last executing test programs: 12m19.876476556s ago: executing program 3 (id=524): r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14008, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x48d4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) r3 = timerfd_create(0x1, 0x800) timerfd_gettime(r3, &(0x7f00000000c0)) 12m19.781505656s ago: executing program 3 (id=525): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x5, 0x0, @private2, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) time(0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18) close_range(r2, r3, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x420001) 12m19.740293206s ago: executing program 3 (id=526): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x5, 0x0, @private2, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18) close_range(r2, r3, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x420001) 12m19.695226316s ago: executing program 3 (id=527): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x40c2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x4, 0x56f, &(0x7f00000002c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYRES8=r0, @ANYRES16=r1], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r3, &(0x7f0000000200)=ANY=[], 0x6) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000010a01030000000000000000030000040900010073797a31000000000900010073797a31000000000900010073797a3100000000080002400000000108000240000000020c8c044000000010000000050c00"], 0x60}, 0x1, 0x0, 0x0, 0x4000044}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(r3, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7098}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x5}, 0x0, 0x10000, 0x0, 0x6, 0xc, 0xfff, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x1, {0x1, 0x0, 0x1}, {0x2}, 0xfe, 0xff}], 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r7 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x10) sendto$inet6(r7, &(0x7f00000001c0)="4d057cc368212387c5d905c0c0595033c7ed05997981dbb16a995aad781e7416c94e62101ff85e3fd56c1a3b98b05ed608ff538885dbcae95068732a158cc0342c73aaa36b3de1b1372008b8b918b01f5edc6845b3be89b62c6964fe5153d720", 0x60, 0x24000001, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r8}, 0x18) r9 = socket(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="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", 0x459}], 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x6, &(0x7f00000008c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x6b, &(0x7f0000000940)=""/107, 0x41100, 0x1, '\x00', 0x0, 0x0, r7}, 0x94) 12m19.503004427s ago: executing program 3 (id=528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, 0x0, &(0x7f00000003c0)}, 0x20) 12m19.421791127s ago: executing program 3 (id=529): r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14008, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x48d4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) r3 = timerfd_create(0x1, 0x800) timerfd_gettime(r3, &(0x7f00000000c0)) (fail_nth: 1) 12m19.403761607s ago: executing program 32 (id=529): r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14008, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x48d4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) r3 = timerfd_create(0x1, 0x800) timerfd_gettime(r3, &(0x7f00000000c0)) (fail_nth: 1) 9m14.278229354s ago: executing program 0 (id=3072): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24008011}, 0x8080) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x10001, 0x0) 9m12.255033863s ago: executing program 0 (id=3084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008800) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9m11.192882917s ago: executing program 0 (id=3088): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) socket$inet(0x2, 0x6, 0x1) pread64(r1, &(0x7f00000014c0)=""/4104, 0x1008, 0x10000) 9m10.39901703s ago: executing program 0 (id=3091): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x3, 0x519, &(0x7f0000001300)="$eJzs3c9vI1cdAPDvTOJtsptiFxAqlSgVLcpWsHbS0DZCCMoFTpWAcl9C4kRR7DiKnbKJKkjFf4CQQOLEiQsSfwBS1QN/AKpUCS6IAwIEQrCFA+JHB9ke041jJ6k2yezGn4/04vdmxvN9byy/+eGXmQAm1lMR8VJETEXEsxFRzqeneYrDfuou987d11a7KYkse+WvSST5tMG6uuXpiLiRv20mIr725YhvJsfjtvcPtlYajfpuXq51mju19v7Brc3mykZ9o769tLT4wvKLy88vL2S5+2pnZZD5yZc+/8anv/W723+++e1utT73kSjFUDvOU7/ppd62GOhuo92LCFaAqbw9paIrAgDAmXSP8T8YEZ/oHf+XY6p3NDdkqoiaAQAAAOcl+8Jc/CeJyAAAAIArK42IuUjSaj4WYC7S9Fp+beDDcT1ttNqdT6239rbXuvMiKlFK1zcb9YV8rHAlSkm3vJiPsR2UnxsqL0XEYxHx/fJsr1xdbTXWCr72AQAAAJPixtD5/z/KaS9/uhH/JwAAAAA8uCpjCwAAAMBV4ZQfAAAArr7h8/83CqoHAAAAcCG+8vLL3ZQNnn+99ur+3lbr1Vtr9fZWtbm3Wl1t7e5UN1qtjd49+5qnra/Rau18Jrb37tQ69Xan1t4/uN1s7W13bm8eeQQ2AAAAcIke+/ibv04i4vCzs70U+X0AAY74Q9EVAM7TVNEVAArjLt4wuUpFVwAoXHLKfIN3AADg4Tf/0eO//w+e/+/aAFxtxvoAwOSZjtmiqwAUpGQEIEy0NCI+0M8+Mm6Zsb////KsUbIs4q3yvVNcXwQAgMs110tJWs3PA+YiTavViEcj0kqUkvXNRn0hPz/4Vbn0SLe82HtncuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgL8uSyAAAAIArLSL9U9K7m3/EfPmZueHrA9eSf5bjj3nhR6/84M5Kp7O72J3+t96zvK5FROeH+fTnxj4+DAAAADhvyeHYWf3z9Px18VJrBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAEeOfua6uDdJlx//LFiKiMij8dM73XmShFxPW/JzF9z/uSiJg6h/iHr0fE46PiJ/FulmWVvBbD8dOImL3g+JXephkf/8Y5xIdJ9ma3/3lp1Pcvjad6r6O/f9N5ul/j+780j/x4r58b1f89emxtzZExnnj7Z7Wx8V+PeGJ6dP8z6H+TMfGfPra2f2dZdjzGN75+cDAufvbjiPmR+5/kSKxap7lTa+8f3NpsrmzUN+rbS0uLLyy/uPz88kJtfbNRz/+OjPG9j/383ZPaf31E/N/+pt//ntT+Z8atdMh/375z90P9bGlU/JtPj9z/zsSY+Gm+7/tknu/Onx/kD/v5ez3507eePKn9a2O2/2mf/80ztv/Zr37392dcFAC4BO39g62VRqO+e0Jm5gzLPIyZX8w8ENV4n5nsO/1P7oRlysXV8F9nXrh7tPrelEGrCt+8RzLZpcWaigekyf/PFNotAQAAF+C9g/6iawIAAAAAAAAAAAAAAAAAAACT6zJuJzYc87CYpgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnOh/AQAA///uxuBB") madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) syz_clone3(&(0x7f00000004c0)={0x84004400, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) 9m9.832964853s ago: executing program 0 (id=3098): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'batadv0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x1}}) 9m9.695071113s ago: executing program 0 (id=3100): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100e5020000000000000c000000180001801400020076657468305f746f5f626f6e640000001400038010000380"], 0x40}}, 0x40040) 9m9.683169763s ago: executing program 33 (id=3100): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100e5020000000000000c000000180001801400020076657468305f746f5f626f6e640000001400038010000380"], 0x40}}, 0x40040) 6m15.339139076s ago: executing program 2 (id=4725): r0 = socket$netlink(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x200c17a) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x80, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r3, 0x0, 0xbc3}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000002000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='rxrpc_propose_ack\x00', r6, 0x0, 0x80000002}, 0x18) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="0c000000000000001c0012000c000100626f6e64000000000c0002000800010006df7a4deb1d92b6bdbaee16f3172b058b6b92371fffa51acc59178740c12213b1"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 6m12.262073558s ago: executing program 2 (id=4739): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x224, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0xc0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0xcc, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m11.94550609s ago: executing program 2 (id=4741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r2, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x2, 0x0, 0x0) 6m11.85213781s ago: executing program 2 (id=4743): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x3, 0x519, &(0x7f0000001300)="$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") madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) syz_clone3(&(0x7f00000004c0)={0x84004400, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m11.156932123s ago: executing program 2 (id=4749): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 6m7.918527326s ago: executing program 2 (id=4773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r2, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x2, 0x0, 0x0) 6m7.873702746s ago: executing program 34 (id=4773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r2, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x2, 0x0, 0x0) 5m56.344633544s ago: executing program 6 (id=4849): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = io_uring_setup(0x677c, &(0x7f0000000200)={0x0, 0xaa4f, 0x8000, 0x3, 0xc0}) accept$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f00000000c0)=0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000380)={0x2, 0x0, &(0x7f00000003c0)=[r2, r3]}, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000800)={[{@acl}, {@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000f80)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffea, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ed80, 0x0, 0x0) inotify_init() r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r4) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f0000000400), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_DEBUG={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 5m56.225182204s ago: executing program 6 (id=4850): mlock(&(0x7f0000251000/0x2000)=nil, 0x2000) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}]}, 0x3c}}, 0x8000) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x71bd0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) io_uring_enter(r2, 0x4979, 0x574, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4ecc, &(0x7f0000000080)={[{@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x8001}}]}, 0xfd, 0x4eb, &(0x7f0000000e80)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) 5m54.091350513s ago: executing program 6 (id=4857): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 5m53.923076414s ago: executing program 6 (id=4858): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x3, 0x519, &(0x7f0000001300)="$eJzs3c9vI1cdAPDvTOJtsptiFxAqlSgVLcpWsHbS0DZCCMoFTpWAcl9C4kRR7DiKnbKJKkjFf4CQQOLEiQsSfwBS1QN/AKpUCS6IAwIEQrCFA+JHB9ke041jJ6k2yezGn4/04vdmxvN9byy/+eGXmQAm1lMR8VJETEXEsxFRzqeneYrDfuou987d11a7KYkse+WvSST5tMG6uuXpiLiRv20mIr725YhvJsfjtvcPtlYajfpuXq51mju19v7Brc3mykZ9o769tLT4wvKLy88vL2S5+2pnZZD5yZc+/8anv/W723+++e1utT73kSjFUDvOU7/ppd62GOhuo92LCFaAqbw9paIrAgDAmXSP8T8YEZ/oHf+XY6p3NDdkqoiaAQAAAOcl+8Jc/CeJyAAAAIArK42IuUjSaj4WYC7S9Fp+beDDcT1ttNqdT6239rbXuvMiKlFK1zcb9YV8rHAlSkm3vJiPsR2UnxsqL0XEYxHx/fJsr1xdbTXWCr72AQAAAJPixtD5/z/KaS9/uhH/JwAAAAA8uCpjCwAAAMBV4ZQfAAAArr7h8/83CqoHAAAAcCG+8vLL3ZQNnn+99ur+3lbr1Vtr9fZWtbm3Wl1t7e5UN1qtjd49+5qnra/Rau18Jrb37tQ69Xan1t4/uN1s7W13bm8eeQQ2AAAAcIke+/ibv04i4vCzs70U+X0AAY74Q9EVAM7TVNEVAArjLt4wuUpFVwAoXHLKfIN3AADg4Tf/0eO//w+e/+/aAFxtxvoAwOSZjtmiqwAUpGQEIEy0NCI+0M8+Mm6Zsb////KsUbIs4q3yvVNcXwQAgMs110tJWs3PA+YiTavViEcj0kqUkvXNRn0hPz/4Vbn0SLe82HtncuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgL8uSyAAAAIArLSL9U9K7m3/EfPmZueHrA9eSf5bjj3nhR6/84M5Kp7O72J3+t96zvK5FROeH+fTnxj4+DAAAADhvyeHYWf3z9Px18VJrBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAEeOfua6uDdJlx//LFiKiMij8dM73XmShFxPW/JzF9z/uSiJg6h/iHr0fE46PiJ/FulmWVvBbD8dOImL3g+JXephkf/8Y5xIdJ9ma3/3lp1Pcvjad6r6O/f9N5ul/j+780j/x4r58b1f89emxtzZExnnj7Z7Wx8V+PeGJ6dP8z6H+TMfGfPra2f2dZdjzGN75+cDAufvbjiPmR+5/kSKxap7lTa+8f3NpsrmzUN+rbS0uLLyy/uPz88kJtfbNRz/+OjPG9j/383ZPaf31E/N/+pt//ntT+Z8atdMh/375z90P9bGlU/JtPj9z/zsSY+Gm+7/tknu/Onx/kD/v5ez3507eePKn9a2O2/2mf/80ztv/Zr37392dcFAC4BO39g62VRqO+e0Jm5gzLPIyZX8w8ENV4n5nsO/1P7oRlysXV8F9nXrh7tPrelEGrCt+8RzLZpcWaigekyf/PFNotAQAAF+C9g/6iawIAAAAAAAAAAAAAAAAAAACT6zJuJzYc87CYpgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnOh/AQAA///uxuBB") syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) 5m53.848334894s ago: executing program 6 (id=4860): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fdatasync(r0) 5m53.036698638s ago: executing program 6 (id=4864): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008800) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m52.953299038s ago: executing program 35 (id=4864): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008800) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.050825085s ago: executing program 5 (id=8237): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) fadvise64(r2, 0x807f, 0x1000000, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) request_key(0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b511c"], 0x50) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000300)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYRESDEC=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x4001084) socket$inet_udp(0x2, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "60cfc7e5a9992101d7f1c5aca325a25884f9c3c0c5ce07602565fef1599658ea0d1dfa9decf9a7d5cbc1410b90e108ecbce34e8fcbc5c7c6d4f9f335cb4a4d3c", 0x39}, 0x48, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x4, 0x5, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.605473111s ago: executing program 5 (id=8263): r0 = socket$netlink(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x200c17a) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0xbc3}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0c000000000000001c0012000c000100626f6e64000000000c0002000800010006df7a4deb1d92b6bdbaee16f3172b058b6b92371fffa51acc59178740c12213b1"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {0x6}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.045430173s ago: executing program 5 (id=8274): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x300000a, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x1ffffff) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 3.972790454s ago: executing program 5 (id=8277): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x300000a, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x1ffffff) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@resuid}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@minixdf}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x622, &(0x7f0000000600)="$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") 3.706534705s ago: executing program 5 (id=8281): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x4044080) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3.640987685s ago: executing program 1 (id=8283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9d}, 0x18) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) 3.575986375s ago: executing program 1 (id=8285): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno', 0xa) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="4c0000001200010300000000000000000006fc172342442fdef158ef8400004e2300000000feffffff01000000fdffffff000001000000000071d19d626280ec1498c3fdb059c44bd41230accd0ca1ab3a94dd70093ddb0b04cb5ebed83057b29c6abdf308a779161373416dfca20df7d538807598f48ee25acf81a07e2ebe86ba911b9dd315c5717fa04a774c00"/151, @ANYRES32=0x0, @ANYBLOB="00000000ff7f00000700000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001240)=ANY=[@ANYBLOB="021201091300000029bd7000fedbdf2505001a00ffffffff000000000000000000000000ffffffff000000000000000000000000000014000800120004000200000000000004000006003200004000000001000000000000ff010000000000000000000000000001e000000100000000000000000000000002001300040000002bbd700005350000020008001000000011af820000000000742a8ad4e5f9a70b8102275f7ed51e32585be3c0862e1bacfbe019906dbd86195ec5db6d18af67975b1e36116522820a9dc073fc906986a403f13ac1d6c2c3b2828cd1bb92b7e12f6a383265051032c6ae7cee911ba87684742e8028ca5900b67ad0f4880f81ec60c87abda5a5ebbf776afc90dd67e66dc9af2ced72e6dc0fbe65d7f77b908b99fb786c4228760e4d7da30eeff0068eb38c0464f90c1c885091b1c7d71eb2d9c07bf32a702357bf1263ef5d43c8c2708b70874cf953f16b3ed4b8df992f06cff21b1fd8a818985387d2838cbfbe5b74cb465cba19371ce75109b0e12dd2231008057c5aab7d6c40c39dcbdc39c85c94480ca28abea084cdb803454d3ae684d3667eec94a888f86e3b9308d8bc0c18f65ce3d490"], 0x98}}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfffe) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000001640)={&(0x7f00000000c0), 0xc, &(0x7f0000001600)={&(0x7f0000001680)=ANY=[@ANYBLOB="c80000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf2513000000480001800800030003000000140002007663616e300000000000000000000000140002006d6163766c616e310000000000000000140002006e7230000000000000000000000000006000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000014000200626f6e6430000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1600020076657468305f6d6163067460700000001400020076657468315f746f5f620c00018008000100d5f4efc310d60dfb0d6364ea11c0d5c35ab2fd08648bcfac97feb5bc633d5c715e86f3237f749d5a2d81fb4b9ca92e1619a029c8ba1959aa2a785c720729dfbcda6c19b8cf40915a7800000000000000328baa53f28913fdfc298967b6bd685bd40ec44b32da433750920811acad74f66075112424d54181c05d2e47c5aeb456f2f60900000000000000c6be7e8e041030c9b92437bdc3eca54edcec0fbedc9fb329adc6006eba", @ANYRES32=0x0], 0xc8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24000000021401002bbd7000ffdbdf25080001000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x1ffffffffffffffd}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@deltaction={0x7c, 0x31, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x140}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd09a}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}]}, 0x7c}}, 0x8000) write(r6, &(0x7f0000004200)='t', 0x1) socket(0x11, 0x800000003, 0x0) close(r1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1], [0x0, 0x8, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) recvmmsg(r9, &(0x7f0000003f40)=[{{&(0x7f0000000700)=@tipc=@id, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000800)=""/238, 0xee}, {&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f0000000a40)=""/222, 0xde}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000000c00)=""/245, 0xf5}], 0x7, &(0x7f0000000d80)=""/94, 0x5e}, 0x9}, {{&(0x7f0000000e00)=@isdn, 0x80, &(0x7f0000000500)=[{&(0x7f0000000e80)=""/225, 0xe1}], 0x1, &(0x7f0000000f80)=""/142, 0x8e}, 0xb9}, {{&(0x7f0000001040)=@hci, 0x80, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/240, 0xf0}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000000580)}, {&(0x7f00000014c0)=""/137, 0x89}, {&(0x7f0000003800)=""/132, 0x84}], 0x5, &(0x7f0000000600)=""/48, 0x30}, 0xe651}, {{&(0x7f0000001580)=@vsock, 0x80, &(0x7f0000003c00)=[{&(0x7f00000038c0)=""/206, 0xce}, {&(0x7f0000000b40)=""/53, 0x35}, {&(0x7f00000039c0)=""/79, 0x4f}, {&(0x7f0000003a40)=""/241, 0xf1}, {&(0x7f0000003b40)=""/148, 0x94}], 0x5}}, {{&(0x7f0000003c80)=@can, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003d00)=""/225, 0xe1}, {&(0x7f0000003e00)=""/137, 0x89}], 0x2, &(0x7f0000003f00)=""/16, 0x10}, 0x4}], 0x5, 0x40000000, &(0x7f0000004080)={0x0, 0x989680}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0xfffffffffffff001}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 3.546601095s ago: executing program 5 (id=8286): r0 = socket$netlink(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x200c17a) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0xbc3}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0c000000000000001c0012000c000100626f6e64000000000c0002000800010006df7a4deb1d92b6bdbaee16f3172b058b6b92371fffa51acc59178740c12213b1"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {0x6}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.072933447s ago: executing program 4 (id=8293): r0 = socket$netlink(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x200c17a) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0xbc3}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0c000000000000001c0012000c000100626f6e64000000000c0002000800010006df7a4deb1d92b6bdbaee16f3172b058b6b92371fffa51acc59178740c12213b1"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {0x6}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.036591377s ago: executing program 4 (id=8296): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x4044080) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3.023965127s ago: executing program 7 (id=8297): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, 0x0, 0x4003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000280)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xb4e, 0xd0b, 0x7, 0x10028, 0xffffffffffffffff, 0x86ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0xb, @void, @value, @value=r5}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1008002, &(0x7f0000000000), 0x83, 0x601, &(0x7f00000011c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x103340, 0x21) renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0x0, 0xfffff1ff) 2.988359157s ago: executing program 4 (id=8298): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0x8) 2.775024918s ago: executing program 4 (id=8299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000680)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010) 2.593999179s ago: executing program 1 (id=8301): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) 2.274957121s ago: executing program 1 (id=8302): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x40) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x6) open_tree(0xffffffffffffff9c, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) lseek(r4, 0x8, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000001008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x10]}}, &(0x7f0000000180)=""/129, 0x3d, 0x81, 0x1}, 0x20) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) 1.820448532s ago: executing program 4 (id=8303): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4800) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, 0x0) 1.393596164s ago: executing program 4 (id=8305): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1.251026085s ago: executing program 1 (id=8306): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 1.104400495s ago: executing program 7 (id=8307): unshare(0x20000400) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 1.014942136s ago: executing program 7 (id=8309): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fsopen(0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) 408.853048ms ago: executing program 1 (id=8310): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="d58c8ab3ee63880a44a4d8a3826175ecbba41b268f48545823e48389ed389f9028f01130d45d6c08799afd04d5c4b6409d1c818b85b61200832cb296c42a2250913c347740e1cc85e08e7a962fe89b7ae0e3c2369d927c2d5ee41f7b76ed229934c04af9c11d731d162808da8dd169a7f6223136036f3fba893bb1dcd9ae2a520f2a40ae63b8a872d879c18bd8347c80be10f6a1990bc8e0d2de67b33699346d01037527ac9a24a7a03c7ab138dd633d8e8087544209e9423543560249904536915bacaa3945c99a"], 0x84}, 0x1, 0x0, 0x0, 0x20850}, 0x49) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086610, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x3bd) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write(r2, &(0x7f0000004200)='t', 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=ANY=[@ANYBLOB="540100001000130700000000000000000000000000000000000000050000a281f8eea1632c37000000000000000000bb00000000000000400000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/266], 0x154}}, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 180.399929ms ago: executing program 8 (id=8311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000eb95"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03"], 0x50) 148.10391ms ago: executing program 7 (id=8312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000170000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fe"], 0x48) 147.913639ms ago: executing program 8 (id=8313): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006040001ffffffffffff0000f800bbbbbbbbbbbb000000029b63c03850cf122159fbc6b122780d004d91af0a7e6b32c0878134c86fe0d327a1bf69a5564067c4e6c5bb70aa20506c95fa77ddfc94e561572bc4eff8fe7ce779c3bfd86cd3cf287194f031837793522106115a9c7ce3818d0678fe6fdc9ed0132ac2b9ad51951541dc732ed7"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 111.358879ms ago: executing program 8 (id=8314): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x1, &(0x7f0000000640)=[{0x6, 0x3, 0x2, 0xfffffffe}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r0) 110.892319ms ago: executing program 7 (id=8315): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x880c0, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x2000000000000038, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f00000004c0)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@data_err_abort}, {@nogrpid}, {@init_itable}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 53.19998ms ago: executing program 8 (id=8316): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 23.63215ms ago: executing program 7 (id=8317): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(0x0, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet6(0xa, 0xc218c5d29dff6d01, 0xfffffff8) 23.17281ms ago: executing program 8 (id=8318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$hwrng(0xffffffffffffff9c, 0x0, 0x149902, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 8 (id=8319): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) inotify_init() r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 777.165364][ T2070] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.181061][T26737] loop7: detected capacity change from 0 to 512 [ 777.187790][T26737] SELinux: security_context_str_to_sid () failed with errno=-22 [ 777.366181][T26747] 8021q: adding VLAN 0 to HW filter on device batadv17 [ 777.375112][T26747] bond21: (slave batadv17): making interface the new active one [ 777.385529][T26747] bond21: (slave batadv17): Enslaving as an active interface with an up link [ 777.408452][T26750] 8021q: adding VLAN 0 to HW filter on device batadv24 [ 777.417154][T26750] bond38: (slave batadv24): making interface the new active one [ 777.430511][T26750] bond38: (slave batadv24): Enslaving as an active interface with an up link [ 777.536231][T26767] loop5: detected capacity change from 0 to 512 [ 777.561067][T26767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.575959][T26767] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 777.590315][T26767] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.7747: corrupted inode contents [ 777.614154][T26767] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.7747: mark_inode_dirty error [ 777.631966][T26778] loop4: detected capacity change from 0 to 512 [ 777.637713][T26775] bond21: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 777.638505][T26781] validate_nla: 10 callbacks suppressed [ 777.638540][T26781] netlink: 'syz.7.7752': attribute type 1 has an invalid length. [ 777.651412][T26767] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.7747: corrupted inode contents [ 777.656373][T26778] SELinux: security_context_str_to_sid () failed with errno=-22 [ 777.663807][T26767] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.7747: mark_inode_dirty error [ 777.677230][T26775] bond21 (unregistering): Released all slaves [ 777.704833][T26784] veth14: entered promiscuous mode [ 777.709970][T26784] veth14: entered allmulticast mode [ 777.756223][T22585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.815253][T26789] netlink: 'syz.7.7754': attribute type 1 has an invalid length. [ 777.853243][T26789] 8021q: adding VLAN 0 to HW filter on device batadv26 [ 777.862323][T26789] bond39: (slave batadv26): making interface the new active one [ 777.871538][T26789] bond39: (slave batadv26): Enslaving as an active interface with an up link [ 777.896212][T26798] netlink: 'syz.4.7758': attribute type 1 has an invalid length. [ 777.920111][T26803] loop7: detected capacity change from 0 to 512 [ 777.933271][T26798] 8021q: adding VLAN 0 to HW filter on device batadv14 [ 777.934867][T26803] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.7760: dx entry: limit 0 != root limit 125 [ 777.942324][T26798] bond18: (slave batadv14): making interface the new active one [ 777.952054][T26803] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7760: Corrupt directory, running e2fsck is recommended [ 777.964553][T26798] bond18: (slave batadv14): Enslaving as an active interface with an up link [ 777.973346][T26803] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 778.005196][T26803] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.7760: corrupted in-inode xattr: invalid ea_ino [ 778.064588][T26803] EXT4-fs (loop7): Remounting filesystem read-only [ 778.081870][T26815] netlink: 'syz.1.7765': attribute type 1 has an invalid length. [ 778.090402][T26803] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.092052][T26813] loop5: detected capacity change from 0 to 2048 [ 778.132388][T26813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.148737][T26817] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 778.159488][T26813] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 778.171781][T26817] bond2 (unregistering): Released all slaves [ 778.247882][T26836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.262797][T26834] loop1: detected capacity change from 0 to 1024 [ 778.290889][T26836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.301998][T26834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.316812][T26836] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7764: bg 0: block 345: padding at end of block bitmap is not set [ 778.412412][T26836] EXT4-fs (loop5): Remounting filesystem read-only [ 778.453910][T22269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.509615][T26849] netlink: 'syz.1.7774': attribute type 1 has an invalid length. [ 778.941019][T26853] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.962611][T17482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.022934][T26853] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.069242][T22585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.097025][T26853] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.138072][T26867] netlink: 'syz.8.7780': attribute type 1 has an invalid length. [ 779.185306][T26853] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.200088][T26872] loop4: detected capacity change from 0 to 512 [ 779.213098][T26875] IPv6: NLM_F_CREATE should be specified when creating new route [ 779.215627][T26872] EXT4-fs (loop4): too many log groups per flexible block group [ 779.229196][T26872] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 779.237237][T26875] __nla_validate_parse: 11 callbacks suppressed [ 779.237251][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7783'. [ 779.244927][T26872] EXT4-fs (loop4): mount failed [ 779.310142][T26884] loop4: detected capacity change from 0 to 1024 [ 779.328652][T26883] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7786'. [ 779.328733][T26884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.343371][T26886] loop5: detected capacity change from 0 to 1024 [ 779.351122][T26883] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.367992][T26886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.382205][T21228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.403920][T26886] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.7787: Allocating blocks 449-513 which overlap fs metadata [ 779.422198][T26885] EXT4-fs (loop5): pa ffff888106e7acb0: logic 48, phys. 177, len 21 [ 779.430229][T26885] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 779.442112][T26883] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.453431][T22585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.523775][T26883] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.602647][T26883] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.661848][T26905] loop5: detected capacity change from 0 to 512 [ 779.673260][T26905] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7794: bg 0: block 248: padding at end of block bitmap is not set [ 779.687891][T26905] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.7794: Failed to acquire dquot type 1 [ 779.707560][T26905] EXT4-fs (loop5): 1 truncate cleaned up [ 779.714647][T26905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.727633][T26905] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 779.742094][T26905] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.7794: deleted inode referenced: 12 [ 779.762052][T26905] netlink: 'syz.5.7794': attribute type 1 has an invalid length. [ 779.769828][T26905] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7794'. [ 780.129252][T26917] loop7: detected capacity change from 0 to 512 [ 780.152545][T26917] SELinux: security_context_str_to_sid () failed with errno=-22 [ 780.228226][T22585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.240731][ T6703] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.258268][ T6703] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.282622][ T6703] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.305827][ T6703] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.401583][T26924] netlink: 'syz.5.7798': attribute type 1 has an invalid length. [ 780.412515][T26923] loop7: detected capacity change from 0 to 1024 [ 780.423152][T26923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.468428][T26923] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.7800: Allocating blocks 449-513 which overlap fs metadata [ 780.506280][T26922] EXT4-fs (loop7): pa ffff888106e7ad20: logic 48, phys. 177, len 21 [ 780.514493][T26922] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 780.529595][T26930] netlink: 'syz.1.7802': attribute type 1 has an invalid length. [ 780.574022][T26933] loop5: detected capacity change from 0 to 512 [ 780.581904][T26930] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.598732][T17482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.611675][T26933] EXT4-fs (loop5): too many log groups per flexible block group [ 780.624229][T26933] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 780.639122][T26933] EXT4-fs (loop5): mount failed [ 780.662902][T26930] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.847306][T26930] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.876213][T26944] netlink: 'syz.7.7807': attribute type 1 has an invalid length. [ 780.896348][T26944] 8021q: adding VLAN 0 to HW filter on device batadv27 [ 780.904956][T26944] bond40: (slave batadv27): making interface the new active one [ 780.915003][T26944] bond40: (slave batadv27): Enslaving as an active interface with an up link [ 780.932677][T26930] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.054297][T26950] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7809'. [ 781.216395][T26958] bond41: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 781.227520][T26958] bond41 (unregistering): Released all slaves [ 781.233421][T26962] loop4: detected capacity change from 0 to 512 [ 781.252429][T26962] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7814: bg 0: block 248: padding at end of block bitmap is not set [ 781.267020][T26962] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.7814: Failed to acquire dquot type 1 [ 781.278789][T26962] EXT4-fs (loop4): 1 truncate cleaned up [ 781.284955][T26962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.297865][T26962] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 781.314847][T26962] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.7814: deleted inode referenced: 12 [ 781.443661][T21228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.620705][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 781.620722][ T29] audit: type=1404 audit(1762566719.513:29972): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 781.638728][T26973] chnl_net:caif_netlink_parms(): no params data found [ 781.663128][ T29] audit: type=1400 audit(1762566719.533:29973): avc: denied { module_request } for pid=26973 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 781.685781][ T29] audit: type=1404 audit(1762566719.553:29974): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 781.701839][ T29] audit: type=1400 audit(1762566719.563:29975): avc: denied { read write } for pid=21228 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 781.726315][ T29] audit: type=1400 audit(1762566719.563:29976): avc: denied { open } for pid=21228 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 781.750813][ T29] audit: type=1400 audit(1762566719.563:29977): avc: denied { ioctl } for pid=21228 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 781.776711][ T29] audit: type=1400 audit(1762566719.603:29978): avc: denied { read write } for pid=26990 comm="syz.4.7822" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 781.800680][ T29] audit: type=1400 audit(1762566719.603:29979): avc: denied { open } for pid=26990 comm="syz.4.7822" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 781.827454][ T29] audit: type=1400 audit(1762566719.603:29980): avc: denied { ioctl } for pid=26990 comm="syz.4.7822" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 781.865902][ T29] audit: type=1400 audit(1762566719.763:29981): avc: denied { create } for pid=26985 comm="syz.5.7820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 781.922606][T26973] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.929728][T26973] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.937056][T26973] bridge_slave_0: entered allmulticast mode [ 781.943809][T26973] bridge_slave_0: entered promiscuous mode [ 781.951365][T26973] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.958445][T26973] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.965911][T26973] bridge_slave_1: entered allmulticast mode [ 781.972691][T26973] bridge_slave_1: entered promiscuous mode [ 782.001159][T26973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.019943][T26973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.061258][T26973] team0: Port device team_slave_0 added [ 782.071752][T26973] team0: Port device team_slave_1 added [ 782.082085][ T2070] bridge_slave_1: left allmulticast mode [ 782.087833][ T2070] bridge_slave_1: left promiscuous mode [ 782.093706][ T2070] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.101661][ T2070] bridge_slave_0: left allmulticast mode [ 782.107399][ T2070] bridge_slave_0: left promiscuous mode [ 782.113305][ T2070] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.312862][ T2070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.323011][ T2070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.332257][ T2070] bond0 (unregistering): Released all slaves [ 782.341354][ T2070] bond1 (unregistering): Released all slaves [ 782.350046][ T2070] bond2 (unregistering): Released all slaves [ 782.363468][ T2070] bond3 (unregistering): Released all slaves [ 782.372711][ T2070] bond4 (unregistering): Released all slaves [ 782.388353][ T2070] bond5 (unregistering): (slave batadv2): Releasing active interface [ 782.397483][ T2070] bond5 (unregistering): Released all slaves [ 782.406240][ T2070] bond6 (unregistering): Released all slaves [ 782.415373][ T2070] bond7 (unregistering): Released all slaves [ 782.425372][ T2070] bond8 (unregistering): Released all slaves [ 782.435234][ T2070] bond9 (unregistering): (slave batadv3): Releasing active interface [ 782.447105][ T2070] bond9 (unregistering): Released all slaves [ 782.456429][ T2070] bond10 (unregistering): Released all slaves [ 782.466237][ T2070] bond11 (unregistering): (slave batadv4): Releasing active interface [ 782.475360][ T2070] bond11 (unregistering): Released all slaves [ 782.484675][ T2070] bond12 (unregistering): Released all slaves [ 782.494769][ T2070] bond13 (unregistering): (slave batadv6): Releasing active interface [ 782.503743][ T2070] bond13 (unregistering): Released all slaves [ 782.513122][ T2070] bond14 (unregistering): Released all slaves [ 782.525713][ T2070] bond15 (unregistering): (slave batadv9): Releasing active interface [ 782.535402][ T2070] bond15 (unregistering): Released all slaves [ 782.544218][ T2070] bond16 (unregistering): Released all slaves [ 782.554130][ T2070] bond17 (unregistering): (slave batadv10): Releasing active interface [ 782.563443][ T2070] bond17 (unregistering): Released all slaves [ 782.573226][ T2070] bond18 (unregistering): Released all slaves [ 782.582917][ T2070] bond19 (unregistering): (slave batadv11): Releasing active interface [ 782.593029][ T2070] bond19 (unregistering): Released all slaves [ 782.602970][ T2070] bond20 (unregistering): Released all slaves [ 782.613055][ T2070] bond21 (unregistering): (slave batadv12): Releasing active interface [ 782.622402][ T2070] bond21 (unregistering): Released all slaves [ 782.631857][ T2070] bond22 (unregistering): Released all slaves [ 782.641503][ T2070] bond23 (unregistering): (slave batadv13): Releasing active interface [ 782.650992][ T2070] bond23 (unregistering): Released all slaves [ 782.659932][ T2070] bond24 (unregistering): (slave batadv14): Releasing active interface [ 782.669015][ T2070] bond24 (unregistering): Released all slaves [ 782.679651][ T2070] bond25 (unregistering): Released all slaves [ 782.689303][ T2070] bond26 (unregistering): (slave batadv15): Releasing active interface [ 782.698802][ T2070] bond26 (unregistering): Released all slaves [ 782.708193][ T2070] bond27 (unregistering): Released all slaves [ 782.717670][ T2070] bond28 (unregistering): (slave batadv16): Releasing active interface [ 782.726719][ T2070] bond28 (unregistering): Released all slaves [ 782.735936][ T2070] bond29 (unregistering): Released all slaves [ 782.745246][ T2070] bond30 (unregistering): (slave batadv17): Releasing active interface [ 782.756193][ T2070] bond30 (unregistering): Released all slaves [ 782.767283][ T2070] bond31 (unregistering): (slave batadv18): Releasing active interface [ 782.776789][ T2070] bond31 (unregistering): Released all slaves [ 782.786212][ T2070] bond32 (unregistering): (slave batadv19): Releasing active interface [ 782.796178][ T2070] bond32 (unregistering): Released all slaves [ 782.805670][ T2070] bond33 (unregistering): (slave batadv20): Releasing active interface [ 782.815090][ T2070] bond33 (unregistering): Released all slaves [ 782.824005][ T2070] bond34 (unregistering): Released all slaves [ 782.835637][ T2070] bond35 (unregistering): (slave batadv21): Releasing active interface [ 782.845033][ T2070] bond35 (unregistering): Released all slaves [ 782.854607][ T2070] bond36 (unregistering): (slave batadv22): Releasing active interface [ 782.863843][ T2070] bond36 (unregistering): Released all slaves [ 782.874287][ T2070] bond37 (unregistering): (slave batadv23): Releasing active interface [ 782.883607][ T2070] bond37 (unregistering): Released all slaves [ 782.893211][ T2070] bond38 (unregistering): (slave batadv24): Releasing active interface [ 782.902999][ T2070] bond38 (unregistering): Released all slaves [ 782.914274][ T2070] bond39 (unregistering): (slave batadv26): Releasing active interface [ 782.923373][ T2070] bond39 (unregistering): Released all slaves [ 782.932829][ T2070] bond40 (unregistering): (slave batadv27): Releasing active interface [ 782.941830][ T2070] bond40 (unregistering): Released all slaves [ 782.971534][T26973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.978527][T26973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.004514][T26973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.018640][T17435] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.046532][T17435] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.069130][T26973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.076298][T26973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.102287][T26973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.137493][T27005] loop8: detected capacity change from 0 to 1024 [ 783.147768][T17435] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.168431][T27007] bond19: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 783.181172][T27005] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.194325][T27007] bond19 (unregistering): Released all slaves [ 783.219084][T17435] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.230035][T27005] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.7825: Allocating blocks 449-513 which overlap fs metadata [ 783.258882][T27015] loop5: detected capacity change from 0 to 512 [ 783.260316][T27004] EXT4-fs (loop8): pa ffff888106e7acb0: logic 48, phys. 177, len 21 [ 783.265840][T27015] EXT4-fs: Ignoring removed mblk_io_submit option [ 783.273203][T27004] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 783.281001][T27015] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 783.300508][T27015] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.7828: attempt to clear invalid blocks 2 len 1 [ 783.315381][T27015] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 783.319701][ T2070] tipc: Left network mode [ 783.332577][T27015] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.7828: invalid indirect mapped block 1819239214 (level 0) [ 783.337727][T26973] hsr_slave_0: entered promiscuous mode [ 783.348419][T27015] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.7828: invalid indirect mapped block 1819239214 (level 1) [ 783.370887][T27015] EXT4-fs (loop5): 1 truncate cleaned up [ 783.377030][T27015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.397408][T27015] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work [ 783.397695][T26973] hsr_slave_1: entered promiscuous mode [ 783.418077][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.423578][T26973] debugfs: 'hsr0' already exists in 'hsr' [ 783.432865][T26973] Cannot create hsr debugfs directory [ 783.441279][T22585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.463801][T27021] loop8: detected capacity change from 0 to 512 [ 783.495989][T27021] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.7830: bg 0: block 248: padding at end of block bitmap is not set [ 783.510664][T27021] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.7830: Failed to acquire dquot type 1 [ 783.524128][T27023] netlink: 'syz.5.7831': attribute type 1 has an invalid length. [ 783.532657][T27021] EXT4-fs (loop8): 1 truncate cleaned up [ 783.538981][T27021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.552653][T27021] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 783.568779][T27021] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.7830: deleted inode referenced: 12 [ 783.595105][T27023] 8021q: adding VLAN 0 to HW filter on device batadv18 [ 783.602577][T27021] netlink: 'syz.8.7830': attribute type 1 has an invalid length. [ 783.610348][T27021] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7830'. [ 783.621431][T27023] bond22: (slave batadv18): making interface the new active one [ 783.630358][T27023] bond22: (slave batadv18): Enslaving as an active interface with an up link [ 783.650242][ T2070] hsr_slave_0: left promiscuous mode [ 783.656253][ T2070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.663939][ T2070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.699694][T27030] loop5: detected capacity change from 0 to 2048 [ 783.715347][T27030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.719712][ T2070] pim6reg (unregistering): left allmulticast mode [ 783.735470][T27030] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.782048][ T2070] team0 (unregistering): Port device team_slave_1 removed [ 783.792714][ T2070] team0 (unregistering): Port device team_slave_0 removed [ 783.804669][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.814373][T27033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.823082][T13766] smc: removing ib device syû [ 783.851949][T27033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.874492][T27035] loop8: detected capacity change from 0 to 512 [ 783.884573][T27033] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7832: bg 0: block 345: padding at end of block bitmap is not set [ 783.901902][T27033] EXT4-fs (loop5): Remounting filesystem read-only [ 783.912722][T27035] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.7833: bg 0: block 248: padding at end of block bitmap is not set [ 783.939324][T27035] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.7833: Failed to acquire dquot type 1 [ 783.967815][T27035] EXT4-fs (loop8): 1 truncate cleaned up [ 783.984728][T27035] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.997917][T27035] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 784.012920][T27035] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.7833: deleted inode referenced: 12 [ 784.037251][T27040] loop4: detected capacity change from 0 to 1024 [ 784.055495][T27040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.084517][T27040] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.7834: Allocating blocks 449-513 which overlap fs metadata [ 784.099980][T27039] EXT4-fs (loop4): pa ffff888106ee31c0: logic 48, phys. 177, len 21 [ 784.108130][T27039] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 784.131207][T21228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.173240][T26973] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 784.182491][T26973] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 784.191939][T26973] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 784.200659][T26973] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 784.209375][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.245143][T27054] loop8: detected capacity change from 0 to 512 [ 784.258423][T26973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.273583][T27054] EXT4-fs (loop8): too many log groups per flexible block group [ 784.273848][T26973] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.292745][ T6703] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.299813][ T6703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.310135][T27054] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 784.317136][T27054] EXT4-fs (loop8): mount failed [ 784.321770][ T6703] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.329090][ T6703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.412901][T27065] loop8: detected capacity change from 0 to 512 [ 784.419623][T27065] EXT4-fs: Ignoring removed mblk_io_submit option [ 784.434838][T27065] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 784.448550][T26973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.457553][T27065] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.7840: attempt to clear invalid blocks 2 len 1 [ 784.535518][T27065] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 784.575741][T27065] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.7840: invalid indirect mapped block 1819239214 (level 0) [ 784.607983][T27065] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.7840: invalid indirect mapped block 1819239214 (level 1) [ 784.650417][T27065] EXT4-fs (loop8): 1 truncate cleaned up [ 784.676007][T27065] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.729346][T27065] EXT4-fs (loop8): Quota file not on filesystem root. Journaled quota will not work [ 784.792288][T26973] veth0_vlan: entered promiscuous mode [ 784.802840][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.817310][T26973] veth1_vlan: entered promiscuous mode [ 784.842309][T26973] veth0_macvtap: entered promiscuous mode [ 784.850331][T26973] veth1_macvtap: entered promiscuous mode [ 784.866288][T26973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.879010][T26973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.891032][T17435] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.901254][T17435] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.910058][T17435] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.955073][T17435] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.999716][T27084] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 785.008068][T27084] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 785.143840][T22585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.270438][T27093] loop7: detected capacity change from 0 to 2048 [ 785.292051][T27093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.304381][T27093] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 785.395407][T27096] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7846: bg 0: block 345: padding at end of block bitmap is not set [ 785.416181][T27098] netlink: 'syz.8.7841': attribute type 1 has an invalid length. [ 785.431233][T27096] EXT4-fs (loop7): Remounting filesystem read-only [ 785.478351][T27103] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 785.487177][ T361] Bluetooth: hci0: Frame reassembly failed (-84) [ 785.504403][T27103] bond2: (slave batadv1): making interface the new active one [ 785.531464][T27103] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 785.547107][T26973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.654815][T27115] loop8: detected capacity change from 0 to 512 [ 785.677704][T27115] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.7852: dx entry: limit 0 != root limit 125 [ 785.689527][T27115] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.7852: Corrupt directory, running e2fsck is recommended [ 785.707842][T27115] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 785.810184][T27115] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #15: comm syz.8.7852: corrupted in-inode xattr: invalid ea_ino [ 785.825425][T27115] EXT4-fs (loop8): Remounting filesystem read-only [ 785.834605][T27115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.854959][T27121] loop4: detected capacity change from 0 to 1024 [ 785.876200][T27121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.902227][T21228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.921841][T27127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7855'. [ 786.007588][T27133] loop4: detected capacity change from 0 to 2048 [ 786.022226][T27133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.022689][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.034363][T27133] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.068810][T27137] netlink: 'syz.8.7859': attribute type 1 has an invalid length. [ 786.091561][T27137] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.105686][ T2070] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.120303][ T6703] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.120476][T27139] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7858: bg 0: block 345: padding at end of block bitmap is not set [ 786.138629][ T6703] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.151881][T27139] EXT4-fs (loop4): Remounting filesystem read-only [ 786.152323][ T6703] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.173914][T27137] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.204901][T21228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.223494][T27137] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.274107][T27137] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.326391][T27152] loop4: detected capacity change from 0 to 512 [ 786.352737][T27152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.365386][T27152] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 786.377204][T27152] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.7865: corrupted inode contents [ 786.389650][T27152] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.7865: mark_inode_dirty error [ 786.401676][T27152] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.7865: corrupted inode contents [ 786.413786][T27152] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.7865: mark_inode_dirty error [ 786.484628][T27152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7865'. [ 786.583162][T27157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7865'. [ 786.594775][T27157] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7865'. [ 786.606555][T27152] veth10: entered promiscuous mode [ 786.611734][T27152] veth10: entered allmulticast mode [ 786.651261][T21228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.741058][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 786.741079][ T29] audit: type=1400 audit(1762566724.513:30145): avc: denied { write } for pid=27151 comm="syz.4.7865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 787.021014][T27161] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7866'. [ 787.075840][ T29] audit: type=1400 audit(1762566724.973:30146): avc: denied { read } for pid=27162 comm="syz.4.7868" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 787.099298][ T29] audit: type=1400 audit(1762566724.973:30147): avc: denied { open } for pid=27162 comm="syz.4.7868" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 787.251864][T27166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7868'. [ 787.285820][T27165] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 787.297321][T27165] bond1 (unregistering): Released all slaves [ 787.405004][ T29] audit: type=1400 audit(1762566725.303:30148): avc: denied { write } for pid=27170 comm="syz.7.7870" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 787.513261][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7870'. [ 787.523226][ T29] audit: type=1400 audit(1762566725.423:30149): avc: denied { setopt } for pid=27170 comm="syz.7.7870" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 787.563850][ T3902] Bluetooth: hci0: command 0x1003 tx timeout [ 787.570013][ T3903] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 787.582924][ T29] audit: type=1400 audit(1762566725.483:30150): avc: denied { setopt } for pid=27162 comm="syz.4.7868" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 787.608014][ T29] audit: type=1400 audit(1762566725.503:30151): avc: denied { read write } for pid=22585 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 787.632526][ T29] audit: type=1400 audit(1762566725.503:30152): avc: denied { open } for pid=22585 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 787.664809][ T29] audit: type=1400 audit(1762566725.563:30153): avc: denied { prog_load } for pid=27170 comm="syz.7.7870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 787.684192][ T29] audit: type=1400 audit(1762566725.563:30154): avc: denied { bpf } for pid=27170 comm="syz.7.7870" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 788.015309][T27173] pim6reg: entered allmulticast mode [ 788.029814][T27174] pim6reg: left allmulticast mode [ 788.078655][T27179] loop5: detected capacity change from 0 to 512 [ 788.078989][T27181] loop4: detected capacity change from 0 to 2048 [ 788.101703][T27179] SELinux: security_context_str_to_sid () failed with errno=-22 [ 788.137430][T27181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.157015][ T361] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.179978][T27181] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.196894][ T361] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.216985][ T361] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.225749][ T361] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.262492][T27193] loop8: detected capacity change from 0 to 512 [ 788.269637][T27191] loop1: detected capacity change from 0 to 512 [ 788.280428][T27194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.299818][T27194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.310885][T27191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.344305][T27193] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.362146][T27197] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7879'. [ 788.374052][T27202] loop7: detected capacity change from 0 to 512 [ 788.382230][T27191] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 788.395695][T27193] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 788.396054][T27194] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7873: bg 0: block 345: padding at end of block bitmap is not set [ 788.424678][T27193] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.7878: corrupted inode contents [ 788.446189][T27191] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.7877: corrupted inode contents [ 788.458392][T27194] EXT4-fs (loop4): Remounting filesystem read-only [ 788.465066][T27193] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz.8.7878: mark_inode_dirty error [ 788.479751][T27202] EXT4-fs (loop7): too many log groups per flexible block group [ 788.487627][T27204] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7878'. [ 788.497539][T27205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7877'. [ 788.517464][T27202] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 788.524481][T27204] veth4: entered promiscuous mode [ 788.524674][T27191] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.7877: mark_inode_dirty error [ 788.529626][T27204] veth4: entered allmulticast mode [ 788.548975][T27193] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.7878: corrupted inode contents [ 788.563781][T27202] EXT4-fs (loop7): mount failed [ 788.585094][T27193] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.7878: mark_inode_dirty error [ 788.605335][T27191] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.7877: corrupted inode contents [ 788.613978][T27210] veth6: entered promiscuous mode [ 788.617785][T27191] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.7877: mark_inode_dirty error [ 788.622293][T27210] veth6: entered allmulticast mode [ 788.692415][T22269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.762533][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.808171][T27216] infiniband syû: set active [ 788.809315][T27220] netlink: 'syz.8.7885': attribute type 1 has an invalid length. [ 788.812939][T27216] infiniband syû: added bond_slave_0 [ 788.821609][T27216] RDS/IB: syû: added [ 788.830400][T27216] smc: adding ib device syû with port count 1 [ 788.836649][T27216] smc: ib device syû port 1 has no pnetid [ 789.323259][T21228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.684581][T27234] loop8: detected capacity change from 0 to 512 [ 789.702249][T27234] EXT4-fs (loop8): too many log groups per flexible block group [ 789.710100][T27234] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 789.722211][T27234] EXT4-fs (loop8): mount failed [ 790.121601][T27265] SELinux: ebitmap: truncated map [ 790.127766][T27265] SELinux: failed to load policy [ 790.164253][T27270] loop8: detected capacity change from 0 to 512 [ 790.173637][T27270] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.7899: dx entry: limit 0 != root limit 125 [ 790.185573][T27270] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.7899: Corrupt directory, running e2fsck is recommended [ 790.211362][T27270] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 790.220282][T27270] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #15: comm syz.8.7899: corrupted in-inode xattr: invalid ea_ino [ 790.244497][T27270] EXT4-fs (loop8): Remounting filesystem read-only [ 790.260200][T27270] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.474195][T27285] loop7: detected capacity change from 0 to 512 [ 790.483515][T27285] EXT4-fs: Ignoring removed mblk_io_submit option [ 790.491869][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.501536][T27285] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 790.515589][T27285] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.7904: attempt to clear invalid blocks 2 len 1 [ 790.526363][T27293] loop1: detected capacity change from 0 to 512 [ 790.536254][T27285] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 790.551547][T27285] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.7904: invalid indirect mapped block 1819239214 (level 0) [ 790.567176][T27293] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7907: bg 0: block 248: padding at end of block bitmap is not set [ 790.569240][T27285] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.7904: invalid indirect mapped block 1819239214 (level 1) [ 790.582117][T27295] hsr_slave_1 (unregistering): left promiscuous mode [ 790.598397][T27285] EXT4-fs (loop7): 1 truncate cleaned up [ 790.602916][T27293] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.7907: Failed to acquire dquot type 1 [ 790.608947][T27285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.621211][T27293] EXT4-fs (loop1): 1 truncate cleaned up [ 790.638003][T27293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.640351][T27285] EXT4-fs (loop7): Quota file not on filesystem root. Journaled quota will not work [ 790.651954][T27293] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 790.670733][ T3903] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 790.683281][T26973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.694642][T27293] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.7907: deleted inode referenced: 12 [ 790.756033][T27303] loop7: detected capacity change from 0 to 2048 [ 790.773161][T27303] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.785655][T27303] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.786201][T22269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.891740][T27308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.910546][T27308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.160516][T27308] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7910: bg 0: block 345: padding at end of block bitmap is not set [ 791.211776][T27308] EXT4-fs (loop7): Remounting filesystem read-only [ 791.509971][T27328] SELinux: ebitmap: truncated map [ 791.517568][T27328] SELinux: failed to load policy [ 791.533271][T27328] __nla_validate_parse: 9 callbacks suppressed [ 791.533290][T27328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7918'. [ 791.804447][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 791.804464][ T29] audit: type=1400 audit(1762566729.703:30347): avc: denied { tracepoint } for pid=27339 comm="syz.5.7923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 791.903977][ T29] audit: type=1400 audit(1762566729.803:30348): avc: denied { read write } for pid=22585 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.928711][ T29] audit: type=1400 audit(1762566729.803:30349): avc: denied { open } for pid=22585 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.991316][ T29] audit: type=1400 audit(1762566729.853:30350): avc: denied { ioctl } for pid=22585 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 792.017146][ T29] audit: type=1400 audit(1762566729.863:30351): avc: denied { map_create } for pid=27341 comm="syz.5.7924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 792.037514][ T29] audit: type=1400 audit(1762566729.863:30352): avc: denied { map_read map_write } for pid=27341 comm="syz.5.7924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 792.057549][ T29] audit: type=1400 audit(1762566729.873:30353): avc: denied { prog_load } for pid=27341 comm="syz.5.7924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 792.076823][ T29] audit: type=1400 audit(1762566729.873:30354): avc: denied { bpf } for pid=27341 comm="syz.5.7924" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 792.097529][ T29] audit: type=1400 audit(1762566729.873:30355): avc: denied { perfmon } for pid=27341 comm="syz.5.7924" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 792.118749][ T29] audit: type=1404 audit(1762566729.873:30356): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 792.533566][T27356] loop5: detected capacity change from 0 to 512 [ 792.544019][T27356] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.7930: dx entry: limit 0 != root limit 125 [ 792.555827][T27356] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7930: Corrupt directory, running e2fsck is recommended [ 792.575473][T27361] netlink: 'syz.1.7931': attribute type 1 has an invalid length. [ 792.583758][T27356] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 792.593441][T27356] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.7930: corrupted in-inode xattr: invalid ea_ino [ 792.616660][T27361] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.626891][T27356] EXT4-fs (loop5): Remounting filesystem read-only [ 792.635086][T27356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.662482][T27361] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.665317][T26973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.712986][T27361] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.727444][T27370] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7935'. [ 792.762778][T27361] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.766959][T27376] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 792.789997][T27376] loop4: detected capacity change from 0 to 1024 [ 792.797332][T27376] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 792.808643][T27376] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 792.817497][T27376] EXT4-fs (loop4): orphan cleanup on readonly fs [ 792.824445][T27376] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 792.839251][T27376] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 792.852903][T27376] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.7939: Freeing blocks not in datazone - block = 0, count = 4096 [ 792.868343][T27376] EXT4-fs (loop4): Remounting filesystem read-only [ 792.875127][T27376] EXT4-fs (loop4): 1 truncate cleaned up [ 792.881131][T13766] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.882325][T27381] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 792.889371][T13766] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.904466][T13766] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.906690][T27376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 792.917691][T13766] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.935699][T22585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.067787][T21228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.131512][T27390] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7944'. [ 793.139416][T27391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7943'. [ 793.296774][T27400] netlink: 'syz.4.7947': attribute type 1 has an invalid length. [ 793.430113][T27404] netlink: 'syz.7.7948': attribute type 1 has an invalid length. [ 793.712521][T27418] netlink: 'syz.8.7954': attribute type 1 has an invalid length. [ 793.749575][T27424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7953'. [ 793.781628][T27418] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.875371][T27418] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.927606][T27431] FAULT_INJECTION: forcing a failure. [ 793.927606][T27431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.940935][T27431] CPU: 0 UID: 0 PID: 27431 Comm: syz.4.7960 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 793.940972][T27431] Tainted: [W]=WARN [ 793.940979][T27431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 793.940991][T27431] Call Trace: [ 793.940997][T27431] [ 793.941007][T27431] __dump_stack+0x1d/0x30 [ 793.941035][T27431] dump_stack_lvl+0xe8/0x140 [ 793.941063][T27431] dump_stack+0x15/0x1b [ 793.941094][T27431] should_fail_ex+0x265/0x280 [ 793.941116][T27431] should_fail+0xb/0x20 [ 793.941134][T27431] should_fail_usercopy+0x1a/0x20 [ 793.941163][T27431] _copy_from_user+0x1c/0xb0 [ 793.941261][T27431] ___sys_sendmsg+0xc1/0x1d0 [ 793.941304][T27431] __sys_sendmmsg+0x178/0x300 [ 793.941339][T27431] __x64_sys_sendmmsg+0x57/0x70 [ 793.941358][T27431] x64_sys_call+0x1c4a/0x3000 [ 793.941383][T27431] do_syscall_64+0xd2/0x200 [ 793.941487][T27431] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 793.941528][T27431] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 793.941620][T27431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.941645][T27431] RIP: 0033:0x7f9e5749f6c9 [ 793.941665][T27431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.941759][T27431] RSP: 002b:00007f9e55eff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 793.941809][T27431] RAX: ffffffffffffffda RBX: 00007f9e576f5fa0 RCX: 00007f9e5749f6c9 [ 793.941894][T27431] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000007 [ 793.941912][T27431] RBP: 00007f9e55eff090 R08: 0000000000000000 R09: 0000000000000000 [ 793.941929][T27431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.941946][T27431] R13: 00007f9e576f6038 R14: 00007f9e576f5fa0 R15: 00007ffe77147088 [ 793.942026][T27431] [ 794.203100][T27418] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.294414][T27418] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.326071][T27443] netlink: 'syz.1.7963': attribute type 1 has an invalid length. [ 794.389957][T27443] 8021q: adding VLAN 0 to HW filter on device batadv15 [ 794.407548][T27443] bond24: (slave batadv15): making interface the new active one [ 794.428456][T27443] bond24: (slave batadv15): Enslaving as an active interface with an up link [ 794.441939][T13766] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.485702][ T361] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.528991][ T361] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.562294][ T361] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.614916][T27455] netlink: 'syz.8.7967': attribute type 1 has an invalid length. [ 794.644295][T27455] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.678785][T27462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7968'. [ 794.714352][T27455] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.813350][T27455] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.855181][T27469] loop7: detected capacity change from 0 to 512 [ 794.885474][T27469] EXT4-fs (loop7): too many log groups per flexible block group [ 794.915367][T27455] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.915683][T27469] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 794.933171][T27469] EXT4-fs (loop7): mount failed [ 795.025658][T27473] loop7: detected capacity change from 0 to 1024 [ 795.080976][T27473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.145729][T27473] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.7974: Allocating blocks 449-513 which overlap fs metadata [ 795.198037][T27472] EXT4-fs (loop7): pa ffff888106ee3070: logic 48, phys. 177, len 21 [ 795.206113][T27472] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 795.268726][T27488] loop4: detected capacity change from 0 to 2048 [ 795.306958][T27488] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 795.372909][T27498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.422027][T27498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.476925][T27500] loop1: detected capacity change from 0 to 1024 [ 795.480845][T27496] loop7: detected capacity change from 0 to 2048 [ 795.496033][T27498] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7979: bg 0: block 345: padding at end of block bitmap is not set [ 795.512674][T27496] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 795.531912][T27498] EXT4-fs (loop4): Remounting filesystem read-only [ 795.574055][T27500] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.7983: Allocating blocks 449-513 which overlap fs metadata [ 795.599718][T27506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.621675][T27499] EXT4-fs (loop1): pa ffff888106ee31c0: logic 48, phys. 177, len 21 [ 795.629727][T27499] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 795.651249][T27506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.700524][T27506] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7982: bg 0: block 345: padding at end of block bitmap is not set [ 795.717713][T27506] EXT4-fs (loop7): Remounting filesystem read-only [ 795.873558][T27496] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7982'. [ 796.458459][T27519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7987'. [ 796.738612][T27532] loop5: detected capacity change from 0 to 1024 [ 796.763921][T27534] netlink: 'syz.1.7995': attribute type 1 has an invalid length. [ 796.776885][T27538] loop4: detected capacity change from 0 to 512 [ 796.795856][T27534] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.812117][T27538] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7994: bg 0: block 248: padding at end of block bitmap is not set [ 796.826603][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 796.826618][ T29] audit: type=1400 audit(1762566734.713:30819): avc: denied { prog_run } for pid=27523 comm="syz.7.7989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 796.852434][T27538] Quota error (device loop4): write_blk: dquota write failed [ 796.859882][T27538] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 796.867784][T27532] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.7993: Allocating blocks 449-513 which overlap fs metadata [ 796.869854][T27538] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.7994: Failed to acquire dquot type 1 [ 796.895983][T27538] EXT4-fs (loop4): 1 truncate cleaned up [ 796.902185][T27538] ext4 filesystem being mounted at /399/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 796.913562][T27534] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.926842][ T29] audit: type=1400 audit(1762566734.823:30820): avc: denied { open } for pid=27535 comm="syz.4.7994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 796.935263][T27531] EXT4-fs (loop5): pa ffff888106ee3070: logic 48, phys. 177, len 21 [ 796.946293][ T29] audit: type=1400 audit(1762566734.823:30821): avc: denied { kernel } for pid=27535 comm="syz.4.7994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 796.954385][T27531] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 796.987950][ T29] audit: type=1400 audit(1762566734.883:30822): avc: denied { tracepoint } for pid=27535 comm="syz.4.7994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 797.020131][ T29] audit: type=1326 audit(1762566734.913:30823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27523 comm="syz.7.7989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e481f6c9 code=0x7ffc0000 [ 797.044119][ T29] audit: type=1326 audit(1762566734.913:30824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27523 comm="syz.7.7989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f59e481f6c9 code=0x7ffc0000 [ 797.067961][ T29] audit: type=1326 audit(1762566734.913:30825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27523 comm="syz.7.7989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e481f6c9 code=0x7ffc0000 [ 797.091711][ T29] audit: type=1326 audit(1762566734.913:30826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27523 comm="syz.7.7989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e481f6c9 code=0x7ffc0000 [ 797.117704][T27534] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.162418][T27549] loop7: detected capacity change from 0 to 1024 [ 797.172905][T27534] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.173092][T27551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7999'. [ 797.201667][T27549] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.7998: Allocating blocks 449-513 which overlap fs metadata [ 797.217822][T27548] EXT4-fs (loop7): pa ffff888106e7ac40: logic 48, phys. 177, len 21 [ 797.225861][T27548] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 797.256421][T27557] netlink: 'syz.5.8001': attribute type 1 has an invalid length. [ 797.273920][ T2070] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.285799][ T2070] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.301323][ T2070] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.320367][ T2070] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.343123][T27557] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.443070][T27557] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.455500][T27570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8003'. [ 797.465710][T27569] netlink: 'syz.7.8006': attribute type 1 has an invalid length. [ 797.494921][T27569] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 797.512355][T27569] bond1: (slave batadv1): making interface the new active one [ 797.521788][T27569] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 797.546764][T27557] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.634191][T27557] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.644579][T27578] loop7: detected capacity change from 0 to 1024 [ 797.692019][ T361] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.704359][ T361] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.747520][ T361] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.866985][ T361] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.901514][T27587] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8011'. [ 798.380987][T13766] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.424291][T13766] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.444145][T13766] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.462706][T13766] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.525914][T27600] loop8: detected capacity change from 0 to 512 [ 798.543394][T27600] SELinux: security_context_str_to_sid () failed with errno=-22 [ 798.680709][T27606] loop7: detected capacity change from 0 to 512 [ 798.687319][T27606] EXT4-fs: Ignoring removed mblk_io_submit option [ 798.697602][T27607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8017'. [ 798.711803][T27606] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 798.726619][T27606] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.8018: attempt to clear invalid blocks 2 len 1 [ 798.754862][T27606] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 798.769688][T27606] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.8018: invalid indirect mapped block 1819239214 (level 0) [ 798.783908][T27606] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.8018: invalid indirect mapped block 1819239214 (level 1) [ 798.798792][T27606] EXT4-fs (loop7): 1 truncate cleaned up [ 798.814612][T27606] EXT4-fs (loop7): Quota file not on filesystem root. Journaled quota will not work [ 798.839071][T27610] loop8: detected capacity change from 0 to 1024 [ 798.928381][T27616] netlink: 'syz.7.8021': attribute type 1 has an invalid length. [ 798.963264][T27616] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 798.982956][T27616] bond2: (slave batadv2): making interface the new active one [ 799.010938][T27616] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 799.080180][T27621] loop1: detected capacity change from 0 to 2048 [ 799.122678][T27624] loop7: detected capacity change from 0 to 512 [ 799.129294][T27624] SELinux: security_context_str_to_sid () failed with errno=-22 [ 799.141616][T27621] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 799.234881][T27627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.252918][T27627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.278374][T27627] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8023: bg 0: block 345: padding at end of block bitmap is not set [ 799.314993][T27627] EXT4-fs (loop1): Remounting filesystem read-only [ 799.371936][T27632] loop7: detected capacity change from 0 to 512 [ 799.397402][T27627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8023'. [ 799.416302][T27632] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8026: bg 0: block 248: padding at end of block bitmap is not set [ 799.446673][T27632] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8026: Failed to acquire dquot type 1 [ 799.462602][T27632] EXT4-fs (loop7): 1 truncate cleaned up [ 799.475398][T27632] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 799.511532][T27636] loop8: detected capacity change from 0 to 2048 [ 799.532098][T27636] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 799.597375][T27639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.622435][T27639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.661996][T27639] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8027: bg 0: block 345: padding at end of block bitmap is not set [ 799.676832][T27639] EXT4-fs (loop8): Remounting filesystem read-only [ 799.716876][T27644] loop7: detected capacity change from 0 to 512 [ 799.731882][T27644] EXT4-fs (loop7): too many log groups per flexible block group [ 799.743056][T27644] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 799.752183][T27644] EXT4-fs (loop7): mount failed [ 799.813213][T27650] loop7: detected capacity change from 0 to 512 [ 799.819938][T27650] EXT4-fs: Ignoring removed mblk_io_submit option [ 799.828175][T27650] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 799.837404][T27650] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.8031: attempt to clear invalid blocks 2 len 1 [ 799.850713][T27650] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 799.865255][T27650] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.8031: invalid indirect mapped block 1819239214 (level 0) [ 799.880003][T27650] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.8031: invalid indirect mapped block 1819239214 (level 1) [ 799.894837][T27650] EXT4-fs (loop7): 1 truncate cleaned up [ 799.905198][T27650] EXT4-fs (loop7): Quota file not on filesystem root. Journaled quota will not work [ 799.958432][T27655] netlink: 'syz.7.8033': attribute type 1 has an invalid length. [ 799.978304][T27655] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.016629][T27658] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8034'. [ 800.029852][T27655] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.089129][T27655] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.111517][T27669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8036'. [ 800.135458][T27655] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.171735][T27671] 8021q: adding VLAN 0 to HW filter on device bond20 [ 800.220303][T17435] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.233189][T17435] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.245511][T17435] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.252135][T27675] netlink: 'syz.4.8040': attribute type 1 has an invalid length. [ 800.258109][T17435] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.308815][T27680] loop1: detected capacity change from 0 to 512 [ 800.315933][T27680] EXT4-fs: Ignoring removed mblk_io_submit option [ 800.319421][T27675] 8021q: adding VLAN 0 to HW filter on device batadv15 [ 800.323929][T27680] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 800.333853][T27675] bond21: (slave batadv15): making interface the new active one [ 800.338315][T27680] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.8042: attempt to clear invalid blocks 2 len 1 [ 800.346957][T27675] bond21: (slave batadv15): Enslaving as an active interface with an up link [ 800.361492][T27680] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 800.382011][T27680] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8042: invalid indirect mapped block 1819239214 (level 0) [ 800.408103][T27680] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8042: invalid indirect mapped block 1819239214 (level 1) [ 800.430643][ T3902] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 800.431451][ T3903] Bluetooth: hci0: command 0x1003 tx timeout [ 800.449297][T27680] EXT4-fs (loop1): 1 truncate cleaned up [ 800.449713][T27686] loop7: detected capacity change from 0 to 512 [ 800.483897][T27680] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 800.490310][T27689] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 800.501887][T27690] netlink: 56 bytes leftover after parsing attributes in process `syz.8.8046'. [ 800.530387][T27686] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.643315][T27705] netlink: 'syz.7.8052': attribute type 1 has an invalid length. [ 800.662542][T27705] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.732637][T27705] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.800146][T27718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8057'. [ 800.812018][T27705] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.868162][T27730] netlink: 'syz.1.8062': attribute type 1 has an invalid length. [ 800.882828][T27705] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.903085][T27732] loop4: detected capacity change from 0 to 1024 [ 800.914783][T27730] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.952875][T27738] netlink: 'syz.4.8064': attribute type 1 has an invalid length. [ 800.962664][T27730] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.994791][T27738] 8021q: adding VLAN 0 to HW filter on device batadv16 [ 801.003439][T27738] bond22: (slave batadv16): making interface the new active one [ 801.012878][T27738] bond22: (slave batadv16): Enslaving as an active interface with an up link [ 801.022846][T27730] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.049491][T27744] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8066'. [ 801.074605][T27730] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.144203][T27756] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 801.416496][T27763] loop5: detected capacity change from 0 to 512 [ 801.473849][T27763] EXT4-fs (loop5): too many log groups per flexible block group [ 801.491611][T27763] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 801.504048][T27763] EXT4-fs (loop5): mount failed [ 801.559611][ T57] Bluetooth: hci0: Frame reassembly failed (-84) [ 801.576888][T27771] netlink: 'syz.4.8077': attribute type 1 has an invalid length. [ 801.596563][T27771] 8021q: adding VLAN 0 to HW filter on device batadv17 [ 801.604908][T27771] bond23: (slave batadv17): making interface the new active one [ 801.613721][T27771] bond23: (slave batadv17): Enslaving as an active interface with an up link [ 801.626631][T13766] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.645547][ T2070] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.653880][ T2070] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.665288][ T2070] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.763763][T27784] loop8: detected capacity change from 0 to 1024 [ 801.808389][T27782] loop1: detected capacity change from 0 to 8192 [ 801.841042][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 801.841057][ T29] audit: type=1404 audit(1762566739.743:31229): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 801.862837][T27782] loop1: p1 p2 p3 p4[DM] [ 801.867360][T27782] loop1: p1 size 835329 extends beyond EOD, truncated [ 801.874961][ T29] audit: type=1400 audit(1762566739.763:31230): avc: denied { read write } for pid=26327 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 801.896184][T27782] loop1: p2 size 327680 extends beyond EOD, truncated [ 801.899583][ T29] audit: type=1404 audit(1762566739.763:31231): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 801.908222][T27782] loop1: p3 start 1052673 is beyond EOD, truncated [ 801.921754][ T29] audit: type=1400 audit(1762566739.783:31232): avc: denied { read write } for pid=21228 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 801.927829][T27782] loop1: p4 size 262144 extends beyond EOD, [ 801.952220][ T29] audit: type=1400 audit(1762566739.783:31233): avc: denied { open } for pid=21228 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 801.952261][ T29] audit: type=1400 audit(1762566739.783:31234): avc: denied { ioctl } for pid=21228 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 801.952296][ T29] audit: type=1400 audit(1762566739.793:31235): avc: denied { map_create } for pid=27797 comm="syz.8.8089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 801.952325][ T29] audit: type=1400 audit(1762566739.793:31236): avc: denied { map_read map_write } for pid=27797 comm="syz.8.8089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 801.952423][ T29] audit: type=1400 audit(1762566739.793:31237): avc: denied { prog_load } for pid=27797 comm="syz.8.8089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 801.958572][T27782] truncated [ 801.982756][ T29] audit: type=1400 audit(1762566739.793:31238): avc: denied { bpf } for pid=27797 comm="syz.8.8089" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 802.055323][T27799] SELinux: failed to load policy [ 802.109930][T27804] netlink: 'syz.4.8090': attribute type 1 has an invalid length. [ 802.236874][T27811] SELinux: ebitmap: truncated map [ 802.243517][T27811] SELinux: failed to load policy [ 802.249709][T27811] __nla_validate_parse: 4 callbacks suppressed [ 802.249724][T27811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8094'. [ 802.337698][T27819] loop4: detected capacity change from 0 to 1024 [ 802.559033][T27831] loop4: detected capacity change from 0 to 1024 [ 802.565981][T27831] ext4: Unknown parameter 'uid<00000000000000000000' [ 803.002134][T27840] netlink: 'syz.8.8105': attribute type 1 has an invalid length. [ 803.019418][T27840] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.062825][T27840] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.081986][T27847] loop1: detected capacity change from 0 to 1024 [ 803.117011][T27851] loop1: detected capacity change from 0 to 512 [ 803.126258][T27840] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.141586][T27851] EXT4-fs (loop1): too many log groups per flexible block group [ 803.149482][T27851] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 803.156573][T27851] EXT4-fs (loop1): mount failed [ 803.182781][T27840] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.228818][ T2070] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.240474][ T2070] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.251939][ T2070] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.264170][T13766] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.340114][T27863] loop1: detected capacity change from 0 to 512 [ 803.347340][T27863] EXT4-fs: Ignoring removed mblk_io_submit option [ 803.357845][T27863] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 803.363118][T27865] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8112'. [ 803.377399][T27863] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.8114: attempt to clear invalid blocks 2 len 1 [ 803.400954][T27863] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 803.425219][T27863] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8114: invalid indirect mapped block 1819239214 (level 0) [ 803.443016][T27863] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8114: invalid indirect mapped block 1819239214 (level 1) [ 803.457795][T27863] EXT4-fs (loop1): 1 truncate cleaned up [ 803.469263][T27866] pim6reg: entered allmulticast mode [ 803.475491][T27863] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 803.590962][T27876] loop4: detected capacity change from 0 to 512 [ 803.611227][T27879] loop8: detected capacity change from 0 to 1024 [ 803.628423][T27876] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8119: bg 0: block 248: padding at end of block bitmap is not set [ 803.632913][T27874] SELinux: ebitmap: truncated map [ 803.648681][T27874] SELinux: failed to load policy [ 803.653905][ T3903] Bluetooth: hci0: command 0x1003 tx timeout [ 803.660656][ T3902] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 803.663205][T27874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8117'. [ 803.680626][T27876] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.8119: Failed to acquire dquot type 1 [ 803.706689][T27876] EXT4-fs (loop4): 1 truncate cleaned up [ 803.719776][T27876] ext4 filesystem being mounted at /430/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 803.735436][T27876] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.8119: deleted inode referenced: 12 [ 803.751399][T27887] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8121'. [ 803.765564][T27876] netlink: 'syz.4.8119': attribute type 1 has an invalid length. [ 803.773415][T27876] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8119'. [ 803.967317][T27897] loop8: detected capacity change from 0 to 512 [ 803.974048][T27897] EXT4-fs: Ignoring removed mblk_io_submit option [ 803.984596][T27897] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 803.993413][T27897] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.8126: attempt to clear invalid blocks 2 len 1 [ 804.007047][T27897] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 804.048132][T27897] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.8126: invalid indirect mapped block 1819239214 (level 0) [ 804.063542][T27897] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.8126: invalid indirect mapped block 1819239214 (level 1) [ 804.078567][T27897] EXT4-fs (loop8): 1 truncate cleaned up [ 804.091454][T27897] EXT4-fs (loop8): Quota file not on filesystem root. Journaled quota will not work [ 804.190952][T27903] loop4: detected capacity change from 0 to 128 [ 804.427981][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8130'. [ 804.538619][T27913] loop1: detected capacity change from 0 to 1024 [ 804.968442][T27917] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8132'. [ 805.000234][T27917] hsr_slave_1 (unregistering): left promiscuous mode [ 805.302765][T27929] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 805.515262][T27930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8136'. [ 805.538904][T27934] loop7: detected capacity change from 0 to 512 [ 805.584339][T27934] SELinux: security_context_str_to_sid () failed with errno=-22 [ 805.844846][T27946] netlink: 'syz.7.8142': attribute type 1 has an invalid length. [ 805.876864][ T37] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.894393][T17435] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.915820][T17435] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.004727][T17435] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.026094][T27957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8149'. [ 806.055190][T27964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8146'. [ 806.219100][T27969] loop8: detected capacity change from 0 to 512 [ 806.240060][T27969] SELinux: security_context_str_to_sid () failed with errno=-22 [ 806.253187][T27975] netlink: 'syz.1.8156': attribute type 1 has an invalid length. [ 806.294898][T27975] wireguard0: entered promiscuous mode [ 806.300436][T27975] wireguard0: entered allmulticast mode [ 806.386220][T27982] pim6reg: entered allmulticast mode [ 806.546146][T27987] netlink: 'syz.5.8159': attribute type 1 has an invalid length. [ 806.615411][T27989] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.696078][T27989] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.804719][T27989] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.854297][T28012] loop7: detected capacity change from 0 to 512 [ 806.861434][T28012] EXT4-fs: Ignoring removed nobh option [ 806.868031][T27989] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.880095][T28012] EXT4-fs (loop7): failed to initialize system zone (-117) [ 806.888106][ T29] kauditd_printk_skb: 563 callbacks suppressed [ 806.888157][ T29] audit: type=1400 audit(1762566744.783:31800): avc: denied { bind } for pid=28013 comm="syz.8.8170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 806.916032][T28012] EXT4-fs (loop7): mount failed [ 806.921443][ T29] audit: type=1400 audit(1762566744.813:31801): avc: denied { setopt } for pid=28013 comm="syz.8.8170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 806.958674][ T29] audit: type=1400 audit(1762566744.843:31802): avc: denied { execmem } for pid=28017 comm="syz.1.8171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 807.014851][T28014] netlink: 'syz.8.8170': attribute type 1 has an invalid length. [ 807.016442][ T29] audit: type=1400 audit(1762566744.903:31803): avc: denied { setopt } for pid=28007 comm="syz.4.8167" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 807.043270][ T29] audit: type=1400 audit(1762566744.903:31804): avc: denied { create } for pid=28013 comm="syz.8.8170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 807.062970][ T29] audit: type=1400 audit(1762566744.903:31805): avc: denied { setopt } for pid=28013 comm="syz.8.8170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 807.082698][ T29] audit: type=1400 audit(1762566744.903:31806): avc: denied { connect } for pid=28013 comm="syz.8.8170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 807.102456][ T29] audit: type=1400 audit(1762566744.903:31807): avc: denied { setopt } for pid=28013 comm="syz.8.8170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 807.123097][ T29] audit: type=1400 audit(1762566744.903:31808): avc: denied { map_create } for pid=28013 comm="syz.8.8170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 807.142435][ T29] audit: type=1400 audit(1762566744.903:31809): avc: denied { map_read map_write } for pid=28013 comm="syz.8.8170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 807.168326][T13766] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.262316][T17435] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.314386][T17435] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.355676][ T2070] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.402706][T28030] loop8: detected capacity change from 0 to 512 [ 807.429259][T28030] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8172: bg 0: block 248: padding at end of block bitmap is not set [ 807.457022][T28030] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8172: Failed to acquire dquot type 1 [ 807.458591][T28035] netlink: 'syz.5.8173': attribute type 1 has an invalid length. [ 807.469277][T28030] EXT4-fs (loop8): 1 truncate cleaned up [ 807.509232][T28030] EXT4-fs mount: 49 callbacks suppressed [ 807.509305][T28030] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.553031][T28030] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 807.729942][T28053] __nla_validate_parse: 3 callbacks suppressed [ 807.729959][T28053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8175'. [ 807.753385][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.792971][T28055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8178'. [ 807.832670][T28054] loop1: detected capacity change from 0 to 2048 [ 807.894345][T28054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.921007][T28067] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8181'. [ 807.959303][T28054] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.040320][T28070] loop4: detected capacity change from 0 to 512 [ 808.071580][T28070] SELinux: security_context_str_to_sid () failed with errno=-22 [ 808.089191][T28072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.112524][T28072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.139186][T28074] loop7: detected capacity change from 0 to 512 [ 808.159760][T28072] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8180: bg 0: block 345: padding at end of block bitmap is not set [ 808.174949][T28072] EXT4-fs (loop1): Remounting filesystem read-only [ 808.192953][T28074] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8184: bg 0: block 248: padding at end of block bitmap is not set [ 808.239996][T28074] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8184: Failed to acquire dquot type 1 [ 808.243558][T28079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8185'. [ 808.290429][T28074] EXT4-fs (loop7): 1 truncate cleaned up [ 808.313632][T28074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.368497][T28074] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 808.408916][T28085] loop4: detected capacity change from 0 to 512 [ 808.417926][T28074] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.8184: deleted inode referenced: 12 [ 808.433977][T28085] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8188: bg 0: block 248: padding at end of block bitmap is not set [ 808.442193][T28054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8180'. [ 808.448731][T28085] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.8188: Failed to acquire dquot type 1 [ 808.479153][T28085] EXT4-fs (loop4): 1 truncate cleaned up [ 808.487595][T28085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.498949][T28090] netlink: 'syz.8.8189': attribute type 1 has an invalid length. [ 808.500766][T28085] ext4 filesystem being mounted at /444/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 808.519590][T28074] netlink: 'syz.7.8184': attribute type 1 has an invalid length. [ 808.527457][T28074] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8184'. [ 808.552485][T28085] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.8188: deleted inode referenced: 12 [ 808.573356][T28090] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 808.582687][T28090] bond9: (slave batadv2): making interface the new active one [ 808.593144][T28090] bond9: (slave batadv2): Enslaving as an active interface with an up link [ 808.637150][T28096] loop8: detected capacity change from 0 to 512 [ 808.654942][T28096] EXT4-fs: Ignoring removed mblk_io_submit option [ 808.685649][T28085] netlink: 'syz.4.8188': attribute type 1 has an invalid length. [ 808.693560][T28085] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8188'. [ 808.704089][T26973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.720832][T28096] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 808.733995][T28096] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.8191: attempt to clear invalid blocks 2 len 1 [ 808.775103][T28096] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 808.799811][T28096] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.8191: invalid indirect mapped block 1819239214 (level 0) [ 808.816902][T28096] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.8191: invalid indirect mapped block 1819239214 (level 1) [ 808.831474][T28096] EXT4-fs (loop8): 1 truncate cleaned up [ 808.837619][T28096] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.852532][T21228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.863339][T28106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8194'. [ 808.891659][T28096] EXT4-fs (loop8): Quota file not on filesystem root. Journaled quota will not work [ 808.933318][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.013786][T28114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8198'. [ 809.041033][T28112] loop8: detected capacity change from 0 to 2048 [ 809.071561][T28112] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.083902][T28112] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 809.166972][T28125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.185665][T28125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.194780][T22269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.254073][T28128] netlink: 'syz.4.8201': attribute type 1 has an invalid length. [ 809.471109][T28033] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 809.549062][T28033] EXT4-fs (loop8): Remounting filesystem read-only [ 809.799030][T28135] loop7: detected capacity change from 0 to 128 [ 809.837462][T28134] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8196'. [ 809.860339][T28139] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 810.209661][T28145] loop4: detected capacity change from 0 to 512 [ 810.221443][T28143] loop1: detected capacity change from 0 to 1024 [ 810.259729][T28143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.281217][T28145] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8204: bg 0: block 248: padding at end of block bitmap is not set [ 810.311448][T28145] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.8204: Failed to acquire dquot type 1 [ 810.337328][T22269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.351192][T28145] EXT4-fs (loop4): 1 truncate cleaned up [ 810.361785][T28145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.396359][T28145] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 810.420114][T28152] loop1: detected capacity change from 0 to 512 [ 810.437901][T28145] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.8204: deleted inode referenced: 12 [ 810.471792][T28152] EXT4-fs (loop1): too many log groups per flexible block group [ 810.479652][T28152] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 810.487773][T28145] netlink: 'syz.4.8204': attribute type 1 has an invalid length. [ 810.507058][T28152] EXT4-fs (loop1): mount failed [ 810.557443][T28156] loop1: detected capacity change from 0 to 512 [ 810.592482][T28156] EXT4-fs (loop1): too many log groups per flexible block group [ 810.601746][T28156] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 810.608584][T28156] EXT4-fs (loop1): mount failed [ 810.636471][T28161] loop1: detected capacity change from 0 to 512 [ 810.645158][T21228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.669406][T28161] EXT4-fs: Ignoring removed mblk_io_submit option [ 810.688270][T28161] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 810.711048][T28161] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.8207: attempt to clear invalid blocks 2 len 1 [ 810.743066][T28161] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 810.778232][T28161] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8207: invalid indirect mapped block 1819239214 (level 0) [ 810.823073][T28161] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8207: invalid indirect mapped block 1819239214 (level 1) [ 810.859989][T28170] hsr_slave_1 (unregistering): left promiscuous mode [ 810.867780][T28161] EXT4-fs (loop1): 1 truncate cleaned up [ 810.884313][T28161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.919495][T28161] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 810.949634][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.968631][T22269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.977797][T28173] loop7: detected capacity change from 0 to 512 [ 810.984757][T28173] SELinux: security_context_str_to_sid () failed with errno=-22 [ 811.049036][T28177] SELinux: ebitmap: truncated map [ 811.055508][T28177] SELinux: failed to load policy [ 811.069984][T28182] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28182 comm=syz.4.8217 [ 811.103412][T28184] loop8: detected capacity change from 0 to 512 [ 811.132162][T28184] EXT4-fs (loop8): too many log groups per flexible block group [ 811.139974][T28184] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 811.147124][T28184] EXT4-fs (loop8): mount failed [ 811.153167][T28189] netlink: 'syz.4.8220': attribute type 1 has an invalid length. [ 811.386217][T28206] loop8: detected capacity change from 0 to 512 [ 811.393040][T28206] EXT4-fs: Ignoring removed mblk_io_submit option [ 811.403049][T28206] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 811.411530][T28206] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.8226: attempt to clear invalid blocks 2 len 1 [ 811.425421][T28206] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 811.440263][T28206] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.8226: invalid indirect mapped block 1819239214 (level 0) [ 811.454564][T28206] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.8226: invalid indirect mapped block 1819239214 (level 1) [ 811.469131][T28206] EXT4-fs (loop8): 1 truncate cleaned up [ 811.479978][T28206] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.497634][T28206] EXT4-fs (loop8): Quota file not on filesystem root. Journaled quota will not work [ 811.523704][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.573227][T28213] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28213 comm=syz.4.8229 [ 811.618548][T28217] netlink: 'syz.4.8231': attribute type 1 has an invalid length. [ 811.641631][T28217] 8021q: adding VLAN 0 to HW filter on device batadv18 [ 811.650642][T28217] bond27: (slave batadv18): making interface the new active one [ 811.659799][T28217] bond27: (slave batadv18): Enslaving as an active interface with an up link [ 811.693431][T28220] loop7: detected capacity change from 0 to 512 [ 811.700191][T28220] SELinux: security_context_str_to_sid () failed with errno=-22 [ 811.885052][T28235] netlink: 'syz.1.8239': attribute type 1 has an invalid length. [ 811.909944][T28237] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28237 comm=syz.4.8240 [ 811.922879][T28231] loop5: detected capacity change from 0 to 2048 [ 811.923831][T28235] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.960184][T28231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.979350][T28247] netlink: 'syz.7.8242': attribute type 1 has an invalid length. [ 811.981411][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 811.981430][ T29] audit: type=1400 audit(1762566749.873:32207): avc: denied { write } for pid=28243 comm="syz.4.8243" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 811.987664][T28231] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.061057][T28235] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.086617][ T29] audit: type=1400 audit(1762566749.983:32208): avc: denied { read write } for pid=28253 comm="syz.7.8246" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 812.111056][ T29] audit: type=1400 audit(1762566749.983:32209): avc: denied { open } for pid=28253 comm="syz.7.8246" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 812.127646][T28257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.149523][T28255] netlink: 'syz.8.8245': attribute type 1 has an invalid length. [ 812.171936][T28235] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.198103][ T29] audit: type=1400 audit(1762566750.073:32210): avc: denied { prog_load } for pid=28258 comm="syz.7.8247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 812.217433][ T29] audit: type=1400 audit(1762566750.073:32211): avc: denied { bpf } for pid=28258 comm="syz.7.8247" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 812.219492][T28257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.251797][T28260] loop7: detected capacity change from 0 to 2048 [ 812.260275][ T29] audit: type=1400 audit(1762566750.153:32212): avc: denied { read write } for pid=28258 comm="syz.7.8247" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 812.284599][ T29] audit: type=1400 audit(1762566750.153:32213): avc: denied { open } for pid=28258 comm="syz.7.8247" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 812.308734][ T29] audit: type=1400 audit(1762566750.153:32214): avc: denied { ioctl } for pid=28258 comm="syz.7.8247" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 812.334303][ T29] audit: type=1400 audit(1762566750.153:32215): avc: denied { mounton } for pid=28258 comm="syz.7.8247" path="/82/file0" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 812.334628][T28257] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8237: bg 0: block 345: padding at end of block bitmap is not set [ 812.371720][T28257] EXT4-fs (loop5): Remounting filesystem read-only [ 812.396184][ T29] audit: type=1400 audit(1762566750.203:32216): avc: denied { create } for pid=28252 comm="syz.8.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 812.418359][T28235] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.429945][T28260] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.451812][T28260] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.535436][T28272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.554127][T28272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.561292][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.595055][T28275] loop4: detected capacity change from 0 to 1024 [ 812.606175][T28275] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 812.626081][T28275] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 812.634584][T28272] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8247: bg 0: block 345: padding at end of block bitmap is not set [ 812.641804][T28275] EXT4-fs (loop4): orphan cleanup on readonly fs [ 812.659590][T28275] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 812.665760][T28272] EXT4-fs (loop7): Remounting filesystem read-only [ 812.674356][T28275] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 812.690416][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.703262][T28275] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.8250: Freeing blocks not in datazone - block = 0, count = 4096 [ 812.722977][T28275] EXT4-fs (loop4): Remounting filesystem read-only [ 812.729708][T28275] EXT4-fs (loop4): 1 truncate cleaned up [ 812.734065][T28276] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 812.736021][T28275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 812.762554][T28276] bond11 (unregistering): Released all slaves [ 812.771975][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.801401][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.823572][T21228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.872180][T28284] __nla_validate_parse: 11 callbacks suppressed [ 812.872198][T28284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8253'. [ 812.917535][T28284] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28284 comm=syz.1.8253 [ 812.931436][T28260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8247'. [ 812.985792][T28294] netlink: 'syz.4.8257': attribute type 1 has an invalid length. [ 812.999646][T28289] SELinux: ebitmap: truncated map [ 813.007320][T28289] SELinux: failed to load policy [ 813.038780][T28289] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8255'. [ 813.066541][T28299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8259'. [ 813.161338][T28307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8260'. [ 813.188715][T28310] loop1: detected capacity change from 0 to 512 [ 813.206196][T28310] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8262: bg 0: block 248: padding at end of block bitmap is not set [ 813.220796][T28310] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.8262: Failed to acquire dquot type 1 [ 813.240760][T28310] EXT4-fs (loop1): 1 truncate cleaned up [ 813.248727][T28310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.274868][T28310] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 813.286818][T22585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.297244][T28310] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.8262: deleted inode referenced: 12 [ 813.317318][T28310] netlink: 'syz.1.8262': attribute type 1 has an invalid length. [ 813.325227][T28310] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8262'. [ 813.350027][T28314] netlink: 'syz.5.8263': attribute type 1 has an invalid length. [ 813.358231][T28316] loop4: detected capacity change from 0 to 1024 [ 813.368906][T28316] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 813.369405][T28314] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.389879][T28316] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 813.398208][T28316] EXT4-fs (loop4): orphan cleanup on readonly fs [ 813.404969][T28316] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 813.419706][T28316] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 813.426759][T28316] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.8264: Freeing blocks not in datazone - block = 0, count = 4096 [ 813.440791][T28316] EXT4-fs (loop4): Remounting filesystem read-only [ 813.441697][T22269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.447511][T28316] EXT4-fs (loop4): 1 truncate cleaned up [ 813.457808][T28314] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.462481][T28316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 813.504731][T21228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.516107][T26973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.527972][T28314] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.560260][T28320] bond28: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 813.571791][T28324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8266'. [ 813.584130][T28320] bond28 (unregistering): Released all slaves [ 813.595805][T28314] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.610167][T28324] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28324 comm=syz.4.8266 [ 813.689435][T13766] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.710507][T13766] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.732934][T28337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8270'. [ 813.748087][T13766] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.811868][T13766] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.872571][T28345] loop8: detected capacity change from 0 to 512 [ 813.880924][T28343] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 813.896446][T28348] loop4: detected capacity change from 0 to 128 [ 813.904702][T28345] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8275: bg 0: block 248: padding at end of block bitmap is not set [ 813.920068][T28345] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8275: Failed to acquire dquot type 1 [ 813.935121][T28352] loop5: detected capacity change from 0 to 1024 [ 813.942092][T28345] EXT4-fs (loop8): 1 truncate cleaned up [ 813.948515][T28345] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.963424][T28345] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 813.974427][T28352] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 813.985250][T28354] loop1: detected capacity change from 0 to 512 [ 813.988692][T28352] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 813.999556][T28352] EXT4-fs (loop5): orphan cleanup on readonly fs [ 814.006209][T28352] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 814.006542][T28354] EXT4-fs: Ignoring removed mblk_io_submit option [ 814.020863][T28352] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 814.034739][T28352] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.8277: Freeing blocks not in datazone - block = 0, count = 4096 [ 814.050182][T28354] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 814.058568][T28352] EXT4-fs (loop5): Remounting filesystem read-only [ 814.065388][T28345] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.8275: deleted inode referenced: 12 [ 814.065813][T28354] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.8278: attempt to clear invalid blocks 2 len 1 [ 814.077193][T28352] EXT4-fs (loop5): 1 truncate cleaned up [ 814.090156][T28354] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 814.095690][T28352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 814.110023][T28354] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8278: invalid indirect mapped block 1819239214 (level 0) [ 814.146774][T28345] netlink: 'syz.8.8275': attribute type 1 has an invalid length. [ 814.149977][T28354] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8278: invalid indirect mapped block 1819239214 (level 1) [ 814.154727][T28345] netlink: 224 bytes leftover after parsing attributes in process `syz.8.8275'. [ 814.174042][T28361] netlink: 'syz.4.8280': attribute type 1 has an invalid length. [ 814.179386][T28354] EXT4-fs (loop1): 1 truncate cleaned up [ 814.186706][T22585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.192295][T28354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.229267][T28354] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 814.240948][T28364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8281'. [ 814.251999][T22269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.275239][T28367] bond30: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 814.286161][T28367] bond30 (unregistering): Released all slaves [ 814.306899][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.318517][T28364] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28364 comm=syz.5.8281 [ 814.389336][T28382] loop4: detected capacity change from 0 to 512 [ 814.398412][T28378] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.413539][T28374] SELinux: ebitmap: truncated map [ 814.429358][T28374] SELinux: failed to load policy [ 814.439067][T28382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.455984][T28382] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 814.468334][T28382] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.8287: corrupted inode contents [ 814.480542][T28382] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.8287: mark_inode_dirty error [ 814.493684][T28378] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.493894][T28382] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.8287: corrupted inode contents [ 814.515572][T28382] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.8287: mark_inode_dirty error [ 814.535645][T28382] veth12: entered promiscuous mode [ 814.540846][T28382] veth12: entered allmulticast mode [ 814.563901][T28378] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.573948][T21228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.651392][T28391] loop7: detected capacity change from 0 to 512 [ 814.664130][T28391] SELinux: security_context_str_to_sid () failed with errno=-22 [ 814.686468][T28378] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.708838][T28396] loop8: detected capacity change from 0 to 1024 [ 814.716106][T28396] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 814.727085][T28396] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 814.735100][T28396] EXT4-fs (loop8): orphan cleanup on readonly fs [ 814.741766][T28396] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 814.756514][T28396] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 814.763578][T28396] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.8291: Freeing blocks not in datazone - block = 0, count = 4096 [ 814.776983][T28396] EXT4-fs (loop8): Remounting filesystem read-only [ 814.787533][T28396] EXT4-fs (loop8): 1 truncate cleaned up [ 814.794587][T28396] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 814.821730][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.860482][T28407] loop8: detected capacity change from 0 to 512 [ 814.881772][T28409] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28409 comm=syz.4.8296 [ 814.910037][T28407] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8294: bg 0: block 248: padding at end of block bitmap is not set [ 814.924912][T28407] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8294: Failed to acquire dquot type 1 [ 814.937358][T28407] EXT4-fs (loop8): 1 truncate cleaned up [ 814.943651][T28407] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.956517][T28407] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 815.007395][T28416] loop4: detected capacity change from 0 to 8192 [ 815.017286][T28416] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 815.025257][T28416] FAT-fs (loop4): Filesystem has been set read-only [ 815.098951][T28419] loop7: detected capacity change from 0 to 1024 [ 815.109513][T28419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.257794][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.305734][T28422] SELinux: policydb version 1468587041 does not match my version range 15-35 [ 815.314854][T28422] SELinux: failed to load policy [ 815.768201][T28428] loop8: detected capacity change from 0 to 512 [ 816.007765][T28428] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 816.032112][T28428] EXT4-fs (loop8): 1 truncate cleaned up [ 816.038312][T28428] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.511156][T26327] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.790879][T26973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.061415][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 817.061433][ T29] audit: type=1400 audit(1762566754.963:32484): avc: denied { create } for pid=28445 comm="syz.8.8308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 817.088837][ T29] audit: type=1400 audit(1762566754.963:32485): avc: denied { write } for pid=28445 comm="syz.8.8308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 817.110323][ T29] audit: type=1400 audit(1762566755.003:32486): avc: denied { create } for pid=28447 comm="syz.7.8309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 817.490360][T28453] loop1: detected capacity change from 0 to 1024 [ 817.497223][T28453] EXT4-fs: Ignoring removed orlov option [ 817.505208][T28453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.520793][ T29] audit: type=1400 audit(1762566755.423:32487): avc: denied { write } for pid=28452 comm="syz.1.8310" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 817.542741][ T29] audit: type=1400 audit(1762566755.423:32488): avc: denied { ioctl } for pid=28452 comm="syz.1.8310" path="/377/bus/bus" dev="loop1" ino=18 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 817.566968][ T29] audit: type=1400 audit(1762566755.423:32489): avc: denied { create } for pid=28452 comm="syz.1.8310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 817.587426][ T29] audit: type=1400 audit(1762566755.423:32490): avc: denied { write } for pid=28452 comm="syz.1.8310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 817.607796][ T29] audit: type=1400 audit(1762566755.423:32491): avc: denied { nlmsg_write } for pid=28452 comm="syz.1.8310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 817.750704][ T29] audit: type=1400 audit(1762566755.643:32492): avc: denied { create } for pid=28467 comm="syz.8.8313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 817.794775][T28470] loop7: detected capacity change from 0 to 1024 [ 817.801530][ T29] audit: type=1400 audit(1762566755.703:32493): avc: denied { mounton } for pid=28469 comm="syz.7.8315" path="/94/file1" dev="tmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 817.842455][T28470] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 817.940757][T28453] ================================================================== [ 817.948866][T28453] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 817.956000][T28453] [ 817.958334][T28453] write to 0xffff88811a7ee54c of 4 bytes by task 28461 on cpu 0: [ 817.966051][T28453] xas_set_mark+0x12b/0x140 [ 817.970581][T28453] __folio_start_writeback+0x155/0x390 [ 817.976060][T28453] ext4_bio_write_folio+0x5ad/0x9f0 [ 817.981296][T28453] mpage_process_page_bufs+0x4a1/0x620 [ 817.986778][T28453] mpage_prepare_extent_to_map+0x786/0xc00 [ 817.992611][T28453] ext4_do_writepages+0xa05/0x2750 [ 817.997747][T28453] ext4_writepages+0x176/0x300 [ 818.002533][T28453] do_writepages+0x1c6/0x310 [ 818.007157][T28453] file_write_and_wait_range+0x156/0x2c0 [ 818.012815][T28453] generic_buffers_fsync_noflush+0x45/0x120 [ 818.018738][T28453] ext4_sync_file+0x1ab/0x690 [ 818.023433][T28453] vfs_fsync_range+0x10d/0x130 [ 818.028225][T28453] ext4_buffered_write_iter+0x34f/0x3c0 [ 818.033797][T28453] ext4_file_write_iter+0x387/0xf60 [ 818.039017][T28453] iter_file_splice_write+0x666/0xa60 [ 818.044418][T28453] direct_splice_actor+0x156/0x2a0 [ 818.049555][T28453] splice_direct_to_actor+0x312/0x680 [ 818.054949][T28453] do_splice_direct+0xda/0x150 [ 818.059749][T28453] do_sendfile+0x380/0x650 [ 818.064195][T28453] __x64_sys_sendfile64+0x105/0x150 [ 818.069422][T28453] x64_sys_call+0x2bb4/0x3000 [ 818.074116][T28453] do_syscall_64+0xd2/0x200 [ 818.078636][T28453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.084634][T28453] [ 818.086971][T28453] read to 0xffff88811a7ee54c of 4 bytes by task 28453 on cpu 1: [ 818.094626][T28453] xas_find_marked+0x5dc/0x620 [ 818.099465][T28453] find_get_entry+0x5d/0x380 [ 818.104087][T28453] filemap_get_folios_tag+0x92/0x210 [ 818.109396][T28453] mpage_prepare_extent_to_map+0x320/0xc00 [ 818.115226][T28453] ext4_do_writepages+0x708/0x2750 [ 818.120354][T28453] ext4_writepages+0x176/0x300 [ 818.125144][T28453] do_writepages+0x1c6/0x310 [ 818.129744][T28453] file_write_and_wait_range+0x156/0x2c0 [ 818.135400][T28453] generic_buffers_fsync_noflush+0x45/0x120 [ 818.141325][T28453] ext4_sync_file+0x1ab/0x690 [ 818.146032][T28453] vfs_fsync_range+0x10d/0x130 [ 818.150826][T28453] ext4_buffered_write_iter+0x34f/0x3c0 [ 818.156390][T28453] ext4_file_write_iter+0x387/0xf60 [ 818.161614][T28453] iter_file_splice_write+0x666/0xa60 [ 818.167015][T28453] direct_splice_actor+0x156/0x2a0 [ 818.172140][T28453] splice_direct_to_actor+0x312/0x680 [ 818.177547][T28453] do_splice_direct+0xda/0x150 [ 818.182326][T28453] do_sendfile+0x380/0x650 [ 818.186766][T28453] __x64_sys_sendfile64+0x105/0x150 [ 818.191985][T28453] x64_sys_call+0x2bb4/0x3000 [ 818.196690][T28453] do_syscall_64+0xd2/0x200 [ 818.201202][T28453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.207212][T28453] [ 818.209554][T28453] value changed: 0x0a000021 -> 0x04000021 [ 818.215274][T28453] [ 818.217608][T28453] Reported by Kernel Concurrency Sanitizer on: [ 818.223773][T28453] CPU: 1 UID: 0 PID: 28453 Comm: syz.1.8310 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 818.235176][T28453] Tainted: [W]=WARN [ 818.238985][T28453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 818.249053][T28453] ================================================================== [ 818.266701][T28453] ================================================================== [ 818.274802][T28453] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 818.282702][T28453] [ 818.285044][T28453] write to 0xffff88811a7ee54c of 4 bytes by task 28461 on cpu 0: [ 818.292765][T28453] xas_set_mark+0x12b/0x140 [ 818.297281][T28453] __folio_start_writeback+0x155/0x390 [ 818.302752][T28453] ext4_bio_write_folio+0x5ad/0x9f0 [ 818.308002][T28453] mpage_process_page_bufs+0x4a1/0x620 [ 818.313473][T28453] mpage_prepare_extent_to_map+0x786/0xc00 [ 818.319296][T28453] ext4_do_writepages+0x708/0x2750 [ 818.324403][T28453] ext4_writepages+0x176/0x300 [ 818.329167][T28453] do_writepages+0x1c6/0x310 [ 818.333765][T28453] file_write_and_wait_range+0x156/0x2c0 [ 818.339422][T28453] generic_buffers_fsync_noflush+0x45/0x120 [ 818.345318][T28453] ext4_sync_file+0x1ab/0x690 [ 818.349993][T28453] vfs_fsync_range+0x10d/0x130 [ 818.354757][T28453] ext4_buffered_write_iter+0x34f/0x3c0 [ 818.360302][T28453] ext4_file_write_iter+0x387/0xf60 [ 818.365495][T28453] iter_file_splice_write+0x666/0xa60 [ 818.370873][T28453] direct_splice_actor+0x156/0x2a0 [ 818.376082][T28453] splice_direct_to_actor+0x312/0x680 [ 818.381490][T28453] do_splice_direct+0xda/0x150 [ 818.386277][T28453] do_sendfile+0x380/0x650 [ 818.390704][T28453] __x64_sys_sendfile64+0x105/0x150 [ 818.395924][T28453] x64_sys_call+0x2bb4/0x3000 [ 818.400621][T28453] do_syscall_64+0xd2/0x200 [ 818.405131][T28453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.411023][T28453] [ 818.413345][T28453] read to 0xffff88811a7ee54c of 4 bytes by task 28453 on cpu 1: [ 818.420977][T28453] __writeback_single_inode+0x1f9/0x7c0 [ 818.426539][T28453] writeback_single_inode+0x16d/0x3f0 [ 818.431925][T28453] sync_inode_metadata+0x5b/0x90 [ 818.436891][T28453] generic_buffers_fsync_noflush+0xd9/0x120 [ 818.442819][T28453] ext4_sync_file+0x1ab/0x690 [ 818.447515][T28453] vfs_fsync_range+0x10d/0x130 [ 818.452282][T28453] ext4_buffered_write_iter+0x34f/0x3c0 [ 818.457837][T28453] ext4_file_write_iter+0x387/0xf60 [ 818.463035][T28453] iter_file_splice_write+0x666/0xa60 [ 818.468410][T28453] direct_splice_actor+0x156/0x2a0 [ 818.473521][T28453] splice_direct_to_actor+0x312/0x680 [ 818.478907][T28453] do_splice_direct+0xda/0x150 [ 818.483679][T28453] do_sendfile+0x380/0x650 [ 818.488118][T28453] __x64_sys_sendfile64+0x105/0x150 [ 818.493322][T28453] x64_sys_call+0x2bb4/0x3000 [ 818.498010][T28453] do_syscall_64+0xd2/0x200 [ 818.502513][T28453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.508422][T28453] [ 818.510773][T28453] value changed: 0x0a000021 -> 0x04000021 [ 818.516496][T28453] [ 818.518804][T28453] Reported by Kernel Concurrency Sanitizer on: [ 818.524960][T28453] CPU: 1 UID: 0 PID: 28453 Comm: syz.1.8310 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 818.536323][T28453] Tainted: [W]=WARN [ 818.540114][T28453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 818.550162][T28453] ================================================================== [ 818.560678][ T3902] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 818.601240][T22269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.286065][T13766] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.297336][T13766] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.308540][T13766] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.320645][ T57] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0