last executing test programs: 5m33.295948727s ago: executing program 0 (id=465): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) 5m33.268421061s ago: executing program 0 (id=467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) getgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x10001, 0xb8, 0x7, 0x2000, r0, 0x4, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) syz_io_uring_setup(0x496, &(0x7f0000000940)={0x0, 0x422e, 0x2, 0x8003, 0xac}, &(0x7f0000000080), &(0x7f0000000400)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) ioperm(0x0, 0x40, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="2b6370752055fdc983511558ebee7501e4099f6031fa7eb4ad5a4c2b0a4af5bfb382e1e0e5c85d670a6dcd345ce062c1aeeb0b1287fde857621fc54f90d8010fb637af00"/78], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu'], 0x5) 5m33.106477621s ago: executing program 0 (id=471): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e80cb79677030006000718000002004909c722deee1edb0e4f20000000080012000200010000d20000006544f62c006c540203000100000000000080b20200000000152c000000cdff00000001020014bb000001000000202300001300030005"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d6974"], 0x118}}, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 5m32.940130913s ago: executing program 0 (id=475): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500), 0x1, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) write$binfmt_elf32(r0, &(0x7f0000000900)=ANY=[], 0x58) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@bsdgroups}, {@discard}, {@noload}, {@noauto_da_alloc}, {@bsdgroups}, {@dax_always}, {@stripe={'stripe', 0x3d, 0x7ff}}, {@init_itable_val={'init_itable', 0x3d, 0xb56e}}]}, 0x1, 0x480, &(0x7f0000000bc0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400000011000100"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28000000130a810100000000000000000200000008000340000000010900010073797a3000000000a936fd15318d901e2182b0b6932732086b7e1a454e455a292d7a9dfb4846609ea1e285eb5f518fcaa6bea0ed37ef25ad9b"], 0x28}}, 0x20004000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000080)=""/109, 0x6d) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x891d, &(0x7f00000000c0)={'netdevsim0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}) process_mrelease(r5, 0x700000000000000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000)=0xb, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="bcfb100000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r7, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x160, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'gre0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x3c, 0x9, 0x0, 0x50}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "978888d6ee9e7a5e4bc76ccf4228733e737d402fc4a91c346e4f9a692f63"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xfffffefe], [0xffffff00, 0xff, 0xff, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x1, 0x2, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x5, 0xfd, 0xe9, 0x7fff0003}, {0x400, 0xb, 0x6, 0x2d}]}) r9 = getpid() syz_pidfd_open(r9, 0x0) 5m31.56939421s ago: executing program 0 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) getgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x10001, 0xb8, 0x7, 0x2000, r0, 0x4, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) syz_io_uring_setup(0x496, &(0x7f0000000940)={0x0, 0x422e, 0x2, 0x8003, 0xac}, &(0x7f0000000080), &(0x7f0000000400)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) ioperm(0x0, 0x40, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="2b6370752055fdc983511558ebee7501e4099f6031fa7eb4ad5a4c2b0a4af5bfb382e1e0e5c85d670a6dcd345ce062c1aeeb0b1287fde857621fc54f90d8010fb637af00"/78], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu'], 0x5) 5m31.017826652s ago: executing program 0 (id=487): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000180)={@broadcast, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0x3, 0x94}, @lsrr={0x83, 0x3, 0xd9}]}}, {0x17, 0x7c, 0x0, @multicast1}}}}}, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x5, &(0x7f0000000040)=[{0x9, 0x5, 0x7f, 0x1}, {0x3, 0x7, 0x0, 0x5}, {0x4a32, 0xff, 0x6, 0x85e}, {0xa3ac, 0xff, 0x9, 0x54}, {0x8, 0x8, 0xa, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53773c5c", 0xdf}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc6ed554a34c", 0x64}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebdae377e00b376c097a5a1177d96c558fdc88e5d092f9c4ee29801393d0b6365bb4f86cca898b6fee05d12420470228e07aa5a2047a4391883cdd86acf0d83021778eb7b5c656c244265c8", 0x72}], 0x6}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958761a4d88", 0x79}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a", 0x9c}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1bf7057ed0fcbdf5cf8d06bab48b66bcac445bc7e7f53366375848d4c7e185155bcfdaf0781c63bfe1861c7164dcc0024a", 0xf0}, {&(0x7f0000000940)="f1099f021bb0a10f58009b79864b25967510efdafaeedc78b6a20e93aee5006de49a2dc90ed191e37723a2348348dcb279b737c26250b49072db", 0x3a}], 0x4}}], 0x2, 0x2090) 5m30.987854396s ago: executing program 32 (id=487): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000180)={@broadcast, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0x3, 0x94}, @lsrr={0x83, 0x3, 0xd9}]}}, {0x17, 0x7c, 0x0, @multicast1}}}}}, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x5, &(0x7f0000000040)=[{0x9, 0x5, 0x7f, 0x1}, {0x3, 0x7, 0x0, 0x5}, {0x4a32, 0xff, 0x6, 0x85e}, {0xa3ac, 0xff, 0x9, 0x54}, {0x8, 0x8, 0xa, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53773c5c", 0xdf}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc6ed554a34c", 0x64}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebdae377e00b376c097a5a1177d96c558fdc88e5d092f9c4ee29801393d0b6365bb4f86cca898b6fee05d12420470228e07aa5a2047a4391883cdd86acf0d83021778eb7b5c656c244265c8", 0x72}], 0x6}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958761a4d88", 0x79}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a", 0x9c}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1bf7057ed0fcbdf5cf8d06bab48b66bcac445bc7e7f53366375848d4c7e185155bcfdaf0781c63bfe1861c7164dcc0024a", 0xf0}, {&(0x7f0000000940)="f1099f021bb0a10f58009b79864b25967510efdafaeedc78b6a20e93aee5006de49a2dc90ed191e37723a2348348dcb279b737c26250b49072db", 0x3a}], 0x4}}], 0x2, 0x2090) 5m27.806493607s ago: executing program 1 (id=515): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 5m27.760500983s ago: executing program 1 (id=516): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x6, 0x4, 0x0, 0x20ff, 0xffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000901000/0x1000)=nil, 0x1000) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000580)={0x0, 0x6000}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000740)={0x0, 0x1, 0x5, 0xb, 0x8, 0x400, 0x8, 0xa86, {r3, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x1, 0xfffffffa, 0x431, 0x9, 0x8}}, &(0x7f0000000600)=0xb0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000dd0000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f88200000000000000000077246f07bfca698e59000000000066527f95619bb74a00e50500d256e693df4b53dbbea24bea89"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='cq_modify\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RREAD(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="f236"], 0x57) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3920, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000180)="e1a9d23dd9d3dbf84e16f80cd12ad79199c5086bd6ed528de704d3e212696ab422f44855d3954947191d99eef7dc5c68c0dd2f1ef780a2ecee526af0d582f17c2db83f3343b2a6eea1ce362fb7fd00ba12b07ab9c1d96c16b67cfed5b44055d83fbb704bbe36adf11433aa38779ed6c2627961e49076abec7707bfe8a0cbc72fbff70466aeeed6630dc103c57627b0814a967913a3c519f4bd670c", &(0x7f00000002c0)=""/92, &(0x7f0000000340)="c52877c7ea50ccff6eedd14528d25ac27bfae82588811cb4cfa8b684e4bb475b676c6e11cfbdcaad8375eb64211a371714df135e4a1b41da0e7be551b89808229473b016468545f47d08cbcf2f", &(0x7f0000000100), 0x100, r1, 0x4}, 0x38) 5m27.437871354s ago: executing program 1 (id=524): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x5) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000005c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1b}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x4}]}, 0x18}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x280000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b744912af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x69d, &(0x7f0000001c00)="$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") syz_clone(0x4ca00200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 5m26.439002964s ago: executing program 1 (id=528): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500), 0x1, 0x523, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) write$binfmt_elf32(r0, &(0x7f0000000900)=ANY=[], 0x58) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@bsdgroups}, {@discard}, {@noload}, {@noauto_da_alloc}, {@bsdgroups}, {@dax_always}, {@stripe={'stripe', 0x3d, 0x7ff}}, {@init_itable_val={'init_itable', 0x3d, 0xb56e}}]}, 0x1, 0x480, &(0x7f0000000bc0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400000011000100"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28000000130a810100000000000000000200000008000340000000010900010073797a3000000000a936fd15318d901e2182b0b6932732086b7e1a454e455a292d7a9dfb4846609ea1e285eb5f518fcaa6bea0ed37ef25ad9b"], 0x28}}, 0x20004000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000080)=""/109, 0x6d) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x891d, &(0x7f00000000c0)={'netdevsim0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}) process_mrelease(r4, 0x700000000000000) 5m26.179564197s ago: executing program 1 (id=530): rt_sigsuspend(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0e000000040000000400000006", @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={0x0, 0x8}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_robust_list(&(0x7f0000000300)={0x0, 0x400}, 0x18) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d000000010000000000000018000000000000001001"], 0x30}, 0x0) 5m24.865419867s ago: executing program 1 (id=537): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffff001}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x800, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r12 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r12, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r12, &(0x7f0000000640)=""/4110, 0x100e) 5m24.828750101s ago: executing program 33 (id=537): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffff001}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x800, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r12 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r12, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r12, &(0x7f0000000640)=""/4110, 0x100e) 4m27.594327881s ago: executing program 2 (id=980): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m27.430314233s ago: executing program 2 (id=982): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) 4m26.685338679s ago: executing program 2 (id=985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) getgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x10001, 0xb8, 0x7, 0x2000, r0, 0x4, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) syz_io_uring_setup(0x496, &(0x7f0000000940)={0x0, 0x422e, 0x2, 0x8003, 0xac}, &(0x7f0000000080), &(0x7f0000000400)) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) ioperm(0x0, 0x40, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="2b6370752055fdc983511558ebee7501e4099f6031fa7eb4ad5a4c2b0a4af5bfb382e1e0e5c85d670a6dcd345ce062c1aeeb0b1287fde857621fc54f90d8010fb637af00"/78], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu'], 0x5) close(r9) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x1e, 0x5, 0x5360, 0x7}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) 4m26.168971696s ago: executing program 2 (id=988): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080)=0x3, 0x4) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m26.073217148s ago: executing program 2 (id=989): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = fsopen(&(0x7f00000004c0)='binfmt_misc\x00', 0x0) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") 4m24.373017448s ago: executing program 2 (id=993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000340), &(0x7f00000003c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x4005}) 4m8.214137257s ago: executing program 34 (id=993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000340), &(0x7f00000003c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x4005}) 55.91428158s ago: executing program 5 (id=2594): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 55.91413827s ago: executing program 5 (id=2595): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810) socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x20) getdents64(r4, 0x0, 0x12) io_setup(0x1a, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x5) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x0) 52.629964605s ago: executing program 5 (id=2625): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) 51.646022283s ago: executing program 5 (id=2634): keyctl$dh_compute(0x17, &(0x7f0000000500), 0x0, 0x0, 0x0) 51.577082921s ago: executing program 5 (id=2635): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') poll(&(0x7f0000000180)=[{r0}], 0x1, 0x7a0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 50.644107862s ago: executing program 5 (id=2650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x68c44b42}) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 34.407917101s ago: executing program 35 (id=2650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x68c44b42}) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 2.141572533s ago: executing program 4 (id=3608): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x101) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x4}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0'}, 0xb) 1.179851667s ago: executing program 4 (id=3630): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x2, {0x80, {0x8, 0x2, 0x7}, 0x41, 0x0, 0xee00, 0x8, 0x6, 0xfff, 0x100000000, 0x896, 0x0, 0x3, 0x6, 0x6, 0x9, 0x10, 0x200, 0x1, 0xbf61, 0x8}}, 0xa0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = syz_io_uring_setup(0x18b0, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000340)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r6, r5, 0x0) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000040)) splice(r1, 0x0, r0, 0x0, 0x1c, 0x0) 1.143451251s ago: executing program 4 (id=3633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.143036392s ago: executing program 6 (id=3634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0xfff3, 0xffff}, {0xf, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 1.118049675s ago: executing program 6 (id=3637): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.113861375s ago: executing program 4 (id=3638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 1.082689239s ago: executing program 6 (id=3640): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8a0602) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1d79, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x221b, 0x7721, 0x16, 0x0, 0x0) 1.082242899s ago: executing program 4 (id=3641): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x101) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x4}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0'}, 0xb) 1.030215306s ago: executing program 6 (id=3643): syz_emit_ethernet(0x5a, &(0x7f0000000300)=ANY=[@ANYBLOB="0d6afadfc150aaaaaaaaaa1386dd600000000000000000aa00000000000000000000ffff7f0000010000", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="90020000c2"], 0x0) 990.581841ms ago: executing program 3 (id=3645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x85a, 0x3ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0xb, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0xa, 0x8, 0x100, 0xc0000000, 0x8006, 0x6, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x1, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0x13, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x80000002, 0x0, 0x4e8, 0x1, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 943.869588ms ago: executing program 6 (id=3647): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r0, &(0x7f0000000740)='\x00', 0x1, 0x20004090, &(0x7f0000000400)={0x11, 0x10, r3, 0x1, 0x2, 0x6, @multicast}, 0x14) 870.331277ms ago: executing program 7 (id=3648): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0xfff3, 0xffff}, {0xf, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 870.215987ms ago: executing program 8 (id=3649): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)={0xf0, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x9}, [@generic="5ac439522633affedf7bdce824d6b74ffd2d900cc0b28cdb3d441ad4dd80d0e0d9854d398d336b690ea47a0633229ec088228506171f6fe690262724e9285fb8b83d5a3742149a23fcb96c75560b492efa118045f3a9d4b039cd04f395f85329c6ae364e515d8cd2ddae0a03a0ff7e7e0d79aad20bb5d0f0fb3c6e2de49ebfc43131111860824129b29f1272d8f84102a90ee2a0a1179a41215743662268e5c18e7a9d5673a3231dfdb0d617270b1cb3d424b1da857ce98d87f7fd6c283e58e4a31f9f0d47587ee7bc8a5ef0d1df9af47fe3b36856a419b1ffb51b"]}, 0xf0}, 0x1, 0x0, 0x0, 0x200448d3}, 0x800) 790.000227ms ago: executing program 8 (id=3650): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @random="f85c3132d479"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) 756.467582ms ago: executing program 8 (id=3651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 690.390031ms ago: executing program 7 (id=3652): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0xfffffffb, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="0001010000a1ba7b8b", 0x9}], 0x1}, 0x4000) sendmsg$can_j1939(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x1}, 0xfd}, 0x18, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x800) 627.063539ms ago: executing program 6 (id=3653): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 626.402219ms ago: executing program 8 (id=3654): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 622.901109ms ago: executing program 3 (id=3655): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r0}, 0x20) 382.94263ms ago: executing program 7 (id=3656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="8de7ee0c7cdad9b4b47380c988ca2520a9d1769835aa9ceacc04d25983c69f6e0d", 0x21}, {&(0x7f0000000300)="f2278edfb9", 0x5}], 0x2) 382.72751ms ago: executing program 3 (id=3657): syz_emit_ethernet(0x5a, &(0x7f0000000300)=ANY=[@ANYBLOB="0d6afadfc150aaaaaaaaaa1386dd600000000000000000aa00000000000000000000ffff7f0000010000", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="90020000c2"], 0x0) 382.58221ms ago: executing program 8 (id=3658): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 348.851074ms ago: executing program 3 (id=3659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1900) renameat2(r2, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 290.102502ms ago: executing program 8 (id=3660): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0x1}, @info_reply={0x10, 0x0, 0x0, 0x29, 0x7}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) 289.934652ms ago: executing program 3 (id=3661): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4e042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x19c) write(r1, &(0x7f0000000540), 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 181.831036ms ago: executing program 7 (id=3662): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0xfff3, 0xffff}, {0xf, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 112.977125ms ago: executing program 4 (id=3663): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x77c, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x8, 0x6, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='ext4_unlink_exit\x00', r1}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 72.48056ms ago: executing program 7 (id=3664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x1c, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x4, {[@exp_fastopen={0xfe, 0x5, 0xf989, "8c"}]}}}}}}}}, 0x0) 64.446561ms ago: executing program 3 (id=3665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x85a, 0x3ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0xb, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0xa, 0x8, 0x100, 0xc0000000, 0x8006, 0x6, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x1, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0x13, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x80000002, 0x0, 0x4e8, 0x1, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 0s ago: executing program 7 (id=3666): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x125) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x1000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) kernel console output (not intermixed with test programs): 784][T11636] vfat: Unknown parameter '±ši>Ÿ%?ΓožΓä äùí×LJ'gg/Qý±¾I\®E' [ 350.706552][ T29] audit: type=1107 audit(1768533129.376:3352): pid=11648 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=',}ŽXǯ¥…‡ø2é0ä4ô¤jY…>DÕ‹£íýø‚›™|~U¹Á Ö:=êw¼÷' [ 351.290639][ T29] audit: type=1107 audit(1768533129.993:3353): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=',}ŽXǯ¥…‡ø2é0ä4ô¤jY…>DÕ‹£íýø‚›™|~U¹Á Ö:=êw¼÷' [ 352.859539][T11711] set_capacity_and_notify: 6 callbacks suppressed [ 352.859554][T11711] loop7: detected capacity change from 0 to 128 [ 353.196551][ T29] audit: type=1107 audit(1768533131.649:3354): pid=11715 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=',}ŽXǯ¥…‡ø2é0ä4ô¤jY…>DÕ‹£íýø‚›™|~U¹Á Ö:=êw¼÷' [ 353.413706][T11730] loop6: detected capacity change from 0 to 128 [ 355.962379][T11756] loop7: detected capacity change from 0 to 8192 [ 356.021953][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2221'. [ 356.042546][T11760] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 356.093195][T11765] loop6: detected capacity change from 0 to 128 [ 356.214603][T11778] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2228'. [ 356.224062][T11778] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2228'. [ 356.627857][T11798] loop6: detected capacity change from 0 to 128 [ 357.365720][T11811] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2241'. [ 357.392232][T11811] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2241'. [ 357.483737][T11823] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 357.720812][T11834] loop6: detected capacity change from 0 to 8192 [ 357.733089][T11836] loop5: detected capacity change from 0 to 128 [ 358.726308][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2255'. [ 358.736782][T11857] Invalid argument reading file caps for ./file0 [ 358.782441][T11860] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2255'. [ 359.624290][T11878] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 359.705418][T11880] loop3: detected capacity change from 0 to 512 [ 359.714749][ T921] Bluetooth: hci0: Frame reassembly failed (-84) [ 359.771156][T11880] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 359.795328][T11880] System zones: 1-20 [ 359.836689][T11880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.182552][T11913] loop7: detected capacity change from 0 to 128 [ 361.469778][T11913] loop7: detected capacity change from 0 to 8192 [ 361.476765][T11913] vfat: Unknown parameter '±ši>Ÿ%?ΓožΓä äùí×LJ'gg/Qý±¾I\®E' [ 361.944002][ T3525] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 361.998995][T11926] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 362.057777][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.354331][T11956] loop6: detected capacity change from 0 to 128 [ 362.463437][T11961] loop7: detected capacity change from 0 to 128 [ 362.549196][T11961] loop7: detected capacity change from 0 to 8192 [ 362.556025][T11961] vfat: Unknown parameter '±ši>Ÿ%?ΓožΓä äùí×LJ'gg/Qý±¾I\®E' [ 363.268996][T11975] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 363.486159][T11991] loop3: detected capacity change from 0 to 128 [ 363.515499][T11994] loop5: detected capacity change from 0 to 512 [ 363.528618][T11994] EXT4-fs: inline encryption not supported [ 363.535084][T11994] EXT4-fs (loop5): #clusters per group too big: 201392385 [ 363.550589][T12004] Invalid argument reading file caps for ./file0 [ 363.776957][T12018] loop7: detected capacity change from 0 to 128 [ 363.862919][T12018] loop7: detected capacity change from 0 to 8192 [ 363.869686][T12018] vfat: Unknown parameter '±ši>Ÿ%?ΓožΓä äùí×LJ'gg/Qý±¾I\®E' [ 364.594562][T12030] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 365.127594][T12051] geneve2: entered promiscuous mode [ 365.145401][ T1596] Bluetooth: hci0: Frame reassembly failed (-84) [ 365.156954][T12055] set_capacity_and_notify: 1 callbacks suppressed [ 365.156973][T12055] loop4: detected capacity change from 0 to 512 [ 365.219888][T12055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 365.238321][ T1596] Bluetooth: hci1: Frame reassembly failed (-84) [ 365.248288][T12062] loop6: detected capacity change from 0 to 512 [ 365.265996][T12055] System zones: 1-20 [ 365.277938][T12055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.326548][T12062] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 365.340844][T12062] System zones: 1-20 [ 365.360894][T12062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.680220][T12077] loop3: detected capacity change from 0 to 128 [ 367.300982][T12124] geneve2: entered promiscuous mode [ 367.316337][ T7548] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 367.337693][ T7548] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 367.347086][ T5043] Bluetooth: hci0: command 0x1003 tx timeout [ 367.353716][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 367.368282][ T7548] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 367.377672][ T7548] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 367.391916][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.436116][ T5043] Bluetooth: hci1: command 0x1003 tx timeout [ 367.442165][ T3525] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 367.490071][ T5540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.633341][T12137] Invalid argument reading file caps for ./file0 [ 367.800143][T12144] loop4: detected capacity change from 0 to 128 [ 367.889688][T12144] loop4: detected capacity change from 0 to 8192 [ 367.896512][T12144] vfat: Unknown parameter '±ši>Ÿ%?ΓožΓä äùí×LJ'gg/Qý±¾I\®E' [ 370.311667][ T29] audit: type=1107 audit(1768533147.784:3355): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=',}ŽXǯ¥…‡ø2é0ä4ô¤jY…>DÕ‹£íýø‚›™|~U¹Á Ö:=êw¼÷' [ 370.432233][T12198] loop7: detected capacity change from 0 to 8192 [ 371.681415][ T29] audit: type=1107 audit(1768533149.075:3356): pid=12238 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=',}ŽXǯ¥…‡ø2é0ä4ô¤jY…>DÕ‹£íýø‚›™|~U¹Á Ö:=êw¼÷' [ 371.730915][T12243] loop4: detected capacity change from 0 to 128 [ 371.797050][T12246] Invalid argument reading file caps for ./file0 [ 371.890303][T12248] loop5: detected capacity change from 0 to 128 [ 372.347956][T12258] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2386'. [ 372.389044][T12258] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2386'. [ 372.542644][T12262] geneve2: entered promiscuous mode [ 372.657545][T12267] netlink: 'syz.5.2390': attribute type 10 has an invalid length. [ 372.721145][ T29] audit: type=1400 audit(1768533150.039:3357): avc: denied { write } for pid=12266 comm="syz.5.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 372.751646][T12267] team0 (unregistering): Port device team_slave_0 removed [ 372.805242][T12267] team0 (unregistering): Port device team_slave_1 removed [ 372.861995][ T29] audit: type=1107 audit(1768533150.160:3358): pid=12276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=',}ŽXǯ¥…‡ø2é0ä4ô¤jY…>DÕ‹£íýø‚›™|~U¹Á Ö:=êw¼÷' [ 373.007242][ T1596] Bluetooth: hci0: Frame reassembly failed (-84) [ 373.020350][T12284] loop6: detected capacity change from 0 to 512 [ 373.039494][T12284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 373.047717][T12284] System zones: 1-20 [ 373.068581][T12284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.108475][T12291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2397'. [ 373.122324][T12291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2397'. [ 373.160567][ T7881] Bluetooth: hci1: Frame reassembly failed (-84) [ 373.176812][T12293] loop4: detected capacity change from 0 to 512 [ 373.189824][T12293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 373.215368][T12293] System zones: 1-20 [ 373.224543][T12293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.507681][ T29] audit: type=1107 audit(1768533150.768:3359): pid=12311 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=',}ŽXǯ¥…‡ø2é0ä4ô¤jY…>DÕ‹£íýø‚›™|~U¹Á Ö:=êw¼÷' [ 373.693568][T12322] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2408'. [ 373.703503][T12322] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2408'. [ 373.766083][T12327] Invalid argument reading file caps for ./file0 [ 374.297034][ T29] audit: type=1107 audit(1768533151.516:3360): pid=12341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=',}ŽXǯ¥…‡ø2é0ä4ô¤jY…>DÕ‹£íýø‚›™|~U¹Á Ö:=êw¼÷' [ 374.664544][T12352] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2420'. [ 374.695698][T12352] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2420'. [ 374.910665][ T29] audit: type=1326 audit(1768533152.096:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.5.2422" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f668b3bf749 code=0x0 [ 375.210700][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 375.216848][ T3525] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 375.273328][ T5540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.379218][ T5043] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 375.412971][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.466053][T12383] loop4: detected capacity change from 0 to 512 [ 375.472781][T12383] EXT4-fs: inline encryption not supported [ 375.479236][T12383] EXT4-fs (loop4): #clusters per group too big: 201392385 [ 375.571382][T12387] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 375.629866][T12390] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2431'. [ 375.645018][T12390] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2431'. [ 375.682141][T12393] Invalid argument reading file caps for ./file0 [ 375.892648][T12397] loop5: detected capacity change from 0 to 128 [ 375.928272][ T29] audit: type=1400 audit(1768533153.041:3362): avc: denied { prog_load } for pid=12398 comm="syz.7.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 375.952995][ T29] audit: type=1400 audit(1768533153.041:3363): avc: denied { bpf } for pid=12398 comm="syz.7.2434" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 375.973882][ T29] audit: type=1400 audit(1768533153.041:3364): avc: denied { map_create } for pid=12398 comm="syz.7.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 375.993391][ T29] audit: type=1400 audit(1768533153.041:3365): avc: denied { perfmon } for pid=12398 comm="syz.7.2434" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 376.014485][ T29] audit: type=1400 audit(1768533153.041:3366): avc: denied { map_read map_write } for pid=12398 comm="syz.7.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 376.034619][ T29] audit: type=1400 audit(1768533153.041:3367): avc: denied { create } for pid=12398 comm="syz.7.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.055392][ T29] audit: type=1400 audit(1768533153.041:3368): avc: denied { write } for pid=12398 comm="syz.7.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.075981][ T29] audit: type=1400 audit(1768533153.041:3369): avc: denied { read } for pid=12398 comm="syz.7.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.096533][ T29] audit: type=1400 audit(1768533153.041:3370): avc: denied { create } for pid=12398 comm="syz.7.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 376.139675][T12405] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 376.371213][T12415] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 376.589701][T12429] syz.5.2447 uses obsolete (PF_INET,SOCK_PACKET) [ 376.697457][T12437] loop7: detected capacity change from 0 to 128 [ 376.921585][T12450] tipc: Started in network mode [ 376.926601][T12450] tipc: Node identity 7f000001, cluster identity 4711 [ 376.942046][T12450] tipc: Enabled bearer , priority 10 [ 377.230176][T12471] loop7: detected capacity change from 0 to 128 [ 377.425117][T12471] loop7: detected capacity change from 0 to 8192 [ 377.432167][T12471] vfat: Unknown parameter '±ši>Ÿ%?ΓožΓä äùí×LJ'gg/Qý±¾I\®E' [ 377.564002][T12470] Invalid argument reading file caps for ./file0 [ 377.968917][T12488] __nla_validate_parse: 4 callbacks suppressed [ 377.968937][T12488] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2466'. [ 378.045147][T12492] loop7: detected capacity change from 0 to 128 [ 378.148116][ T3834] tipc: Node number set to 2130706433 [ 378.156453][T12494] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2466'. [ 379.022375][T12516] FAULT_INJECTION: forcing a failure. [ 379.022375][T12516] name failslab, interval 1, probability 0, space 0, times 0 [ 379.035280][T12516] CPU: 1 UID: 0 PID: 12516 Comm: syz.7.2477 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 379.035389][T12516] Tainted: [W]=WARN [ 379.035398][T12516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 379.035415][T12516] Call Trace: [ 379.035424][T12516] [ 379.035435][T12516] __dump_stack+0x1d/0x30 [ 379.035464][T12516] dump_stack_lvl+0x95/0xd0 [ 379.035489][T12516] dump_stack+0x15/0x1b [ 379.035508][T12516] should_fail_ex+0x265/0x280 [ 379.035547][T12516] should_failslab+0x8c/0xb0 [ 379.035653][T12516] __kmalloc_cache_noprof+0x65/0x4c0 [ 379.035677][T12516] ? tcp_sendmsg_fastopen+0x172/0x520 [ 379.035711][T12516] tcp_sendmsg_fastopen+0x172/0x520 [ 379.035789][T12516] tcp_sendmsg_locked+0x26e1/0x2c00 [ 379.035826][T12516] ? lockref_put_return+0xf7/0x130 [ 379.035864][T12516] ? __rcu_read_unlock+0x4f/0x70 [ 379.035885][T12516] ? __rcu_read_unlock+0x4f/0x70 [ 379.035948][T12516] ? avc_has_perm_noaudit+0xab/0x130 [ 379.035978][T12516] ? avc_has_perm+0xf7/0x180 [ 379.036021][T12516] ? _raw_spin_lock_bh+0x56/0xb0 [ 379.036086][T12516] ? _raw_spin_unlock_bh+0x36/0x40 [ 379.036113][T12516] ? __pfx_tcp_sendmsg+0x10/0x10 [ 379.036196][T12516] tcp_sendmsg+0x2f/0x50 [ 379.036228][T12516] inet6_sendmsg+0x76/0xd0 [ 379.036257][T12516] __sock_sendmsg+0x8b/0x180 [ 379.036282][T12516] __sys_sendto+0x268/0x330 [ 379.036340][T12516] __x64_sys_sendto+0x76/0x90 [ 379.036432][T12516] x64_sys_call+0x29a7/0x3000 [ 379.036542][T12516] do_syscall_64+0xca/0x2b0 [ 379.036570][T12516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.036634][T12516] RIP: 0033:0x7fdfc39cf749 [ 379.036649][T12516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.036672][T12516] RSP: 002b:00007fdfc242f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 379.036697][T12516] RAX: ffffffffffffffda RBX: 00007fdfc3c25fa0 RCX: 00007fdfc39cf749 [ 379.036714][T12516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 379.036789][T12516] RBP: 00007fdfc242f090 R08: 00002000000001c0 R09: 000000000000001c [ 379.036801][T12516] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 379.036813][T12516] R13: 00007fdfc3c26038 R14: 00007fdfc3c25fa0 R15: 00007ffe7bb947d8 [ 379.036833][T12516] [ 379.384843][T12521] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2478'. [ 379.385007][T12521] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2478'. [ 379.517797][T12520] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2479'. [ 379.599267][T12533] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 379.672795][T12544] Invalid argument reading file caps for ./file0 [ 379.789332][T12549] loop6: detected capacity change from 0 to 512 [ 379.818012][T12549] EXT4-fs (loop6): 1 truncate cleaned up [ 379.828312][T12549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.321956][T12553] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 380.447390][T12549] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 380.459936][T12549] EXT4-fs (loop6): This should not happen!! Data will be lost [ 380.459936][T12549] [ 380.469751][T12549] EXT4-fs (loop6): Total free blocks count 0 [ 380.475763][T12549] EXT4-fs (loop6): Free/Dirty block details [ 380.481815][T12549] EXT4-fs (loop6): free_blocks=0 [ 380.486816][T12549] EXT4-fs (loop6): dirty_blocks=10508 [ 380.492245][T12549] EXT4-fs (loop6): Block reservation details [ 380.498251][T12549] EXT4-fs (loop6): i_reserved_data_blocks=10508 [ 380.883775][ T271] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 381.318348][T12575] loop6: detected capacity change from 0 to 512 [ 381.325117][T12575] ext4: Unknown parameter 'fowner' [ 381.336532][T12575] loop6: detected capacity change from 0 to 128 [ 382.046897][T12580] loop4: detected capacity change from 0 to 128 [ 382.247816][T12580] loop4: detected capacity change from 0 to 8192 [ 382.254790][T12580] vfat: Unknown parameter '±ši>Ÿ%?ΓožΓä äùí×LJ'gg/Qý±¾I\®E' [ 382.438928][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 382.438948][ T29] audit: type=1400 audit(1768533159.121:3416): avc: denied { create } for pid=12582 comm="syz.5.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 382.640969][ T29] audit: type=1400 audit(1768533159.318:3417): avc: denied { read write } for pid=12591 comm="syz.6.2502" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 382.702926][ T29] audit: type=1400 audit(1768533159.318:3418): avc: denied { open } for pid=12591 comm="syz.6.2502" path="/dev/vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 382.882599][ T29] audit: type=1326 audit(1768533159.542:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12607 comm="syz.4.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df11f749 code=0x7ffc0000 [ 382.906573][ T29] audit: type=1326 audit(1768533159.542:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12607 comm="syz.4.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df11f749 code=0x7ffc0000 [ 382.930367][ T29] audit: type=1326 audit(1768533159.542:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12607 comm="syz.4.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc6df11f749 code=0x7ffc0000 [ 382.953888][ T29] audit: type=1326 audit(1768533159.542:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12607 comm="syz.4.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df11f749 code=0x7ffc0000 [ 382.977803][ T29] audit: type=1326 audit(1768533159.542:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12607 comm="syz.4.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fc6df11f749 code=0x7ffc0000 [ 383.001439][ T29] audit: type=1326 audit(1768533159.542:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12607 comm="syz.4.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df11f749 code=0x7ffc0000 [ 383.002856][T12608] loop4: detected capacity change from 0 to 256 [ 383.025199][ T29] audit: type=1326 audit(1768533159.542:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12607 comm="syz.4.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df11f749 code=0x7ffc0000 [ 383.206778][T12608] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2508'. [ 384.052509][T12626] netlink: 'syz.6.2512': attribute type 10 has an invalid length. [ 384.174790][T12626] team0 (unregistering): Port device team_slave_0 removed [ 384.243272][T12626] team0 (unregistering): Port device team_slave_1 removed [ 384.637060][T12637] Invalid argument reading file caps for ./file0 [ 384.789595][T12642] netlink: 'syz.7.2518': attribute type 10 has an invalid length. [ 384.918825][T12642] team0 (unregistering): Port device team_slave_0 removed [ 384.978892][T12642] team0 (unregistering): Port device team_slave_1 removed [ 385.556579][T12658] loop7: detected capacity change from 0 to 8192 [ 385.824935][T12691] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 385.844342][T12691] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 385.998801][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.037414][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.546125][T12699] Set syz1 is full, maxelem 65536 reached [ 386.735852][T12718] loop4: detected capacity change from 0 to 2048 [ 386.775589][T12722] loop7: detected capacity change from 0 to 1024 [ 386.796186][T12722] EXT4-fs: Ignoring removed nobh option [ 386.818319][T12722] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 386.853749][T12728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.872677][T12722] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.2554: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 386.895451][T12724] loop5: detected capacity change from 0 to 8192 [ 386.969742][T12728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.996540][T12722] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2554: couldn't read orphan inode 11 (err -117) [ 387.025034][T12722] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.058648][T12722] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2554: Invalid block bitmap block 0 in block_group 0 [ 387.072884][T12722] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.2554: Failed to acquire dquot type 0 [ 387.190572][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.830418][T12762] loop6: detected capacity change from 0 to 512 [ 388.115012][T12762] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2570: inode has both inline data and extents flags [ 388.179919][T12762] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2570: couldn't read orphan inode 15 (err -117) [ 388.205534][T12771] capability: warning: `syz.7.2574' uses deprecated v2 capabilities in a way that may be insecure [ 388.307846][T12762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.353070][T12776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.362720][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 388.362737][ T29] audit: type=1400 audit(1768533164.640:3518): avc: denied { write } for pid=12760 comm="syz.6.2570" path="/428/file1/file1" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 388.391891][ T29] audit: type=1400 audit(1768533164.640:3519): avc: denied { mounton } for pid=12760 comm="syz.6.2570" path="/428/file1/bus" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 388.411596][T12776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.414960][ T29] audit: type=1400 audit(1768533164.649:3520): avc: denied { unmount } for pid=5540 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 388.442696][ T29] audit: type=1400 audit(1768533164.668:3521): avc: denied { remove_name } for pid=5540 comm="syz-executor" name="bus" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.465428][ T29] audit: type=1400 audit(1768533164.668:3522): avc: denied { unlink } for pid=5540 comm="syz-executor" name="bus" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 388.506842][ T5540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.551121][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2578'. [ 388.614267][ T29] audit: type=1400 audit(1768533164.865:3523): avc: denied { block_suspend } for pid=12784 comm="syz.3.2579" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 389.142883][T12795] loop4: detected capacity change from 0 to 512 [ 389.153991][T12795] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 389.181352][T12795] EXT4-fs (loop4): invalid journal inode [ 389.187054][T12795] EXT4-fs (loop4): can't get journal size [ 389.200518][ T29] audit: type=1400 audit(1768533165.454:3524): avc: denied { create } for pid=12797 comm="syz.5.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 389.222114][T12798] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.234990][T12795] EXT4-fs (loop4): 1 truncate cleaned up [ 389.257332][ T29] audit: type=1400 audit(1768533165.482:3525): avc: denied { write } for pid=12797 comm="syz.5.2584" path="socket:[43585]" dev="sockfs" ino=43585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 389.267574][T12795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.316213][ T29] audit: type=1400 audit(1768533165.566:3526): avc: denied { read } for pid=12794 comm="syz.4.2583" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 389.342733][ T29] audit: type=1400 audit(1768533165.566:3527): avc: denied { open } for pid=12794 comm="syz.4.2583" path="/541/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 389.382801][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.365837][T12831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.387345][T12831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.081570][T12852] loop6: detected capacity change from 0 to 512 [ 391.088624][T12852] EXT4-fs: Ignoring removed orlov option [ 391.096512][T12852] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 391.111475][T12852] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.2607: corrupted in-inode xattr: e_value size too large [ 391.126668][T12852] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2607: couldn't read orphan inode 15 (err -117) [ 391.140608][T12852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.162024][T12852] EXT4-fs error (device loop6): ext4_check_dx_root:2201: inode #2: comm syz.6.2607: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 391.208924][ T5540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.874916][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2611'. [ 392.325096][T12886] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=12886 comm=syz.4.2617 [ 393.822579][T12918] tipc: Started in network mode [ 393.827506][T12918] tipc: Node identity 868311693822, cluster identity 4711 [ 393.834751][T12918] tipc: Enabled bearer , priority 0 [ 393.878407][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 393.878423][ T29] audit: type=1400 audit(1768533169.832:3549): avc: denied { read write } for pid=12919 comm="syz.5.2635" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 393.910612][ T29] audit: type=1400 audit(1768533169.832:3550): avc: denied { open } for pid=12919 comm="syz.5.2635" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 393.934761][ T29] audit: type=1400 audit(1768533169.832:3551): avc: denied { create } for pid=12920 comm="syz.6.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 393.952071][T12918] syzkaller0: entered promiscuous mode [ 393.954375][ T29] audit: type=1400 audit(1768533169.850:3552): avc: denied { write } for pid=12920 comm="syz.6.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 393.959914][T12918] syzkaller0: entered allmulticast mode [ 393.989837][T12918] tipc: Resetting bearer [ 394.008945][T12924] loop7: detected capacity change from 0 to 2048 [ 394.024960][T12916] tipc: Resetting bearer [ 394.031295][ T29] audit: type=1400 audit(1768533169.972:3553): avc: denied { bind } for pid=12927 comm="syz.6.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 394.035838][T12924] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 394.050930][ T29] audit: type=1400 audit(1768533169.972:3554): avc: denied { write } for pid=12927 comm="syz.6.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 394.114749][T12916] tipc: Disabling bearer [ 394.122095][ T29] audit: type=1400 audit(1768533170.065:3555): avc: denied { write } for pid=12923 comm="syz.7.2637" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 394.148466][T12924] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 394.219838][T12934] x_tables: ip_tables: osf match: only valid for protocol 6 [ 394.312839][T12924] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 394.325474][T12924] EXT4-fs (loop7): This should not happen!! Data will be lost [ 394.325474][T12924] [ 394.335312][T12924] EXT4-fs (loop7): Total free blocks count 0 [ 394.341316][T12924] EXT4-fs (loop7): Free/Dirty block details [ 394.347362][T12924] EXT4-fs (loop7): free_blocks=2415919104 [ 394.353115][T12924] EXT4-fs (loop7): dirty_blocks=32 [ 394.358421][T12924] EXT4-fs (loop7): Block reservation details [ 394.364465][T12924] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 394.637785][ T29] audit: type=1400 audit(1768533170.543:3556): avc: denied { create } for pid=12939 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 394.685661][ T29] audit: type=1400 audit(1768533170.580:3557): avc: denied { bind } for pid=12939 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 394.705950][ T29] audit: type=1400 audit(1768533170.608:3558): avc: denied { setopt } for pid=12939 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 394.726850][T12944] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000900. [ 394.904471][T12971] loop7: detected capacity change from 0 to 1024 [ 394.911259][T12971] EXT4-fs: Ignoring removed bh option [ 394.916729][T12971] EXT4-fs: Ignoring removed nobh option [ 394.922430][T12971] EXT4-fs: Ignoring removed bh option [ 394.934084][T12971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.128861][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.894834][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.969854][T12988] loop4: detected capacity change from 0 to 256 [ 395.983267][T12988] FAT-fs (loop4): Directory bread(block 64) failed [ 395.990574][T12988] FAT-fs (loop4): Directory bread(block 65) failed [ 395.999961][T12988] FAT-fs (loop4): Directory bread(block 66) failed [ 396.017027][T12988] FAT-fs (loop4): Directory bread(block 67) failed [ 396.027903][T12988] FAT-fs (loop4): Directory bread(block 68) failed [ 396.036961][T12988] FAT-fs (loop4): Directory bread(block 69) failed [ 396.044080][T12988] FAT-fs (loop4): Directory bread(block 70) failed [ 396.052302][T12988] FAT-fs (loop4): Directory bread(block 71) failed [ 396.065829][T12988] FAT-fs (loop4): Directory bread(block 72) failed [ 396.073932][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.076297][T12988] FAT-fs (loop4): Directory bread(block 73) failed [ 396.115189][T12988] syz.4.2660: attempt to access beyond end of device [ 396.115189][T12988] loop4: rw=8390659, sector=1224, nr_sectors = 32 limit=256 [ 396.132700][T12988] syz.4.2660: attempt to access beyond end of device [ 396.132700][T12988] loop4: rw=8390659, sector=1288, nr_sectors = 32 limit=256 [ 396.150516][T12988] syz.4.2660: attempt to access beyond end of device [ 396.150516][T12988] loop4: rw=8390659, sector=1352, nr_sectors = 32 limit=256 [ 396.165490][T12988] syz.4.2660: attempt to access beyond end of device [ 396.165490][T12988] loop4: rw=8390659, sector=1416, nr_sectors = 32 limit=256 [ 396.180419][T12988] syz.4.2660: attempt to access beyond end of device [ 396.180419][T12988] loop4: rw=8390659, sector=1480, nr_sectors = 32 limit=256 [ 396.195352][T12988] syz.4.2660: attempt to access beyond end of device [ 396.195352][T12988] loop4: rw=8390659, sector=1544, nr_sectors = 32 limit=256 [ 396.210585][T12988] syz.4.2660: attempt to access beyond end of device [ 396.210585][T12988] loop4: rw=8390659, sector=1608, nr_sectors = 32 limit=256 [ 396.225780][T12988] syz.4.2660: attempt to access beyond end of device [ 396.225780][T12988] loop4: rw=8390659, sector=1672, nr_sectors = 32 limit=256 [ 396.269938][T12999] syz.4.2660: attempt to access beyond end of device [ 396.269938][T12999] loop4: rw=2049, sector=1256, nr_sectors = 32 limit=256 [ 396.273777][T12988] syz.4.2660: attempt to access beyond end of device [ 396.273777][T12988] loop4: rw=8390659, sector=1704, nr_sectors = 32 limit=256 [ 396.391273][T13007] loop7: detected capacity change from 0 to 512 [ 396.405893][T13007] EXT4-fs: Ignoring removed orlov option [ 396.420293][T13007] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 396.439177][T13007] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.2668: corrupted in-inode xattr: e_value size too large [ 396.462067][T13007] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2668: couldn't read orphan inode 15 (err -117) [ 396.485855][T13007] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.559275][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.825234][T13040] loop7: detected capacity change from 0 to 512 [ 396.857033][T13040] EXT4-fs: Ignoring removed orlov option [ 396.883728][T13040] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 396.940948][T13040] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.2684: corrupted in-inode xattr: e_value size too large [ 396.957141][T13040] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2684: couldn't read orphan inode 15 (err -117) [ 396.970001][T13040] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.125809][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.173196][T13051] tipc: Enabled bearer , priority 0 [ 397.206250][T13050] tipc: Disabling bearer [ 397.637101][T13074] loop4: detected capacity change from 0 to 512 [ 397.643764][T13074] EXT4-fs: Ignoring removed orlov option [ 397.658595][T13074] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 397.670001][T13074] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.2699: corrupted in-inode xattr: e_value size too large [ 397.684559][T13074] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2699: couldn't read orphan inode 15 (err -117) [ 397.697280][T13074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.824658][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.069221][T13095] loop3: detected capacity change from 0 to 1024 [ 398.076430][T13095] EXT4-fs: Ignoring removed bh option [ 398.082241][T13095] EXT4-fs: Ignoring removed nobh option [ 398.087963][T13095] EXT4-fs: Ignoring removed bh option [ 398.110568][T13095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.128749][T13095] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 398.169874][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.948197][T13120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.962317][T13120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.033628][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 400.033690][ T29] audit: type=1400 audit(1768533175.594:3570): avc: denied { append } for pid=13149 comm="syz.7.2732" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 400.063182][ T29] audit: type=1400 audit(1768533175.594:3571): avc: denied { open } for pid=13149 comm="syz.7.2732" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 400.608865][T13154] x_tables: ip_tables: osf match: only valid for protocol 6 [ 401.048744][T13162] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2735'. [ 401.080003][T13162] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2735'. [ 402.059534][ T29] audit: type=1400 audit(1768533177.483:3572): avc: denied { read } for pid=13217 comm="syz.3.2762" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 402.060495][T13218] program syz.3.2762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.086149][ T29] audit: type=1400 audit(1768533177.483:3573): avc: denied { open } for pid=13217 comm="syz.3.2762" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 402.181987][ T29] audit: type=1400 audit(1768533177.605:3574): avc: denied { read append } for pid=13227 comm="syz.7.2767" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 403.101693][ T29] audit: type=1400 audit(1768533177.605:3575): avc: denied { open } for pid=13227 comm="syz.7.2767" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 404.245037][T13282] x_tables: ip_tables: osf match: only valid for protocol 6 [ 404.455039][T13293] syzkaller0: entered promiscuous mode [ 404.460667][T13293] syzkaller0: entered allmulticast mode [ 404.470553][T13293] TC_ACT_REPEAT abuse ? [ 404.543554][ T29] audit: type=1400 audit(1768533179.794:3576): avc: denied { mount } for pid=13285 comm="syz.4.2789" name="/" dev="rpc_pipefs" ino=45199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 404.783179][T13308] 9p: Bad value for 'rfdno' [ 404.991035][T13312] loop7: detected capacity change from 0 to 256 [ 405.041392][T13312] FAT-fs (loop7): Directory bread(block 64) failed [ 405.059013][T13312] FAT-fs (loop7): Directory bread(block 65) failed [ 405.075747][T13312] FAT-fs (loop7): Directory bread(block 66) failed [ 405.109437][T13312] FAT-fs (loop7): Directory bread(block 67) failed [ 405.116346][T13312] FAT-fs (loop7): Directory bread(block 68) failed [ 405.123206][T13312] FAT-fs (loop7): Directory bread(block 69) failed [ 405.129841][T13312] FAT-fs (loop7): Directory bread(block 70) failed [ 405.139391][T13312] FAT-fs (loop7): Directory bread(block 71) failed [ 405.146654][T13312] FAT-fs (loop7): Directory bread(block 72) failed [ 405.153393][T13312] FAT-fs (loop7): Directory bread(block 73) failed [ 405.188981][T13312] bio_check_eod: 13 callbacks suppressed [ 405.189000][T13312] syz.7.2800: attempt to access beyond end of device [ 405.189000][T13312] loop7: rw=8390659, sector=1224, nr_sectors = 32 limit=256 [ 405.214711][T13312] syz.7.2800: attempt to access beyond end of device [ 405.214711][T13312] loop7: rw=8390659, sector=1288, nr_sectors = 32 limit=256 [ 405.237941][T13312] syz.7.2800: attempt to access beyond end of device [ 405.237941][T13312] loop7: rw=8390659, sector=1352, nr_sectors = 32 limit=256 [ 405.259928][T13312] syz.7.2800: attempt to access beyond end of device [ 405.259928][T13312] loop7: rw=8390659, sector=1384, nr_sectors = 32 limit=256 [ 405.274767][T13326] syz.7.2800: attempt to access beyond end of device [ 405.274767][T13326] loop7: rw=8390659, sector=1256, nr_sectors = 32 limit=256 [ 405.289047][T13326] syz.7.2800: attempt to access beyond end of device [ 405.289047][T13326] loop7: rw=8390659, sector=1320, nr_sectors = 32 limit=256 [ 405.337398][T13333] loop7: detected capacity change from 0 to 512 [ 405.353379][T13333] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2809: iget: bad i_size value: 38620345925642 [ 405.369375][T13339] loop6: detected capacity change from 0 to 512 [ 405.376122][T13339] EXT4-fs: Ignoring removed orlov option [ 405.382254][T13333] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2809: couldn't read orphan inode 15 (err -117) [ 405.394459][T13339] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 405.395514][T13333] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.419425][T13333] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.2809: bad entry in directory: directory entry overrun - offset=0, inode=4278190093, rec_len=196860, size=124 fake=0 [ 405.441605][T13339] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.2811: corrupted in-inode xattr: e_value size too large [ 405.455951][T13339] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2811: couldn't read orphan inode 15 (err -117) [ 405.468482][T13339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.471651][T13341] loop3: detected capacity change from 0 to 2048 [ 405.496141][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.515359][ T5540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.529083][T13341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 405.547007][T13341] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000900. [ 405.556727][T13341] EXT4-fs (loop3): shut down requested (0) [ 405.583862][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 405.658618][ T29] audit: type=1400 audit(1768533180.851:3577): avc: denied { create } for pid=13363 comm="syz.6.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 405.766074][T13375] loop3: detected capacity change from 0 to 736 [ 405.791132][ T29] audit: type=1400 audit(1768533180.963:3578): avc: denied { mount } for pid=13374 comm="syz.3.2827" name="/" dev="loop3" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 405.825895][T13379] loop6: detected capacity change from 0 to 2048 [ 406.002873][T13379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 406.052259][T13379] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000900. [ 406.110371][T13379] EXT4-fs (loop6): shut down requested (0) [ 406.212265][T13393] program syz.3.2834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.237095][ T5540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 406.321805][T13397] loop4: detected capacity change from 0 to 512 [ 406.322213][ T29] audit: type=1400 audit(1768533180.972:3579): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 406.353276][T13399] loop3: detected capacity change from 0 to 512 [ 406.361701][T13397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.361721][T13399] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 406.369722][T13397] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 406.387535][T13399] EXT4-fs (loop3): 1 truncate cleaned up [ 406.393749][T13399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.393812][T13397] EXT4-fs (loop4): 1 truncate cleaned up [ 406.395926][T13397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.414441][T13399] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 4: comm syz.3.2838: lblock 0 mapped to illegal pblock 4 (length 1) [ 406.443008][T13403] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 406.473783][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.489306][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.655593][T13420] loop6: detected capacity change from 0 to 2048 [ 406.667472][ T29] audit: type=1400 audit(1768533181.795:3580): avc: denied { append } for pid=13422 comm="syz.7.2848" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 406.693060][T13425] loop4: detected capacity change from 0 to 7 [ 406.699294][T13425] Buffer I/O error on dev loop4, logical block 0, async page read [ 406.707284][T13425] Buffer I/O error on dev loop4, logical block 0, async page read [ 406.715357][T13425] loop4: unable to read partition table [ 406.721278][T13425] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 406.741644][T13428] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 406.751936][T13420] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 406.764097][ T29] audit: type=1400 audit(1768533181.795:3581): avc: denied { ioctl } for pid=13422 comm="syz.7.2848" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 406.764142][ T29] audit: type=1400 audit(1768533181.870:3582): avc: denied { write } for pid=13422 comm="syz.7.2848" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 406.771837][T13431] program syz.4.2851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.826276][T13420] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000900. [ 406.838378][T13420] EXT4-fs (loop6): shut down requested (0) [ 406.879816][ T5540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 406.912998][ T36] IPVS: starting estimator thread 0... [ 407.002654][ T29] audit: type=1400 audit(1768533182.113:3583): avc: denied { setopt } for pid=13432 comm="syz.3.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 407.023969][T13437] IPVS: using max 2304 ests per chain, 115200 per kthread [ 407.174254][ T29] audit: type=1400 audit(1768533182.272:3584): avc: denied { mounton } for pid=13446 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 407.210258][T13449] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2859'. [ 407.274848][T13458] Buffer I/O error on dev loop4, logical block 0, async page read [ 407.282951][T13458] Buffer I/O error on dev loop4, logical block 0, async page read [ 407.290977][T13458] loop4: unable to read partition table [ 407.296778][T13458] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 407.333298][T13459] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 407.389962][T13463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 407.411432][T13476] netlink: 'syz.6.2867': attribute type 39 has an invalid length. [ 407.439031][T13478] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2868: iget: bad i_size value: 38620345925642 [ 407.454169][T13478] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2868: couldn't read orphan inode 15 (err -117) [ 407.466398][T13463] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000900. [ 407.475830][T13478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.476795][T13463] EXT4-fs (loop3): shut down requested (0) [ 407.503884][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.529756][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 407.543162][T13482] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2869'. [ 407.560368][ T7548] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.583629][T13446] chnl_net:caif_netlink_parms(): no params data found [ 407.611759][ T29] audit: type=1400 audit(1768533182.684:3585): avc: denied { read } for pid=13486 comm="syz.3.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 407.649261][ T7548] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.683671][T13446] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.690814][T13446] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.722385][T13446] bridge_slave_0: entered allmulticast mode [ 407.729259][T13446] bridge_slave_0: entered promiscuous mode [ 407.738517][ T7548] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.759916][T13446] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.767155][T13446] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.774722][ T29] audit: type=1400 audit(1768533182.834:3586): avc: denied { write } for pid=13505 comm="syz.7.2879" lport=59427 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 407.799405][T13446] bridge_slave_1: entered allmulticast mode [ 407.806140][T13446] bridge_slave_1: entered promiscuous mode [ 407.813683][T13504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.821317][T13510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.836024][T13504] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.854646][T13510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.867105][ T7548] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.881512][T13512] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2881'. [ 407.892559][T13446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.912983][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.913352][T13446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.942152][T13514] program syz.7.2883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.975480][T13446] team0: Port device team_slave_0 added [ 407.983011][T13446] team0: Port device team_slave_1 added [ 408.024471][T13446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.031517][T13446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.057563][T13446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.077030][ T7548] bridge_slave_1: left allmulticast mode [ 408.082927][ T7548] bridge_slave_1: left promiscuous mode [ 408.088702][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.098332][ T7548] bridge_slave_0: left allmulticast mode [ 408.104054][ T7548] bridge_slave_0: left promiscuous mode [ 408.109771][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.192762][T13536] program syz.7.2893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.223987][ T7548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.239066][ T7548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.249451][ T7548] bond0 (unregistering): Released all slaves [ 408.259337][T13543] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2894'. [ 408.259994][ T7548] bond1 (unregistering): Released all slaves [ 408.278224][ T7548] bond2 (unregistering): Released all slaves [ 408.287476][ T7548] bond3 (unregistering): Released all slaves [ 408.296888][ T7548] bond4 (unregistering): Released all slaves [ 408.306782][ T7548] bond5 (unregistering): Released all slaves [ 408.315785][ T7548] bond6 (unregistering): Released all slaves [ 408.325981][ T7548] bond7 (unregistering): Released all slaves [ 408.336181][ T7548] bond8 (unregistering): Released all slaves [ 408.336527][T13549] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2898'. [ 408.352118][T13446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.352135][T13549] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2898'. [ 408.359105][T13446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.394170][T13446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.444596][ T7548] tipc: Left network mode [ 408.480394][T13561] program syz.7.2904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.492819][T13446] hsr_slave_0: entered promiscuous mode [ 408.501429][T13446] hsr_slave_1: entered promiscuous mode [ 408.507484][T13446] debugfs: 'hsr0' already exists in 'hsr' [ 408.513301][T13446] Cannot create hsr debugfs directory [ 408.527750][ T7548] hsr_slave_0: left promiscuous mode [ 408.533519][ T7548] hsr_slave_1: left promiscuous mode [ 408.547941][ T7548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.555508][ T7548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.567881][ T7548] veth1_macvtap: left promiscuous mode [ 408.582821][ T7548] veth0_macvtap: left promiscuous mode [ 408.588595][ T7548] veth1_vlan: left promiscuous mode [ 408.593964][ T7548] veth0_vlan: left promiscuous mode [ 408.687253][T13580] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2913'. [ 408.711114][ T7548] team0 (unregistering): Port device team_slave_1 removed [ 408.721722][ T7548] team0 (unregistering): Port device team_slave_0 removed [ 408.973768][T13615] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2927'. [ 409.184239][T13640] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2939'. [ 409.211952][T13446] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.225540][T13446] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.242120][T13446] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.271135][T13446] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.328191][T13446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.349876][T13446] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.370943][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.378065][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.402774][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.409922][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.442702][T13657] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2944: iget: bad i_size value: 38620345925642 [ 409.483956][T13657] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2944: couldn't read orphan inode 15 (err -117) [ 409.500657][T13657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.549167][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.588638][T13446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.686872][T13675] syzkaller0: entered promiscuous mode [ 409.692448][T13675] syzkaller0: entered allmulticast mode [ 409.785675][T13687] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2950'. [ 409.852251][T13698] ISOFS: unable to read i-node block [ 409.857869][T13698] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 409.862638][T13446] veth0_vlan: entered promiscuous mode [ 409.873321][T13698] isofs_fill_super: get root inode failed [ 409.885696][T13446] veth1_vlan: entered promiscuous mode [ 409.918461][T13446] veth0_macvtap: entered promiscuous mode [ 409.937110][T13446] veth1_macvtap: entered promiscuous mode [ 409.959283][T13446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.969462][T13446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.000473][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.018982][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.038794][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.047590][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.340016][T13729] set_capacity_and_notify: 8 callbacks suppressed [ 410.340032][T13729] loop6: detected capacity change from 0 to 512 [ 410.355718][T13729] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2966: iget: bad i_size value: 38620345925642 [ 410.387126][T13729] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2966: couldn't read orphan inode 15 (err -117) [ 410.420679][T13729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.571736][ T5540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.058095][T13745] program syz.6.2971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.447802][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.458493][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 411.518310][T13775] loop7: detected capacity change from 0 to 512 [ 411.558677][T13748] chnl_net:caif_netlink_parms(): no params data found [ 411.588116][T13775] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2979: iget: bad i_size value: 38620345925642 [ 411.610887][T13775] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2979: couldn't read orphan inode 15 (err -117) [ 411.626499][T13775] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.640145][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.650521][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 411.758644][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.788408][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.798803][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 411.891055][T13801] loop4: detected capacity change from 0 to 512 [ 411.900698][T13801] EXT4-fs: Ignoring removed orlov option [ 411.909808][T13748] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.916923][T13748] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.926791][T13801] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 411.948275][T13748] bridge_slave_0: entered allmulticast mode [ 411.959598][T13801] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.2989: corrupted in-inode xattr: e_value size too large [ 411.988077][T13748] bridge_slave_0: entered promiscuous mode [ 412.000958][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.011575][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 412.037820][T13801] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2989: couldn't read orphan inode 15 (err -117) [ 412.059410][T13801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.064377][T13808] loop6: detected capacity change from 0 to 512 [ 412.090138][T13748] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.097364][T13748] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.109371][T13748] bridge_slave_1: entered allmulticast mode [ 412.117201][T13808] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2992: iget: bad i_size value: 38620345925642 [ 412.137046][T13748] bridge_slave_1: entered promiscuous mode [ 412.159491][T13808] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2992: couldn't read orphan inode 15 (err -117) [ 412.197472][T13808] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.244263][T13748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.259013][T13446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.268254][ T37] bridge_slave_1: left allmulticast mode [ 412.273936][ T37] bridge_slave_1: left promiscuous mode [ 412.279707][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.323408][ T5540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.337502][ T37] bridge_slave_0: left allmulticast mode [ 412.343218][ T37] bridge_slave_0: left promiscuous mode [ 412.348979][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.424900][T13831] loop4: detected capacity change from 0 to 512 [ 412.432002][T13831] EXT4-fs: Ignoring removed nomblk_io_submit option [ 412.446386][T13831] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 412.458737][T13831] EXT4-fs (loop4): 1 truncate cleaned up [ 412.465804][T13831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.503978][T13446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.525000][T13837] loop4: detected capacity change from 0 to 512 [ 412.544780][T13837] EXT4-fs: Ignoring removed orlov option [ 412.555606][T13837] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 412.573844][T13837] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3004: corrupted in-inode xattr: e_value size too large [ 412.606493][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.629351][T13837] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3004: couldn't read orphan inode 15 (err -117) [ 412.646876][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.660521][ T37] bond0 (unregistering): Released all slaves [ 412.694650][T13748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.716965][T13837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.759653][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 412.759671][ T29] audit: type=1326 audit(1768533187.492:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13813 comm="syz.7.2994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfc39cf749 code=0x0 [ 412.802649][ T37] hsr_slave_0: left promiscuous mode [ 412.810198][ T37] hsr_slave_1: left promiscuous mode [ 412.836802][T13446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.846053][ T37] veth1_macvtap: left promiscuous mode [ 412.861724][ T37] veth0_macvtap: left promiscuous mode [ 412.867266][ T37] veth1_vlan: left promiscuous mode [ 412.891945][ T29] audit: type=1326 audit(1768533187.614:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.4.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4182eaf749 code=0x7ffc0000 [ 412.915770][ T29] audit: type=1326 audit(1768533187.614:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.4.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4182eaf749 code=0x7ffc0000 [ 412.939546][ T29] audit: type=1326 audit(1768533187.614:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.4.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f4182eaf749 code=0x7ffc0000 [ 412.963151][ T29] audit: type=1326 audit(1768533187.614:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.4.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4182eaf749 code=0x7ffc0000 [ 412.986691][ T29] audit: type=1326 audit(1768533187.614:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.4.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4182eaf749 code=0x7ffc0000 [ 413.010450][ T37] veth0_vlan: left promiscuous mode [ 413.135112][T13748] team0: Port device team_slave_0 added [ 413.144152][T13748] team0: Port device team_slave_1 added [ 413.157062][T13862] syzkaller0: entered promiscuous mode [ 413.162722][T13862] syzkaller0: entered allmulticast mode [ 413.187837][T13748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.194896][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.221044][T13748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.241358][T13748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.248501][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.274709][T13748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.314904][T13748] hsr_slave_0: entered promiscuous mode [ 413.321269][T13748] hsr_slave_1: entered promiscuous mode [ 413.327820][T13748] debugfs: 'hsr0' already exists in 'hsr' [ 413.333718][T13748] Cannot create hsr debugfs directory [ 413.485558][T13748] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 413.506810][T13893] tipc: Enabling of bearer rejected, failed to enable media [ 413.530350][T13748] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 413.563702][T13748] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 413.574967][T13748] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 413.856598][T13928] x_tables: ip_tables: osf match: only valid for protocol 6 [ 414.930904][T13936] loop6: detected capacity change from 0 to 512 [ 414.947893][T13936] EXT4-fs: Ignoring removed nomblk_io_submit option [ 415.589523][T13748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.609791][T13748] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.624799][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.631925][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.707052][T13936] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 415.720935][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.728136][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.737003][T13936] EXT4-fs (loop6): 1 truncate cleaned up [ 415.746786][T13936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.780216][T13748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.807865][T13954] loop4: detected capacity change from 0 to 256 [ 415.836298][ T5540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.850085][ T29] audit: type=1400 audit(1768533190.382:3608): avc: denied { ioctl } for pid=13956 comm="syz.3.3051" path="socket:[47704]" dev="sockfs" ino=47704 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 415.891770][T13748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.908366][T13962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3052'. [ 415.920487][T13954] FAT-fs (loop4): Directory bread(block 64) failed [ 415.927293][T13954] FAT-fs (loop4): Directory bread(block 65) failed [ 415.934286][T13954] FAT-fs (loop4): Directory bread(block 66) failed [ 415.942853][T13954] FAT-fs (loop4): Directory bread(block 67) failed [ 415.949540][T13954] FAT-fs (loop4): Directory bread(block 68) failed [ 415.957326][T13954] FAT-fs (loop4): Directory bread(block 69) failed [ 415.964070][T13954] FAT-fs (loop4): Directory bread(block 70) failed [ 415.971091][T13954] FAT-fs (loop4): Directory bread(block 71) failed [ 415.977949][T13954] FAT-fs (loop4): Directory bread(block 72) failed [ 415.984792][T13954] FAT-fs (loop4): Directory bread(block 73) failed [ 416.028639][T13970] x_tables: ip_tables: osf match: only valid for protocol 6 [ 417.080655][T13985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3059'. [ 417.305218][T13748] veth0_vlan: entered promiscuous mode [ 417.340060][T13748] veth1_vlan: entered promiscuous mode [ 417.393948][T13748] veth0_macvtap: entered promiscuous mode [ 417.414532][T13748] veth1_macvtap: entered promiscuous mode [ 417.438932][T13748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.439220][ T36] IPVS: starting estimator thread 0... [ 417.460181][T13748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.492898][ T271] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.543317][T14016] IPVS: using max 2400 ests per chain, 120000 per kthread [ 417.554378][ T271] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.581149][ T271] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.611491][ T271] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.756606][T14033] x_tables: ip_tables: osf match: only valid for protocol 6 [ 418.181412][T14038] loop8: detected capacity change from 0 to 128 [ 418.259619][T14038] EXT4-fs: Ignoring removed orlov option [ 418.304823][T14038] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 418.347637][T14048] loop7: detected capacity change from 0 to 512 [ 418.353014][T14038] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 418.356314][T14048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 418.393087][T14048] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 418.416848][T14048] EXT4-fs (loop7): 1 truncate cleaned up [ 418.428737][T14048] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.510471][T13748] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 418.565425][T14063] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3084'. [ 418.588985][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.612899][ T271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.683987][T14044] chnl_net:caif_netlink_parms(): no params data found [ 418.802286][ T271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.806295][T14087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.821525][T14087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.863113][T14086] syzkaller0: entered promiscuous mode [ 418.868696][T14086] syzkaller0: entered allmulticast mode [ 418.883137][T14044] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.890313][T14044] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.897692][T14044] bridge_slave_0: entered allmulticast mode [ 418.904414][T14044] bridge_slave_0: entered promiscuous mode [ 418.967913][ T29] audit: type=1400 audit(1768533193.301:3609): avc: denied { setcurrent } for pid=14081 comm="syz.8.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 419.012263][T14096] loop4: detected capacity change from 0 to 512 [ 419.023024][T14044] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.030258][T14044] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.039197][T14096] EXT4-fs: Ignoring removed orlov option [ 419.046010][T14096] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 419.054733][T14044] bridge_slave_1: entered allmulticast mode [ 419.062378][T14044] bridge_slave_1: entered promiscuous mode [ 419.072814][ T271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.113217][T14044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.124962][T14044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.139735][T14096] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3095: corrupted in-inode xattr: e_value size too large [ 419.154762][T14096] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3095: couldn't read orphan inode 15 (err -117) [ 419.178448][T14096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.206387][T14044] team0: Port device team_slave_0 added [ 419.214300][T14044] team0: Port device team_slave_1 added [ 419.267238][T14044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.274239][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.300296][T14044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.316369][T13446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.327540][T14044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.334561][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.360580][T14044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.431258][T14044] hsr_slave_0: entered promiscuous mode [ 419.437576][T14044] hsr_slave_1: entered promiscuous mode [ 419.443501][T14044] debugfs: 'hsr0' already exists in 'hsr' [ 419.449293][T14044] Cannot create hsr debugfs directory [ 419.471850][ T271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.502748][T14103] loop7: detected capacity change from 0 to 512 [ 419.509509][T14103] EXT4-fs: Ignoring removed nomblk_io_submit option [ 419.517047][T14103] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 419.535929][T14104] x_tables: ip_tables: osf match: only valid for protocol 6 [ 419.739506][T14103] EXT4-fs (loop7): 1 truncate cleaned up [ 419.763074][T14103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.853144][ T271] bridge_slave_1: left allmulticast mode [ 419.858872][ T271] bridge_slave_1: left promiscuous mode [ 419.864633][ T271] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.925336][ T271] bridge_slave_0: left allmulticast mode [ 419.931229][ T271] bridge_slave_0: left promiscuous mode [ 419.936966][ T271] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.989293][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.153912][ T271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.163886][ T271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.173824][ T271] bond0 (unregistering): Released all slaves [ 420.182783][ T271] bond1 (unregistering): Released all slaves [ 420.215455][ T271] hsr_slave_0: left promiscuous mode [ 420.222521][ T271] hsr_slave_1: left promiscuous mode [ 420.228347][ T271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.235922][ T271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.247142][ T271] veth1_macvtap: left promiscuous mode [ 420.252844][ T271] veth0_macvtap: left promiscuous mode [ 420.258523][ T271] veth1_vlan: left promiscuous mode [ 420.263929][ T271] veth0_vlan: left promiscuous mode [ 420.313739][T14128] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3107'. [ 420.359852][ T271] team0 (unregistering): Port device team_slave_1 removed [ 420.368474][T14132] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3107'. [ 420.378227][ T271] team0 (unregistering): Port device team_slave_0 removed [ 420.459305][T14140] 0: reclassify loop, rule prio 0, protocol 800 [ 420.463718][T14141] loop7: detected capacity change from 0 to 512 [ 420.472838][T14141] EXT4-fs: Ignoring removed orlov option [ 420.478915][T14141] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 420.495582][T14141] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3111: corrupted in-inode xattr: e_value size too large [ 420.515790][T14141] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3111: couldn't read orphan inode 15 (err -117) [ 420.528409][T14141] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.561917][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.703239][T14149] Cannot find set identified by id 0 to match [ 420.851415][ T271] IPVS: stop unused estimator thread 0... [ 420.908500][T14158] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3119'. [ 420.921336][T14158] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3119'. [ 420.921932][T14044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 420.939197][T14044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 420.949945][T14044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 420.961384][T14044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.001447][T14044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.013666][T14170] loop7: detected capacity change from 0 to 512 [ 421.016795][T14044] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.021109][T14170] EXT4-fs: Ignoring removed orlov option [ 421.033342][T14170] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 421.042464][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.044647][T14170] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3122: corrupted in-inode xattr: e_value size too large [ 421.049583][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.052848][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.064843][T14170] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3122: couldn't read orphan inode 15 (err -117) [ 421.071028][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.079753][T14170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.128510][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.174756][T14044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.289043][T14044] veth0_vlan: entered promiscuous mode [ 421.297404][T14044] veth1_vlan: entered promiscuous mode [ 421.310586][T14044] veth0_macvtap: entered promiscuous mode [ 421.318178][T14044] veth1_macvtap: entered promiscuous mode [ 421.328859][T14044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.337734][T14044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.365492][ T271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.387159][ T271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.403649][ T271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.431253][ T271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.551976][ T29] audit: type=1400 audit(1768533195.649:3610): avc: denied { wake_alarm } for pid=14194 comm="syz.3.3076" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 422.218417][T14203] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3129'. [ 422.229714][T14205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3130'. [ 422.254955][T14205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3130'. [ 422.275505][T14203] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3129'. [ 422.634467][T14239] x_tables: ip_tables: osf match: only valid for protocol 6 [ 423.067781][T14251] loop4: detected capacity change from 0 to 256 [ 423.080975][T14251] FAT-fs (loop4): Directory bread(block 64) failed [ 423.087636][T14251] FAT-fs (loop4): Directory bread(block 65) failed [ 423.094539][T14251] FAT-fs (loop4): Directory bread(block 66) failed [ 423.101129][T14251] FAT-fs (loop4): Directory bread(block 67) failed [ 423.107955][T14251] FAT-fs (loop4): Directory bread(block 68) failed [ 423.114635][T14251] FAT-fs (loop4): Directory bread(block 69) failed [ 423.121276][T14251] FAT-fs (loop4): Directory bread(block 70) failed [ 423.128122][T14251] FAT-fs (loop4): Directory bread(block 71) failed [ 423.134783][T14251] FAT-fs (loop4): Directory bread(block 72) failed [ 423.141444][T14251] FAT-fs (loop4): Directory bread(block 73) failed [ 423.604797][T14275] loop4: detected capacity change from 0 to 256 [ 423.625487][T14275] FAT-fs (loop4): Directory bread(block 64) failed [ 423.636688][T14275] FAT-fs (loop4): Directory bread(block 65) failed [ 423.658148][T14275] FAT-fs (loop4): Directory bread(block 66) failed [ 423.664721][T14275] FAT-fs (loop4): Directory bread(block 67) failed [ 423.684099][T14277] loop3: detected capacity change from 0 to 256 [ 423.710998][T14275] FAT-fs (loop4): Directory bread(block 68) failed [ 423.723776][T14275] FAT-fs (loop4): Directory bread(block 69) failed [ 423.740752][T14277] FAT-fs (loop3): Directory bread(block 64) failed [ 423.741399][T14275] FAT-fs (loop4): Directory bread(block 70) failed [ 423.765170][T14275] FAT-fs (loop4): Directory bread(block 71) failed [ 423.768990][T14277] FAT-fs (loop3): Directory bread(block 65) failed [ 423.771739][T14275] FAT-fs (loop4): Directory bread(block 72) failed [ 423.771777][T14275] FAT-fs (loop4): Directory bread(block 73) failed [ 423.818907][T14277] FAT-fs (loop3): Directory bread(block 66) failed [ 423.825650][T14277] FAT-fs (loop3): Directory bread(block 67) failed [ 423.847609][T14285] x_tables: ip_tables: osf match: only valid for protocol 6 [ 423.872629][T14277] FAT-fs (loop3): Directory bread(block 68) failed [ 423.900643][T14277] FAT-fs (loop3): Directory bread(block 69) failed [ 423.907517][T14277] FAT-fs (loop3): Directory bread(block 70) failed [ 423.914230][T14277] FAT-fs (loop3): Directory bread(block 71) failed [ 423.921155][T14277] FAT-fs (loop3): Directory bread(block 72) failed [ 424.074333][T14277] FAT-fs (loop3): Directory bread(block 73) failed [ 424.387598][T14303] loop7: detected capacity change from 0 to 1024 [ 424.394716][T14303] EXT4-fs: Ignoring removed bh option [ 424.400364][T14303] EXT4-fs: Ignoring removed nobh option [ 424.406117][T14303] EXT4-fs: Ignoring removed bh option [ 424.424488][T14303] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.687266][T14321] loop8: detected capacity change from 0 to 512 [ 424.718973][T14321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.727483][T14321] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 424.818525][T14321] EXT4-fs (loop8): 1 truncate cleaned up [ 424.829414][T14327] loop3: detected capacity change from 0 to 256 [ 424.829757][T14321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.871322][T14322] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.3172: Allocating blocks 497-513 which overlap fs metadata [ 424.903712][T14327] FAT-fs (loop3): Directory bread(block 64) failed [ 424.911670][T14327] FAT-fs (loop3): Directory bread(block 65) failed [ 424.962786][T14322] EXT4-fs (loop7): pa ffff88810759c8c0: logic 256, phys. 385, len 8 [ 424.970851][T14322] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 424.985394][T13748] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.005971][T14327] FAT-fs (loop3): Directory bread(block 66) failed [ 425.012629][T14327] FAT-fs (loop3): Directory bread(block 67) failed [ 425.037199][T14327] FAT-fs (loop3): Directory bread(block 68) failed [ 425.050988][T14327] FAT-fs (loop3): Directory bread(block 69) failed [ 425.068686][T14333] loop4: detected capacity change from 0 to 512 [ 425.071334][T14327] FAT-fs (loop3): Directory bread(block 70) failed [ 425.087195][T14333] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3183: corrupted in-inode xattr: invalid ea_ino [ 425.102437][T14327] FAT-fs (loop3): Directory bread(block 71) failed [ 425.112685][T14333] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3183: couldn't read orphan inode 15 (err -117) [ 425.124562][T14327] FAT-fs (loop3): Directory bread(block 72) failed [ 425.138303][T14333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.147287][T14327] FAT-fs (loop3): Directory bread(block 73) failed [ 425.200951][ T29] audit: type=1400 audit(1768533199.128:3611): avc: denied { rmdir } for pid=14332 comm="syz.4.3183" name="control" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 425.256076][T13446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.755132][T14370] loop6: detected capacity change from 0 to 256 [ 425.843356][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.863922][T14370] FAT-fs (loop6): Directory bread(block 64) failed [ 425.889373][T14370] FAT-fs (loop6): Directory bread(block 65) failed [ 425.939004][T14370] FAT-fs (loop6): Directory bread(block 66) failed [ 425.952615][T14370] FAT-fs (loop6): Directory bread(block 67) failed [ 425.965507][T14370] FAT-fs (loop6): Directory bread(block 68) failed [ 425.975577][T14370] FAT-fs (loop6): Directory bread(block 69) failed [ 425.989496][T14370] FAT-fs (loop6): Directory bread(block 70) failed [ 426.004002][T14370] FAT-fs (loop6): Directory bread(block 71) failed [ 426.026531][T14370] FAT-fs (loop6): Directory bread(block 72) failed [ 426.042086][T14370] FAT-fs (loop6): Directory bread(block 73) failed [ 426.195265][T14385] loop3: detected capacity change from 0 to 2048 [ 426.268855][T14385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.307897][ T29] audit: type=1400 audit(1768533200.157:3612): avc: denied { unlink } for pid=14384 comm="syz.3.3206" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 426.344828][T14385] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.3206: bit already cleared for inode 15 [ 426.396902][T14044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.448569][T14416] loop6: detected capacity change from 0 to 512 [ 426.455702][T14416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 426.465420][T14416] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 426.477735][T14416] EXT4-fs (loop6): 1 truncate cleaned up [ 426.485044][T14416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.511366][T14422] IPVS: sh: FWM 3 0x00000003 - no destination available [ 426.589483][T14428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3224'. [ 426.601530][T14428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3224'. [ 426.642827][ T5540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.005740][T14469] FAT-fs (loop6): Directory bread(block 64) failed [ 427.014945][T14469] FAT-fs (loop6): Directory bread(block 65) failed [ 427.021520][T14469] FAT-fs (loop6): Directory bread(block 66) failed [ 427.040002][T14469] FAT-fs (loop6): Directory bread(block 67) failed [ 427.046699][T14469] FAT-fs (loop6): Directory bread(block 68) failed [ 427.056709][T14469] FAT-fs (loop6): Directory bread(block 69) failed [ 427.068336][T14469] FAT-fs (loop6): Directory bread(block 70) failed [ 427.087273][T14469] FAT-fs (loop6): Directory bread(block 71) failed [ 427.104474][T14469] FAT-fs (loop6): Directory bread(block 72) failed [ 427.111341][T14469] FAT-fs (loop6): Directory bread(block 73) failed [ 427.487396][T14517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 427.509946][T14517] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 427.688692][T14517] EXT4-fs (loop4): 1 truncate cleaned up [ 427.697124][T14533] syzkaller0: entered promiscuous mode [ 427.702741][T14533] syzkaller0: entered allmulticast mode [ 427.719776][T14517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.810156][T13446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.821182][T14533] tipc: Started in network mode [ 427.826101][T14533] tipc: Node identity 4ef8f7367fa8, cluster identity 4711 [ 427.833327][T14533] tipc: Enabled bearer , priority 0 [ 427.880874][T14532] tipc: Resetting bearer [ 427.900646][T14532] tipc: Disabling bearer [ 428.021663][ T29] audit: type=1326 audit(1768533201.776:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.8.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31afef749 code=0x7ffc0000 [ 428.222895][ T29] audit: type=1326 audit(1768533201.804:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.8.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe31afef749 code=0x7ffc0000 [ 428.246448][ T29] audit: type=1326 audit(1768533201.804:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.8.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31afef749 code=0x7ffc0000 [ 428.270220][ T29] audit: type=1326 audit(1768533201.804:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.8.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31afef749 code=0x7ffc0000 [ 428.294050][ T29] audit: type=1326 audit(1768533201.804:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.8.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31afef749 code=0x7ffc0000 [ 428.317641][ T29] audit: type=1326 audit(1768533201.804:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.8.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31afef749 code=0x7ffc0000 [ 428.341321][ T29] audit: type=1326 audit(1768533201.804:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.8.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31afef749 code=0x7ffc0000 [ 428.365057][ T29] audit: type=1326 audit(1768533201.804:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.8.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31afef749 code=0x7ffc0000 [ 428.524818][T14567] IPVS: sh: FWM 3 0x00000003 - no destination available [ 428.532193][ T36] IPVS: starting estimator thread 0... [ 428.639990][T14568] IPVS: using max 2112 ests per chain, 105600 per kthread [ 429.724019][ T36] IPVS: starting estimator thread 0... [ 429.731273][T14612] IPVS: sh: FWM 3 0x00000003 - no destination available [ 429.738563][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 429.826605][T14613] IPVS: using max 2112 ests per chain, 105600 per kthread [ 430.473712][T14623] gtp0: entered promiscuous mode [ 430.558773][T14630] set_capacity_and_notify: 2 callbacks suppressed [ 430.558788][T14630] loop3: detected capacity change from 0 to 512 [ 430.577031][T14630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 430.630742][T14634] loop6: detected capacity change from 0 to 1024 [ 430.637207][T14630] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 430.672916][T14634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 430.714825][T14634] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.736064][T14630] EXT4-fs (loop3): 1 truncate cleaned up [ 430.742320][T14630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.757310][T14634] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3312: bg 0: block 112: padding at end of block bitmap is not set [ 430.799064][T14634] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65539 with max blocks 1 with error 117 [ 430.811795][T14634] EXT4-fs (loop6): This should not happen!! Data will be lost [ 430.811795][T14634] [ 430.889956][ T3582] IPVS: starting estimator thread 0... [ 430.900710][T14648] IPVS: sh: FWM 3 0x00000003 - no destination available [ 431.002558][T14649] IPVS: using max 2352 ests per chain, 117600 per kthread [ 431.312015][T14044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.321988][ T5540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 431.415946][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3324'. [ 431.462193][T14666] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3326'. [ 431.488164][T14666] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3326'. [ 431.502152][T14668] IPVS: sh: FWM 3 0x00000003 - no destination available [ 431.568735][T14672] loop4: detected capacity change from 0 to 2048 [ 431.587880][T14674] IPVS: sh: FWM 3 0x00000003 - no destination available [ 431.618442][T14672] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.3329: bit already cleared for inode 15 [ 431.637543][T14678] loop8: detected capacity change from 0 to 512 [ 432.240768][T14695] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3338'. [ 432.313389][T14695] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3338'. [ 432.345939][T14704] IPVS: sh: FWM 3 0x00000003 - no destination available [ 432.452676][ T36] IPVS: starting estimator thread 0... [ 432.462334][T14710] IPVS: sh: FWM 3 0x00000003 - no destination available [ 432.548389][T14707] loop3: detected capacity change from 0 to 1024 [ 432.563373][T14711] IPVS: using max 2400 ests per chain, 120000 per kthread [ 432.600923][T14713] loop4: detected capacity change from 0 to 2048 [ 432.627786][T14707] EXT4-fs: Ignoring removed oldalloc option [ 432.633877][T14707] EXT4-fs: Ignoring removed bh option [ 432.697366][T14713] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.3343: bit already cleared for inode 15 [ 432.713488][T14727] syzkaller0: entered promiscuous mode [ 432.718994][T14727] syzkaller0: entered allmulticast mode [ 432.759228][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 432.759246][ T29] audit: type=1400 audit(1768533206.200:3648): avc: denied { append } for pid=14706 comm="syz.3.3341" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 432.892293][T14747] loop7: detected capacity change from 0 to 512 [ 432.913820][T14747] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.926354][T14752] IPVS: sh: FWM 3 0x00000003 - no destination available [ 432.934027][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 432.959452][T14754] IPVS: sh: FWM 3 0x00000003 - no destination available [ 433.126066][T14747] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 433.141035][T14747] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 433.153526][T14747] EXT4-fs (loop7): This should not happen!! Data will be lost [ 433.153526][T14747] [ 433.163212][T14747] EXT4-fs (loop7): Total free blocks count 0 [ 433.169211][T14747] EXT4-fs (loop7): Free/Dirty block details [ 433.175235][T14747] EXT4-fs (loop7): free_blocks=65280 [ 433.180578][T14747] EXT4-fs (loop7): dirty_blocks=31 [ 433.185734][T14747] EXT4-fs (loop7): Block reservation details [ 433.191821][T14747] EXT4-fs (loop7): i_reserved_data_blocks=31 [ 433.357759][T14747] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 433.370428][T14747] EXT4-fs (loop7): This should not happen!! Data will be lost [ 433.370428][T14747] [ 433.464120][T14766] loop4: detected capacity change from 0 to 2048 [ 433.587511][T14766] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.3364: bit already cleared for inode 15 [ 433.788288][T14782] syzkaller0: entered promiscuous mode [ 433.794194][T14782] syzkaller0: entered allmulticast mode [ 433.795970][T14786] loop7: detected capacity change from 0 to 512 [ 433.822306][T14786] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 433.833294][ T29] audit: type=1400 audit(1768533207.210:3649): avc: denied { create } for pid=14789 comm="syz.4.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 433.859551][T14786] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.3372: attempt to clear invalid blocks 2 len 1 [ 433.881467][T14786] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 433.896292][T14786] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3372: invalid indirect mapped block 1819239214 (level 0) [ 433.973024][ T29] audit: type=1400 audit(1768533207.332:3650): avc: denied { bind } for pid=14789 comm="syz.4.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 434.003432][T14786] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3372: invalid indirect mapped block 1819239214 (level 1) [ 434.025977][T14786] EXT4-fs (loop7): 1 truncate cleaned up [ 434.085185][T14805] loop3: detected capacity change from 0 to 2048 [ 434.124252][T14805] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.3380: bit already cleared for inode 15 [ 434.149556][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.267285][T14832] syzkaller0: entered promiscuous mode [ 434.272841][T14832] syzkaller0: entered allmulticast mode [ 434.332121][T14840] IPVS: Scheduler module ip_vs_sip not found [ 434.380901][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.533793][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.608332][T14795] chnl_net:caif_netlink_parms(): no params data found [ 434.678398][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.955452][ T29] audit: type=1400 audit(1768533208.248:3651): avc: denied { read } for pid=14871 comm="syz.8.3403" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 434.978541][ T29] audit: type=1400 audit(1768533208.248:3652): avc: denied { open } for pid=14871 comm="syz.8.3403" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 435.001961][ T29] audit: type=1400 audit(1768533208.248:3653): avc: denied { ioctl } for pid=14871 comm="syz.8.3403" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 435.723065][ T29] audit: type=1400 audit(1768533208.969:3654): avc: denied { mount } for pid=14845 comm="syz.7.3393" name="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 435.746368][ T29] audit: type=1400 audit(1768533208.987:3655): avc: denied { search } for pid=14845 comm="syz.7.3393" name="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 435.767244][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3407'. [ 435.781282][ T29] audit: type=1400 audit(1768533208.987:3656): avc: denied { search } for pid=14845 comm="syz.7.3393" name="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 435.803567][ T29] audit: type=1400 audit(1768533208.987:3657): avc: denied { read open } for pid=14845 comm="syz.7.3393" path="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 435.861000][ T37] bridge_slave_1: left allmulticast mode [ 435.866722][ T37] bridge_slave_1: left promiscuous mode [ 435.872469][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.880932][ T37] bridge_slave_0: left allmulticast mode [ 435.886708][ T37] bridge_slave_0: left promiscuous mode [ 435.892453][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.009855][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.028806][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.038666][ T37] bond0 (unregistering): Released all slaves [ 436.050526][T14795] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.057627][T14795] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.065040][T14795] bridge_slave_0: entered allmulticast mode [ 436.072965][T14795] bridge_slave_0: entered promiscuous mode [ 436.093513][T14795] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.100727][T14795] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.115391][T14795] bridge_slave_1: entered allmulticast mode [ 436.122004][T14795] bridge_slave_1: entered promiscuous mode [ 436.129623][ T37] tipc: Disabling bearer [ 436.134965][ T37] tipc: Left network mode [ 436.164313][T14905] syzkaller0: entered promiscuous mode [ 436.169987][T14905] syzkaller0: entered allmulticast mode [ 436.274735][T14912] syzkaller0: entered promiscuous mode [ 436.280277][T14912] syzkaller0: entered allmulticast mode [ 436.288460][ T37] hsr_slave_0: left promiscuous mode [ 436.294411][ T37] hsr_slave_1: left promiscuous mode [ 436.300115][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.307561][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.755786][ T37] veth1_macvtap: left promiscuous mode [ 436.762030][ T37] veth0_macvtap: left promiscuous mode [ 436.768013][ T37] veth1_vlan: left promiscuous mode [ 436.777007][ T37] veth0_vlan: left promiscuous mode [ 436.903916][T14795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.931125][T14795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.961112][T14945] syzkaller0: entered promiscuous mode [ 436.966641][T14945] syzkaller0: entered allmulticast mode [ 437.004179][T14795] team0: Port device team_slave_0 added [ 437.013841][T14795] team0: Port device team_slave_1 added [ 437.047041][T14969] set_capacity_and_notify: 1 callbacks suppressed [ 437.047127][T14969] loop7: detected capacity change from 0 to 512 [ 437.082277][T14969] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 437.104766][T14795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.111900][T14795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.135684][T14969] EXT4-fs (loop7): failed to open journal device unknown-block(0,8) -6 [ 437.138258][T14795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.157814][T14795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.164882][T14795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.191145][T14795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.211118][T14977] batadv_slave_0: entered promiscuous mode [ 437.234934][T14975] batadv_slave_0: left promiscuous mode [ 437.248891][T14795] hsr_slave_0: entered promiscuous mode [ 437.255211][T14795] hsr_slave_1: entered promiscuous mode [ 437.272095][T14984] sch_fq: defrate 7 ignored. [ 437.284208][ T37] IPVS: stop unused estimator thread 0... [ 438.053531][T14795] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 438.064488][T15032] loop3: detected capacity change from 0 to 512 [ 438.073625][T15034] gtp0: entered promiscuous mode [ 438.080366][T14795] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 438.102890][T14795] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 438.110160][T15032] EXT4-fs mount: 14 callbacks suppressed [ 438.110179][T15032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.119613][T14795] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 438.136877][T15041] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3465'. [ 438.146358][T15032] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.169405][T15041] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3465'. [ 438.179089][ T1596] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 438.193836][ T1596] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 438.206203][ T1596] EXT4-fs (loop3): This should not happen!! Data will be lost [ 438.206203][ T1596] [ 438.216024][ T1596] EXT4-fs (loop3): Total free blocks count 0 [ 438.222236][ T1596] EXT4-fs (loop3): Free/Dirty block details [ 438.228211][ T1596] EXT4-fs (loop3): free_blocks=65280 [ 438.233647][ T1596] EXT4-fs (loop3): dirty_blocks=31 [ 438.238924][ T1596] EXT4-fs (loop3): Block reservation details [ 438.244989][ T1596] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 438.253761][T14044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.348772][T15058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.361937][T15058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.434595][T15070] loop4: detected capacity change from 0 to 512 [ 438.436546][T15072] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3477'. [ 438.455364][T14795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.465891][T15072] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3477'. [ 438.477215][T15070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.485053][T14795] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.496945][T15070] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.509269][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.516376][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.526646][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.533760][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.578972][ T1475] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 438.616228][ T1475] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 438.628738][ T1475] EXT4-fs (loop4): This should not happen!! Data will be lost [ 438.628738][ T1475] [ 438.632653][T14795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.638816][ T1475] EXT4-fs (loop4): Total free blocks count 0 [ 438.651588][ T1475] EXT4-fs (loop4): Free/Dirty block details [ 438.657648][ T1475] EXT4-fs (loop4): free_blocks=65280 [ 438.663041][ T1475] EXT4-fs (loop4): dirty_blocks=31 [ 438.668241][ T1475] EXT4-fs (loop4): Block reservation details [ 438.674301][ T1475] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 438.681509][T13446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.830851][T15106] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3487'. [ 438.848162][T15106] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3487'. [ 439.270735][T15122] loop8: detected capacity change from 0 to 2048 [ 439.312685][T15122] EXT4-fs: Ignoring removed nobh option [ 439.318328][T15122] EXT4-fs: Ignoring removed nobh option [ 439.324038][T15122] EXT4-fs: inline encryption not supported [ 439.355433][T15122] EXT4-fs (loop8): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.368876][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 439.368895][ T29] audit: type=1400 audit(1768533212.383:3665): avc: denied { rename } for pid=15121 comm="syz.8.3492" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 439.399269][T15122] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3492: bg 0: block 120: padding at end of block bitmap is not set [ 439.435718][T13748] EXT4-fs (loop8): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 439.455301][T14795] veth0_vlan: entered promiscuous mode [ 439.470690][T14795] veth1_vlan: entered promiscuous mode [ 439.504640][T14795] veth0_macvtap: entered promiscuous mode [ 439.517668][T14795] veth1_macvtap: entered promiscuous mode [ 439.526633][T14795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.530562][T14795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.547530][ T7881] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.547646][ T7881] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.547675][ T7881] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.547949][ T7881] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.669045][ T29] audit: type=1400 audit(1768533212.664:3666): avc: denied { create } for pid=15160 comm="syz.8.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 439.734477][T15167] syzkaller0: entered promiscuous mode [ 439.740473][T15167] syzkaller0: entered allmulticast mode [ 439.746522][ T29] audit: type=1400 audit(1768533212.692:3667): avc: denied { setopt } for pid=15160 comm="syz.8.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 439.815404][T15181] loop6: detected capacity change from 0 to 512 [ 439.823613][T15181] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 439.855066][T15181] EXT4-fs (loop6): failed to open journal device unknown-block(0,8) -6 [ 439.887482][T15192] x_tables: ip_tables: osf match: only valid for protocol 6 [ 440.064245][T15210] syzkaller0: entered promiscuous mode [ 440.069925][T15210] syzkaller0: entered allmulticast mode [ 440.361014][T15222] x_tables: ip_tables: osf match: only valid for protocol 6 [ 440.526383][T15229] loop7: detected capacity change from 0 to 512 [ 440.544755][T15229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.560017][T15229] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.586425][ T31] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 440.601109][ T31] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 440.613454][ T31] EXT4-fs (loop7): This should not happen!! Data will be lost [ 440.613454][ T31] [ 440.623360][ T31] EXT4-fs (loop7): Total free blocks count 0 [ 440.629565][ T31] EXT4-fs (loop7): Free/Dirty block details [ 440.635736][ T31] EXT4-fs (loop7): free_blocks=65280 [ 440.641102][ T31] EXT4-fs (loop7): dirty_blocks=31 [ 440.646363][ T31] EXT4-fs (loop7): Block reservation details [ 440.652394][ T31] EXT4-fs (loop7): i_reserved_data_blocks=31 [ 440.670211][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.715420][T15240] syzkaller0: entered promiscuous mode [ 440.721088][T15240] syzkaller0: entered allmulticast mode [ 440.762750][T15251] x_tables: ip_tables: osf match: only valid for protocol 6 [ 440.916627][T15267] loop8: detected capacity change from 0 to 512 [ 440.942636][T15267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.978580][T15267] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.069430][T15274] loop4: detected capacity change from 0 to 512 [ 441.090947][ T52] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 441.118153][T15274] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 441.164821][ T52] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 441.177397][ T52] EXT4-fs (loop8): This should not happen!! Data will be lost [ 441.177397][ T52] [ 441.187134][ T52] EXT4-fs (loop8): Total free blocks count 0 [ 441.193302][ T52] EXT4-fs (loop8): Free/Dirty block details [ 441.199216][ T52] EXT4-fs (loop8): free_blocks=65280 [ 441.204596][ T52] EXT4-fs (loop8): dirty_blocks=31 [ 441.209728][ T52] EXT4-fs (loop8): Block reservation details [ 441.215886][ T52] EXT4-fs (loop8): i_reserved_data_blocks=31 [ 441.394641][ T29] audit: type=1400 audit(1768533214.226:3668): avc: denied { create } for pid=15286 comm="syz.6.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 441.414518][ T29] audit: type=1400 audit(1768533214.226:3669): avc: denied { ioctl } for pid=15286 comm="syz.6.3557" path="socket:[53134]" dev="sockfs" ino=53134 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 441.439499][ T29] audit: type=1400 audit(1768533214.226:3670): avc: denied { bind } for pid=15286 comm="syz.6.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 441.458950][ T29] audit: type=1400 audit(1768533214.226:3671): avc: denied { setopt } for pid=15286 comm="syz.6.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 441.478437][ T29] audit: type=1400 audit(1768533214.226:3672): avc: denied { write } for pid=15286 comm="syz.6.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 441.501634][T15274] EXT4-fs (loop4): failed to open journal device unknown-block(0,8) -6 [ 441.521633][ T29] audit: type=1400 audit(1768533214.394:3673): avc: denied { setattr } for pid=15292 comm="syz.3.3559" name="secretmem" dev="secretmem" ino=52176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 441.548002][T13748] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.625462][T15306] loop6: detected capacity change from 0 to 2048 [ 441.653499][T15306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.774930][T15306] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.3564: bit already cleared for inode 15 [ 441.801448][T15326] x_tables: ip_tables: osf match: only valid for protocol 6 [ 441.821905][T14795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.357759][T15362] loop7: detected capacity change from 0 to 512 [ 442.397144][T15362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.416277][T15362] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.444145][T15362] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 442.522914][ T7598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.732875][T15404] loop3: detected capacity change from 0 to 1024 [ 442.741442][T15404] EXT4-fs: Ignoring removed bh option [ 442.746979][T15404] EXT4-fs: Ignoring removed nobh option [ 442.752725][T15404] EXT4-fs: Ignoring removed bh option [ 442.770166][T15404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.840550][T15413] syzkaller0: entered promiscuous mode [ 442.846764][T15413] syzkaller0: entered allmulticast mode [ 442.910190][T15416] loop7: detected capacity change from 0 to 2048 [ 442.927193][T15416] EXT4-fs: Ignoring removed nobh option [ 442.932807][T15416] EXT4-fs: Ignoring removed nobh option [ 442.938435][T15416] EXT4-fs: inline encryption not supported [ 442.956856][T15418] gtp0: entered promiscuous mode [ 443.016616][T15420] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.3598: Allocating blocks 497-513 which overlap fs metadata [ 443.031764][T15420] EXT4-fs (loop3): pa ffff88810759ca80: logic 256, phys. 385, len 8 [ 443.039810][T15420] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 443.053432][T15416] EXT4-fs (loop7): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.093025][ T7598] EXT4-fs (loop7): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 443.154027][T15424] loop8: detected capacity change from 0 to 2048 [ 443.181255][T15424] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.206573][T15424] EXT4-fs error (device loop8): ext4_free_inode:354: comm syz.8.3605: bit already cleared for inode 15 [ 443.263063][T13748] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.437349][T15449] syzkaller0: entered promiscuous mode [ 443.442907][T15449] syzkaller0: entered allmulticast mode [ 443.681700][T15457] loop7: detected capacity change from 0 to 512 [ 443.781780][T15460] IPVS: sh: FWM 3 0x00000003 - no destination available [ 443.797821][T15457] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 443.870646][T14044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.067538][T15457] EXT4-fs (loop7): failed to open journal device unknown-block(0,8) -6 [ 444.147438][ T29] audit: type=1400 audit(1768533216.854:3674): avc: denied { listen } for pid=15478 comm="syz.6.3624" lport=41084 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 444.256128][T15498] gtp0: entered promiscuous mode [ 444.378190][T15517] syzkaller0: entered promiscuous mode [ 444.383719][T15517] syzkaller0: entered allmulticast mode [ 444.594919][T15532] gtp0: entered promiscuous mode [ 444.832336][T15547] loop6: detected capacity change from 0 to 1024 [ 444.839546][T15547] EXT4-fs: Ignoring removed oldalloc option [ 444.845595][T15547] EXT4-fs: Ignoring removed bh option [ 444.871191][T15547] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.127518][T15558] syzkaller0: entered promiscuous mode [ 445.133081][T15558] syzkaller0: entered allmulticast mode [ 445.143498][T15567] loop3: detected capacity change from 0 to 512 [ 445.164260][T15567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.177510][T15567] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.193190][T15567] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 445.251894][T15571] x_tables: ip_tables: osf match: only valid for protocol 6 [ 445.360949][T14044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.412186][T15575] loop4: detected capacity change from 0 to 2048 [ 445.449548][T15554] ================================================================== [ 445.457714][T15554] BUG: KCSAN: data-race in __writeback_single_inode / xas_clear_mark [ 445.465858][T15554] [ 445.468204][T15554] write to 0xffff88811a086e9c of 4 bytes by task 15547 on cpu 0: [ 445.475948][T15554] xas_clear_mark+0x16b/0x180 [ 445.480672][T15554] __folio_start_writeback+0x231/0x340 [ 445.486180][T15554] ext4_bio_write_folio+0x5ad/0x9f0 [ 445.491505][T15554] mpage_process_page_bufs+0x4a1/0x620 [ 445.496985][T15554] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 445.502818][T15554] ext4_do_writepages+0x9f6/0x27e0 [ 445.507978][T15554] ext4_writepages+0x179/0x300 [ 445.512773][T15554] do_writepages+0x1c6/0x310 [ 445.517418][T15554] file_write_and_wait_range+0x156/0x2c0 [ 445.523098][T15554] generic_buffers_fsync_noflush+0x45/0x130 [ 445.529109][T15554] ext4_sync_file+0x1ab/0x690 [ 445.533820][T15554] vfs_fsync_range+0x10d/0x130 [ 445.538628][T15554] ext4_buffered_write_iter+0x34f/0x3c0 [ 445.544223][T15554] ext4_file_write_iter+0x387/0xf60 [ 445.549457][T15554] iter_file_splice_write+0x66b/0xa20 [ 445.554857][T15554] direct_splice_actor+0x156/0x2a0 [ 445.560082][T15554] splice_direct_to_actor+0x312/0x680 [ 445.565478][T15554] do_splice_direct+0xda/0x150 [ 445.570276][T15554] do_sendfile+0x380/0x650 [ 445.574828][T15554] __x64_sys_sendfile64+0x105/0x150 [ 445.580059][T15554] x64_sys_call+0x2db1/0x3000 [ 445.584767][T15554] do_syscall_64+0xca/0x2b0 [ 445.589300][T15554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.595225][T15554] [ 445.597568][T15554] read to 0xffff88811a086e9c of 4 bytes by task 15554 on cpu 1: [ 445.605222][T15554] __writeback_single_inode+0x201/0x7c0 [ 445.610819][T15554] writeback_single_inode+0x16d/0x3f0 [ 445.616243][T15554] sync_inode_metadata+0x5b/0x90 [ 445.621222][T15554] generic_buffers_fsync_noflush+0xee/0x130 [ 445.627240][T15554] ext4_sync_file+0x1ab/0x690 [ 445.631942][T15554] vfs_fsync_range+0x10d/0x130 [ 445.636742][T15554] ext4_buffered_write_iter+0x34f/0x3c0 [ 445.642457][T15554] ext4_file_write_iter+0x387/0xf60 [ 445.647715][T15554] iter_file_splice_write+0x66b/0xa20 [ 445.653118][T15554] direct_splice_actor+0x156/0x2a0 [ 445.658263][T15554] splice_direct_to_actor+0x312/0x680 [ 445.663678][T15554] do_splice_direct+0xda/0x150 [ 445.668479][T15554] do_sendfile+0x380/0x650 [ 445.672936][T15554] __x64_sys_sendfile64+0x105/0x150 [ 445.678172][T15554] x64_sys_call+0x2db1/0x3000 [ 445.682930][T15554] do_syscall_64+0xca/0x2b0 [ 445.687466][T15554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.693403][T15554] [ 445.695763][T15554] value changed: 0x0e000021 -> 0x04000021 [ 445.701582][T15554] [ 445.703929][T15554] Reported by Kernel Concurrency Sanitizer on: [ 445.710116][T15554] CPU: 1 UID: 0 PID: 15554 Comm: syz.6.3653 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 445.721613][T15554] Tainted: [W]=WARN [ 445.725443][T15554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 445.735528][T15554] ================================================================== [ 445.906944][T15575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.923458][T15575] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.3663: bit already cleared for inode 15 [ 445.961119][T13446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.131683][T14795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.