last executing test programs: 5m51.390593033s ago: executing program 32 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463"], 0xffdd) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5m35.063610017s ago: executing program 33 (id=258): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x44f, &(0x7f0000000d80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xdcbd29fff320c81b) r1 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x630e, 0x0, 0x0, 0x221}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) 5m32.931942272s ago: executing program 34 (id=634): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, 0x0, 0x0, 0x5412, 0x0, 0x0) 5m21.700446213s ago: executing program 35 (id=825): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x3a) sendfile(r1, r0, 0x0, 0x20000023893) 4m58.341777711s ago: executing program 8 (id=1201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 4m58.195684674s ago: executing program 8 (id=1203): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x785, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000003280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) fallocate(r0, 0x0, 0x0, 0x1001f0) 4m57.911182848s ago: executing program 8 (id=1211): socket$kcm(0x10, 0x2, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0x140}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 4m57.028101372s ago: executing program 8 (id=1219): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m56.936280964s ago: executing program 8 (id=1223): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) close(r0) 4m56.148318427s ago: executing program 8 (id=1236): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) 4m56.148130457s ago: executing program 36 (id=1236): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) 4m51.406782883s ago: executing program 0 (id=1320): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000bc0)={[{@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@uni_xlate}, {@fat=@tz_utc}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_winnt}, {@rodir}, {@shortname_mixed}, {@fat=@nocase}, {@shortname_lower}, {@shortname_mixed}, {@fat=@errors_remount}, {@numtail}], [{@smackfsdef={'smackfsdef', 0x3d, 'utf8=0'}}, {@flag='dirsync'}, {@smackfshat={'smackfshat', 0x3d, '&'}}, {@euid_gt}, {@obj_role}, {@hash}]}, 0x25, 0x34f, &(0x7f00000004c0)="$eJzs3T9sG2UUAPDnXhKnESUekCqYDBsSqpogBpgSVUWqyABFFv8WLJryJzaVYmEpDHG8gComEAsSTGwdYOyMGBBiY2ClSKiAWOhWqRGHbJ/tc+xQZ3Boxe83RE/v+9597y6n3CVKvrzeiq1L83H51q2bsbhYiLm1c2txuxClOBFJ9OzFRB8tTM4DAPe422kaf6U9d5/9yVI/8uwHgPtX9/n/5qlhoniE4qsPzKIlAGDGpvz+//mJ2SszawsAmKGx5/9jI8MHfsw/N/idAADg/vXiK68+t74RcbFcXoyof9isNCvxzHB8/XK8HbXYjLOxHPsRvReF3ttC5+OzFzbOny13/FaKSqeiWYmot5qV3pvCetKtL8ZKLEcpq08H9UmnfqVbX46IvVZ3/agXmpX5WMrW/3kpNmM1luOhsfqICxvnV8vZASr1fn0roh2L/ZPo9H8mluPHN+JK1OJSdGqH/e+ulMvn0o2R+ua1YnceAAAAAAAAAAAAAAAAAAAAAADMwpnyQGmw/01abzU/uHhwQmlkf5xKbzjbH6jd2x8oLfZ357maHNwfaHR/nmZlLk78p2cOAAAAAAAAAAAAAAAAAAAA947GzkJUa7XN7cbO+1v5oJXLvPv9V9+ejP7QXFb6TjKsiiw5cpz+xNyRkxgskQ7K02RkThYkEf3Je9Vr1wcd5+cUB2cxVt4JimNDhaynaq126tFfP59U9Xcn2Otmkhi7LKNBIVs/N1R/sJNYjIj9w6oOD1bvMudGmqaHle9+Nl4VhYi5OHIbUwTf3Xzr4Scbp5/qZr7JNn14/Inll258+uUfW9VatHtXplZb2G7sp1McudPr+FCSu38K2XUuTLgTJgftYaa93dipJj/9+fIjH/9wYHIy+f5J85n3Dl/r64OZhV5QiCj1L8K/tTo/4eafHLx2Z3D3Hv0Td/qLter13V9+n7Yq90XCRh0AAAAAAAAAAAAAAAAAAHAscn8rfgRPvzC7jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+A3//38uaI9lpgnutGJ8qLi53Th08ZPHeqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyP/RMAAP//rShzCQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 4m50.963047461s ago: executing program 0 (id=1330): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00100000000d0100280012800900010076657468"], 0x48}}, 0x0) 4m50.867853112s ago: executing program 0 (id=1333): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$eJzs3c1vHGcZAPBnxrvBaVzsAodSqR+iQUkF2Y1r2loc2iIQt0qgcg+WvbGsrLORd93GVgWO+AOQEIJKnDhxQeLGBQnlT0BIlcgdAQIhSOHAARg0s7Ops8wmtrIfqf37Se/uO+/szvO8G+/sOx+ZCeDUeiEi3oyIuYh4KSIWy/a0LHHQL/nrPrz73npe8ua3/5ZEUrZFFNV7zpVvm+8/Veru7V9ba7dbO+V0s7d9o9nd27+0tb222dpsXV9ZWX519bXVV1Yvj6Wfeb9e/9qffvT9n3399V9/8d3fX/nLxe/kSX+1nD/o1/gUn17cKR7r+WdxTy0idsYbbGbmyv7UZ50IAABHko9SPxURnyvG/4sxV4zmCsNDuvnpZwcAAACMQ/bGQvw7icgAAACAE+uNiFiIJG2U5wIsRJo2Gv1zeD8TT6TtTrf3haud3esb+byIpainV7farcvlObVLUU/y6eWi/tH0y0PTKxHxVET8cPFsMd1Y77Q3Zr3zAwAAAE6Jc0Pb//9c7G//AwAAACfM0qwTAAAAACZu1PZ/MuU8AAAAgMlx/B8AAABOtG+89VZessH9rzfe2du91nnn0kare62xvbveWO/s3GhsdjqbxTX7th+0rHpEtDudG1+K2L3Z7LW6vWZ3b//Kdmf3eu/KlvsHAgAAwKw89fztO0lEHHz5bFFyZ/KHuRFvcK4AnBjpcV78x8nlAUzfqJ/5IzgzzjyA6avNOgFgdg5mnQAwa/dd6qNiUHD45J379hn8ZnI5AQAA43Xhs7fvfLfi+H+tPJ8fOLmOdfwfOFEe4fg/8DHn+D+cXvVjjQBuTTATYFYedquPkRfvqDr+X3lmcJY9dFkAAMBELRTl+bRRHgtciDRtNCKeLP6rfz25utVuXY6IT0bE7xbrn8inl4t3Jm4PCAAAAAAAAAAAAAAAAAAAAAAAAABHlGVJZAAAAMCJFpH+OSnv/3Vh8fzC8P6BM8m/FqO8pde7P3n7xzfXer2d5bz97/fae++X7S/PYg8GAAAAnEa1B84dbKcPtuMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJw+vPve+qBMM+5fvxIRS1XxazFfPM9HPSKe+EcStUPvSyJibgzxD25FxNNV8ZM8rVgqsxiOn0bE2enEfzbLssr458YQH06z2/n6582q718aLxTP1d//Wlke1X3rvzO/PDQnvbf+mxux/nvyiDGe+eAXzZHxb0U8U6te/wziJyPiv1i1wIoP5dvf2t//v8b+wiP7acSFyt+f5L5Yzd72jWZ3b//S1vbaZmuzdX1lZfnV1ddWX1m93Ly61W6Vj1Uh4gfP/uq/Q9H/k/UV/Y8R8Zce0v/zeaV+qDEbDlMG++Dm3U/3q/WhRRTxL75Y/ff39APi538Tny9/B/L5Fwb1g379sOd+/tvnKhMr42+M6P/D/v0vjlrokJe++b0/HPGlAMAUdPf2r621262diVfez7JsWrGOXon0qC8uhotT/cSmWxmM7iYWYv5x6emUK+cfjzSOUxnHni0AAOBx89Ggf9aZAAAAAAAAAAAAAAAAAAAAwOnV3Yt00pcTG455MJuuAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA80P8CAAD//yOS2ac=") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000400), &(0x7f0000000200)=ANY=[], 0x835, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0x10001, 0x0, 0x8}) 4m50.723748734s ago: executing program 0 (id=1336): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$vcsa(0x0, 0x3, 0x103400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000ff0f000005", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000780), 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m50.649046436s ago: executing program 0 (id=1338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x357}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r2, 0x47bc, 0x2, 0x0, 0x0, 0x0) 4m50.510323958s ago: executing program 5 (id=1341): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x402, 0x110, 0x4}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x3c, 0x7, 0x1, 0x0, "879aed43c0e8c2fa5416fa40d487f1f1b2936167595c662cd42af6e54d13f75c65cffd366d9ed95e05c37ce3ec8caeddbb9c35e6ae24dd6e"}]}, @NFT_MSG_NEWFLOWTABLE={0x168, 0x16, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0xf0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x18c}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x11469d35}]}]}, @NFT_MSG_DELCHAIN={0x9c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x45b}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x107ea20aa5bbd47d}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2d6ea2d9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x390}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) open$dir(&(0x7f0000000500)='./file0\x00', 0x101000, 0x8) r1 = open_tree(r0, &(0x7f00000006c0)='./file0\x00', 0x9001) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000800)=@usbdevfs_driver={0x5, 0x1, &(0x7f0000000700)="98deed4c01aeb221de1351b02fc888bfca0de3473843abbbbb1aa03b0fb38c3de4e338bacce53302b3fe1ee1133e8270656f2b895237a52d36fd4e225a0f5169c0ee7e138ad5130861216b78630794a8a2e3f00e037db85c58b0dc4cea34529ed80497adf06a559a6b894e6817a55b6ab142c58b7e9c12d7c4d2871a17a631fe6609d5ad7d3e76c118b3edf64a34caa92913c0b257e66b956e55965587812d625b2ee025b909211d21a451ac4c88c7361a2132c86b79e1150a2fae34732dbab6fd56fc1697903053a23ed78382bf7165bc749ff7"}) fcntl$getownex(r0, 0x10, &(0x7f0000000840)) semget(0x2, 0x2, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000f00), 0x105200, 0x0) r2 = fsmount(r0, 0x0, 0x2) bind$unix(r2, &(0x7f0000000f40)=@file={0x0, './file0\x00'}, 0x6e) 4m50.493294728s ago: executing program 5 (id=1343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) socket$inet_dccp(0x2, 0x6, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2200c12, &(0x7f0000001180)=ANY=[], 0x1, 0x9fb, &(0x7f0000001280)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x2) 4m50.413263699s ago: executing program 0 (id=1344): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xeb9e, 0x400, 0x2, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r2 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b, 0x0, r1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9135}, 0x18) getrlimit(0x1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r1], 0x1) 4m50.412800189s ago: executing program 37 (id=1344): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xeb9e, 0x400, 0x2, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r2 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b, 0x0, r1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9135}, 0x18) getrlimit(0x1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r1], 0x1) 4m50.412199479s ago: executing program 5 (id=1346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 4m50.36840575s ago: executing program 5 (id=1347): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xf6c447fee59251f4}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r1, r2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}}], {0x14}}, 0x3c}}, 0x0) 4m50.290936481s ago: executing program 5 (id=1348): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfffc, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lchown(&(0x7f00000000c0)='./file0/../file0\x00', r1, r2) 4m50.187644583s ago: executing program 5 (id=1349): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000000200)={0x20000000000084, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1, 'lblcr\x00', 0x20}, 0x2c) 4m49.504709284s ago: executing program 9 (id=1358): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0a9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 4m49.411130485s ago: executing program 9 (id=1360): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfa}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) bpf$MAP_CREATE(0x0, 0x0, 0x50) 4m49.320428327s ago: executing program 9 (id=1362): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="47436b4c816815fc81d0e21fd7ec4a1915dc9fc0fe06f8eb6d722e85f699369715ed9263c36e63cd683296a55146b9b4f5c821c452ab0e1d9ef91b74c6f4ef51627f74acf58d70ac5acc56480ea6be72acae424a39866ba6ae3667ac959a", 0x5e}, {&(0x7f0000000440)="7e6b37ea4b479588e00b40a612b1949176de42e518bee23a0349893fa005e05906ba9a605f484c46bed328d7d113e6cda116ccc574da811c66ac7e2b89429ceeae9b1a4847ca7656c3c8288bb67bdf7ebc05ce86bca9607026129fc765870f72a96834", 0x63}], 0x2}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4m49.248535538s ago: executing program 9 (id=1363): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$vcsa(0x0, 0x3, 0x103400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000ff0f000005", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000780), 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m49.184089409s ago: executing program 9 (id=1365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe12, 0x0, 0x0, 0x0, 0xfff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2a}}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1001, &(0x7f0000001e40)=""/4097, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xb8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8bf0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r1}, 0x36) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0xb27, 0x20, 0x0, 0x0, 0x0}) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000000002030000000000000000000a0000047000018014000180080001000000000008e30200ac1414bb2c00018014000300ff02000000000000000000000000000114000400fe8800000000000000000001000001011400018008000100ffffffff08000200ac1414aa06000340000400000600034000020000060003400001000004000380500002802c00018014000300ff02000000000000000000000000000114000400fe8800000000000000000000000001010c00029005000100210000000c0002800500010084"], 0xd8}}, 0x44000) write(r3, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) 4m48.896011034s ago: executing program 9 (id=1368): r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) 4m48.852834834s ago: executing program 38 (id=1368): r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) 4m34.952028969s ago: executing program 39 (id=1349): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000000200)={0x20000000000084, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1, 'lblcr\x00', 0x20}, 0x2c) 55.583099151s ago: executing program 6 (id=5740): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa37b00090080020efffeffe809020000ff0004f03a09000000ffffffffff7646d541e958ffffffffffffffe7ee00000000", 0x58}], 0x1) close(r0) 55.416946024s ago: executing program 6 (id=5743): socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtlHVC+VUIVQJ6JHDNiROFMWOo9gpTdhD9sgdiZU4wYkzByQOSD1xR+IANy7lgFRgBWqKkDDy2E6cP07c3cTejX8/aeQ388b+3tvRvGd93swLYGzdiIjdiLgSEe9GxEzneNLZ4s321jrv44f3Fvce3ltMotl85x9JVt86Fj3vaXmm85n5iPj+WxE/TI4E/WNEfXtnbaFSKW92DhUb1Y1ifXvn9mp1YaW8Ul4vlebn5mdfv/Na6dz6+lL11x9djYjf/faLH/5h9xs/bjVrulPX24/z1O761H6clsmI+M5FBBuBiU5/rjzKmx/pTZynNCI+ExEvZ/f/TExkV/Oww5fpm0NsHQBwEZrNmWjO9O4DAJddmuXAkrTQyQVMR5oWCu0c3gtxLa3U6o1by7Wt9aV2rux6TKXLq5XybCdXeD2mkuXVyfJcVu7uV8qlI/t3IuL5iPhp7mq2X1isVZZG+cUHAMbYM0fm/3/n2vM/AHDJ5Q+KuVG2AwAYnvyoGwAADJ35HwDGj/kfAMaP+R8Axo/5HwDGj/kfAMbKd99+u7U19zrPv156b3trrfbe7aVyfa1Q3VosLNY2NwortdpK9sye6lmfV6nVNuZeja33i41yvVGsb+/crda21ht3s+d63y1PDaVXAMBpnn/pgz8nEbH7xtVsi57n/Z85V7940a0DLlI66gYAIzNxSt1/htgOYPiOr/YFjAv5eBhf/2s2m9Gzdm9E3N8v9TwMtO9/EXqwX/rke3Hkkw6k1g2FJ8/Nzz9G/h94qsn/w/g6Lf/fn+/ycBnI/8P4ajYTa/4DwJiR4wdO/NW+R+/v/7PNnp0HF9QgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeApMZ1uSFjprgU9HmhYKEc9GxPWYSpZXK+XZiHguIv6Um8q19uciwrpBAPA0S/+WdNb/ujnzyvTR2iu5T3LZa0T86Ofv/Oz9hUZjcy7iSvLP/eONB53jpVG0HwA4S3ee7s7jXR8/vLfY3YbZno++1V5ctBV3r7O1ayZjMnvNZ7mGa/9KOvttre8rE+cQf/d+RHzupP4nWW7kemfl06PxW7GfHWr89FD8NKtrv7b+LT57Dm2BcfNBa/x586T7L40b2evJ938+G6EeX3f82zs2/qX7499En/HvxqAxXv39t48dbM606+5HfGEyYq/74T3jTzd+0if+KwPG/8uLX3q5X13zFxE346T+J4diFRvVjWJ9e+f2anVhpbxSXi+V5ufmZ1+/81qpmOWoi91M9XF/f+PWc/3it/p/rU/8/Bn9/+qA/f/lf9/9wZdPif/1r5x8/V84JX5rTvzagPEXrv0m36+uFX+pT//Puv63Boz/4V93lgY8FQAYgvr2ztpCpVLefPxC/tRz0vMIMUAhidi94BAHhdyvfvLW2SfnhtaeRyxEv6qJJ6WFl6aQezKaMUBh1CMTcNEObvpRtwQAAAAAAAAAAAAAAOhnoL8HuvppTj5eGHEXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuMT+HwAA//99VtW2") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000080)="10", 0xffffff27, 0x8000c60) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 54.985118711s ago: executing program 6 (id=5765): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 54.873904222s ago: executing program 6 (id=5757): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f00000000c0)) 54.649132276s ago: executing program 6 (id=5763): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000200)={[{@dots}, {@fat=@discard}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@errors_continue}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {}, {@nodots}, {@fat=@debug}, {@nodots}, {@fat=@showexec}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@dots}, {@dots}]}, 0x1, 0x1f0, &(0x7f0000000300)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r2, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 54.293681702s ago: executing program 6 (id=5777): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r0, &(0x7f0000002880)=""/4085, 0xff5) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 54.263912082s ago: executing program 40 (id=5777): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r0, &(0x7f0000002880)=""/4085, 0xff5) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 5.464166052s ago: executing program 1 (id=6447): r0 = gettid() socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x40080) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 4.538308067s ago: executing program 1 (id=6462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x161281, 0x0) 4.145260793s ago: executing program 4 (id=6469): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 3.838027378s ago: executing program 3 (id=6471): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 3.821420939s ago: executing program 4 (id=6472): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000)=@filename='./bus\x00', &(0x7f0000000180)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x40, &(0x7f0000000300)='trans=rdma,') 1.983117288s ago: executing program 1 (id=6476): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00'}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x41000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x40000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) alarm(0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c) 1.827817751s ago: executing program 7 (id=6480): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000400), &(0x7f00000004c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x8) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.598723754s ago: executing program 1 (id=6481): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0x22, 0x2, 0x21) 1.583855585s ago: executing program 4 (id=6482): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010102, @in6=@remote, 0x0, 0x57, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x33}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.472352016s ago: executing program 1 (id=6483): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) syz_open_dev$rtc(0x0, 0x0, 0x20080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.428631177s ago: executing program 7 (id=6484): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee0, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.312555429s ago: executing program 3 (id=6485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x24040000) unshare(0x2c020400) 1.121918782s ago: executing program 3 (id=6487): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$eJzs3cuLXFUaAPCvqtLP9EweMwxJBiaBDGQepKsfDOmemcUMDMzMIjBMwI1CbLsrbUx1V9NVHdNNFh3dZeFCFAVx4d6/wI1ZGQVxrXtxIRGNLagglNxbVUm/KpaxUyV9fz+o9Dn33NR3Thff4da59/YNILNOJf/kIkYi4oOIONSobt3hVOPHxt3rs8krF/X6hc9z6X5JvbVr6/8djIj1iBiMiP//O+Kp3M641dW1KzPlcmm5WS/WFpaK1dW1s5cXZuZL86XF8alz09NTY5MT03s21psvPHPz/Fv/7X/z6+fv3H7xnbeTbo002zaPYy81ht4XRzZtOxARf38UwXqg0BzPUK87wkNJPr9fRcTpNP8PRSH9NIEsqNfr9e/qA+2a1+vAvpVPj4Fz+dGIaJTz/6qPNo7hfx3D+XKlWvvzpcrK4lzjWPlw9OUvXS6XxprfFQ5HXy6pj6fl+/WJbfXJiPQY+KXCUFofna2U57o71QHbHNyW/18V8vnRpBJ/6nXXgG7wlR+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kN2yX/IpP+dP5+86q373+eurq5cqVw9O5fMCQsrs6OzleWl0flKZT69Z2fhh96vXKksjf8lVq4Va6VqrVhdXbu4UFlZrF1M7+u/WOrryqiAThw5eeujXESs/3UofSX6m21yFfa3ej0Xvb4HGeiNQq8nIKBnLP1BdvmOD+zyJ3q3GGzXsLT3fQG6I9/rDgA9c+a483+QVdb/Ibus/0N2OcYHrP9D9lj/h+wa2fn8r/T5P7/Y9OyusYj4ZUR8WOgbaD3rC9gP8p/mmsf/Zw79fmR7a3/um/QUQX9EPPvahVeuzdRqy+PJ9i/uba+92tw+0Yv+A51q5WkrjwGA7Nq4e3229epm3M/+2bgIYWf8A821ycH0HOXwRm7LtQq5Pbp2Yf1GRBzbLX6u+bzzxpmP4Y3CjvhHmz9zjbdI+3sgfW56d+If3xT/d5vin/jJvxXIhlvJ/DO2W/7l05yOe/m3df4Z2aNrJ9rPf/l781+hzfx3ssMYT7/+3Cdt49+IOLFr/Fa8wTTW9vhJ3850GP/OE4/9pl1b/Y3G++wWvyUpFWsLS8Xq6trZ9O/IzZcWx6fOTU9PjU1OTBfTNepia6V6p78de//2g8Y/3CZ+u/H/o9mnP3Y4/m9/+97jpx4Q/w+nd//8j7aJnxj6EU/o/3Li4yfbtSXx59qMP78z/rvD0WqNmOwwfvXl/wx0uCsA0AXV1bUrM+VyaVlBQeEhCgM/j27seaHXMxPwqN1P+l73BAAAAAAAAAAAAOhUNy4n7vUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2g+8DAAD//3bC1tg=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) writev(r0, &(0x7f00000001c0), 0x0) unshare(0x600) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x81) lseek(r1, 0x7ff, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x30, 0x20, 0x301, 0x70bd28, 0x10, {0x2, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x8, 0x2}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) 1.028058904s ago: executing program 3 (id=6489): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x318a054d}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffff7ffffe9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='ext4\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 605.594391ms ago: executing program 1 (id=6490): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0x4e, 0x0) write$binfmt_script(r3, &(0x7f0000000800)={'#! ', './file0'}, 0xb) 605.382431ms ago: executing program 3 (id=6491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x61}, {}, {}, {0x6}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) 603.476311ms ago: executing program 4 (id=6500): r0 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000a, 0x12, r0, 0x2482f000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r1) 603.264231ms ago: executing program 7 (id=6493): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000}) 563.022731ms ago: executing program 4 (id=6494): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 437.824713ms ago: executing program 2 (id=6495): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYBLOB="0000000000000000000000000000000000000000ad9f40d4aa59bdd4c34f68241673681367e83708fd1af88a047f298fa5bedf55d100ad04f4b26e86f5bd77b48f4a01d19d279655cce7e0ae6811bc71c0caef0fc5885a506c5e90239bc32964439df47605b3cc44abf66c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 325.651555ms ago: executing program 7 (id=6496): getegid() r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000024c0)=[{{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x1, 0xe0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) timerfd_create(0x1, 0x80800) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_gettime(r0, 0x0) 295.585256ms ago: executing program 4 (id=6497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) 252.141796ms ago: executing program 7 (id=6498): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x2, 0x10000, 0x2, 0xffffffff}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) syz_io_uring_submit(r0, r1, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) waitid(0x1, 0x0, &(0x7f0000000300), 0x3, 0x0) 248.406366ms ago: executing program 2 (id=6499): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) r5 = openat$cgroup(r3, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000500), 0x12) 220.996386ms ago: executing program 7 (id=6501): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) syz_emit_ethernet(0x16, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)=[0xffffffffffffffff]}, 0x1) 203.661477ms ago: executing program 3 (id=6502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) 134.875438ms ago: executing program 2 (id=6503): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='vm_unmapped_area\x00', 0xffffffffffffffff, 0x0, 0xffffffff}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x4a, 0x40, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82604, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x9, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x40542, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) syz_io_uring_setup(0x52, &(0x7f0000000080)={0x0, 0x8b48, 0x2, 0x0, 0x3d8}, 0x0, 0x0) 79.285789ms ago: executing program 2 (id=6504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 257.471µs ago: executing program 2 (id=6505): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 0s ago: executing program 2 (id=6506): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0xda54, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110b04, 0x513d797, 0x0, 0x3, 0x2, 0xad30, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14039, 0xba, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c00feff000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): me="NETLINK" dev="sockfs" ino=63770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_xfrm_socket permissive=1 trawcon=":" [ 323.587889][T18880] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #19: comm syz.3.5446: corrupted inode contents [ 323.602046][T18880] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.5446: mark_inode_dirty error [ 323.614854][T18880] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.5446: mark inode dirty (error -117) [ 323.628927][T18880] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 323.640401][T18901] xt_hashlimit: size too large, truncated to 1048576 [ 323.665637][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 323.774876][T18905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5458'. [ 323.827579][T18907] loop1: detected capacity change from 0 to 512 [ 323.841772][T18907] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 323.849971][T18907] EXT4-fs (loop1): orphan cleanup on readonly fs [ 323.858967][T18912] siw: device registration error -23 [ 323.859084][T18907] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5456: invalid indirect mapped block 256 (level 2) [ 323.883111][T18907] EXT4-fs (loop1): 2 truncates cleaned up [ 323.891723][T18907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.933136][ T29] audit: type=1326 audit(2000000130.076:12254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18915 comm="syz.3.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 323.957263][ T29] audit: type=1326 audit(2000000130.076:12255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18915 comm="syz.3.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 323.999837][ T29] audit: type=1326 audit(2000000130.076:12256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18915 comm="syz.3.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 324.023539][ T29] audit: type=1326 audit(2000000130.076:12257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18915 comm="syz.3.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 324.047418][ T29] audit: type=1326 audit(2000000130.076:12258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18915 comm="syz.3.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 324.071119][ T29] audit: type=1326 audit(2000000130.076:12259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18915 comm="syz.3.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 324.180469][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.420189][T18938] syzkaller0: entered promiscuous mode [ 324.425868][T18938] syzkaller0: entered allmulticast mode [ 324.539901][T18945] loop6: detected capacity change from 0 to 8192 [ 324.624219][T18953] tipc: New replicast peer: 255.255.255.255 [ 324.630492][T18953] tipc: Enabled bearer , priority 10 [ 324.643702][T18945] loop6: p1 p2 < > p3 p4 < p5 > [ 324.648841][T18945] loop6: partition table partially beyond EOD, truncated [ 324.669454][T18945] loop6: p1 size 100663296 extends beyond EOD, truncated [ 324.708493][T18962] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5479'. [ 324.728920][T18945] loop6: p2 start 591104 is beyond EOD, truncated [ 324.735563][T18945] loop6: p3 start 33572980 is beyond EOD, truncated [ 324.759483][T18945] loop6: p5 size 100663296 extends beyond EOD, truncated [ 324.937970][T18974] bridge: RTM_NEWNEIGH with invalid ether address [ 325.294313][T18994] lo speed is unknown, defaulting to 1000 [ 325.366641][T19000] loop3: detected capacity change from 0 to 128 [ 325.481009][T19008] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 325.491277][T19006] loop6: detected capacity change from 0 to 4096 [ 325.498012][T19006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 325.530696][T19012] netlink: 'syz.1.5497': attribute type 10 has an invalid length. [ 325.538771][T19012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5497'. [ 325.549749][T19006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.585872][T19008] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 325.605409][T19012] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 325.676009][T19008] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 325.778642][T19008] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 325.850268][T19008] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.881758][T19008] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.887243][ T4946] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.939762][T19008] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.952087][T19008] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.969951][T19034] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.046881][T19034] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.099175][T19034] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.162876][T19034] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.229183][T19034] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.270081][T19034] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.314197][T19034] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.337530][T19034] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.461105][T19052] 9pnet_fd: Insufficient options for proto=fd [ 326.483560][T19050] vlan0: entered allmulticast mode [ 326.614612][T19063] loop3: detected capacity change from 0 to 512 [ 326.643243][T19063] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 326.675968][T19063] EXT4-fs (loop3): 1 truncate cleaned up [ 326.699557][T19063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.889585][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.015098][T19090] loop6: detected capacity change from 0 to 2048 [ 327.102353][T19090] loop6: p1 < > p4 [ 327.132544][T19090] loop6: p4 size 8388608 extends beyond EOD, truncated [ 327.240299][T19101] loop3: detected capacity change from 0 to 128 [ 327.296733][T19104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19104 comm=syz.6.5535 [ 327.309704][T19105] netlink: 'syz.1.5533': attribute type 13 has an invalid length. [ 327.326939][T19105] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 327.348736][T19105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.574133][T19117] loop3: detected capacity change from 0 to 1024 [ 327.617579][T19117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.631880][T19117] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.5540: Allocating blocks 385-513 which overlap fs metadata [ 327.667878][T19116] EXT4-fs (loop3): pa ffff8881005ebe00: logic 16, phys. 129, len 24 [ 327.676078][T19116] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 327.707851][T19123] loop1: detected capacity change from 0 to 512 [ 327.734667][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.769367][T19126] tipc: New replicast peer: 255.0.0.255 [ 327.775067][T19126] tipc: Enabled bearer , priority 10 [ 327.915794][T19137] all: renamed from lo [ 328.013987][T19146] loop3: detected capacity change from 0 to 512 [ 328.024298][T19146] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 328.038131][T19146] EXT4-fs (loop3): 1 truncate cleaned up [ 328.044581][T19146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.110303][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.173372][T19155] loop1: detected capacity change from 0 to 1024 [ 328.204867][T19156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5552'. [ 328.205006][T19155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.304079][T19155] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 328.340142][T19166] loop3: detected capacity change from 0 to 2048 [ 328.383859][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.416227][T19166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.479429][T19175] lo speed is unknown, defaulting to 1000 [ 328.562447][T19166] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 328.575237][T19166] EXT4-fs (loop3): This should not happen!! Data will be lost [ 328.575237][T19166] [ 328.585055][T19166] EXT4-fs (loop3): Total free blocks count 0 [ 328.591157][T19166] EXT4-fs (loop3): Free/Dirty block details [ 328.597082][T19166] EXT4-fs (loop3): free_blocks=0 [ 328.602148][T19166] EXT4-fs (loop3): dirty_blocks=0 [ 328.607215][T19166] EXT4-fs (loop3): Block reservation details [ 328.613384][T19166] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 328.625815][T19185] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 328.749237][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.777517][T19197] netlink: 'syz.6.5570': attribute type 10 has an invalid length. [ 328.794779][T19197] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.803942][T19197] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.812464][T19197] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.820841][T19197] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.832019][T19197] team0 (unregistering): Port device geneve1 removed [ 328.842797][T19211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5572'. [ 328.936837][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 328.936855][ T29] audit: type=1326 audit(2000000134.753:12388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.1.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 328.973028][ T29] audit: type=1326 audit(2000000134.753:12389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.1.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 328.996885][ T29] audit: type=1326 audit(2000000134.791:12390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.1.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 329.020688][ T29] audit: type=1326 audit(2000000134.791:12391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.1.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 329.044433][ T29] audit: type=1326 audit(2000000134.791:12392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.1.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 329.068163][ T29] audit: type=1326 audit(2000000134.791:12393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.1.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 329.091786][ T29] audit: type=1326 audit(2000000134.791:12394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.1.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 329.115386][ T29] audit: type=1326 audit(2000000134.791:12395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.1.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 329.139012][ T29] audit: type=1326 audit(2000000134.791:12396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.1.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 329.162673][ T29] audit: type=1326 audit(2000000134.791:12397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.1.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 329.352185][T19238] hub 2-0:1.0: USB hub found [ 329.357035][T19238] hub 2-0:1.0: 8 ports detected [ 329.464979][T19253] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5588'. [ 329.484441][T19258] loop3: detected capacity change from 0 to 512 [ 329.502759][T19258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 329.541606][T19258] EXT4-fs (loop3): 1 truncate cleaned up [ 329.547911][T19258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.680680][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.818643][T19284] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.862899][T19287] lo speed is unknown, defaulting to 1000 [ 329.890896][T19284] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.974250][T19284] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.003829][T19298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19298 comm=syz.3.5606 [ 330.063959][T19284] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.137844][T19284] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.152786][T19284] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.167837][T19284] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.181087][T19284] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.243129][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5609'. [ 330.252686][T19311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5609'. [ 330.266095][T19311] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.274442][T19311] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.282707][T19311] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.291231][T19311] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.335684][T19317] loop3: detected capacity change from 0 to 128 [ 330.369675][T19316] lo speed is unknown, defaulting to 1000 [ 330.398089][T19325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5615'. [ 330.786012][T19353] xt_hashlimit: size too large, truncated to 1048576 [ 330.792836][T19353] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 331.070436][T19355] loop6: detected capacity change from 0 to 1764 [ 331.079942][T19355] veth0: entered promiscuous mode [ 331.085624][T19355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5627'. [ 331.101460][T19355] veth0 (unregistering): left promiscuous mode [ 331.281363][T19368] sch_fq: defrate 0 ignored. [ 331.331572][T19370] lo speed is unknown, defaulting to 1000 [ 331.500467][T19362] loop1: detected capacity change from 0 to 128 [ 331.603612][T19382] syz.1.5630: attempt to access beyond end of device [ 331.603612][T19382] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 331.674419][T19362] syz.1.5630: attempt to access beyond end of device [ 331.674419][T19362] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 331.697931][T19362] syz.1.5630: attempt to access beyond end of device [ 331.697931][T19362] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 331.742163][T19362] syz.1.5630: attempt to access beyond end of device [ 331.742163][T19362] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 331.763110][T19382] syz.1.5630: attempt to access beyond end of device [ 331.763110][T19382] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 331.787063][T19362] syz.1.5630: attempt to access beyond end of device [ 331.787063][T19362] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 331.804075][T19382] syz.1.5630: attempt to access beyond end of device [ 331.804075][T19382] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 331.823830][T19362] syz.1.5630: attempt to access beyond end of device [ 331.823830][T19362] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 331.845777][T19382] syz.1.5630: attempt to access beyond end of device [ 331.845777][T19382] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 331.921945][T19396] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 331.968091][T19396] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 332.032442][T19396] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 332.064527][T19396] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 332.114219][T19396] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 332.133030][T19396] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 332.151901][T19396] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 332.190951][T19396] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 332.212701][T19401] veth0: entered promiscuous mode [ 332.218685][T19401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5640'. [ 332.245044][T19401] veth0 (unregistering): left promiscuous mode [ 332.444091][T19413] loop3: detected capacity change from 0 to 128 [ 332.458897][T19413] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 332.486712][ T5244] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 332.549060][T19420] loop1: detected capacity change from 0 to 2048 [ 332.581736][T19420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.725143][T19420] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 332.737760][T19420] EXT4-fs (loop1): This should not happen!! Data will be lost [ 332.737760][T19420] [ 332.747480][T19420] EXT4-fs (loop1): Total free blocks count 0 [ 332.753546][T19420] EXT4-fs (loop1): Free/Dirty block details [ 332.759929][T19420] EXT4-fs (loop1): free_blocks=0 [ 332.764943][T19420] EXT4-fs (loop1): dirty_blocks=0 [ 332.770053][T19420] EXT4-fs (loop1): Block reservation details [ 332.776141][T19420] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 332.822110][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.908795][T19442] loop1: detected capacity change from 0 to 512 [ 332.915873][T19442] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 332.938653][T19442] EXT4-fs (loop1): 1 truncate cleaned up [ 332.944984][T19442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.010416][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.014872][T19446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5660'. [ 333.037550][T19447] ip6gretap1: entered allmulticast mode [ 333.105863][T19457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5664'. [ 333.115036][T19457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5664'. [ 333.362762][T19475] loop6: detected capacity change from 0 to 164 [ 333.394741][T19477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5672'. [ 333.538950][T19488] xt_hashlimit: size too large, truncated to 1048576 [ 333.545884][T19488] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 333.646557][T19495] loop6: detected capacity change from 0 to 512 [ 333.653753][T19495] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 333.666744][T19495] EXT4-fs (loop6): 1 truncate cleaned up [ 333.678026][T19495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.715548][ T4946] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.130971][T19521] vlan0: entered allmulticast mode [ 334.136208][T19521] bridge_slave_0: entered allmulticast mode [ 334.480415][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 334.480432][ T29] audit: type=1326 audit(2000000139.945:12604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19530 comm="syz.1.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 334.516119][ T29] audit: type=1326 audit(2000000139.945:12605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19530 comm="syz.1.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 334.540023][ T29] audit: type=1326 audit(2000000139.945:12606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19530 comm="syz.1.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 334.564054][ T29] audit: type=1326 audit(2000000139.945:12607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19530 comm="syz.1.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 334.588750][T19538] netlink: 'syz.6.5695': attribute type 10 has an invalid length. [ 334.596682][T19538] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5695'. [ 334.618320][T19533] tipc: New replicast peer: 255.255.255.255 [ 334.624506][T19533] tipc: Enabled bearer , priority 10 [ 334.649564][T19538] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 334.779446][T19542] xt_hashlimit: size too large, truncated to 1048576 [ 334.786210][T19542] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 334.956111][T19545] tipc: Bearer : already 2 bearers with priority 10 [ 334.963772][T19545] tipc: Bearer : trying with adjusted priority [ 335.042227][T19545] tipc: New replicast peer: 10.1.1.2 [ 335.047788][T19545] tipc: Enabled bearer , priority 9 [ 335.786926][T19562] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.796944][T19562] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.810378][T19564] netlink: 'syz.6.5714': attribute type 1 has an invalid length. [ 335.837744][T19564] 8021q: adding VLAN 0 to HW filter on device bond5 [ 335.888678][T19562] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.898601][T19562] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.939190][T19571] loop1: detected capacity change from 0 to 128 [ 335.961089][T19564] 8021q: adding VLAN 0 to HW filter on device bond5 [ 335.970194][T19564] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 336.022042][T19564] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 336.062855][T19562] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.072748][T19562] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.137764][T19562] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.147605][T19562] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.194590][ T29] audit: type=1326 audit(2000000141.544:12608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19577 comm="syz.6.5709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbea9be169 code=0x7ffc0000 [ 336.218311][ T29] audit: type=1326 audit(2000000141.544:12609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19577 comm="syz.6.5709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbea9be169 code=0x7ffc0000 [ 336.276238][T19562] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.284626][T19562] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.302712][ T29] audit: type=1326 audit(2000000141.591:12610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19577 comm="syz.6.5709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbea9be169 code=0x7ffc0000 [ 336.326464][ T29] audit: type=1326 audit(2000000141.591:12611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19577 comm="syz.6.5709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbea9be169 code=0x7ffc0000 [ 336.350349][ T29] audit: type=1326 audit(2000000141.591:12612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19577 comm="syz.6.5709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbea9be169 code=0x7ffc0000 [ 336.374114][ T29] audit: type=1326 audit(2000000141.591:12613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19577 comm="syz.6.5709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbbea9be169 code=0x7ffc0000 [ 336.411935][T19562] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.420266][T19562] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.464140][T19562] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.473756][T19562] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.500778][T19562] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.509187][T19562] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.521078][T19581] loop6: detected capacity change from 0 to 512 [ 336.530723][T19583] loop1: detected capacity change from 0 to 128 [ 336.531301][T19581] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 336.564229][T19581] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc128, mo2=0002] [ 336.572346][T19581] System zones: 1-12 [ 336.585743][T19581] EXT4-fs (loop6): 1 truncate cleaned up [ 336.592021][T19581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.628552][T19587] vlan2: entered allmulticast mode [ 336.680502][T19581] lo speed is unknown, defaulting to 1000 [ 336.752199][T19592] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5725'. [ 336.788812][T19592]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.797897][T19592] bond_slave_0: left allmulticast mode [ 336.808271][T19592]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.819431][ T4946] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.819490][T19592] bond_slave_1: left allmulticast mode [ 336.819861][T19592]  (unregistering): Released all slaves [ 336.927090][T19606] geneve0: entered allmulticast mode [ 337.043441][T19623] loop1: detected capacity change from 0 to 512 [ 337.052007][T19623] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 337.062087][T19617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.063074][T19623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc128, mo2=0002] [ 337.085532][T19623] System zones: 1-12 [ 337.093054][T19623] EXT4-fs (loop1): 1 truncate cleaned up [ 337.099327][T19623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.131536][T19623] lo speed is unknown, defaulting to 1000 [ 337.183011][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.394940][T19647] xt_connbytes: Forcing CT accounting to be enabled [ 337.402197][T19647] set match dimension is over the limit! [ 337.603156][T19660] loop6: detected capacity change from 0 to 512 [ 337.634244][T19660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 337.662514][T19660] ext4 filesystem being mounted at /1051/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.815634][T19670] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #19: comm syz.6.5743: corrupted inode contents [ 337.870706][T19670] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #19: comm syz.6.5743: mark_inode_dirty error [ 337.889051][T19670] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #19: comm syz.6.5743: corrupted inode contents [ 337.926998][T19670] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #19: comm syz.6.5743: mark_inode_dirty error [ 337.939816][T19684] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5761'. [ 337.958169][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5751'. [ 337.979469][T19670] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #19: comm syz.6.5743: mark inode dirty (error -117) [ 337.992932][T19670] EXT4-fs warning (device loop6): ext4_evict_inode:279: xattr delete (err -117) [ 338.024284][ T4946] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 338.154730][T19701] loop6: detected capacity change from 0 to 512 [ 338.162599][T19701] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 338.176682][T19701] EXT4-fs (loop6): invalid journal inode [ 338.182603][T19701] EXT4-fs (loop6): can't get journal size [ 338.189715][T19701] EXT4-fs (loop6): 1 truncate cleaned up [ 338.195846][T19701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.332559][T19709] bridge: RTM_NEWNEIGH with invalid ether address [ 338.364576][ T4946] EXT4-fs error (device loop6): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 338.380238][ T4946] EXT4-fs error (device loop6): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 338.499970][T19723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5770'. [ 338.524789][T19723] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 338.638981][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.890538][T19765] xt_hashlimit: max too large, truncated to 1048576 [ 338.897011][T19750] lo speed is unknown, defaulting to 1000 [ 338.943958][T19772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5788'. [ 338.992072][T19750] chnl_net:caif_netlink_parms(): no params data found [ 339.053249][T19779] loop3: detected capacity change from 0 to 2048 [ 339.081681][T19779] EXT4-fs (loop3): failed to initialize system zone (-117) [ 339.092775][T19779] EXT4-fs (loop3): mount failed [ 339.227933][ T5282]  (unregistering): Released all slaves [ 339.236231][ T5282] bond1 (unregistering): Released all slaves [ 339.245186][ T5282] bond2 (unregistering): Released all slaves [ 339.253755][ T5282] bond0 (unregistering): Released all slaves [ 339.262209][ T5282] bond3 (unregistering): Released all slaves [ 339.270808][ T5282] bond4 (unregistering): Released all slaves [ 339.281069][ T5282] bond5 (unregistering): Released all slaves [ 339.407813][ T5282] tipc: Disabling bearer [ 339.412830][ T5282] tipc: Disabling bearer [ 339.418005][ T5282] tipc: Disabling bearer [ 339.423259][ T5282] tipc: Left network mode [ 339.423350][T19750] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.434714][T19750] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.442128][T19750] bridge_slave_0: entered allmulticast mode [ 339.448734][T19750] bridge_slave_0: entered promiscuous mode [ 339.515032][T19750] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.522141][T19750] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.526135][T19820] netlink: 'syz.4.5803': attribute type 4 has an invalid length. [ 339.529621][T19750] bridge_slave_1: entered allmulticast mode [ 339.537145][T19820] netlink: 'syz.4.5803': attribute type 4 has an invalid length. [ 339.537160][T19820] netlink: 'syz.4.5803': attribute type 8 has an invalid length. [ 339.543929][T19750] bridge_slave_1: entered promiscuous mode [ 339.551130][T19820] netlink: 'syz.4.5803': attribute type 9 has an invalid length. [ 339.572529][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5803'. [ 339.584756][T19816] lo speed is unknown, defaulting to 1000 [ 339.595705][T19750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.609069][T19750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.641912][T19750] team0: Port device team_slave_0 added [ 339.654951][T19750] team0: Port device team_slave_1 added [ 339.724117][T19750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.731188][T19750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.757320][T19750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.786032][T19750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.793043][T19750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.818998][T19750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.848519][T19750] hsr_slave_0: entered promiscuous mode [ 339.854894][T19750] hsr_slave_1: entered promiscuous mode [ 339.869149][T19750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.876916][T19750] Cannot create hsr debugfs directory [ 339.949259][ T5282] IPVS: stop unused estimator thread 0... [ 340.013569][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 340.013587][ T29] audit: type=1326 audit(2000000145.117:12994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19840 comm="syz.3.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 340.078654][T19843] lo speed is unknown, defaulting to 1000 [ 340.101942][ T29] audit: type=1326 audit(2000000145.146:12995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19840 comm="syz.3.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 340.125719][ T29] audit: type=1326 audit(2000000145.146:12996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19840 comm="syz.3.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 340.149372][ T29] audit: type=1326 audit(2000000145.146:12997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19840 comm="syz.3.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 340.173244][ T29] audit: type=1326 audit(2000000145.146:12998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19840 comm="syz.3.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 340.196946][ T29] audit: type=1326 audit(2000000145.146:12999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19840 comm="syz.3.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 340.200055][T19848] loop3: detected capacity change from 0 to 4096 [ 340.220684][ T29] audit: type=1326 audit(2000000145.146:13000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19840 comm="syz.3.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 340.250527][ T29] audit: type=1326 audit(2000000145.146:13001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19840 comm="syz.3.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 340.274242][ T29] audit: type=1326 audit(2000000145.146:13002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19840 comm="syz.3.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 340.279557][T19848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.298072][ T29] audit: type=1326 audit(2000000145.155:13003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19840 comm="syz.3.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abbece169 code=0x7ffc0000 [ 340.358959][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.420431][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5813'. [ 340.435439][T19858] lo speed is unknown, defaulting to 1000 [ 340.633293][T19750] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 340.641980][T19750] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 340.652953][T19750] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 340.661737][T19750] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 340.670869][T19880] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5822'. [ 340.682373][T19876] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5822'. [ 340.741567][T19750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.764699][T19750] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.778501][T19884] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5826'. [ 340.798497][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.805677][ T5244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.831152][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.838324][ T5244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.877795][T19891] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 340.895655][T19893] netlink: 'syz.4.5830': attribute type 13 has an invalid length. [ 340.906460][T19750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.984765][T19750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.161940][T19923] dummy0 speed is unknown, defaulting to 1000 [ 341.168083][T19923] dummy0 speed is unknown, defaulting to 1000 [ 341.183620][T19920] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 341.188011][T19750] veth0_vlan: entered promiscuous mode [ 341.193409][T19920] buffer_io_error: 22 callbacks suppressed [ 341.193434][T19920] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 341.212662][T19750] veth1_vlan: entered promiscuous mode [ 341.212981][T19920] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 341.227239][T19920] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 341.229611][T19750] veth0_macvtap: entered promiscuous mode [ 341.235710][T19920] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 341.249786][T19920] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 341.258229][T19920] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 341.262657][T19923] dummy0 speed is unknown, defaulting to 1000 [ 341.266608][T19920] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 341.278956][T19750] veth1_macvtap: entered promiscuous mode [ 341.281129][T19920] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 341.295309][T19920] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 341.298842][T19923] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 341.303671][T19920] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 341.304130][T19920] I/O error, dev loop7, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 341.317786][T19750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.319341][T19920] I/O error, dev loop7, sector 129 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 341.345895][T19920] I/O error, dev loop7, sector 130 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 341.355565][T19920] I/O error, dev loop7, sector 131 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 341.357210][T19923] dummy0 speed is unknown, defaulting to 1000 [ 341.365219][T19920] I/O error, dev loop7, sector 132 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 341.365251][T19920] I/O error, dev loop7, sector 133 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 341.383128][T19750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.390481][T19920] I/O error, dev loop7, sector 134 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 341.400729][T19923] dummy0 speed is unknown, defaulting to 1000 [ 341.407410][T19920] I/O error, dev loop7, sector 135 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 341.423187][T19920] I/O error, dev loop7, sector 136 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 341.444432][T19923] dummy0 speed is unknown, defaulting to 1000 [ 341.456295][T19750] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.465153][T19750] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.474000][T19750] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.482769][T19750] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.509460][T19923] dummy0 speed is unknown, defaulting to 1000 [ 341.524713][T19923] dummy0 speed is unknown, defaulting to 1000 [ 341.531749][T19932] lo speed is unknown, defaulting to 1000 [ 341.549205][T19923] dummy0 speed is unknown, defaulting to 1000 [ 341.573087][T19932] dummy0 speed is unknown, defaulting to 1000 [ 341.638199][T19943] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 341.654387][T19940] IPVS: stopping master sync thread 19943 ... [ 341.671846][T19945] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.739427][T19945] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.885063][T19945] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.029151][T19945] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.231137][T19963] __nla_validate_parse: 3 callbacks suppressed [ 342.231166][T19963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5850'. [ 343.087568][T19983] netlink: 'syz.2.5858': attribute type 10 has an invalid length. [ 343.095515][T19983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5858'. [ 343.116713][T19983] dummy0: entered promiscuous mode [ 343.122235][T19983] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 343.153823][T19969] loop1: detected capacity change from 0 to 4096 [ 343.224229][T19969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.261912][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5862'. [ 343.319495][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.323246][T19998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5865'. [ 343.337915][T19998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5865'. [ 343.379072][T19945] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.390739][T19945] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.400150][T20002] ALSA: seq fatal error: cannot create timer (-19) [ 343.414508][T19945] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.429825][T19945] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.457092][T20009] xt_hashlimit: invalid interval [ 343.487290][T20015] loop3: detected capacity change from 0 to 1024 [ 343.517274][T20015] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.518952][T20016] netlink: 460 bytes leftover after parsing attributes in process `syz.7.5869'. [ 343.537466][T20015] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 343.566487][T20015] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 343.599595][T20015] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm +}[@: lblock 2 mapped to illegal pblock 2 (length 1) [ 343.629951][T20015] EXT4-fs (loop3): Remounting filesystem read-only [ 343.636765][T20015] EXT4-fs (loop3): 1 orphan inode deleted [ 343.681960][T20015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.728876][T20020] lo speed is unknown, defaulting to 1000 [ 343.739322][T20020] dummy0 speed is unknown, defaulting to 1000 [ 343.887382][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.969336][T20042] ALSA: seq fatal error: cannot create timer (-19) [ 345.374059][T20064] lo speed is unknown, defaulting to 1000 [ 345.391042][T20064] dummy0 speed is unknown, defaulting to 1000 [ 345.454588][T20069] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5889'. [ 345.548393][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5890'. [ 345.570645][T20071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5890'. [ 345.946397][T20083] syz_tun: entered allmulticast mode [ 345.953657][T20082] syz_tun: left allmulticast mode [ 345.976353][T20087] loop3: detected capacity change from 0 to 512 [ 345.983675][T20087] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 345.998106][T20087] EXT4-fs (loop3): 1 truncate cleaned up [ 346.005302][T20087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.037322][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.214728][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5904'. [ 346.224069][T20104] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 346.329165][T20112] netlink: 'syz.7.5908': attribute type 13 has an invalid length. [ 346.423037][T20112] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.430479][T20112] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.483312][T20112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.493569][T20112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.527788][T20112] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.536222][T20112] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.544671][T20112] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.553309][T20112] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.566397][T20125] loop1: detected capacity change from 0 to 512 [ 346.573502][T20125] EXT4-fs: Ignoring removed oldalloc option [ 346.579976][T20125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 346.616651][T20130] netlink: zone id is out of range [ 346.616927][T20129] lo speed is unknown, defaulting to 1000 [ 346.621782][T20130] netlink: zone id is out of range [ 346.621792][T20130] netlink: zone id is out of range [ 346.621855][T20130] netlink: zone id is out of range [ 346.621863][T20130] netlink: zone id is out of range [ 346.621869][T20130] netlink: zone id is out of range [ 346.621876][T20130] netlink: zone id is out of range [ 346.628347][T20129] dummy0 speed is unknown, defaulting to 1000 [ 346.632744][T20130] netlink: zone id is out of range [ 346.632754][T20130] netlink: zone id is out of range [ 346.638497][T20125] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 346.644300][T20121] loop3: detected capacity change from 0 to 128 [ 346.660216][T20125] System zones: 1-12 [ 346.720368][T20125] EXT4-fs (loop1): 1 truncate cleaned up [ 346.727289][T20125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.728353][T20121] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 346.747740][T20121] FAT-fs (loop3): Filesystem has been set read-only [ 346.756900][T20121] syz.3.5905: attempt to access beyond end of device [ 346.756900][T20121] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 346.775370][T20121] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 346.783495][T20121] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 346.792009][T20121] syz.3.5905: attempt to access beyond end of device [ 346.792009][T20121] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 346.806513][T20121] syz.3.5905: attempt to access beyond end of device [ 346.806513][T20121] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 346.820822][T20121] syz.3.5905: attempt to access beyond end of device [ 346.820822][T20121] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 346.858494][T20121] syz.3.5905: attempt to access beyond end of device [ 346.858494][T20121] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 346.985957][T20147] IPVS: Error joining to the multicast group [ 347.005764][T20145] lo speed is unknown, defaulting to 1000 [ 347.016266][T20145] dummy0 speed is unknown, defaulting to 1000 [ 347.053167][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.080803][T20155] loop1: detected capacity change from 0 to 128 [ 347.092202][T20155] FAT-fs (loop1): Directory bread(block 32) failed [ 347.105180][T20155] FAT-fs (loop1): Directory bread(block 33) failed [ 347.111859][T20155] FAT-fs (loop1): Directory bread(block 34) failed [ 347.125901][T20155] FAT-fs (loop1): Directory bread(block 35) failed [ 347.136033][T20155] FAT-fs (loop1): Directory bread(block 36) failed [ 347.157815][T20155] FAT-fs (loop1): Directory bread(block 37) failed [ 347.164473][T20155] FAT-fs (loop1): Directory bread(block 38) failed [ 347.179226][T20155] FAT-fs (loop1): Directory bread(block 39) failed [ 347.190122][T20155] FAT-fs (loop1): Directory bread(block 40) failed [ 347.200540][T20155] FAT-fs (loop1): Directory bread(block 41) failed [ 347.305047][T20155] syz.1.5924: attempt to access beyond end of device [ 347.305047][T20155] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 347.335109][T20155] FAT-fs (loop1): Filesystem has been set read-only [ 347.364301][T20155] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 347.450507][T20172] loop7: detected capacity change from 0 to 256 [ 347.475363][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 347.475386][ T29] audit: type=1326 audit(2000000152.096:13093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20173 comm="syz.1.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 347.508757][ T29] audit: type=1326 audit(2000000152.096:13094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.4.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000b1fe169 code=0x7ffc0000 [ 347.533137][ T29] audit: type=1326 audit(2000000152.096:13095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.4.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f000b1fe169 code=0x7ffc0000 [ 347.558111][ T29] audit: type=1326 audit(2000000152.096:13096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.4.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000b1fe169 code=0x7ffc0000 [ 347.582040][ T29] audit: type=1326 audit(2000000152.096:13097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.4.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f000b1fe169 code=0x7ffc0000 [ 347.605689][ T29] audit: type=1326 audit(2000000152.096:13098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.4.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000b1fe169 code=0x7ffc0000 [ 347.630087][ T29] audit: type=1326 audit(2000000152.096:13099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.4.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000b1fe169 code=0x7ffc0000 [ 347.654187][ T29] audit: type=1326 audit(2000000152.096:13100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.4.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f000b1fe169 code=0x7ffc0000 [ 347.678138][ T29] audit: type=1326 audit(2000000152.096:13101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.4.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000b1fe169 code=0x7ffc0000 [ 347.702194][ T29] audit: type=1326 audit(2000000152.096:13102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.4.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000b1fe169 code=0x7ffc0000 [ 348.273534][T20202] loop3: detected capacity change from 0 to 512 [ 348.281354][T20200] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.291261][T20200] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.303892][T20202] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.5942: corrupted inode contents [ 348.317099][T20202] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #3: comm syz.3.5942: mark_inode_dirty error [ 348.329885][T20202] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.5942: corrupted inode contents [ 348.343155][T20202] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.5942: mark_inode_dirty error [ 348.364591][T20200] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.374548][T20200] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.395776][T20202] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5942: Failed to acquire dquot type 0 [ 348.414831][T20202] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.5942: corrupted inode contents [ 348.429738][T20207] loop1: detected capacity change from 0 to 512 [ 348.437619][T20207] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 348.448986][T20202] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #16: comm syz.3.5942: mark_inode_dirty error [ 348.461465][T20202] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.5942: corrupted inode contents [ 348.470501][T20207] EXT4-fs (loop1): 1 truncate cleaned up [ 348.479695][T20207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.494148][T20200] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.503988][T20200] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.514719][T20202] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.5942: mark_inode_dirty error [ 348.526330][T20202] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.5942: corrupted inode contents [ 348.538679][T20202] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 348.548330][T20202] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.5942: corrupted inode contents [ 348.560454][T20202] EXT4-fs error (device loop3): ext4_truncate:4255: inode #16: comm syz.3.5942: mark_inode_dirty error [ 348.573077][T20202] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 348.573665][T20200] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.592014][T20200] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.616633][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.625885][T20202] EXT4-fs (loop3): 1 truncate cleaned up [ 348.632495][T20202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.651890][T20202] ext4 filesystem being mounted at /940/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.718168][T20211] __nla_validate_parse: 6 callbacks suppressed [ 348.718188][T20211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5944'. [ 348.721344][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.755157][T20211] hsr_slave_1 (unregistering): left promiscuous mode [ 348.775031][T20200] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.783375][T20200] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.798850][T20200] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.807217][T20200] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.850563][T20200] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.859009][T20200] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.871251][T20200] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.879674][T20200] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.914456][T20219] loop1: detected capacity change from 0 to 2048 [ 348.971005][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5951'. [ 348.980063][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5951'. [ 348.991520][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5951'. [ 349.001303][T20219] loop1: p1 < > p3 [ 349.008585][T20219] loop1: p3 size 134217728 extends beyond EOD, truncated [ 349.033512][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5951'. [ 349.042744][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5951'. [ 349.062171][T20229] random: crng reseeded on system resumption [ 349.071896][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5951'. [ 349.119092][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5951'. [ 349.128100][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5951'. [ 349.137339][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5951'. [ 349.177800][T20237] lo speed is unknown, defaulting to 1000 [ 349.184271][T20237] dummy0 speed is unknown, defaulting to 1000 [ 349.280062][T20244] ip6gre1: entered allmulticast mode [ 349.710615][T20270] lo speed is unknown, defaulting to 1000 [ 349.717110][T20270] dummy0 speed is unknown, defaulting to 1000 [ 349.899945][T20281] netlink: 'syz.3.5972': attribute type 4 has an invalid length. [ 349.933734][T20284] ªªªªªª: renamed from vlan0 (while UP) [ 350.883682][T20323] loop7: detected capacity change from 0 to 512 [ 350.955481][T20323] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.976839][T20323] EXT4-fs: Ignoring removed mblk_io_submit option [ 351.004412][T20323] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 351.041849][T20323] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 351.065416][T20323] EXT4-fs (loop7): 1 truncate cleaned up [ 351.073019][T20323] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.336782][T20323] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 351.381524][T19750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.479954][T20344] lo speed is unknown, defaulting to 1000 [ 351.486268][T20344] dummy0 speed is unknown, defaulting to 1000 [ 351.619099][T20355] macsec0: entered promiscuous mode [ 351.675796][T20361] hsr_slave_1 (unregistering): left promiscuous mode [ 352.824960][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 352.824977][ T29] audit: type=1326 audit(2000000157.100:13160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20379 comm="syz.7.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f883e65cc1f code=0x7ffc0000 [ 352.827879][T20380] loop7: detected capacity change from 0 to 1024 [ 352.831599][ T29] audit: type=1326 audit(2000000157.100:13161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20379 comm="syz.7.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f883e65e1f7 code=0x7ffc0000 [ 352.861977][T20380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 352.884860][ T29] audit: type=1326 audit(2000000157.100:13162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20379 comm="syz.7.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f883e65cad0 code=0x7ffc0000 [ 352.884897][ T29] audit: type=1326 audit(2000000157.100:13163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20379 comm="syz.7.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f883e65dd6b code=0x7ffc0000 [ 352.940765][ T29] audit: type=1326 audit(2000000157.137:13164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20379 comm="syz.7.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f883e65cdca code=0x7ffc0000 [ 352.964594][ T29] audit: type=1326 audit(2000000157.137:13165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20379 comm="syz.7.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f883e65cdca code=0x7ffc0000 [ 352.974094][T20380] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 352.988121][ T29] audit: type=1326 audit(2000000157.137:13166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20379 comm="syz.7.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f883e65c9d7 code=0x7ffc0000 [ 353.020449][ T29] audit: type=1326 audit(2000000157.137:13167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20379 comm="syz.7.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f883e65f90a code=0x7ffc0000 [ 353.051523][T20380] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.085435][ T29] audit: type=1326 audit(2000000157.343:13168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20379 comm="syz.7.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f883e655127 code=0x7ffc0000 [ 353.109075][ T29] audit: type=1326 audit(2000000157.343:13169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20379 comm="syz.7.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f883e5fa359 code=0x7ffc0000 [ 353.167377][T19750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.621463][T20398] lo speed is unknown, defaulting to 1000 [ 353.627813][T20398] dummy0 speed is unknown, defaulting to 1000 [ 353.667274][T20400] loop7: detected capacity change from 0 to 512 [ 353.692049][T20400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 353.705873][T20400] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.726828][T20400] block device autoloading is deprecated and will be removed. [ 353.734638][T20400] syz.7.6010: attempt to access beyond end of device [ 353.734638][T20400] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 353.781726][T19750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 354.978805][T20439] random: crng reseeded on system resumption [ 355.290693][T20447] netlink: 'syz.2.6026': attribute type 12 has an invalid length. [ 355.350115][T20451] __nla_validate_parse: 11 callbacks suppressed [ 355.350152][T20451] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6028'. [ 355.662020][T20461] lo speed is unknown, defaulting to 1000 [ 355.668713][T20461] dummy0 speed is unknown, defaulting to 1000 [ 355.681829][T20458] hub 2-0:1.0: USB hub found [ 355.686597][T20458] hub 2-0:1.0: 8 ports detected [ 355.696631][T20464] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 355.696631][T20464] The task syz.1.6031 (20464) triggered the difference, watch for misbehavior. [ 355.717545][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6033'. [ 355.726542][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6033'. [ 356.855856][T20494] loop3: detected capacity change from 0 to 1024 [ 356.879024][T20498] loop7: detected capacity change from 0 to 256 [ 356.905738][T20494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.936025][T20493] EXT4-fs error (device loop3): ext4_lookup:1781: inode #2: comm syz.3.6045: bad inode number: 15 [ 356.948071][T20493] EXT4-fs (loop3): Remounting filesystem read-only [ 357.026660][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.072508][T20511] loop3: detected capacity change from 0 to 128 [ 357.127789][T20514] bridge0: entered allmulticast mode [ 357.134573][T20514] bridge_slave_1: left allmulticast mode [ 357.140242][T20514] bridge_slave_1: left promiscuous mode [ 357.146020][T20514] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.154258][T20514] bridge_slave_0: left allmulticast mode [ 357.160037][T20514] bridge_slave_0: left promiscuous mode [ 357.165875][T20514] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.220918][T20517] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 357.298080][T20522] lo speed is unknown, defaulting to 1000 [ 357.305744][T20517] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 357.317590][T20522] dummy0 speed is unknown, defaulting to 1000 [ 357.369170][T20517] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 357.433386][T20533] sd 0:0:1:0: device reset [ 357.442400][T20533] netlink: 'syz.3.6061': attribute type 10 has an invalid length. [ 357.452428][T20517] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 357.465176][T20533] batadv0: left promiscuous mode [ 357.470331][T20533] batadv0: left allmulticast mode [ 357.503012][T20535] netlink: 'syz.2.6063': attribute type 4 has an invalid length. [ 357.514805][T20537] loop3: detected capacity change from 0 to 256 [ 357.525849][T20517] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 357.546642][T20517] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 357.584831][T20517] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 357.599254][T20517] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 357.663585][T20549] random: crng reseeded on system resumption [ 357.833080][T20563] loop1: detected capacity change from 0 to 2048 [ 357.893642][T20563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.064384][T20563] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 358.076897][T20563] EXT4-fs (loop1): This should not happen!! Data will be lost [ 358.076897][T20563] [ 358.086626][T20563] EXT4-fs (loop1): Total free blocks count 0 [ 358.092677][T20563] EXT4-fs (loop1): Free/Dirty block details [ 358.098700][T20563] EXT4-fs (loop1): free_blocks=0 [ 358.103667][T20563] EXT4-fs (loop1): dirty_blocks=0 [ 358.109388][T20563] EXT4-fs (loop1): Block reservation details [ 358.115419][T20563] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 358.184155][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 358.184239][ T29] audit: type=1400 audit(2000000162.114:13350): avc: denied { create } for pid=20584 comm="syz.7.6074" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 358.229313][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.238793][ T29] audit: type=1400 audit(2000000162.142:13351): avc: denied { mounton } for pid=20584 comm="syz.7.6074" path="/49/file0" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 358.261985][ T29] audit: type=1400 audit(2000000162.142:13352): avc: denied { mount } for pid=20584 comm="syz.7.6074" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 358.284242][ T29] audit: type=1400 audit(2000000162.142:13353): avc: denied { write } for pid=20584 comm="syz.7.6074" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 358.305317][ T29] audit: type=1400 audit(2000000162.142:13354): avc: denied { open } for pid=20584 comm="syz.7.6074" path="/49/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 358.327895][ T29] audit: type=1400 audit(2000000162.151:13355): avc: denied { unmount } for pid=19750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 358.362889][ T29] audit: type=1400 audit(2000000162.282:13356): avc: denied { unlink } for pid=19750 comm="syz-executor" name="file0" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 358.388825][ T29] audit: type=1400 audit(2000000162.310:13357): avc: denied { bind } for pid=20599 comm="syz.7.6076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 358.410954][ T29] audit: type=1400 audit(2000000162.319:13358): avc: denied { listen } for pid=20599 comm="syz.7.6076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 358.431441][T20598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6075'. [ 358.456595][T20598] ip6gre2: entered allmulticast mode [ 358.547942][ T29] audit: type=1400 audit(2000000162.338:13359): avc: denied { write } for pid=20599 comm="syz.7.6076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 358.691292][T20649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6083'. [ 358.700707][T20649] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 358.992823][T20674] loop7: detected capacity change from 0 to 512 [ 359.050140][T20674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.073029][T20674] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.272181][T19750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.563361][T20676] netlink: 596 bytes leftover after parsing attributes in process `syz.3.6094'. [ 359.584066][T20684] loop7: detected capacity change from 0 to 512 [ 359.605364][T20684] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 359.622795][T20684] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 359.633540][T20684] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 359.666101][T20684] EXT4-fs (loop7): 1 truncate cleaned up [ 359.678562][T20684] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.788651][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6097'. [ 359.797606][T20687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6097'. [ 359.809394][T20687] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 359.925300][T20694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6100'. [ 359.969109][T20694] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 360.088743][T19750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.121906][T20712] pim6reg1: entered promiscuous mode [ 360.127419][T20712] pim6reg1: entered allmulticast mode [ 360.238061][T20662] +}[@ (20662) used greatest stack depth: 6024 bytes left [ 360.257354][T20721] loop1: detected capacity change from 0 to 1024 [ 360.264041][T20721] EXT4-fs: Ignoring removed orlov option [ 360.288969][T20721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.571239][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.639441][T20796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6118'. [ 361.645348][T20798] loop1: detected capacity change from 0 to 1024 [ 361.656085][T20798] EXT4-fs: Ignoring removed bh option [ 361.675894][T20798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.731083][T20809] vhci_hcd: default hub control req: 6011 v02ff i0000 l0 [ 361.734554][T20798] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.6119: Allocating blocks 497-513 which overlap fs metadata [ 361.752540][T20798] EXT4-fs (loop1): pa ffff8881005ebcb0: logic 256, phys. 385, len 8 [ 361.760926][T20798] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 361.858924][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.933156][T20827] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6130'. [ 361.956792][T20827] ipip0: entered promiscuous mode [ 362.210306][T20844] vhci_hcd: default hub control req: 6011 v02ff i0000 l0 [ 362.223337][T20845] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 362.251908][T20848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6135'. [ 362.261026][T20848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6135'. [ 362.308018][T20845] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 362.372085][T20845] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 362.447211][T20845] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 362.472379][T20857] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.480773][T20857] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 362.508373][T20845] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 362.520445][T20845] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 362.531980][T20845] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 362.544546][T20845] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 363.000256][T20874] netlink: 'syz.7.6146': attribute type 10 has an invalid length. [ 363.009468][T20874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.019271][T20874] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 363.056679][T20876] syzkaller0: entered promiscuous mode [ 363.062393][T20876] syzkaller0: entered allmulticast mode [ 363.131394][T20886] netlink: 'syz.7.6152': attribute type 7 has an invalid length. [ 363.189560][T20890] vlan2: entered allmulticast mode [ 363.194930][T20890] veth0: entered allmulticast mode [ 363.211015][T20893] loop3: detected capacity change from 0 to 128 [ 363.370483][T20905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.379011][T20905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.567812][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6162'. [ 363.576755][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6162'. [ 363.775583][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 363.775600][ T29] audit: type=1400 audit(2000000167.343:13455): avc: denied { mount } for pid=20916 comm="syz.4.6164" name="/" dev="configfs" ino=1229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 364.052345][T20923] loop3: detected capacity change from 0 to 1024 [ 364.065983][T20924] netlink: 'syz.2.6165': attribute type 10 has an invalid length. [ 364.084117][T20923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.097114][T20923] ext4 filesystem being mounted at /993/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.119251][ T29] audit: type=1400 audit(2000000167.661:13456): avc: denied { read write } for pid=20921 comm="syz.3.6175" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.142303][ T29] audit: type=1400 audit(2000000167.661:13457): avc: denied { open } for pid=20921 comm="syz.3.6175" path="/993/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.165712][ T29] audit: type=1400 audit(2000000167.661:13458): avc: denied { lock } for pid=20921 comm="syz.3.6175" path="socket:[70988]" dev="sockfs" ino=70988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 364.190054][ T29] audit: type=1400 audit(2000000167.661:13459): avc: denied { ioctl } for pid=20921 comm="syz.3.6175" path="/993/file1/file1" dev="loop3" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.238041][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.439245][T20938] netlink: 'syz.7.6170': attribute type 4 has an invalid length. [ 364.470285][T20940] @: renamed from vlan0 [ 364.470531][ T29] audit: type=1400 audit(2000000167.997:13460): avc: denied { write } for pid=20939 comm="syz.7.6171" name="vlan0" dev="proc" ino=4026533427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 364.497455][ T29] audit: type=1400 audit(2000000167.997:13461): avc: denied { read } for pid=20939 comm="syz.7.6171" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 364.520822][ T29] audit: type=1400 audit(2000000167.997:13462): avc: denied { open } for pid=20939 comm="syz.7.6171" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 364.544982][ T29] audit: type=1400 audit(2000000167.997:13463): avc: denied { ioctl } for pid=20939 comm="syz.7.6171" path="/newroot/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 364.573044][ T29] audit: type=1400 audit(2000000167.997:13464): avc: denied { ioctl } for pid=20939 comm="syz.7.6171" path="socket:[71700]" dev="sockfs" ino=71700 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 364.604496][T20942] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.614402][T20942] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.704040][T20942] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.713890][T20942] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.802683][T20942] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.812624][T20942] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.905270][T20942] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.915146][T20942] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.993751][T20942] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.002312][T20942] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.031798][T20942] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.040183][T20942] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.079718][T20942] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.088179][T20942] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.120579][T20942] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.129951][T20942] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.146500][T20962] loop7: detected capacity change from 0 to 512 [ 365.153235][T20962] EXT4-fs: Ignoring removed nobh option [ 365.176421][T20962] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 365.185688][T20962] EXT4-fs error (device loop7): ext4_orphan_get:1390: inode #13: comm syz.7.6178: casefold flag without casefold feature [ 365.200926][T20962] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.6178: couldn't read orphan inode 13 (err -117) [ 365.215291][T20962] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.236300][T20965] lo speed is unknown, defaulting to 1000 [ 365.242463][T20965] dummy0 speed is unknown, defaulting to 1000 [ 365.309322][T20966] lo speed is unknown, defaulting to 1000 [ 365.346278][T20966] dummy0 speed is unknown, defaulting to 1000 [ 365.385747][T20967] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 365.561530][T20971] IPVS: Error connecting to the multicast addr [ 365.582351][T20973] netlink: 'syz.4.6181': attribute type 4 has an invalid length. [ 365.624611][T20971] lo speed is unknown, defaulting to 1000 [ 365.631200][T20971] dummy0 speed is unknown, defaulting to 1000 [ 365.770484][T20971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6180'. [ 366.870444][T19750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.188642][T21007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6190'. [ 367.197709][T21007] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6190'. [ 367.607020][T21018] loop1: detected capacity change from 0 to 4096 [ 367.628941][T21018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.692210][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.890099][T21027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6196'. [ 367.999172][T21029] loop1: detected capacity change from 0 to 512 [ 368.006957][T21029] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 368.030582][T21029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.077309][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6199'. [ 368.086464][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6199'. [ 368.100591][T21029] ext4 filesystem being mounted at /925/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.121749][T21029] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6198: bg 0: block 304: padding at end of block bitmap is not set [ 368.139328][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6199'. [ 368.170039][T21029] EXT4-fs (loop1): Remounting filesystem read-only [ 368.181240][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6201'. [ 368.213404][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6199'. [ 368.222444][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6199'. [ 368.244649][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6199'. [ 368.268791][T21048] loop3: detected capacity change from 0 to 2048 [ 368.288845][T21048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.317532][T21048] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6204: bg 0: block 234: padding at end of block bitmap is not set [ 368.352071][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.374780][T21062] netlink: 'syz.1.6209': attribute type 4 has an invalid length. [ 368.384675][T21062] : renamed from $Hÿ (while UP) [ 368.405540][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.395605][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 369.395624][ T29] audit: type=1400 audit(2000000172.600:13555): avc: denied { append } for pid=21086 comm="syz.7.6215" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 369.468367][ T29] audit: type=1326 audit(2000000172.646:13556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21086 comm="+}[@" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f883e65e169 code=0x0 [ 369.955387][T21099] netlink: 'syz.1.6219': attribute type 3 has an invalid length. [ 369.982181][ T29] audit: type=1400 audit(2000000173.133:13557): avc: denied { write } for pid=21096 comm="syz.3.6218" path="socket:[71262]" dev="sockfs" ino=71262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.006039][ T29] audit: type=1400 audit(2000000173.133:13558): avc: denied { accept } for pid=21096 comm="syz.3.6218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.190355][ T29] audit: type=1400 audit(2000000173.338:13559): avc: denied { write } for pid=21100 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.434633][ T29] audit: type=1400 audit(2000000173.572:13560): avc: denied { create } for pid=21124 comm="syz.1.6228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 370.456492][T21125] loop1: detected capacity change from 0 to 128 [ 370.468068][T21125] EXT4-fs: Mount option(s) incompatible with ext2 [ 370.479383][ T29] audit: type=1400 audit(2000000173.610:13561): avc: denied { read } for pid=21124 comm="syz.1.6228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 370.795888][T21130] veth7: entered promiscuous mode [ 370.801028][T21130] veth7: entered allmulticast mode [ 370.888737][T21132] loop3: detected capacity change from 0 to 512 [ 370.914194][T21132] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 370.969950][T21132] EXT4-fs (loop3): 1 truncate cleaned up [ 370.976332][T21132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.013838][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.467769][T21145] loop3: detected capacity change from 0 to 512 [ 371.482426][ T29] audit: type=1400 audit(2000000174.554:13562): avc: denied { validate_trans } for pid=21146 comm="syz.1.6236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 371.503623][T21145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 371.510286][T21145] EXT4-fs: Ignoring removed mblk_io_submit option [ 371.543178][T21145] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 371.585120][T21145] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 371.627954][T21145] EXT4-fs (loop3): 1 truncate cleaned up [ 371.648188][T21145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.716487][T21145] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 371.844390][ T29] audit: type=1400 audit(2000000174.891:13563): avc: denied { write } for pid=21159 comm="syz.1.6240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 371.989211][T21168] lo speed is unknown, defaulting to 1000 [ 371.996777][T21168] dummy0 speed is unknown, defaulting to 1000 [ 372.006327][T21170] loop1: detected capacity change from 0 to 512 [ 372.013267][T21170] ext3: Bad value for 'stripe' [ 372.041591][T21172] loop1: detected capacity change from 0 to 512 [ 372.064925][ T29] audit: type=1400 audit(2000000175.097:13564): avc: denied { connect } for pid=21167 comm="syz.4.6243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 372.086651][T21172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.104436][T21172] ext4 filesystem being mounted at /938/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.283504][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.331949][T21187] loop3: detected capacity change from 0 to 1024 [ 372.338852][T21187] EXT4-fs: Ignoring removed bh option [ 372.354491][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.368286][T21187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.406977][T21187] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.6250: Allocating blocks 497-513 which overlap fs metadata [ 372.421567][T21187] EXT4-fs (loop3): pa ffff8881005ebc40: logic 256, phys. 385, len 8 [ 372.429616][T21187] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 372.635022][T21208] __nla_validate_parse: 5 callbacks suppressed [ 372.635042][T21208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6257'. [ 372.664362][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.703694][T21212] ipvlan0: entered promiscuous mode [ 372.709098][T21212] ipvlan0: entered allmulticast mode [ 372.714472][T21212] bridge0: entered allmulticast mode [ 372.726606][T21212] batman_adv: batadv0: Adding interface: ipvlan0 [ 372.733098][T21212] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.758927][T21212] batman_adv: batadv0: Interface activated: ipvlan0 [ 372.771327][T21214] netlink: 'syz.7.6261': attribute type 4 has an invalid length. [ 372.779158][T21214] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6261'. [ 372.797690][T21214] : renamed from bond0 [ 372.803558][T21216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.831384][T21216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.879897][T21216] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 372.892328][T21216] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 372.903275][T21224] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6266'. [ 372.966562][T21227] lo speed is unknown, defaulting to 1000 [ 372.972854][T21227] dummy0 speed is unknown, defaulting to 1000 [ 372.999018][T21230] netlink: 'syz.3.6268': attribute type 3 has an invalid length. [ 373.068251][T21231] lo speed is unknown, defaulting to 1000 [ 373.082999][T21231] dummy0 speed is unknown, defaulting to 1000 [ 373.155525][T21238] loop3: detected capacity change from 0 to 512 [ 373.189932][T21238] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 373.198525][T21238] EXT4-fs (loop3): orphan cleanup on readonly fs [ 373.215433][T21238] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 373.245998][T21238] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 373.253355][T21238] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #16: comm syz.3.6280: casefold flag without casefold feature [ 373.266476][T21238] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.6280: couldn't read orphan inode 16 (err -117) [ 373.285959][T21238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 373.353387][T21243] loop7: detected capacity change from 0 to 164 [ 373.376485][T21245] netlink: 'syz.4.6272': attribute type 3 has an invalid length. [ 373.387859][T21243] syz.7.6271: attempt to access beyond end of device [ 373.387859][T21243] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 373.459638][T21243] syz.7.6271: attempt to access beyond end of device [ 373.459638][T21243] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 373.564439][T21250] tipc: Enabling of bearer rejected, failed to enable media [ 373.708506][T21252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6273'. [ 373.717572][T21252] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6273'. [ 373.789506][T21236] syz.3.6280 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 373.800823][T21236] CPU: 1 UID: 0 PID: 21236 Comm: syz.3.6280 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 373.800937][T21236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 373.800954][T21236] Call Trace: [ 373.800962][T21236] [ 373.800972][T21236] dump_stack_lvl+0xf6/0x150 [ 373.801013][T21236] dump_stack+0x15/0x1a [ 373.801033][T21236] dump_header+0x83/0x2d0 [ 373.801063][T21236] oom_kill_process+0x341/0x4c0 [ 373.801159][T21236] out_of_memory+0x9d1/0xc20 [ 373.801212][T21236] mem_cgroup_out_of_memory+0x13f/0x190 [ 373.801249][T21236] try_charge_memcg+0x5f1/0x890 [ 373.801279][T21236] charge_memcg+0x50/0xc0 [ 373.801318][T21236] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 373.801377][T21236] __read_swap_cache_async+0x207/0x3b0 [ 373.801420][T21236] swap_cluster_readahead+0x27f/0x400 [ 373.801473][T21236] swapin_readahead+0xe6/0x6f0 [ 373.801517][T21236] ? __lruvec_stat_mod_folio+0xde/0x120 [ 373.801548][T21236] ? swap_cache_get_folio+0x77/0x210 [ 373.801618][T21236] do_swap_page+0x31c/0x2510 [ 373.801649][T21236] ? __rcu_read_lock+0x36/0x50 [ 373.801670][T21236] ? __pfx_default_wake_function+0x10/0x10 [ 373.801695][T21236] handle_mm_fault+0x8ed/0x2e80 [ 373.801724][T21236] ? mas_walk+0x204/0x320 [ 373.801753][T21236] ? __rcu_read_unlock+0x4e/0x70 [ 373.801842][T21236] exc_page_fault+0x3b9/0x6a0 [ 373.801870][T21236] asm_exc_page_fault+0x26/0x30 [ 373.801892][T21236] RIP: 0033:0x7f5abbda4bcc [ 373.801917][T21236] Code: 66 0f 1f 44 00 00 69 3d e6 0a e8 00 e8 03 00 00 48 8d 1d e7 13 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 373.801938][T21236] RSP: 002b:00007ffd9354ae10 EFLAGS: 00010202 [ 373.802026][T21236] RAX: 0000000000000000 RBX: 00007f5abc0f5fa0 RCX: 0000000000000000 [ 373.802038][T21236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558f6e5808 [ 373.802050][T21236] RBP: 00007f5abc0f7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 373.802063][T21236] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000581a7 [ 373.802077][T21236] R13: 00007f5abc0f6080 R14: ffffffffffffffff R15: 00007ffd9354af20 [ 373.802108][T21236] [ 373.802117][T21236] memory: usage 307200kB, limit 307200kB, failcnt 1578 [ 374.022777][T21236] memory+swap: usage 308556kB, limit 9007199254740988kB, failcnt 0 [ 374.030830][T21236] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 374.038334][T21236] Memory cgroup stats for /syz3: [ 374.055246][T21236] cache 8192 [ 374.063449][T21236] rss 0 [ 374.066427][T21236] shmem 0 [ 374.069427][T21236] mapped_file 1642496 [ 374.073436][T21236] dirty 0 [ 374.076473][T21236] writeback 8192 [ 374.080035][T21236] workingset_refault_anon 290 [ 374.084872][T21236] workingset_refault_file 5189 [ 374.089781][T21236] swap 1388544 [ 374.093272][T21236] swapcached 8192 [ 374.097103][T21236] pgpgin 490390 [ 374.100631][T21236] pgpgout 490380 [ 374.104201][T21236] pgfault 433718 [ 374.107765][T21236] pgmajfault 2185 [ 374.111543][T21236] inactive_anon 8192 [ 374.115500][T21236] active_anon 0 [ 374.119081][T21236] inactive_file 32768 [ 374.123159][T21236] active_file 0 [ 374.126634][T21236] unevictable 0 [ 374.130204][T21236] hierarchical_memory_limit 314572800 [ 374.135586][T21236] hierarchical_memsw_limit 9223372036854771712 [ 374.141808][T21236] total_cache 8192 [ 374.145667][T21236] total_rss 0 [ 374.149027][T21236] total_shmem 0 [ 374.152600][T21236] total_mapped_file 1642496 [ 374.157207][T21236] total_dirty 0 [ 374.160732][T21236] total_writeback 8192 [ 374.165036][T21236] total_workingset_refault_anon 290 [ 374.170254][T21236] total_workingset_refault_file 5189 [ 374.175607][T21236] total_swap 1388544 [ 374.179525][T21236] total_swapcached 8192 [ 374.183784][T21236] total_pgpgin 490390 [ 374.187850][T21236] total_pgpgout 490380 [ 374.191938][T21236] total_pgfault 433718 [ 374.196084][T21236] total_pgmajfault 2185 [ 374.200261][T21236] total_inactive_anon 8192 [ 374.204763][T21236] total_active_anon 0 [ 374.208767][T21236] total_inactive_file 32768 [ 374.213309][T21236] total_active_file 0 [ 374.217457][T21236] total_unevictable 0 [ 374.221451][T21236] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6280,pid=21236,uid=0 [ 374.236393][T21236] Memory cgroup out of memory: Killed process 21236 (syz.3.6280) total-vm:97400kB, anon-rss:940kB, file-rss:23844kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 374.411005][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.455200][T21256] lo speed is unknown, defaulting to 1000 [ 374.466750][T21256] dummy0 speed is unknown, defaulting to 1000 [ 374.631492][T21264] lo speed is unknown, defaulting to 1000 [ 374.698978][T21264] dummy0 speed is unknown, defaulting to 1000 [ 374.709457][T21266] netlink: 'syz.2.6278': attribute type 10 has an invalid length. [ 374.751282][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 374.751299][ T29] audit: type=1326 audit(2000000177.613:13658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21258 comm="syz.1.6277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f851ce85127 code=0x7ffc0000 [ 374.787475][ T29] audit: type=1326 audit(2000000177.641:13659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21258 comm="syz.1.6277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851ce2a359 code=0x7ffc0000 [ 374.811216][ T29] audit: type=1326 audit(2000000177.641:13660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21258 comm="syz.1.6277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f851ce85127 code=0x7ffc0000 [ 374.834958][ T29] audit: type=1326 audit(2000000177.641:13661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21258 comm="syz.1.6277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851ce2a359 code=0x7ffc0000 [ 374.858921][ T29] audit: type=1326 audit(2000000177.641:13662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21258 comm="syz.1.6277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 374.883240][ T29] audit: type=1326 audit(2000000177.641:13663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21258 comm="syz.1.6277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f851ce85127 code=0x7ffc0000 [ 374.906900][ T29] audit: type=1326 audit(2000000177.641:13664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21258 comm="syz.1.6277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851ce2a359 code=0x7ffc0000 [ 374.930537][ T29] audit: type=1326 audit(2000000177.641:13665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21258 comm="syz.1.6277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f851ce8e169 code=0x7ffc0000 [ 374.955249][ T29] audit: type=1326 audit(2000000177.782:13666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21258 comm="syz.1.6277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f851ce85127 code=0x7ffc0000 [ 374.978848][ T29] audit: type=1326 audit(2000000177.782:13667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21258 comm="syz.1.6277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f851ce2a359 code=0x7ffc0000 [ 375.280743][T21279] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 375.463611][T21292] lo speed is unknown, defaulting to 1000 [ 375.476009][T21292] dummy0 speed is unknown, defaulting to 1000 [ 375.606783][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6290'. [ 375.615735][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6290'. [ 375.653855][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6290'. [ 375.679584][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6290'. [ 375.778686][T21311] netlink: 'syz.7.6295': attribute type 3 has an invalid length. [ 375.817232][T21316] netlink: 'syz.7.6296': attribute type 4 has an invalid length. [ 375.839263][T21313] loop1: detected capacity change from 0 to 8192 [ 375.848691][T21318] netlink: 'syz.7.6297': attribute type 12 has an invalid length. [ 376.244222][T21301] lo speed is unknown, defaulting to 1000 [ 376.265969][T21301] dummy0 speed is unknown, defaulting to 1000 [ 377.078313][T21348] IPVS: Error connecting to the multicast addr [ 377.130392][T21348] lo speed is unknown, defaulting to 1000 [ 377.163109][T21348] dummy0 speed is unknown, defaulting to 1000 [ 377.887070][T21358] xt_hashlimit: max too large, truncated to 1048576 [ 377.917198][T21358] xt_limit: Overflow, try lower: 0/0 [ 378.242936][T21370] loop3: detected capacity change from 0 to 2048 [ 378.307173][T21370] loop3: p1 < > p4 [ 378.321158][T21370] loop3: p4 size 8388608 extends beyond EOD, truncated [ 378.432046][T21373] __nla_validate_parse: 7 callbacks suppressed [ 378.432070][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6317'. [ 378.453471][T21373] ip6gre1: entered allmulticast mode [ 378.483407][T21376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6318'. [ 378.492390][T21376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6318'. [ 379.089626][T21387] loop3: detected capacity change from 0 to 512 [ 379.112753][T21387] EXT4-fs (loop3): orphan cleanup on readonly fs [ 379.119765][T21387] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.6323: bad orphan inode 13 [ 379.144207][T21387] ext4_test_bit(bit=12, block=18) = 1 [ 379.149993][T21387] is_bad_inode(inode)=0 [ 379.154201][T21387] NEXT_ORPHAN(inode)=2130706432 [ 379.159104][T21387] max_ino=32 [ 379.162315][T21387] i_nlink=1 [ 379.187259][T21387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 379.235159][T21387] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 379.289002][T21387] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6323: bg 0: block 248: padding at end of block bitmap is not set [ 379.326484][T21387] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.6323: Failed to acquire dquot type 1 [ 379.347596][T21387] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 379.393651][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.517053][T21395] netlink: 'syz.4.6327': attribute type 10 has an invalid length. [ 380.115459][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 380.115539][ T29] audit: type=1326 audit(2000000182.627:14007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="syz.7.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f883e655127 code=0x7ffc0000 [ 380.173833][ T29] audit: type=1326 audit(2000000182.664:14008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="syz.7.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f883e5fa359 code=0x7ffc0000 [ 380.197494][ T29] audit: type=1326 audit(2000000182.664:14009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="syz.7.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f883e655127 code=0x7ffc0000 [ 380.221741][ T29] audit: type=1326 audit(2000000182.664:14010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="syz.7.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f883e5fa359 code=0x7ffc0000 [ 380.246239][ T29] audit: type=1326 audit(2000000182.664:14011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="syz.7.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f883e65e169 code=0x7ffc0000 [ 380.270139][ T29] audit: type=1326 audit(2000000182.664:14012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="syz.7.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f883e655127 code=0x7ffc0000 [ 380.294414][ T29] audit: type=1326 audit(2000000182.664:14013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="syz.7.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f883e5fa359 code=0x7ffc0000 [ 380.318126][ T29] audit: type=1326 audit(2000000182.664:14014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="syz.7.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f883e65e169 code=0x7ffc0000 [ 380.342383][ T29] audit: type=1326 audit(2000000182.664:14015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="syz.7.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f883e655127 code=0x7ffc0000 [ 380.366245][ T29] audit: type=1326 audit(2000000182.664:14016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="syz.7.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f883e5fa359 code=0x7ffc0000 [ 380.404550][T21434] loop1: detected capacity change from 0 to 164 [ 380.413681][T21434] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 380.424278][T21434] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 381.272910][T21472] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.282814][T21472] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.336562][T21472] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.346465][T21472] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.422389][T21472] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.432217][T21472] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.487109][T21472] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.497047][T21472] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.526069][T21468] lo speed is unknown, defaulting to 1000 [ 381.534550][T21468] dummy0 speed is unknown, defaulting to 1000 [ 381.633793][T21472] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.642075][T21472] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.665306][T21472] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.673701][T21472] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.700402][T21472] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.708856][T21472] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.721063][T21472] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.729313][T21472] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.781222][T21482] IPVS: Error connecting to the multicast addr [ 381.801126][T21482] lo speed is unknown, defaulting to 1000 [ 381.808061][T21482] dummy0 speed is unknown, defaulting to 1000 [ 381.864166][T21485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6359'. [ 382.098679][T21515] loop3: detected capacity change from 0 to 4096 [ 382.119889][T21515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.262066][T21541] loop1: detected capacity change from 0 to 512 [ 382.269288][T21541] EXT4-fs: Ignoring removed mblk_io_submit option [ 382.279030][T21541] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 382.288157][T21541] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 382.422509][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.696233][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6373'. [ 382.939825][T21636] xt_hashlimit: size too large, truncated to 1048576 [ 383.290015][T21656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6384'. [ 383.402750][T21658] lo speed is unknown, defaulting to 1000 [ 383.428798][T21658] dummy0 speed is unknown, defaulting to 1000 [ 383.587730][T21628] lo speed is unknown, defaulting to 1000 [ 383.606217][T21628] dummy0 speed is unknown, defaulting to 1000 [ 384.331443][T21687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6393'. [ 384.351990][T21687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6393'. [ 384.395237][T21694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=21694 comm=syz.4.6395 [ 384.461184][T21700] lo speed is unknown, defaulting to 1000 [ 384.467511][T21700] dummy0 speed is unknown, defaulting to 1000 [ 384.762929][T21714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=21714 comm=syz.3.6402 [ 384.773436][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6400'. [ 384.776047][T21714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=21714 comm=syz.3.6402 [ 384.797614][T21714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=21714 comm=syz.3.6402 [ 384.810415][T21714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=21714 comm=syz.3.6402 [ 384.823223][T21714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=21714 comm=syz.3.6402 [ 384.836013][T21714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=21714 comm=syz.3.6402 [ 384.848918][T21714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=21714 comm=syz.3.6402 [ 384.916435][T21719] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 385.038839][T21727] loop3: detected capacity change from 0 to 512 [ 385.052851][T21727] EXT4-fs: Ignoring removed nobh option [ 385.075151][T21729] net_ratelimit: 333 callbacks suppressed [ 385.075170][T21729] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 385.190520][T21727] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 385.214475][T21727] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #13: comm syz.3.6408: casefold flag without casefold feature [ 385.244152][T21727] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.6408: couldn't read orphan inode 13 (err -117) [ 385.260918][T21727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.369200][T21737] xt_hashlimit: size too large, truncated to 1048576 [ 385.497636][T21740] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 385.546656][T21747] SELinux: syz.7.6413 (21747) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 385.766450][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 385.766468][ T29] audit: type=1400 audit(2000000187.912:14292): avc: denied { getopt } for pid=21752 comm="syz.1.6415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 385.822356][T21753] infiniband syz!: set down [ 385.826990][T21753] infiniband syz!: added team_slave_0 [ 385.955827][T21753] RDS/IB: syz!: added [ 385.965531][T21753] smc: adding ib device syz! with port count 1 [ 385.977727][T21753] smc: ib device syz! port 1 has pnetid [ 386.011449][ T29] audit: type=1326 audit(2000000188.146:14293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21763 comm="syz.2.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8826e169 code=0x7ffc0000 [ 386.092088][ T29] audit: type=1326 audit(2000000188.165:14294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21763 comm="syz.2.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d8826e169 code=0x7ffc0000 [ 386.115912][ T29] audit: type=1326 audit(2000000188.165:14295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21763 comm="syz.2.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8826e169 code=0x7ffc0000 [ 386.139618][ T29] audit: type=1326 audit(2000000188.165:14296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21763 comm="syz.2.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8826e169 code=0x7ffc0000 [ 386.163424][ T29] audit: type=1326 audit(2000000188.174:14297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21763 comm="syz.2.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3d8826e169 code=0x7ffc0000 [ 386.186970][ T29] audit: type=1326 audit(2000000188.174:14298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21763 comm="syz.2.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8826e169 code=0x7ffc0000 [ 386.210927][ T29] audit: type=1326 audit(2000000188.174:14299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21763 comm="syz.2.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8826e169 code=0x7ffc0000 [ 386.234640][ T29] audit: type=1326 audit(2000000188.174:14300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21763 comm="syz.2.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f3d8826e169 code=0x7ffc0000 [ 386.258402][ T29] audit: type=1326 audit(2000000188.174:14301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21763 comm="syz.2.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8826e169 code=0x7ffc0000 [ 386.689557][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6425'. [ 386.705845][T21780] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6425'. [ 386.785993][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.845144][T21787] loop1: detected capacity change from 0 to 1024 [ 386.896823][T21787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.918352][T21787] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 386.934985][T21787] EXT4-fs (loop1): Remounting filesystem read-only [ 386.941612][T21787] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.1.6428: cleanup dec ref error -28 [ 386.982251][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.027337][T21807] loop7: detected capacity change from 0 to 512 [ 387.050521][T21807] EXT4-fs: Ignoring removed orlov option [ 387.065913][T21807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 387.101005][T21807] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.113779][T21813] loop1: detected capacity change from 0 to 512 [ 387.131475][T21813] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.6435: casefold flag without casefold feature [ 387.144311][T21807] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.155978][T21813] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.6435: couldn't read orphan inode 15 (err -117) [ 387.191479][T21813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.214077][T21807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.284506][ T7174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.351455][T21822] lo speed is unknown, defaulting to 1000 [ 387.365940][T21824] pim6reg: entered allmulticast mode [ 387.383130][T21822] dummy0 speed is unknown, defaulting to 1000 [ 387.441572][T21833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6442'. [ 387.913391][T21857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6452'. [ 387.986048][T21857] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21857 comm=syz.3.6452 [ 388.143311][T21860] loop3: detected capacity change from 0 to 128 [ 388.168283][T21860] EXT4-fs: test_dummy_encryption option not supported [ 388.340877][T21872] loop3: detected capacity change from 0 to 512 [ 388.347707][T21872] EXT4-fs: Ignoring removed oldalloc option [ 388.355433][T21867] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 388.362770][T21872] EXT4-fs (loop3): failed to initialize system zone (-117) [ 388.370166][T21872] EXT4-fs (loop3): mount failed [ 388.415774][T21872] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6458'. [ 388.538445][T21888] 9pnet_fd: Insufficient options for proto=fd [ 388.603521][T21894] loop7: detected capacity change from 0 to 736 [ 388.727634][T21894] rock: directory entry would overflow storage [ 388.734756][T21894] rock: sig=0x3b10, size=4, remaining=3 [ 388.963319][T21902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21902 comm=syz.4.6469 [ 390.727802][T21922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6475'. [ 391.076213][T21924] lo speed is unknown, defaulting to 1000 [ 391.106978][T21924] dummy0 speed is unknown, defaulting to 1000 [ 391.293519][T21934] lo speed is unknown, defaulting to 1000 [ 391.320679][T21934] dummy0 speed is unknown, defaulting to 1000 [ 391.439050][T21937] delete_channel: no stack [ 391.730228][T21973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6485'. [ 391.772711][T21973] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 391.797969][T21982] 9pnet_fd: Insufficient options for proto=fd [ 391.828616][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 391.828676][ T29] audit: type=1400 audit(2000000193.571:14349): avc: denied { ioctl } for pid=21980 comm="syz.2.6486" path="socket:[75142]" dev="sockfs" ino=75142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 391.889267][T21989] loop3: detected capacity change from 0 to 512 [ 391.898820][T21989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 391.910402][T21989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.928002][T21989] ext4 filesystem being mounted at /1069/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.979080][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.416027][T22075] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 392.444913][ T29] audit: type=1326 audit(2000000194.151:14350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22073 comm="syz.7.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883e65e169 code=0x7ffc0000 [ 392.468609][ T29] audit: type=1326 audit(2000000194.151:14351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22073 comm="syz.7.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883e65e169 code=0x7ffc0000 [ 392.492229][ T29] audit: type=1326 audit(2000000194.151:14352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22073 comm="syz.7.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f883e65e169 code=0x7ffc0000 [ 392.515908][ T29] audit: type=1326 audit(2000000194.151:14353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22073 comm="syz.7.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883e65e169 code=0x7ffc0000 [ 392.539649][ T29] audit: type=1326 audit(2000000194.151:14354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22073 comm="syz.7.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883e65e169 code=0x7ffc0000 [ 392.563438][ T29] audit: type=1326 audit(2000000194.151:14355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22073 comm="syz.7.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f883e65e169 code=0x7ffc0000 [ 392.587007][ T29] audit: type=1326 audit(2000000194.151:14356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22073 comm="syz.7.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883e65e169 code=0x7ffc0000 [ 392.610755][ T29] audit: type=1326 audit(2000000194.151:14357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22073 comm="syz.7.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883e65e169 code=0x7ffc0000 [ 392.634388][ T29] audit: type=1326 audit(2000000194.151:14358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22073 comm="syz.7.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f883e65e169 code=0x7ffc0000 [ 392.847594][T22099] loop7: detected capacity change from 0 to 8192 [ 393.244627][T22099] ================================================================== [ 393.252788][T22099] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 393.260724][T22099] [ 393.263065][T22099] write to 0xffff888106782b28 of 4 bytes by task 22106 on cpu 1: [ 393.270798][T22099] __mark_inode_dirty+0x24e/0x7e0 [ 393.275850][T22099] fat_update_time+0x1e8/0x200 [ 393.280664][T22099] touch_atime+0x14f/0x350 [ 393.285114][T22099] filemap_splice_read+0x8cb/0x930 [ 393.290272][T22099] splice_direct_to_actor+0x26c/0x680 [ 393.295684][T22099] do_splice_direct+0xd9/0x150 [ 393.300489][T22099] do_sendfile+0x40a/0x690 [ 393.304945][T22099] __x64_sys_sendfile64+0x113/0x160 [ 393.310185][T22099] x64_sys_call+0xfc3/0x2e10 [ 393.314919][T22099] do_syscall_64+0xc9/0x1a0 [ 393.319462][T22099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.325377][T22099] [ 393.327728][T22099] read to 0xffff888106782b28 of 4 bytes by task 22099 on cpu 0: [ 393.335381][T22099] __mark_inode_dirty+0x58/0x7e0 [ 393.340350][T22099] fat_update_time+0x1e8/0x200 [ 393.345203][T22099] touch_atime+0x14f/0x350 [ 393.349656][T22099] filemap_splice_read+0x8cb/0x930 [ 393.354937][T22099] splice_direct_to_actor+0x26c/0x680 [ 393.360348][T22099] do_splice_direct+0xd9/0x150 [ 393.365151][T22099] do_sendfile+0x40a/0x690 [ 393.369617][T22099] __x64_sys_sendfile64+0x113/0x160 [ 393.374845][T22099] x64_sys_call+0xfc3/0x2e10 [ 393.379473][T22099] do_syscall_64+0xc9/0x1a0 [ 393.384012][T22099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.390024][T22099] [ 393.392376][T22099] value changed: 0x00000000 -> 0x00000028 [ 393.398109][T22099] [ 393.400446][T22099] Reported by Kernel Concurrency Sanitizer on: [ 393.406618][T22099] CPU: 0 UID: 0 PID: 22099 Comm: syz.7.6501 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 393.419157][T22099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.429238][T22099] ==================================================================