failed to acquire dquot type 0 [ 262.940915][T16752] loop3: detected capacity change from 0 to 128 [ 262.947835][T16727] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.4503: corrupted inode contents [ 262.959898][T16727] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.4503: mark_inode_dirty error [ 262.971591][T16727] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.4503: corrupted inode contents [ 262.984849][T16752] ext4 filesystem being mounted at /322/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 262.993998][T16727] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.4503: mark_inode_dirty error [ 263.036175][T16727] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.4503: corrupted inode contents [ 263.048312][T16757] loop5: detected capacity change from 0 to 1024 [ 263.052286][T16727] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 263.068109][T16757] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.079193][T16727] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.4503: corrupted inode contents [ 263.084571][T16757] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.4512: lblock 3 mapped to illegal pblock 3 (length 13) [ 263.098074][T16727] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.4503: mark_inode_dirty error [ 263.116257][T16757] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 263.128745][T16757] EXT4-fs (loop5): This should not happen!! Data will be lost [ 263.128745][T16757] [ 263.149077][T16727] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 263.158631][T16727] EXT4-fs (loop2): 1 truncate cleaned up [ 263.172180][T16727] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.194275][T16767] loop6: detected capacity change from 0 to 512 [ 263.235228][T16767] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.253756][T16767] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4515: corrupted inode contents [ 263.299660][T16767] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.4515: mark_inode_dirty error [ 263.314709][T16767] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4515: corrupted inode contents [ 263.329827][T16767] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.4515: mark_inode_dirty error [ 263.353591][T16767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4515'. [ 263.390916][T16767] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4515: corrupted inode contents [ 263.403790][T16767] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.4515: mark_inode_dirty error [ 263.416787][T16767] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4515: corrupted inode contents [ 263.448779][T16795] loop3: detected capacity change from 0 to 1024 [ 263.482652][T16795] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.512456][T16802] lo speed is unknown, defaulting to 1000 [ 263.603304][T16805] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.636526][T16795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4524'. [ 263.673473][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4524'. [ 263.700660][T16805] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.725399][T16795] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.4524: lblock 3 mapped to illegal pblock 3 (length 1) [ 263.770411][T16805] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.784020][T16810] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.800478][T16795] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 263.812783][T16795] EXT4-fs (loop3): This should not happen!! Data will be lost [ 263.812783][T16795] [ 263.830040][T16805] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.899307][ T4139] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.923801][ T4139] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.939526][T16803] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.4524: Freeing blocks not in datazone - block = 3, count = 1 [ 263.968912][ T4139] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.016191][ T4139] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.189944][T16811] lo speed is unknown, defaulting to 1000 [ 264.222915][T16829] loop0: detected capacity change from 0 to 1024 [ 264.247270][T16830] loop6: detected capacity change from 0 to 512 [ 264.278942][T16829] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.291643][T16830] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.314788][T16829] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 264.399595][T16811] chnl_net:caif_netlink_parms(): no params data found [ 264.440540][T16811] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.447622][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.456184][T16811] bridge_slave_0: entered allmulticast mode [ 264.462767][T16811] bridge_slave_0: entered promiscuous mode [ 264.471263][T16811] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.478348][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.485446][T16811] bridge_slave_1: entered allmulticast mode [ 264.493270][T16811] bridge_slave_1: entered promiscuous mode [ 264.542248][T16811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.563148][T16811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.587311][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4539'. [ 264.596264][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4539'. [ 264.608383][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4539'. [ 264.623788][T16811] team0: Port device team_slave_0 added [ 264.636131][T16811] team0: Port device team_slave_1 added [ 264.647371][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4539'. [ 264.656255][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4539'. [ 264.672671][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4539'. [ 264.693987][T16811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.700964][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.726900][T16811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.760031][T16849] vlan2: entered allmulticast mode [ 264.781026][T16811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.788016][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.813992][T16811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.845405][T16811] hsr_slave_0: entered promiscuous mode [ 264.852950][T16811] hsr_slave_1: entered promiscuous mode [ 264.858971][T16811] debugfs: 'hsr0' already exists in 'hsr' [ 264.864714][T16811] Cannot create hsr debugfs directory [ 264.883226][T16852] netlink: 'syz.0.4537': attribute type 15 has an invalid length. [ 264.936676][T16864] 9pnet_fd: Insufficient options for proto=fd [ 265.016733][T16871] loop6: detected capacity change from 0 to 512 [ 265.029987][T16871] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.040461][T16875] loop3: detected capacity change from 0 to 512 [ 265.041447][T16811] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 265.050048][T16871] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4545: corrupted inode contents [ 265.069244][T16811] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 265.078976][T16811] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 265.090303][T16811] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 265.100387][T16871] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.4545: mark_inode_dirty error [ 265.114255][T16871] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4545: corrupted inode contents [ 265.127940][T16871] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.4545: mark_inode_dirty error [ 265.175917][T16871] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4545: corrupted inode contents [ 265.189910][T16871] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.4545: mark_inode_dirty error [ 265.201913][T16871] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4545: corrupted inode contents [ 265.221047][T16875] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.246909][T16877] lo speed is unknown, defaulting to 1000 [ 265.409790][T16811] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.417127][T16811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.424383][T16811] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.431492][T16811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.446368][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.455667][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.505588][T16896] lo speed is unknown, defaulting to 1000 [ 265.540673][T16811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.570813][T16811] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.610585][ T4139] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.617674][ T4139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.631965][T16904] FAULT_INJECTION: forcing a failure. [ 265.631965][T16904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.643435][T16811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.645146][T16904] CPU: 0 UID: 0 PID: 16904 Comm: syz.3.4554 Not tainted syzkaller #0 PREEMPT(voluntary) [ 265.645173][T16904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.645263][T16904] Call Trace: [ 265.645270][T16904] [ 265.645277][T16904] __dump_stack+0x1d/0x30 [ 265.645297][T16904] dump_stack_lvl+0xe8/0x140 [ 265.645320][T16904] dump_stack+0x15/0x1b [ 265.645336][T16904] should_fail_ex+0x265/0x280 [ 265.645358][T16904] should_fail+0xb/0x20 [ 265.645375][T16904] should_fail_usercopy+0x1a/0x20 [ 265.645438][T16904] _copy_from_iter+0xd2/0xe80 [ 265.645463][T16904] ? __build_skb_around+0x1a0/0x200 [ 265.645494][T16904] ? __alloc_skb+0x223/0x320 [ 265.645573][T16904] netlink_sendmsg+0x471/0x6b0 [ 265.645596][T16904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.645618][T16904] __sock_sendmsg+0x142/0x180 [ 265.645682][T16904] sock_write_iter+0x165/0x1b0 [ 265.645711][T16904] do_iter_readv_writev+0x499/0x540 [ 265.645740][T16904] vfs_writev+0x2df/0x8b0 [ 265.645775][T16904] do_writev+0xe7/0x210 [ 265.645847][T16904] __x64_sys_writev+0x45/0x50 [ 265.645871][T16904] x64_sys_call+0x1e9a/0x2ff0 [ 265.645892][T16904] do_syscall_64+0xd2/0x200 [ 265.645988][T16904] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 265.646057][T16904] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 265.646082][T16904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.646106][T16904] RIP: 0033:0x7fefd627ebe9 [ 265.646121][T16904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.646137][T16904] RSP: 002b:00007fefd4cdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 265.646155][T16904] RAX: ffffffffffffffda RBX: 00007fefd64a5fa0 RCX: 00007fefd627ebe9 [ 265.646225][T16904] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000007 [ 265.646317][T16904] RBP: 00007fefd4cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 265.646329][T16904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.646342][T16904] R13: 00007fefd64a6038 R14: 00007fefd64a5fa0 R15: 00007fffa6f1f058 [ 265.646361][T16904] [ 265.862593][T16811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.888018][ T4139] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.895079][ T4139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.940980][T16906] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.002266][T16906] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.051731][T16906] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.111257][T16906] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.173659][T16919] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.229033][T16811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.262331][T16919] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.330522][T16919] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.390301][T16919] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.517179][T16811] veth0_vlan: entered promiscuous mode [ 266.546737][T16933] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.570890][T16811] veth1_vlan: entered promiscuous mode [ 266.601098][T16933] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.638024][T16811] veth0_macvtap: entered promiscuous mode [ 266.645658][T16811] veth1_macvtap: entered promiscuous mode [ 266.758345][T16933] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.777859][T16811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.811817][T16811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.820499][T16933] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.860351][ T4139] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.907306][ T4139] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.954091][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 266.954174][ T29] audit: type=1400 audit(2000000375.049:15248): avc: denied { mounton } for pid=16811 comm="syz-executor" path="/root/syzkaller.PQlcGu/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 266.988344][ T4139] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.997767][ T4139] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.007642][ T4139] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.015814][ T4139] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.034112][ T4139] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.042648][ T4139] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.052722][ T29] audit: type=1400 audit(2000000375.099:15249): avc: denied { mount } for pid=16811 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 267.075235][ T29] audit: type=1400 audit(2000000375.099:15250): avc: denied { mounton } for pid=16811 comm="syz-executor" path="/root/syzkaller.PQlcGu/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 267.100763][ T29] audit: type=1400 audit(2000000375.099:15251): avc: denied { mount } for pid=16811 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 267.122944][ T29] audit: type=1400 audit(2000000375.099:15252): avc: denied { mounton } for pid=16811 comm="syz-executor" path="/root/syzkaller.PQlcGu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 267.149887][ T29] audit: type=1400 audit(2000000375.099:15253): avc: denied { mounton } for pid=16811 comm="syz-executor" path="/root/syzkaller.PQlcGu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=65383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 267.177619][ T29] audit: type=1400 audit(2000000375.109:15254): avc: denied { mounton } for pid=16811 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 267.200772][ T29] audit: type=1400 audit(2000000375.109:15255): avc: denied { mount } for pid=16811 comm="syz-executor" name="/" dev="gadgetfs" ino=4416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 267.223538][ T29] audit: type=1400 audit(2000000375.109:15256): avc: denied { allowed } for pid=16935 comm="syz.0.4558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 267.243072][ T29] audit: type=1400 audit(2000000375.129:15257): avc: denied { create } for pid=16935 comm="syz.0.4558" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 267.276808][T16942] loop7: detected capacity change from 0 to 512 [ 267.307500][T16942] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.341565][T16948] loop0: detected capacity change from 0 to 512 [ 267.363179][T16948] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.428610][T16956] loop7: detected capacity change from 0 to 128 [ 267.693323][T16967] loop0: detected capacity change from 0 to 128 [ 267.713518][T16967] ext4 filesystem being mounted at /255/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.860814][T16976] loop7: detected capacity change from 0 to 512 [ 267.876941][T16976] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.961180][T16982] loop7: detected capacity change from 0 to 512 [ 267.986305][T16982] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.045588][T16988] lo speed is unknown, defaulting to 1000 [ 268.071195][ T4139] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.134213][ T3429] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.142958][ T3429] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.151131][ T3429] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.321192][T17001] loop7: detected capacity change from 0 to 4096 [ 268.436275][T17008] loop0: detected capacity change from 0 to 512 [ 268.458299][T17010] netlink: 'syz.5.4584': attribute type 1 has an invalid length. [ 268.478144][T17008] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.533969][T17014] loop5: detected capacity change from 0 to 512 [ 268.590709][T17014] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.641271][T17026] loop0: detected capacity change from 0 to 512 [ 268.653233][T17024] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.667453][T17001] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 268.671115][T17026] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 268.684008][T17026] EXT4-fs (loop0): orphan cleanup on readonly fs [ 268.692143][T17026] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.4589: corrupted inode contents [ 268.705916][T17024] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.709225][T17026] EXT4-fs (loop0): Remounting filesystem read-only [ 268.723876][T17026] EXT4-fs (loop0): 1 truncate cleaned up [ 268.729614][ T4139] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 268.740210][ T4139] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 268.752754][ T4139] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 268.811526][T17024] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.841398][T17034] lo speed is unknown, defaulting to 1000 [ 268.867441][T17026] __nla_validate_parse: 6 callbacks suppressed [ 268.867455][T17026] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4589'. [ 268.896038][T17026] gretap0: entered promiscuous mode [ 268.903754][T17026] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4589'. [ 268.921971][T17024] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.952798][T17026] 0ªX¹¦D: renamed from gretap0 [ 268.959113][T17026] 0ªX¹¦D: left promiscuous mode [ 268.964081][T17026] 0ªX¹¦D: entered allmulticast mode [ 268.989724][T17026] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 269.011180][ T4139] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.032419][ T4139] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.052177][ T4139] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.064610][ T4139] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.077680][T17047] loop3: detected capacity change from 0 to 512 [ 269.102090][T17047] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.137536][T17055] FAULT_INJECTION: forcing a failure. [ 269.137536][T17055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.150712][T17055] CPU: 1 UID: 0 PID: 17055 Comm: Not tainted syzkaller #0 PREEMPT(voluntary) [ 269.150738][T17055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.150750][T17055] Call Trace: [ 269.150755][T17055] [ 269.150762][T17055] __dump_stack+0x1d/0x30 [ 269.150786][T17055] dump_stack_lvl+0xe8/0x140 [ 269.150858][T17055] dump_stack+0x15/0x1b [ 269.150873][T17055] should_fail_ex+0x265/0x280 [ 269.150892][T17055] should_fail+0xb/0x20 [ 269.150983][T17055] should_fail_usercopy+0x1a/0x20 [ 269.151006][T17055] strncpy_from_user+0x25/0x230 [ 269.151054][T17055] ? kmem_cache_alloc_noprof+0x186/0x310 [ 269.151080][T17055] ? getname_flags+0x80/0x3b0 [ 269.151107][T17055] getname_flags+0xae/0x3b0 [ 269.151194][T17055] do_sys_openat2+0x60/0x110 [ 269.151221][T17055] __x64_sys_openat+0xf2/0x120 [ 269.151248][T17055] x64_sys_call+0x2e9c/0x2ff0 [ 269.151271][T17055] do_syscall_64+0xd2/0x200 [ 269.151335][T17055] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 269.151360][T17055] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 269.151431][T17055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.151452][T17055] RIP: 0033:0x7f9ff1e8ebe9 [ 269.151466][T17055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.151551][T17055] RSP: 002b:00007f9ff08ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 269.151572][T17055] RAX: ffffffffffffffda RBX: 00007f9ff20b5fa0 RCX: 00007f9ff1e8ebe9 [ 269.151658][T17055] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 269.151671][T17055] RBP: 00007f9ff08ef090 R08: 0000000000000000 R09: 0000000000000000 [ 269.151763][T17055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.151775][T17055] R13: 00007f9ff20b6038 R14: 00007f9ff20b5fa0 R15: 00007fffc4655928 [ 269.151800][T17055] [ 269.359124][T17043] loop7: detected capacity change from 0 to 128 [ 269.378191][T17059] loop5: detected capacity change from 0 to 1024 [ 269.387865][T17043] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 269.431120][T17059] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.607250][T17085] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.620722][T17082] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 269.658941][T17085] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.719088][T17085] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.760339][T17089] loop3: detected capacity change from 0 to 512 [ 269.787676][T17085] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.801229][T17089] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.844137][ T3429] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.855810][ T3429] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.880845][ T3429] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.896005][ T3429] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.983090][T17097] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 270.090014][T11464] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 270.101028][T11464] CPU: 0 UID: 0 PID: 11464 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 270.101055][T11464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.101067][T11464] Call Trace: [ 270.101073][T11464] [ 270.101081][T11464] __dump_stack+0x1d/0x30 [ 270.101162][T11464] dump_stack_lvl+0xe8/0x140 [ 270.101178][T11464] dump_stack+0x15/0x1b [ 270.101196][T11464] dump_header+0x81/0x220 [ 270.101305][T11464] oom_kill_process+0x342/0x400 [ 270.101336][T11464] out_of_memory+0x979/0xb80 [ 270.101367][T11464] try_charge_memcg+0x5e6/0x9e0 [ 270.101425][T11464] charge_memcg+0x51/0xc0 [ 270.101441][T11464] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 270.101517][T11464] __read_swap_cache_async+0x1df/0x350 [ 270.101551][T11464] swap_cluster_readahead+0x277/0x3e0 [ 270.101705][T11464] swapin_readahead+0xde/0x6f0 [ 270.101787][T11464] ? __filemap_get_folio+0x4f7/0x6b0 [ 270.101813][T11464] ? ktime_get+0x1eb/0x210 [ 270.101947][T11464] ? swap_cache_get_folio+0x77/0x200 [ 270.101998][T11464] do_swap_page+0x301/0x2430 [ 270.102017][T11464] ? finish_task_switch+0xad/0x2b0 [ 270.102035][T11464] ? __pfx_default_wake_function+0x10/0x10 [ 270.102056][T11464] handle_mm_fault+0x9a5/0x2c20 [ 270.102097][T11464] do_user_addr_fault+0x636/0x1090 [ 270.102123][T11464] ? fpregs_restore_userregs+0xe2/0x1d0 [ 270.102147][T11464] ? switch_fpu_return+0xe/0x20 [ 270.102170][T11464] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 270.102197][T11464] exc_page_fault+0x62/0xa0 [ 270.102218][T11464] asm_exc_page_fault+0x26/0x30 [ 270.102234][T11464] RIP: 0033:0x7f9ff1ec1465 [ 270.102247][T11464] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 270.102262][T11464] RSP: 002b:00007fffc4655c68 EFLAGS: 00010246 [ 270.102335][T11464] RAX: 0000000000000000 RBX: 000000000000034d RCX: 00007f9ff1ec1463 [ 270.102411][T11464] RDX: 00007fffc4655c80 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.102422][T11464] RBP: 00007fffc4655cec R08: 00000000140b15f5 R09: 0000000000000000 [ 270.102433][T11464] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 270.102444][T11464] R13: 00000000000927c0 R14: 0000000000041e0c R15: 00007fffc4655d40 [ 270.102459][T11464] [ 270.102572][T11464] memory: usage 307200kB, limit 307200kB, failcnt 2021 [ 270.233960][T17100] lo speed is unknown, defaulting to 1000 [ 270.238582][T11464] memory+swap: usage 243836kB, limit 9007199254740988kB, failcnt 0 [ 270.238599][T11464] kmem: usage 243008kB, limit 9007199254740988kB, failcnt 0 [ 270.238612][T11464] Memory cgroup stats for /syz5: [ 270.239689][T11464] cache 8192 [ 270.362876][T11464] rss 106496 [ 270.366173][T11464] shmem 0 [ 270.369099][T11464] mapped_file 0 [ 270.372540][T11464] dirty 0 [ 270.375524][T11464] writeback 28672 [ 270.379143][T11464] workingset_refault_anon 24 [ 270.383763][T11464] workingset_refault_file 0 [ 270.388332][T11464] swap 610304 [ 270.391605][T11464] swapcached 126976 [ 270.395406][T11464] pgpgin 189467 [ 270.398847][T11464] pgpgout 189432 [ 270.402379][T11464] pgfault 196850 [ 270.405921][T11464] pgmajfault 5 [ 270.409284][T11464] inactive_anon 28672 [ 270.413245][T11464] active_anon 98304 [ 270.417078][T11464] inactive_file 16384 [ 270.421039][T11464] active_file 0 [ 270.424506][T11464] unevictable 0 [ 270.427950][T11464] hierarchical_memory_limit 314572800 [ 270.433347][T11464] hierarchical_memsw_limit 9223372036854771712 [ 270.439518][T11464] total_cache 8192 [ 270.443229][T11464] total_rss 106496 [ 270.447024][T11464] total_shmem 0 [ 270.450465][T11464] total_mapped_file 0 [ 270.454449][T11464] total_dirty 0 [ 270.457892][T11464] total_writeback 28672 [ 270.462032][T11464] total_workingset_refault_anon 24 [ 270.467195][T11464] total_workingset_refault_file 0 [ 270.472208][T11464] total_swap 610304 [ 270.476020][T11464] total_swapcached 126976 [ 270.480330][T11464] total_pgpgin 189467 [ 270.484343][T11464] total_pgpgout 189432 [ 270.488394][T11464] total_pgfault 196850 [ 270.492447][T11464] total_pgmajfault 5 [ 270.496390][T11464] total_inactive_anon 28672 [ 270.500877][T11464] total_active_anon 98304 [ 270.505259][T11464] total_inactive_file 16384 [ 270.506184][T17108] loop7: detected capacity change from 0 to 512 [ 270.509742][T11464] total_active_file 0 [ 270.509753][T11464] total_unevictable 0 [ 270.509775][T11464] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4601,pid=17057,uid=0 [ 270.538650][T11464] Memory cgroup out of memory: Killed process 17059 (syz.5.4601) total-vm:95812kB, anon-rss:944kB, file-rss:22716kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 270.563596][T17108] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 270.571500][T17108] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 270.600476][T17108] System zones: 0-1, 15-15, 18-18, 34-34 [ 270.623481][T17108] EXT4-fs (loop7): orphan cleanup on readonly fs [ 270.715845][T17063] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 270.725731][T17108] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 270.744926][T17108] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 270.758244][T17108] EXT4-fs (loop7): 1 truncate cleaned up [ 271.253188][T17132] netlink: 'syz.5.4623': attribute type 4 has an invalid length. [ 272.520147][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4633'. [ 272.581845][ T4151] smc: removing ib device syz1 [ 272.598075][ T3359] syz1: Port: 1 Link DOWN [ 272.662991][ T4162] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.695306][ T4162] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.719578][ T4162] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.742611][ T4162] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.779691][T17170] loop6: detected capacity change from 0 to 2048 [ 272.823674][T17170] EXT4-fs (loop6): failed to initialize system zone (-117) [ 272.849323][T17170] EXT4-fs (loop6): mount failed [ 272.883027][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 272.883040][ T29] audit: type=1400 audit(2000000380.990:15359): avc: denied { read write } for pid=17171 comm="syz.3.4637" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 272.913668][ T29] audit: type=1400 audit(2000000380.990:15360): avc: denied { open } for pid=17171 comm="syz.3.4637" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 273.001000][ T29] audit: type=1400 audit(2000000381.111:15361): avc: denied { setopt } for pid=17184 comm="syz.7.4642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 273.059878][T17189] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4644'. [ 273.545161][T17198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.552814][T17198] batadv_slave_0: entered promiscuous mode [ 273.585370][ T29] audit: type=1400 audit(2000000381.703:15362): avc: denied { ioctl } for pid=17199 comm="syz.7.4648" path="socket:[66246]" dev="sockfs" ino=66246 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.630128][ T29] audit: type=1400 audit(2000000381.723:15363): avc: denied { write } for pid=17199 comm="syz.7.4648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 273.652635][T17202] lo: entered allmulticast mode [ 273.722238][ T29] audit: type=1400 audit(2000000381.833:15364): avc: denied { create } for pid=17211 comm="syz.0.4654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 273.741988][ T29] audit: type=1400 audit(2000000381.833:15365): avc: denied { getopt } for pid=17211 comm="syz.0.4654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 273.800232][ T29] audit: type=1400 audit(2000000381.904:15366): avc: denied { ioctl } for pid=17216 comm="syz.3.4655" path="socket:[66280]" dev="sockfs" ino=66280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.912270][ T29] audit: type=1400 audit(2000000382.024:15367): avc: denied { getopt } for pid=17221 comm="syz.7.4657" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.423976][T17234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=17234 comm=syz.6.4660 [ 274.447440][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4660'. [ 274.888437][ T29] audit: type=1400 audit(2000000383.007:15368): avc: denied { create } for pid=17241 comm="syz.0.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 274.997094][T17244] hub 9-0:1.0: USB hub found [ 275.001920][T17244] hub 9-0:1.0: 8 ports detected [ 275.807733][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4670'. [ 275.820330][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4672'. [ 275.967635][T17273] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.183344][T17281] lo speed is unknown, defaulting to 1000 [ 276.370503][T17293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.378995][T17293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.397917][T17295] loop0: detected capacity change from 0 to 256 [ 276.407852][T17295] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 276.415717][T17295] FAT-fs (loop0): Filesystem has been set read-only [ 276.542577][T17305] loop3: detected capacity change from 0 to 128 [ 276.549422][T17305] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 276.620843][T17315] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4691'. [ 276.804605][T17324] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 276.811222][T17324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 276.818803][T17324] vhci_hcd vhci_hcd.0: Device attached [ 276.866634][T17329] loop5: detected capacity change from 0 to 512 [ 276.888581][T17329] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 276.931221][T17329] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.4694: invalid indirect mapped block 4294967295 (level 0) [ 276.947279][T17329] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.4694: invalid indirect mapped block 4294967295 (level 1) [ 276.963412][T17329] EXT4-fs (loop5): 1 orphan inode deleted [ 276.969230][T17329] EXT4-fs (loop5): 1 truncate cleaned up [ 276.975515][T17329] EXT4-fs mount: 77 callbacks suppressed [ 276.975528][T17329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.068711][T17351] loop7: detected capacity change from 0 to 164 [ 277.098068][ T3391] vhci_hcd: vhci_device speed not set [ 277.104072][T17325] vhci_hcd: connection closed [ 277.105941][ T4162] vhci_hcd: stop threads [ 277.114867][ T4162] vhci_hcd: release socket [ 277.119321][ T4162] vhci_hcd: disconnect device [ 277.126649][T17351] Unable to read rock-ridge attributes [ 277.133875][T17351] Unable to read rock-ridge attributes [ 277.291205][T17356] loop6: detected capacity change from 0 to 8192 [ 277.327848][ T3391] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 277.330943][T17356] loop6: p1 p2[DM] p4 [ 277.336460][ T3391] usb 11-1: enqueue for inactive port 0 [ 277.339422][T17356] loop6: p1 size 196608 extends beyond EOD, truncated [ 277.345751][ T3391] usb 11-1: enqueue for inactive port 0 [ 277.352139][T17356] loop6: p2 start 4292936063 is beyond EOD, truncated [ 277.358494][ T3391] usb 11-1: enqueue for inactive port 0 [ 277.364023][T17356] loop6: p4 size 50331648 extends beyond EOD, truncated [ 277.421556][T17365] lo speed is unknown, defaulting to 1000 [ 277.430094][ T3391] vhci_hcd: vhci_device speed not set [ 277.516983][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4714'. [ 277.784755][T11464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.932496][T17388] loop6: detected capacity change from 0 to 1024 [ 277.951995][T17388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.977960][T14207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.046732][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 278.046746][ T29] audit: type=1400 audit(2000000386.178:15386): avc: denied { create } for pid=17402 comm="syz.6.4723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.103639][T17404] netlink: 'syz.6.4723': attribute type 11 has an invalid length. [ 278.831266][T17418] vlan1: entered allmulticast mode [ 278.837977][T17418] dummy0: entered allmulticast mode [ 278.983227][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4727'. [ 278.992386][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4727'. [ 279.001967][ T29] audit: type=1400 audit(2000000387.111:15387): avc: denied { bind } for pid=17415 comm="syz.3.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 279.022590][ T29] audit: type=1400 audit(2000000387.111:15388): avc: denied { setopt } for pid=17415 comm="syz.3.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 279.048306][T17430] netlink: 'syz.6.4729': attribute type 4 has an invalid length. [ 279.132780][T17432] loop0: detected capacity change from 0 to 512 [ 279.140708][T17432] EXT4-fs (loop0): orphan cleanup on readonly fs [ 279.147958][T17432] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.4732: bad orphan inode 13 [ 279.158237][T17432] ext4_test_bit(bit=12, block=18) = 1 [ 279.163620][T17432] is_bad_inode(inode)=0 [ 279.167810][T17432] NEXT_ORPHAN(inode)=2130706432 [ 279.172663][T17432] max_ino=32 [ 279.175907][T17432] i_nlink=1 [ 279.179378][T17432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.193550][T17432] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 279.204753][T17432] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 279.220041][T13386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.235740][ T29] audit: type=1400 audit(2000000387.371:15389): avc: denied { mount } for pid=17436 comm="syz.0.4733" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 280.417958][T17460] lo speed is unknown, defaulting to 1000 [ 280.447109][T17460] geneve0: entered allmulticast mode [ 280.594702][ T29] audit: type=1400 audit(2000000388.736:15390): avc: denied { ioctl } for pid=17471 comm="syz.6.4748" path="socket:[66555]" dev="sockfs" ino=66555 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 280.692226][ T29] audit: type=1400 audit(2000000388.836:15391): avc: denied { setopt } for pid=17465 comm="syz.5.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.881651][ T29] audit: type=1400 audit(2000000388.856:15392): avc: denied { bind } for pid=17476 comm="syz.3.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 280.902064][ T29] audit: type=1400 audit(2000000388.996:15393): avc: denied { ioctl } for pid=17488 comm="syz.0.4753" path="socket:[67800]" dev="sockfs" ino=67800 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 280.986988][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 281.032537][ T29] audit: type=1400 audit(2000000389.177:15394): avc: denied { create } for pid=17504 comm="syz.6.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 281.083749][ T29] audit: type=1400 audit(2000000389.227:15395): avc: denied { bind } for pid=17514 comm="syz.7.4762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.273473][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 283.273487][ T29] audit: type=1400 audit(2000000391.293:15404): avc: denied { create } for pid=17558 comm="syz.5.4779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 283.325108][T17562] lo speed is unknown, defaulting to 1000 [ 283.491329][ T29] audit: type=1400 audit(2000000391.614:15405): avc: denied { ioctl } for pid=17569 comm="syz.3.4783" path="socket:[68767]" dev="sockfs" ino=68767 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.516726][ T29] audit: type=1400 audit(2000000391.614:15406): avc: denied { shutdown } for pid=17569 comm="syz.3.4783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 284.119954][T17601] loop3: detected capacity change from 0 to 128 [ 284.120333][T17601] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 284.120821][T17601] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 284.275566][ T29] audit: type=1400 audit(2000000392.367:15407): avc: denied { create } for pid=17593 comm="syz.7.4791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 284.318410][T17608] netlink: 'syz.0.4795': attribute type 10 has an invalid length. [ 284.366769][T17608] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.405114][T17608] bond0: (slave team0): Enslaving as an active interface with an up link [ 284.446188][T17609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.493397][T17610] bond_slave_0: entered promiscuous mode [ 284.499088][T17610] bond_slave_1: entered promiscuous mode [ 284.499108][T17610] team_slave_0: entered promiscuous mode [ 284.499126][T17610] team_slave_1: entered promiscuous mode [ 284.523182][T17610] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 284.539640][T17610] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 284.561049][T17615] loop9: detected capacity change from 0 to 7 [ 284.561341][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.561364][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.562912][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.562938][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.562959][T17615] loop9: unable to read partition table [ 284.563008][T17615] loop_reread_partitions: partition scan of loop9 (þ被xüŸø éÚ¬§½dä¦Íˆ`*`¡¯ â·û [ 284.563008][T17615] ) failed (rc=-5) [ 284.613224][ T29] audit: type=1400 audit(2000000392.768:15408): avc: denied { getopt } for pid=17617 comm="syz.7.4799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 284.874465][ T29] audit: type=1400 audit(2000000393.018:15409): avc: denied { setopt } for pid=17624 comm="syz.0.4800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 285.177743][T17629] lo speed is unknown, defaulting to 1000 [ 285.317954][ T29] audit: type=1400 audit(2000000393.480:15410): avc: denied { append } for pid=17640 comm="syz.6.4806" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 285.341302][T17641] usb usb1: usbfs: process 17641 (syz.6.4806) did not claim interface 0 before use [ 285.374971][ T29] audit: type=1400 audit(2000000393.510:15411): avc: denied { create } for pid=17638 comm="syz.0.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 285.554651][T17652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4811'. [ 285.566917][ T29] audit: type=1400 audit(2000000393.720:15412): avc: denied { setopt } for pid=17654 comm="syz.6.4812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 285.688969][T17652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4811'. [ 285.739468][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4813'. [ 285.974294][T17672] loop3: detected capacity change from 0 to 8192 [ 286.050745][T17675] netlink: 'syz.6.4819': attribute type 10 has an invalid length. [ 286.078708][T17694] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 286.188327][ T29] audit: type=1400 audit(2000000394.332:15413): avc: denied { setopt } for pid=17697 comm="syz.0.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 286.994912][T17759] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4837'. [ 287.019441][T17761] loop7: detected capacity change from 0 to 128 [ 287.026086][T17761] EXT4-fs: Ignoring removed nobh option [ 287.042924][T17761] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.074715][T17761] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 287.741431][T17814] bond0: (slave team0): Releasing backup interface [ 287.771506][T17814] team_slave_0: left promiscuous mode [ 287.776998][T17814] team_slave_1: left promiscuous mode [ 287.812118][T17822] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4840'. [ 287.887186][T17814] bridge_slave_0: left allmulticast mode [ 287.892905][T17814] bridge_slave_0: left promiscuous mode [ 287.898554][T17814] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.914237][T16811] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.936068][T17842] loop6: detected capacity change from 0 to 128 [ 287.948854][T17842] EXT4-fs: test_dummy_encryption option not supported [ 287.973252][T17857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4842'. [ 287.994264][T17814] bridge_slave_1: left allmulticast mode [ 287.999997][T17814] bridge_slave_1: left promiscuous mode [ 288.005703][T17814] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.069886][T17814] bond0: (slave bond_slave_0): Releasing backup interface [ 288.079669][T17814] bond_slave_0: left promiscuous mode [ 288.087444][T17814] bond0: (slave bond_slave_1): Releasing backup interface [ 288.100901][T17814] bond_slave_1: left promiscuous mode [ 288.110638][T17814] team0: Port device team_slave_0 removed [ 288.125340][T17814] team0: Port device team_slave_1 removed [ 288.136527][T17814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.146378][T17814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.153826][T17814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.175568][T17814] bond2: (slave macvlan2): Removing an active aggregator [ 288.186855][T17814] bond2: (slave macvlan2): Releasing backup interface [ 288.205100][T17822] team0: Mode changed to "broadcast" [ 288.270586][T17887] netlink: 'syz.5.4851': attribute type 15 has an invalid length. [ 288.278559][T17887] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4851'. [ 288.324018][T17893] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.348083][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 288.348094][ T29] audit: type=1400 audit(2000000396.518:15428): avc: denied { write } for pid=17881 comm="syz.6.4849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.426784][T17899] loop3: detected capacity change from 0 to 512 [ 288.439084][T17893] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.450423][T17899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.463102][T17899] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.940348][T17899] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4854: corrupted inode contents [ 288.975198][T17899] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4854: mark_inode_dirty error [ 289.003815][T17899] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4854: corrupted inode contents [ 289.040670][T17899] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.4854: mark_inode_dirty error [ 289.074399][T17908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4854'. [ 289.083624][ T29] audit: type=1400 audit(2000000397.230:15429): avc: denied { create } for pid=17898 comm="syz.3.4854" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 289.121358][T17903] lo speed is unknown, defaulting to 1000 [ 289.160279][T17906] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.172796][T17893] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.228481][T17906] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.242886][T17899] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4854: corrupted inode contents [ 289.254815][ T29] audit: type=1400 audit(2000000397.411:15430): avc: denied { mac_admin } for pid=17898 comm="syz.3.4854" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 289.276152][ T29] audit: type=1400 audit(2000000397.411:15431): avc: denied { relabelto } for pid=17898 comm="syz.3.4854" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 289.319178][T17899] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4854: mark_inode_dirty error [ 289.335407][T17893] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.356265][T17899] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4854: corrupted inode contents [ 289.380885][T17906] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.433367][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.453189][ T4174] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.464473][T17906] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.481121][ T4174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.499637][ T29] audit: type=1400 audit(2000000397.561:15432): avc: denied { write } for pid=17898 comm="syz.3.4854" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.521618][ T29] audit: type=1400 audit(2000000397.561:15433): avc: denied { write } for pid=17898 comm="syz.3.4854" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.543506][ T29] audit: type=1400 audit(2000000397.561:15434): avc: denied { remove_name } for pid=17898 comm="syz.3.4854" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.566150][ T29] audit: type=1400 audit(2000000397.561:15435): avc: denied { rename } for pid=17898 comm="syz.3.4854" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 289.588105][ T29] audit: type=1400 audit(2000000397.561:15436): avc: denied { add_name } for pid=17898 comm="syz.3.4854" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.610603][ T29] audit: type=1400 audit(2000000397.561:15437): avc: denied { unlink } for pid=17898 comm="syz.3.4854" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 289.643547][ T4174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.665445][ T4174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.702904][ T4174] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.722164][ T4174] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.733882][ T4174] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.762278][ T4174] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.793144][T17912] loop0: detected capacity change from 0 to 1024 [ 289.810018][T17912] EXT4-fs: Ignoring removed orlov option [ 289.831260][T17912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.918382][T17922] 9pnet_fd: Insufficient options for proto=fd [ 289.959402][T17927] loop3: detected capacity change from 0 to 512 [ 289.980582][T17924] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 289.998359][T17927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.023001][T17927] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.039039][T17912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4856'. [ 290.049494][T17912] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.4856: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 290.088453][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.120973][T17944] loop7: detected capacity change from 0 to 1024 [ 290.128742][T17944] EXT4-fs: Ignoring removed nobh option [ 290.188227][T17942] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.205068][T17938] loop5: detected capacity change from 0 to 128 [ 290.215073][T17944] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.225898][T17938] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.240647][T17938] ext4 filesystem being mounted at /383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 290.277419][T17944] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.313347][T17942] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.327943][T17944] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.385617][T17942] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.424392][T17944] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.464618][T17942] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.504545][T17944] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.557882][ T4174] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.615023][ T4174] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.635697][T13386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.664900][ T4174] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.673537][ T4174] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.708086][T17953] netlink: 'syz.6.4869': attribute type 15 has an invalid length. [ 290.715980][T17953] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4869'. [ 290.829405][T11464] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.861882][T17964] 9pnet_fd: Insufficient options for proto=fd [ 290.934258][T17965] lo speed is unknown, defaulting to 1000 [ 291.268118][T17966] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.372797][T17971] loop3: detected capacity change from 0 to 512 [ 291.391728][T17966] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.411600][T17972] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.427385][T17971] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.439092][T17971] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 291.451599][T17971] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.4873: inode #15: comm syz.3.4873: iget: illegal inode # [ 291.471311][T17966] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.499090][T17971] EXT4-fs (loop3): Remounting filesystem read-only [ 291.506698][T17971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.530304][T17966] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.564275][T17972] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.632496][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.650067][T17975] loop6: detected capacity change from 0 to 512 [ 291.660176][T17975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.674904][T17975] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.686954][T17975] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4875: corrupted inode contents [ 291.700680][T17975] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.4875: mark_inode_dirty error [ 291.712343][T17975] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4875: corrupted inode contents [ 291.725921][T17975] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.4875: mark_inode_dirty error [ 291.739186][T17978] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4875'. [ 291.760221][T17975] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4875: corrupted inode contents [ 291.773274][T17972] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.785622][T17975] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.4875: mark_inode_dirty error [ 291.797323][T17975] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4875: corrupted inode contents [ 291.842644][T17972] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.860617][T14207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.905939][ T4157] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.920856][ T4157] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.942368][ T4157] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.958508][ T4157] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.992485][T17981] loop5: detected capacity change from 0 to 512 [ 292.011032][T17981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.023741][T17981] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.206547][T11464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.226314][T17985] loop3: detected capacity change from 0 to 1024 [ 292.233039][T17985] EXT4-fs: Ignoring removed nobh option [ 292.244252][T17989] loop5: detected capacity change from 0 to 512 [ 292.258836][T17985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.259898][T17989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.283425][T17989] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.284486][T17985] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.316037][T11464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.348546][T17985] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.448336][T17985] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.478761][T17985] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.491780][T18004] vlan1: entered promiscuous mode [ 292.497009][T18004] vlan1: entered allmulticast mode [ 292.502152][T18004] hsr_slave_1: entered allmulticast mode [ 292.539417][ T4157] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.557710][ T4157] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.576654][ T4157] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.587532][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4882'. [ 292.593646][ T4157] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.628085][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.848710][T18025] loop3: detected capacity change from 0 to 512 [ 292.867519][T18025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.880191][T18025] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.903712][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.920774][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4893'. [ 293.071629][T18035] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.178509][T18049] lo speed is unknown, defaulting to 1000 [ 293.235300][T18054] 9pnet_fd: Insufficient options for proto=fd [ 293.333824][T18068] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.395527][T18068] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.445380][T18068] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.494689][T18068] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.098247][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 294.098262][ T29] audit: type=1326 audit(2000000402.273:15569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18070 comm="syz.3.4913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefd627ebe9 code=0x0 [ 294.198250][ T29] audit: type=1400 audit(2000000402.374:15570): avc: denied { bind } for pid=18070 comm="syz.3.4913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.218017][ T29] audit: type=1400 audit(2000000402.374:15571): avc: denied { name_bind } for pid=18070 comm="syz.3.4913" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 294.239924][ T29] audit: type=1400 audit(2000000402.374:15572): avc: denied { node_bind } for pid=18070 comm="syz.3.4913" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 294.261813][ T29] audit: type=1400 audit(2000000402.374:15573): avc: denied { write } for pid=18070 comm="syz.3.4913" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.283405][ T29] audit: type=1400 audit(2000000402.374:15574): avc: denied { connect } for pid=18070 comm="syz.3.4913" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.305245][ T29] audit: type=1400 audit(2000000402.374:15575): avc: denied { name_connect } for pid=18070 comm="syz.3.4913" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 294.905926][ T4153] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.916513][ T4174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.936200][ T4174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.956803][ T4174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.990255][ T29] audit: type=1400 audit(2000000403.166:15576): avc: denied { execmem } for pid=18075 comm="syz.3.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 295.054360][T18082] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4918'. [ 295.059922][ T29] audit: type=1400 audit(2000000403.236:15577): avc: denied { create } for pid=18081 comm="syz.0.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.083650][ T29] audit: type=1400 audit(2000000403.236:15578): avc: denied { write } for pid=18081 comm="syz.0.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.087108][T18082] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 295.145602][ T4136] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.156495][ T4136] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.183216][ T4136] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.192674][T16811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.299948][T18089] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.347455][ T4136] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.359477][T18094] loop0: detected capacity change from 0 to 512 [ 296.366033][T18094] EXT4-fs: Ignoring removed bh option [ 296.373964][T18094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.382419][T18094] EXT4-fs (loop0): fragment/cluster size (2048) != block size (4096) [ 296.418024][T18089] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.497731][T18089] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.547412][T18089] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.551802][ T3429] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.563027][ T3429] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.575454][ T3429] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.586910][ T3429] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.656985][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4926'. [ 297.665879][T18111] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4926'. [ 297.675443][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4926'. [ 297.684395][T18111] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4926'. [ 297.697495][T18111] loop7: detected capacity change from 0 to 512 [ 297.716622][T18111] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.729612][T18111] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.756125][T16811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.786236][T18122] loop7: detected capacity change from 0 to 512 [ 297.804719][T18122] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.817409][T18122] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.881622][T18125] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.944446][T18125] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.004016][T18125] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.063577][T18125] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.365478][T18136] random: crng reseeded on system resumption [ 298.486687][T18138] loop6: detected capacity change from 0 to 512 [ 298.514897][T18138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.560125][T18138] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.610796][T14207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.760003][ T4136] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.783526][T18122] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.4929: corrupted inode contents [ 298.800943][ T4136] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.824787][ T4136] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.841908][T18122] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.4929: mark_inode_dirty error [ 298.869293][ T4136] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.891477][T18122] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.4929: corrupted inode contents [ 298.945356][T18122] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.4929: mark_inode_dirty error [ 298.979143][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4929'. [ 299.017732][T18122] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.4929: corrupted inode contents [ 299.065444][T18122] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.4929: mark_inode_dirty error [ 299.090270][T18122] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.4929: corrupted inode contents [ 299.114909][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 299.114922][ T29] audit: type=1400 audit(2000000407.306:15658): avc: denied { unlink } for pid=18121 comm="syz.7.4929" name="file0" dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 299.144771][ T29] audit: type=1326 audit(2000000407.336:15659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.3.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd627ebe9 code=0x7ffc0000 [ 299.168521][ T29] audit: type=1326 audit(2000000407.336:15660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.3.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd627ebe9 code=0x7ffc0000 [ 299.193239][ T29] audit: type=1326 audit(2000000407.386:15661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.3.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fefd627ebe9 code=0x7ffc0000 [ 299.216888][ T29] audit: type=1326 audit(2000000407.386:15662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.3.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd627ebe9 code=0x7ffc0000 [ 299.240486][ T29] audit: type=1326 audit(2000000407.386:15663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.3.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd627ebe9 code=0x7ffc0000 [ 299.264034][ T29] audit: type=1326 audit(2000000407.386:15664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.3.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fefd627ebe9 code=0x7ffc0000 [ 299.287692][ T29] audit: type=1326 audit(2000000407.386:15665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.3.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd627ebe9 code=0x7ffc0000 [ 299.287889][T18153] loop3: detected capacity change from 0 to 1024 [ 299.311262][ T29] audit: type=1326 audit(2000000407.386:15666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.3.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd627ebe9 code=0x7ffc0000 [ 299.311452][ T29] audit: type=1326 audit(2000000407.456:15667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.3.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefd627ebe9 code=0x7ffc0000 [ 299.398775][T16811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.408227][T18164] loop5: detected capacity change from 0 to 512 [ 299.420436][T18153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.446343][T18153] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.447283][T18164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.481497][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.487214][T18164] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.508074][T18176] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 299.525319][T11464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.662842][ T3391] IPVS: starting estimator thread 0... [ 299.671884][T18187] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.679616][T18195] loop3: detected capacity change from 0 to 512 [ 299.724364][T18195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.741377][T18195] ext4 filesystem being mounted at /440/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.765555][T18195] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4956: corrupted inode contents [ 299.778562][T18197] IPVS: using max 2592 ests per chain, 129600 per kthread [ 299.804843][T18209] lo speed is unknown, defaulting to 1000 [ 299.816808][T18195] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4956: mark_inode_dirty error [ 299.837811][T18215] loop7: detected capacity change from 0 to 512 [ 299.844555][T18195] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4956: corrupted inode contents [ 299.871839][T18215] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.885642][T18195] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.4956: mark_inode_dirty error [ 299.887732][T18215] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.911362][T18222] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4964'. [ 299.927402][T16811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.937589][T18195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4956'. [ 299.956624][T18222] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 299.966181][T18195] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4956: corrupted inode contents [ 299.979838][T18195] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4956: mark_inode_dirty error [ 299.982097][T18227] loop7: detected capacity change from 0 to 1024 [ 299.991410][T18195] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4956: corrupted inode contents [ 300.031100][T18227] EXT4-fs: Ignoring removed orlov option [ 300.039103][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.052352][T18227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.077001][T18233] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.191550][T18248] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4966'. [ 300.201551][T18248] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.4966: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 300.268925][T18254] loop3: detected capacity change from 0 to 512 [ 300.278911][T18254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.291596][T18254] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.316061][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.332632][T18258] loop3: detected capacity change from 0 to 512 [ 300.348578][T18258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.361236][T18258] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.372772][T18258] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4977: corrupted inode contents [ 300.384675][T18258] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4977: mark_inode_dirty error [ 300.396114][T18258] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4977: corrupted inode contents [ 300.408090][T18258] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.4977: mark_inode_dirty error [ 300.422173][T18258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4977'. [ 300.442153][T18258] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4977: corrupted inode contents [ 300.454058][T18258] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4977: mark_inode_dirty error [ 300.465683][T18258] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4977: corrupted inode contents [ 300.491489][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.510005][T18263] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4978'. [ 300.536066][T18263] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 300.798926][T18278] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.809223][T16811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.875022][T18284] loop6: detected capacity change from 0 to 512 [ 300.887441][T18284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.901681][T18284] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.920506][T18288] netlink: 'syz.7.4988': attribute type 15 has an invalid length. [ 300.939808][T14207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.119552][T18305] lo speed is unknown, defaulting to 1000 [ 301.302766][ T4153] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.332915][ T4153] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.370509][ T4153] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.406430][ T4153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.521918][T18314] loop0: detected capacity change from 0 to 1024 [ 301.532530][T18316] loop3: detected capacity change from 0 to 512 [ 301.541938][T18314] EXT4-fs: Ignoring removed orlov option [ 301.558446][T18316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.571436][T18316] ext4 filesystem being mounted at /450/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.586301][T18316] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4997: corrupted inode contents [ 301.600021][T18316] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4997: mark_inode_dirty error [ 301.612057][T18316] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4997: corrupted inode contents [ 301.626058][T18316] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.4997: mark_inode_dirty error [ 301.627301][T18314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.680030][T18316] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4997: corrupted inode contents [ 301.692313][T18316] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4997: mark_inode_dirty error [ 301.705811][T18316] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4997: corrupted inode contents [ 301.828298][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.902180][T18327] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 301.946514][T18336] loop3: detected capacity change from 0 to 512 [ 301.958843][T18332] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.4998: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 301.966501][T18336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.988323][T18336] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.029171][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.053828][T18323] loop7: detected capacity change from 0 to 128 [ 302.061813][T18323] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.074061][T18323] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 302.205914][T18350] netlink: 'syz.5.5008': attribute type 15 has an invalid length. [ 302.345678][T13386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.354737][T18354] loop3: detected capacity change from 0 to 128 [ 302.533186][T18356] lo speed is unknown, defaulting to 1000 [ 302.734086][T18354] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.764789][T18354] ext4 filesystem being mounted at /456/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 302.768851][T16811] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.810947][T18363] loop0: detected capacity change from 0 to 512 [ 302.835080][T18363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.848196][T18363] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.874176][T13386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.894326][T18375] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.003377][T18386] loop6: detected capacity change from 0 to 1024 [ 303.010102][T18386] EXT4-fs: Ignoring removed orlov option [ 303.019508][T18386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.035112][T18388] netlink: 'syz.0.5020': attribute type 15 has an invalid length. [ 303.042982][T18388] __nla_validate_parse: 5 callbacks suppressed [ 303.042995][T18388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5020'. [ 303.183782][T18399] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5019'. [ 303.195611][T18398] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.206924][T18399] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.5019: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 303.406777][T18400] lo speed is unknown, defaulting to 1000 [ 303.514836][T18403] loop5: detected capacity change from 0 to 128 [ 303.532486][T18403] ext4 filesystem being mounted at /415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 303.572770][T18398] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.621639][T18398] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.670899][T18398] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.725956][T18410] loop7: detected capacity change from 0 to 512 [ 303.740422][ T4175] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.751107][T18410] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.757439][ T4175] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.793734][ T4175] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.794813][T18414] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5027'. [ 303.812715][ T4175] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.840504][T18414] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 303.932426][T18428] loop0: detected capacity change from 0 to 512 [ 303.964831][T18428] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.983073][T18428] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.5032: corrupted inode contents [ 304.002238][T18441] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.012940][T18439] loop6: detected capacity change from 0 to 512 [ 304.034615][T18428] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.5032: mark_inode_dirty error [ 304.062382][T18428] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.5032: corrupted inode contents [ 304.082358][T18439] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.107675][T18428] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.5032: mark_inode_dirty error [ 304.117901][T18448] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5038'. [ 304.129411][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 304.129424][ T29] audit: type=1400 audit(2000000412.327:15997): avc: denied { create } for pid=18427 comm="syz.0.5032" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 304.158144][T18428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5032'. [ 304.187156][T18448] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 304.222760][T18428] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.5032: corrupted inode contents [ 304.223044][ T29] audit: type=1400 audit(2000000412.427:15998): avc: denied { mac_admin } for pid=18427 comm="syz.0.5032" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 304.236041][T18428] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.5032: mark_inode_dirty error [ 304.255695][ T29] audit: type=1400 audit(2000000412.427:15999): avc: denied { relabelto } for pid=18427 comm="syz.0.5032" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 304.298503][T18428] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.5032: corrupted inode contents [ 304.331005][T18458] loop6: detected capacity change from 0 to 1024 [ 304.351760][T18458] EXT4-fs: Ignoring removed orlov option [ 304.375179][T18463] netlink: 'syz.3.5042': attribute type 15 has an invalid length. [ 304.383051][T18463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5042'. [ 304.394974][ T29] audit: type=1400 audit(2000000412.568:16000): avc: denied { remove_name } for pid=18427 comm="syz.0.5032" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.417702][ T29] audit: type=1400 audit(2000000412.568:16001): avc: denied { rename } for pid=18427 comm="syz.0.5032" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 304.439709][ T29] audit: type=1400 audit(2000000412.568:16002): avc: denied { unlink } for pid=18427 comm="syz.0.5032" name="file0" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 304.462185][ T29] audit: type=1326 audit(2000000412.658:16003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18457 comm="syz.6.5040" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2608e1ebe9 code=0x0 [ 304.507712][ T29] audit: type=1400 audit(2000000412.708:16004): avc: denied { unmount } for pid=13386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 304.537571][ T29] audit: type=1400 audit(2000000412.738:16005): avc: denied { read write } for pid=13386 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.562006][ T29] audit: type=1400 audit(2000000412.738:16006): avc: denied { open } for pid=13386 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.586592][T18467] loop5: detected capacity change from 0 to 128 [ 304.596047][T18467] ext4 filesystem being mounted at /416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 304.628437][T18471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5040'. [ 304.638421][T18471] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.5040: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 304.709942][T18473] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.744846][T18474] lo speed is unknown, defaulting to 1000 [ 304.875438][T18476] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.142045][T18488] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.147312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.185474][T18491] loop0: detected capacity change from 0 to 1024 [ 305.195882][T18494] loop6: detected capacity change from 0 to 512 [ 305.208529][T18491] EXT4-fs: Ignoring removed orlov option [ 305.231234][T18488] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.242164][T18498] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5053'. [ 305.278753][T18498] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 305.283293][T18494] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.308016][T18488] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.350598][T18513] loop6: detected capacity change from 0 to 512 [ 305.364341][T18488] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.376321][T18514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5062'. [ 305.398201][T18513] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.416616][T18506] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.5062: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 305.442801][T18513] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.5058: corrupted inode contents [ 305.460790][ T4175] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.473381][ T4175] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.481967][T18513] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.5058: mark_inode_dirty error [ 305.501947][ T4175] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.510517][T18513] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.5058: corrupted inode contents [ 305.523402][ T4175] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.536323][T18521] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.540201][T18513] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.5058: mark_inode_dirty error [ 305.567195][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5058'. [ 305.584837][T18513] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.5058: corrupted inode contents [ 305.598236][T18521] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.598322][T18513] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.5058: mark_inode_dirty error [ 305.620829][T18513] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.5058: corrupted inode contents [ 305.632887][T18518] loop5: detected capacity change from 0 to 128 [ 305.641561][T18518] ext4 filesystem being mounted at /422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 305.677093][T18521] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.727068][T18521] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.786721][T18535] loop6: detected capacity change from 0 to 512 [ 305.798640][T18535] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.810651][T18535] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.5066: corrupted inode contents [ 305.822594][T18535] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.5066: mark_inode_dirty error [ 305.834234][T18535] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.5066: corrupted inode contents [ 305.846233][T18535] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.5066: mark_inode_dirty error [ 305.870256][T18535] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.5066: corrupted inode contents [ 305.882243][T18535] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.5066: mark_inode_dirty error [ 305.893827][T18535] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.5066: corrupted inode contents [ 306.040000][T18543] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 306.077292][T18547] loop0: detected capacity change from 0 to 512 [ 306.098602][T18547] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.237001][T18567] loop0: detected capacity change from 0 to 1024 [ 306.243621][T18567] EXT4-fs: Ignoring removed orlov option [ 306.299356][T18571] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 306.360123][T18579] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.5078: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 306.820815][T18590] 9pnet_fd: Insufficient options for proto=fd [ 306.925852][T18594] loop6: detected capacity change from 0 to 128 [ 306.934475][T18594] EXT4-fs mount: 27 callbacks suppressed [ 306.934485][T18594] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 306.952263][T18594] ext4 filesystem being mounted at /316/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 307.020872][T14207] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.061027][T18600] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 307.087525][T13386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.188076][T18621] loop3: detected capacity change from 0 to 512 [ 307.205807][T18621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.218973][T18621] ext4 filesystem being mounted at /473/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.234216][T18621] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.5099: corrupted inode contents [ 307.246823][T18621] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.5099: mark_inode_dirty error [ 307.258434][T18621] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.5099: corrupted inode contents [ 307.271972][T18621] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.5099: mark_inode_dirty error [ 307.291057][T18632] netlink: 'syz.5.5103': attribute type 15 has an invalid length. [ 307.319477][T18621] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.5099: corrupted inode contents [ 307.332406][T18621] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.5099: mark_inode_dirty error [ 307.345856][T18621] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.5099: corrupted inode contents [ 307.397087][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.436863][T18642] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 307.641849][T18647] lo speed is unknown, defaulting to 1000 [ 307.914927][T18661] loop3: detected capacity change from 0 to 512 [ 307.933953][T18661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.946650][T18661] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.973647][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.016116][T18670] loop3: detected capacity change from 0 to 512 [ 308.032461][T18670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.045087][T18670] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.074369][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.088059][T18666] loop0: detected capacity change from 0 to 128 [ 308.096311][T18666] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.108796][T18666] ext4 filesystem being mounted at /328/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 308.199122][T18679] loop5: detected capacity change from 0 to 512 [ 308.206371][T13386] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.217280][T18679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.231376][T18679] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.256509][T11464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.260668][T18685] __nla_validate_parse: 8 callbacks suppressed [ 308.260681][T18685] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5120'. [ 308.298049][T18685] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 308.315677][T18691] lo speed is unknown, defaulting to 1000 [ 308.352657][T18693] loop0: detected capacity change from 0 to 1024 [ 308.359260][T18693] EXT4-fs: Ignoring removed nobh option [ 308.372485][T18693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.390574][T18693] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.431166][T18693] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.481507][T18693] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.531097][T18693] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.596116][ T41] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.606385][ T41] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.617526][ T41] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.628308][ T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.649682][T13386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.693755][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5125'. [ 308.728157][T18706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5127'. [ 308.749001][T18708] netlink: 'syz.0.5128': attribute type 15 has an invalid length. [ 308.756817][T18708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5128'. [ 308.772812][T18715] loop6: detected capacity change from 0 to 512 [ 308.790571][T18715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.804633][T18715] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.831566][T14207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.019005][T18721] lo speed is unknown, defaulting to 1000 [ 309.121045][T18726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5133'. [ 309.168099][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 309.168110][ T29] audit: type=1400 audit(2000000417.378:16257): avc: denied { read write } for pid=18727 comm="syz.6.5134" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 309.198614][ T29] audit: type=1400 audit(2000000417.378:16258): avc: denied { open } for pid=18727 comm="syz.6.5134" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 309.223917][ T29] audit: type=1400 audit(2000000417.378:16259): avc: denied { mount } for pid=18727 comm="syz.6.5134" name="/" dev="configfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 309.255602][T18730] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 309.258127][ T29] audit: type=1400 audit(2000000417.478:16260): avc: denied { wake_alarm } for pid=18727 comm="syz.6.5134" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 309.335951][ T29] audit: type=1400 audit(2000000417.548:16261): avc: denied { search } for pid=18727 comm="syz.6.5134" name="/" dev="configfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.349260][T18738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5138'. [ 309.358253][ T29] audit: type=1400 audit(2000000417.548:16262): avc: denied { search } for pid=18727 comm="syz.6.5134" name="/" dev="configfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.358278][ T29] audit: type=1400 audit(2000000417.548:16263): avc: denied { read open } for pid=18727 comm="syz.6.5134" path="/" dev="configfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.392162][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5137'. [ 309.462457][ T29] audit: type=1400 audit(2000000417.678:16264): avc: denied { create } for pid=18749 comm="syz.3.5142" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 309.484735][ T29] audit: type=1400 audit(2000000417.678:16265): avc: denied { bind } for pid=18744 comm="syz.6.5141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 309.487590][T18750] loop3: detected capacity change from 0 to 128 [ 309.511220][ T29] audit: type=1400 audit(2000000417.728:16266): avc: denied { mounton } for pid=18749 comm="syz.3.5142" path="/484/file0" dev="tmpfs" ino=2571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 309.542906][T18750] loop3: detected capacity change from 0 to 764 [ 309.550523][T18750] iso9660: Unknown parameter 'vfat' [ 309.684163][T18766] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5149'. [ 309.702216][T18766] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 309.733750][ T4157] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.765147][ T4157] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.786788][ T4157] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.796256][ T4157] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.907315][T18782] lo speed is unknown, defaulting to 1000 [ 309.928336][T18784] loop3: detected capacity change from 0 to 512 [ 309.939559][T18784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.952496][T18784] ext4 filesystem being mounted at /492/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.965507][T18784] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.5156: corrupted inode contents [ 309.978484][T18784] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.5156: mark_inode_dirty error [ 309.991037][T18784] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.5156: corrupted inode contents [ 310.004061][T18784] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.5156: mark_inode_dirty error [ 310.020031][T18784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5156'. [ 310.048339][T18794] netlink: 'syz.0.5158': attribute type 15 has an invalid length. [ 310.056218][T18794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5158'. [ 310.069981][T18784] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.5156: corrupted inode contents [ 310.081968][T18784] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.5156: mark_inode_dirty error [ 310.102840][T18784] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.5156: corrupted inode contents [ 310.138968][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.328791][T18802] lo speed is unknown, defaulting to 1000 [ 310.759472][T18809] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 310.839406][T18813] loop6: detected capacity change from 0 to 512 [ 311.078674][T18813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.091379][T18813] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.154189][T14207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.173378][T18839] loop5: detected capacity change from 0 to 1024 [ 311.175419][T18841] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 311.188716][T18839] EXT4-fs: Ignoring removed nobh option [ 311.227550][T18839] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.257992][T18839] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.279255][T18853] netlink: 'syz.7.5179': attribute type 15 has an invalid length. [ 311.320997][T18839] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.394847][T18870] loop6: detected capacity change from 0 to 512 [ 311.401968][T18870] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 311.411732][T18870] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended [ 311.421847][T18870] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.5182: inode #15: comm syz.6.5182: iget: illegal inode # [ 311.435809][T18870] EXT4-fs (loop6): Remounting filesystem read-only [ 311.443372][T18870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.736730][T18839] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.750605][T18871] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 311.770471][T18874] lo speed is unknown, defaulting to 1000 [ 311.841694][T14207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.864120][T18839] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.883088][T18879] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 311.966050][ T4175] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.982107][T18891] loop6: detected capacity change from 0 to 1024 [ 311.991289][T18889] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.003393][ T4175] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.011669][ T4175] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.020048][ T4175] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.029390][T18891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.042652][T11464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.043416][T18891] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.084090][T18889] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.145152][T18889] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.149061][T18901] loop7: detected capacity change from 0 to 512 [ 312.186070][T18901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.211975][T18901] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.244551][T18889] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.282903][T16811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.317728][ T41] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.346806][ T41] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.361491][ T41] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.391962][ T41] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.405659][T18917] lo speed is unknown, defaulting to 1000 [ 312.465326][T18922] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 312.669354][T18950] loop3: detected capacity change from 0 to 1024 [ 312.679319][T18950] EXT4-fs: Ignoring removed orlov option [ 312.689613][T18950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.711000][T18890] ================================================================== [ 312.719080][T18890] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 312.728875][T18890] [ 312.731180][T18890] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 312.739225][T18890] tick_do_update_jiffies64+0x113/0x1c0 [ 312.744757][T18890] tick_nohz_handler+0x7f/0x2d0 [ 312.749592][T18890] __hrtimer_run_queues+0x20c/0x5a0 [ 312.754772][T18890] hrtimer_interrupt+0x21a/0x460 [ 312.759695][T18890] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 312.765577][T18890] sysvec_apic_timer_interrupt+0x6f/0x80 [ 312.771196][T18890] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.777163][T18890] finish_task_switch+0xb6/0x2b0 [ 312.782086][T18890] __schedule+0x6b9/0xb30 [ 312.786400][T18890] __cond_resched+0x4e/0x90 [ 312.790887][T18890] shrink_node+0x56f/0x2120 [ 312.795381][T18890] do_try_to_free_pages+0x3f6/0xcd0 [ 312.800568][T18890] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 312.806445][T18890] try_charge_memcg+0x358/0x9e0 [ 312.811282][T18890] obj_cgroup_charge_pages+0xa6/0x150 [ 312.816644][T18890] __memcg_kmem_charge_page+0x9f/0x170 [ 312.822096][T18890] __alloc_frozen_pages_noprof+0x188/0x360 [ 312.827893][T18890] alloc_pages_mpol+0xb3/0x250 [ 312.832645][T18890] alloc_pages_noprof+0x90/0x130 [ 312.837573][T18890] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 312.843370][T18890] bpf_map_area_alloc+0xfa/0x150 [ 312.848300][T18890] array_map_alloc+0x1d3/0x3c0 [ 312.853053][T18890] map_create+0x843/0xca0 [ 312.857372][T18890] __sys_bpf+0x545/0x7b0 [ 312.861600][T18890] __x64_sys_bpf+0x41/0x50 [ 312.866003][T18890] x64_sys_call+0x2aea/0x2ff0 [ 312.870663][T18890] do_syscall_64+0xd2/0x200 [ 312.875162][T18890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.881127][T18890] [ 312.883438][T18890] read to 0xffffffff868099c0 of 8 bytes by task 18890 on cpu 1: [ 312.891048][T18890] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 312.897281][T18890] count_shadow_nodes+0x6a/0x230 [ 312.902208][T18890] do_shrink_slab+0x63/0x680 [ 312.906788][T18890] shrink_slab+0x448/0x760 [ 312.911190][T18890] shrink_node+0x6c3/0x2120 [ 312.915679][T18890] do_try_to_free_pages+0x3f6/0xcd0 [ 312.920862][T18890] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 312.926739][T18890] try_charge_memcg+0x358/0x9e0 [ 312.931572][T18890] charge_memcg+0x51/0xc0 [ 312.935894][T18890] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 312.941855][T18890] __read_swap_cache_async+0x1df/0x350 [ 312.947304][T18890] swap_cluster_readahead+0x277/0x3e0 [ 312.952664][T18890] swapin_readahead+0xde/0x6f0 [ 312.957418][T18890] do_swap_page+0x301/0x2430 [ 312.961991][T18890] handle_mm_fault+0x9a5/0x2c20 [ 312.966825][T18890] do_user_addr_fault+0x636/0x1090 [ 312.971927][T18890] exc_page_fault+0x62/0xa0 [ 312.976415][T18890] asm_exc_page_fault+0x26/0x30 [ 312.981248][T18890] [ 312.983553][T18890] value changed: 0x00000001000004f5 -> 0x00000001000004f6 [ 312.990637][T18890] [ 312.992940][T18890] Reported by Kernel Concurrency Sanitizer on: [ 312.999067][T18890] CPU: 1 UID: 0 PID: 18890 Comm: syz.6.5187 Not tainted syzkaller #0 PREEMPT(voluntary) [ 313.008852][T18890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.018889][T18890] ================================================================== [ 313.030441][T18953] loop7: detected capacity change from 0 to 512 [ 313.063359][T14207] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 313.074369][T14207] CPU: 1 UID: 0 PID: 14207 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 313.074391][T14207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.074404][T14207] Call Trace: [ 313.074410][T14207] [ 313.074418][T14207] __dump_stack+0x1d/0x30 [ 313.074436][T14207] dump_stack_lvl+0xe8/0x140 [ 313.074506][T14207] dump_stack+0x15/0x1b [ 313.074555][T14207] dump_header+0x81/0x220 [ 313.074665][T14207] oom_kill_process+0x342/0x400 [ 313.074698][T14207] out_of_memory+0x979/0xb80 [ 313.074727][T14207] try_charge_memcg+0x5e6/0x9e0 [ 313.074803][T14207] charge_memcg+0x51/0xc0 [ 313.074822][T14207] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 313.074844][T14207] __read_swap_cache_async+0x1df/0x350 [ 313.074951][T14207] swap_cluster_readahead+0x277/0x3e0 [ 313.074987][T14207] swapin_readahead+0xde/0x6f0 [ 313.075096][T14207] ? __filemap_get_folio+0x4f7/0x6b0 [ 313.075134][T14207] ? ktime_get+0x1eb/0x210 [ 313.075160][T14207] ? swap_cache_get_folio+0x77/0x200 [ 313.075212][T14207] do_swap_page+0x301/0x2430 [ 313.075231][T14207] ? finish_task_switch+0xad/0x2b0 [ 313.075258][T14207] ? __pfx_default_wake_function+0x10/0x10 [ 313.075297][T14207] handle_mm_fault+0x9a5/0x2c20 [ 313.075386][T14207] do_user_addr_fault+0x636/0x1090 [ 313.075418][T14207] ? fpregs_restore_userregs+0xe2/0x1d0 [ 313.075494][T14207] ? switch_fpu_return+0xe/0x20 [ 313.075520][T14207] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 313.075542][T14207] exc_page_fault+0x62/0xa0 [ 313.075624][T14207] asm_exc_page_fault+0x26/0x30 [ 313.075645][T14207] RIP: 0033:0x7f2608e51465 [ 313.075661][T14207] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 313.075679][T14207] RSP: 002b:00007ffc9c8274f8 EFLAGS: 00010246 [ 313.075692][T14207] RAX: 0000000000000000 RBX: 0000000000000333 RCX: 00007f2608e51463 [ 313.075779][T14207] RDX: 00007ffc9c827510 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.075792][T14207] RBP: 00007ffc9c82757c R08: 0000000019caaf25 R09: 0000000000000000 [ 313.075806][T14207] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 313.075820][T14207] R13: 00000000000927c0 R14: 000000000004c4fe R15: 00007ffc9c8275d0 [ 313.075840][T14207] [ 313.075847][T14207] memory: usage 270280kB, limit 307200kB, failcnt 539 [ 313.163333][T18957] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.5212: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 313.164940][T14207] memory+swap: usage 77808kB, limit 9007199254740988kB, failcnt 0 [ 313.219620][T18953] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.221023][T14207] kmem: usage 5328kB, limit 9007199254740988kB, failcnt 0 [ 313.221038][T14207] Memory cgroup stats for /syz6: [ 313.221944][T14207] cache 8192 [ 313.227635][T18953] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.230400][T14207] rss 20480 [ 313.230409][T14207] shmem 0 [ 313.259564][T18953] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.5213: corrupted inode contents [ 313.264209][T14207] mapped_file 0 [ 313.264219][T14207] dirty 0 [ 313.274046][T18953] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.5213: mark_inode_dirty error [ 313.280158][T14207] writeback 0 [ 313.288424][T18953] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.5213: corrupted inode contents [ 313.296106][T14207] workingset_refault_anon 18 [ 313.296117][T14207] workingset_refault_file 0 [ 313.296123][T14207] swap 692224 [ 313.296144][T14207] swapcached 40960 [ 313.296152][T14207] pgpgin 118012 [ 313.300891][T18953] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.5213: mark_inode_dirty error [ 313.305993][T14207] pgpgout 117998 [ 313.371443][T18953] __nla_validate_parse: 10 callbacks suppressed [ 313.371457][T18953] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5213'. [ 313.374219][T14207] pgfault 143099 [ 313.374228][T14207] pgmajfault 8 [ 313.374235][T14207] inactive_anon 12288 [ 313.374243][T14207] active_anon 28672 [ 313.374251][T14207] inactive_file 12288 [ 313.486747][T14207] active_file 0 [ 313.490215][T14207] unevictable 0 [ 313.493684][T14207] hierarchical_memory_limit 314572800 [ 313.499041][T14207] hierarchical_memsw_limit 9223372036854771712 [ 313.505187][T14207] total_cache 8192 [ 313.508911][T14207] total_rss 20480 [ 313.512549][T14207] total_shmem 0 [ 313.516020][T14207] total_mapped_file 0 [ 313.519990][T14207] total_dirty 0 [ 313.523443][T14207] total_writeback 0 [ 313.527257][T14207] total_workingset_refault_anon 18 [ 313.532359][T14207] total_workingset_refault_file 0 [ 313.537428][T14207] total_swap 692224 [ 313.541248][T14207] total_swapcached 40960 [ 313.545535][T14207] total_pgpgin 118012 [ 313.549501][T14207] total_pgpgout 117998 [ 313.553546][T14207] total_pgfault 143099 [ 313.557581][T14207] total_pgmajfault 8 [ 313.561457][T14207] total_inactive_anon 12288 [ 313.565989][T14207] total_active_anon 28672 [ 313.570296][T14207] total_inactive_file 12288 [ 313.574781][T14207] total_active_file 0 [ 313.578803][T14207] total_unevictable 0 [ 313.582768][T14207] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.5187,pid=18890,uid=0 [ 313.597445][T14207] Memory cgroup out of memory: OOM victim 18890 (syz.6.5187) is already exiting. Skip killing the task [ 313.609961][T18823] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 313.612113][T18953] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.5213: corrupted inode contents [ 313.636404][T18953] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.5213: mark_inode_dirty error [ 313.648028][T18953] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.5213: corrupted inode contents [ 313.670450][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.696193][T14207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.716248][T16811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.104571][ T4169] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 316.114230][ T4169] ref_tracker: netdev@ffff888119a5f550 has 1/1 users at [ 316.114230][ T4169] batadv_hard_if_event+0x6c1/0xf10 [ 316.114230][ T4169] raw_notifier_call_chain+0x6c/0x1b0 [ 316.114230][ T4169] call_netdevice_notifiers_info+0xae/0x100 [ 316.114230][ T4169] register_netdevice+0xd48/0xf00 [ 316.114230][ T4169] veth_newlink+0x49b/0x770 [ 316.114230][ T4169] rtnl_newlink_create+0x1b9/0x620 [ 316.114230][ T4169] rtnl_newlink+0xf29/0x12d0 [ 316.114230][ T4169] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 316.114230][ T4169] netlink_rcv_skb+0x120/0x220 [ 316.114230][ T4169] rtnetlink_rcv+0x1c/0x30 [ 316.114230][ T4169] netlink_unicast+0x5c0/0x690 [ 316.114230][ T4169] netlink_sendmsg+0x58b/0x6b0 [ 316.114230][ T4169] __sock_sendmsg+0x142/0x180 [ 316.114230][ T4169] __sys_sendto+0x268/0x330 [ 316.114230][ T4169] __x64_sys_sendto+0x76/0x90 [ 316.114230][ T4169] x64_sys_call+0x2d05/0x2ff0 [ 316.114230][ T4169]