last executing test programs: 4.47656433s ago: executing program 0 (id=1375): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) socket$kcm(0x1e, 0x1, 0x0) dup2(r2, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r5 = socket(0xa, 0x5, 0x0) listen(r5, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) fadvise64(r6, 0x807f, 0x1000000, 0x4) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000a80)={[0x9145]}, 0x8, 0x80000) poll(&(0x7f0000000b40)=[{r7, 0x22}], 0x1, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x50) 3.877652127s ago: executing program 2 (id=1382): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x9d}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x115e, &(0x7f00000002c0)={@random="fafd63c9700f", @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x1120, 0x2c, 0x0, @dev, @mcast2, {[@srh={0x3c, 0x4, 0x4, 0x2, 0x6, 0x60, 0xfff9, [@mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}]}, @dstopts={0x32}, @hopopts={0xff, 0x210, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x58, {0x3, 0x14, 0xfc, 0x1, [0x2, 0x2, 0x8, 0x9, 0x93, 0x9, 0x200, 0xffffffffffffffff, 0x2, 0x45]}}, @generic={0xca, 0x1000, "bb8c42e2c169f53d5fabddabe7eda3b9b7e2210ee6a7f52befd0f5a91398eb2c39834dd7f94317d8c1dcdfa72c82bf432a4564634ff2acfb5b5285f4449e5a641cbd156718f91fad26f9a9aff73a47036bc53dbf8b5f4e5cbccdf100f542568d2e1bf55d199ca3b91cda3078a08e611fbc1f986796302e72b708be0d9af6a4d24bc61ee60a5fc3da0c7f6de0b590d77bbeea8ee5bc99051cbe3217eaf549d002196483e5e91295ac2c8e0401159c88991caddb53e7b42c6bcb77d1720742ba6e46fe934a7fdaa40cc27ec3fec69060bf2258ad294613e7ced7304936cd17aa7151fe122f125747e39be6e42e697729ad42fb95a728a0464f5b4435ce54bf4af338a94432e41e8b45ce5cfcc853eb69fb217c7e6d38fc2047c4cd74316e41b5a6134a6689352c73b41f01ecb18587b979d18bd87e2535bf41721339a679da229ebe2b74a4ad6cc1c0e008972883d314f2e8e6bda57ceb619d327cb6125d60af16367847809674670cfd21879bf8106fb351650d9d9a195b2711a1fe4f0569d88c33751e8ed72e715307a7085779d37f2ea206df56e148fefe5fdeefd0d75c31a0b604f6dca1e54e8d67a65f85d773815dd724200344a89cd936fd8d2cfb1300520a2c41f35e9557bf050fec87c7ae4c119c3d28c525b2b5742a2c18f236d37a28c4b2ecd77ec624a05d35ac08665d529cb4f122134cda522c34007460c1a179f03beeea0797390a1a5f9301751d4177a4582f13219651cbda66b991c831022b78768b7ec421e43d3dce2faa68193b3c9e43573930f096a984f8d90fe52d737faa3048ca468a24b233ff6934c8842e58f86db5ee61043de54fad4ce72bdb61accf7f2ac87f0f7228c14910279dff001967f857872d288ca057dcf3cb9a34e33ca9369f3c07e1b1f11d04f0482ad1c5ad03d197d96e818429cda68d9c4cf6d4379bebb76ef84f01f525f8098ee60a1f5f9d65f3c3823cf0410b5a59a754c82d00b078cc813a9fe762b8b466762ebb5d32bd71a393d7248c070fc8c41c877e6b8197d7ba233224e98cc2f4980ccd820d4f39125298a97084e2e3d2751fa151365f6b0037d60b25e2867eba39018afd4a3a959e1741d1bbc3a4d592310608b8d7b0bda3eb7a92fb3b5d8e5929b8575891c24ed023b4c4d709b3156d1765777fc4ac8d9d55864c88377a456bdc08795c5621c1a5c5eff3e7d0740e7835378988cf2290a1b1e8d27f8f82b3abaa143a17455dce4cfe98007b30baec8ebd4296deb5a72db15fe1bd5a9b41bf58c9a55021ed5d0e340f1d613ca0f263303e97c205f4636c2e463c86da42440ad53db51f200ac72081a95debe4b19e28a1ae1bec47ba359615ac745af7a3fc3f2de1f59f6537e05215866a1c53fb0f7359b2b67c9793e9653290316b0695e00eb7d11c965afd99239eb710057b22e8eba1e469e42ab4ad063e092e3a8fbf124a8932faf615d3933790213a1bb4c1bcbc7c4865fd9dfe9d44c1df0aa0661383aae47eb8cdb704e84cfacbb0a045b1af88ba711bee2bd3ba8600bdfb338bfba9104a1920cbd5d160617fbf69d326db63af46df3cca1bd5475db08fcc862cf1ebd4a17aaa54cbff737ac0b5d27f244b6ae86d3c73463d43bdd359cac2b9e5b86d881c39255bd21b53ea84ea90d2530320399968aed2c4a1978d56ff56a786efd4f2cc65071bf05eecd0221da740c3bf91f257bd699180cdd9464b4a286c5d0d73e838c94c1bec60212eed9dda9ce697fbd933f87c2983a1e117f1518d4bce44181464a2dd88414497bbfd0bffb3ef3062869b531e126a919985db0daf60067148e0f530cb7304895213f9028b6a2ad1ca6ca43087c22415840c04125bda03177a7023f376205bcfbb0fe755b72f2d6e234c6e01063739399cc0071efed489d174a421c73e9efb7a0dcdd899676cb86edf7c8569bb7102353d619856ca8eb6ad591ee8486a3a15556ae574f161884ad1c67d05a883622c7bbd17653a48ceba82d9c4122594ccd800918ef70e8f99c399cdda9f81b1a4207fa9f0400b371809ce498b15a2e20a29e5633d5245f23d78fafd4d2704ee8fea13ee8e820aef27d046733d9c6bf880d6dd9b2644e34ba39c18fa01a57a5f2bd1938ed28dcf5a3437275653a2d9499e16e0b016270eb3caecc1a84953fb64e37ca4b0c6023992d9f5333a38c451733e1c32b21a2f38f99412a599e98f101c122d392068c06e5d820e2711f74e99cfecfa046899926e2eaed5138bd323d96f0db44535eea019c0bec50d7cda1d8a976034d25c3a7717237af772bd16888aac6853a9804cd607d3f72bcab968af8060d045956ccd82d3717f50726ad6674e460738b29a2cc57f92c79ccd7cabfcbe753a6714c8b8e216da8d7f6a0a94352d13bfa09286924cf2421b956caa18f4bf4d867681e029b0a9df5ef46d7d906b526cfddf704313cd1fcc1e2f63cf9fc7d159b98e5e8dae43548a14733b2fe07910b236c394b1f4f1069d305c0aa0163acad63147247e12bd1da1ad385761f0bc50ac0d3fad6d06157db639b9c1b375ae5a1755416975d2e3aa7a5599872591f52de3f30bf678fd6558a556a1858dd2b2dc2b09734e680d059a0a4319090044f0cac2538edb1c59eb20b9fcf3ee28ef760161b0524b0132f99fcdafee2894182e3b9c02f2cd58384827782aeb3f53b24653feb0f2a5bd7a4e6272fdc8f6375d98364284e6caa270dfddad7596cbe38ec9dd6ea1d7f3c182817dafbf36bf1aebac02f5ae7403d4cfd6e1ea645ff40e2c5c74cc0f3aae605f2bb45efa8a74e93082b0314fbbb3e2797f7a38950c4d8c65d8d58d81524a56b7042ea816f0f5e1d4474a3485344c75f3e98c2344964cff41050edd8a365523a80381a060ca2ae54098eb6ff6b1f115be1df436aa7c82e376929e5bd5f3a2eabf4c07ba2e34b70eda799ce9026830f7f7ddd3d14a9b0cc4c2fdedadb9d1a71cbde0b0fc416f9b87324d1207fc9d0121f5dd5fcf426b705da31e3968d8333ef143689feaa6bd9b387bebdae4de550312036b8b78c2e32860586aa17ab834a4e8877041bb8acf8528e2c263662bea120e7de8abe48025d9ee85f768223d894f6434de0e8c8388219e076739eb23e70ce2619b423b75cdb39a377543632a81d13e4ce7fa5be1d71c0a97b609dd20b8bbfa3667feab8ac443dd98b0e28177e52881654cf0f989087724f3b31edcc533ed771c3796f644e46ca1dd93bd859b9afd045809c419a3aea0e1346f18cd7d1dbce7709b459c36cd7443d900e572e578911ac568fc532a18f9124ec9fe9b3a4637b5b7df1926e9920356d6acd3557861f6df3b4c67e74485cbec3ed2af23714e829c0ec47ee1584b0fb2c1fd23444f211b13de127e0d089acc6019f3ca47a886a04506c01ed8a3677111e6d603302647cbd6f5aee6e1124a09ba56864d9586aeaca14ddf15985c105c58dbbfee6dd97a53201318f3effe8a251ede50b9bbb018a5a85054980b7f72b1111508c9ea3d6fe83edb0069f22a9d62cbc973124656f7da098673602547202acf51eab4bad0c676364999d9fc7380fca175cef366674187986143fa669054ec05edd022c0b3b9f56ff89ae6562c04fe574de0886cf99f6fcddb3af4297897bdcd3da93b27082b7d1c1325fa3f26abb6a5c58a32352d985a0a9940a0925f78a45fea235680ee859defbae5872f16df73d79e20e1588ac4d7e9c8c770ac7d91840cf24cb03a5ac6722a9f8f64deac8331504aad6c1af54037da31d34929898a7d43f2b74ea03b4b7060920e7b4d0c5b754b8b83bf0599573ec2b3c97f307d1e0fcbb7443307662dcb6a82fedb5707f8978fa5edc7eb0ada9c48fe72e7355b6fe8c83c18b992efee0ae911ef3f3ec91baa2cfcf0eda7404181ecaa67792cd553feba366aedcb7afae06179c82eebf4cd490d92b551e0a5e3d4f31ff47d5a214d6e8198def030f0b7a6bc776fcf7eeeb2f3f36d27bb45a7c09b570b3bd55b23df9e35cd9144b2edcaddbbb4d696d60095a2548346865be0c425b38311d084046a884f55a70ba91a561ac0578a3a299ad69c981309001cb3dbfcba2651dccb138380516a5ba67cf388c930f38de0135a1e72b97b0a1a2d5716ade2c6e42c9bab20c60b50301f5192865afd432e267342829dcb0df15389e77201283fab3465df0fb14bf85ed838669036790f1bb1c4b6480b4d9e6768a555e9c9d92e00e034a317aa598cc832160d26ee7a5b7d80f0cf28d002bc075f6118903311aa30c8e2a53a2c9102ff2014ee0b17779a90498b76de0d554183ff737a279c2e418f608bfb512525cc81222a5bf804e70b12e47ce4476c4dd2519aa049965ff611107b4ff19fc308fc3611f9b490fe7757742dfff985ab68a9e0d89aaac7d4642f15fbddf62a64f33f3800572156fa6e4c5d0e4405000bfe1d490e73eba2ee7b0352f0cb7e86db8a6835c9b4d6a94bf5540da808d011dbce32f3c8a01b6355a46ae7b659aa18ecb062b7322359d433c007c024524662c68b9582654deaed91f33ee3c085ebe6e288ef6471410f8461bc0ec6da4b4452e7506cd9b763fd3e79ff417fc72f563a55fd9a4ea1c26bc814696993df8cb8d467f506f8e327564501204da4a7097b4d6cc3ba0ba89bac89f0c61f267dd43d1b86b814c205ba6b2dcecb401ac1c6aa85aac599758a66a146911f2c1de7678493e0ca13936c2d05f740025af34840eccd10a9658be3898f547f71e5504e446b9cccbff8e9de513a367ca9dfd1a00353f840e1d297ac52948a294d2c5d00efab4037f7a99018a63af64a1a63cab72f927382a3dc0e7afe2a915f66ebd3d0df7d717a48b1247b7074710056302a69cbe86f47a96076a6b56bf91e0a7a01bdb6ef4d6c6ff7e91313e77f88b7d2d84428bdceb11b33a12b80a304ade87e790d5b5c877ff591ef80251c0c3e870eea92eecfc5a352ac1356aaebc66e6d8c2193224ec8f4d108b57cf8d918abda4d952e8bac7edfb725264a75aeb042444e7417e98c18197ab40d948f0daeb13071538b5ce4ef667e16edfb6c4aa2a7dde7f1df770eb6d3482c011ae0506b1fbf1f0c528a7f2eec6d9345a97a54f4719b7fdae31769bccfccb0c5edfc1ac3652aa2ad33f47e982dcfbf19fecd5d52ad173a285d17e1604d8165d20b267a31b96bdd8ce9fb41d0650378ccbb739e3edd552c48479b77fec154f477aec3958a8770766623c17f4079767fc31e300173e958cb5e2a625193d7f1893910507d3f5d4d1f75dfb4e15341aca7f840356ae2eed514e11d4929c8cccf65421517239280b13a6e448ce13712e72b5aa356ce67019295b6f363ffaa94d64574b3720e406ad955427b3e3a3a7957883bd9d5cc0cd9b39a71e874ed730a75398a73346240a481280ef903d06ea008de254ea3136e6ac0f74c9fd0afcc40d358cd50f9aac4a1e85dae2135b263b46e97cec385a964d48953fe990a5fe624f366766d00bf5514bf4026e45e65d57f89d758609a850a8985501f82701005504292c5d369fa2b1dee32fbee079c8b25e6f7f039ac6c0b50e689c4f46d8f229b7897e4f9c16ade4138487489346987a726e0d8013d1714fc6dc1c5ab8e5e4c0072605d1559667d1cc8296b617d5a9275aa88358ba5dba78d89ab1f658af5184aea3dc09e7b2bb4fc529fcb10afbdac6ba9dddf413fa982f86b850b4ec1fd5b80c30ca6cb18c8cfbe32bcfe82dbd24753f54cec2a1f6b2d4ae5da12f96a8ba7a970409c4fc15454c4ac8bdf9aa5439f8e3d16650b1739102822fa3669568b4f6432f85e4b6bb052f678aa"}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}, @fragment={0x2c, 0x0, 0x4f, 0x1, 0x0, 0x3, 0x66}, @routing={0xff, 0x0, 0x1, 0x71}, @hopopts={0x0, 0x0, '\x00', [@pad1, @pad1]}, @dstopts={0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x7f}, @enc_lim={0x4, 0x1, 0x81}]}, @routing={0x9f, 0x4, 0x0, 0x3, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x3881}}}}}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)={0x5, 0x8d, 0x3d, 0x8001, 0x1, "71feaf337e88b3e57800"}) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000200000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000fcffffff01000000"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000800)="c7", 0x1}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd4e}, 0x8500, 0x0, 0x4, 0x7, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) 3.693899365s ago: executing program 1 (id=1383): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r2, &(0x7f00000001c0)=""/100, 0x64, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) socket$xdp(0x2c, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r4, 0x80000) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) 3.421823078s ago: executing program 1 (id=1386): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x507500) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x86, 0xffffffff, 0x40}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r3, r3, 0x0, 0x800000009) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x14a) fallocate(r4, 0x8, 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00008af000/0x1000)=nil, 0x40000000000, 0x0, 0x0, 0xffffffffffdffffd, 0x0, 0x10, 0x2c, 0x6e}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001b80)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000ec0)={0x9, 0x654, 0x0, 'queue1\x00', 0x7ca64da}) keyctl$set_reqkey_keyring(0xe, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000e40)='cpu_frequency_limits\x00', r1, 0x0, 0x100000000e}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x0, 0x800b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x8810) 3.340516301s ago: executing program 2 (id=1387): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000001c0)=""/100, 0x64, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) r8 = socket(0x28, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r9 = syz_open_pts(r7, 0x0) r10 = dup3(r9, r5, 0x80000) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x17) close_range(r0, 0xffffffffffffffff, 0x0) 3.116242101s ago: executing program 0 (id=1389): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000001c0)=""/100, 0x64, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) r8 = socket(0x28, 0x5, 0x0) r9 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r12 = syz_open_pts(r7, 0x0) r13 = dup3(r12, r5, 0x80000) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0x17) close_range(r0, 0xffffffffffffffff, 0x0) 2.927928529s ago: executing program 1 (id=1391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000d9268d45d91a924e64ffec850000006dd50000000000000000000095c14b5a236255ccbf3ef267cc6e03c13910880b4ab5e1e54c9a7f04f7e3ff3c43197beba0c97ce54623e4eea7fc32fc417f2b1241a16f36e16dd38af8c99a94daaae7ee5afbc2f55d3fe0085b1be49fd0d137d5f30692947c8a31791fc2f4a4e3305c01b2f6b4d1231d950f63323ce85e31f74f623e0ddd969e15f5954b022f559ca1829be75c1fa11cb4b24a171445881f30386cd4dbe1a2874c61a48e35cebd2f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x900, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x0, 0x2f9}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r5, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000080)=[0x2, 0x1ff], 0x2) io_uring_enter(r5, 0x1e61, 0x1d64, 0x1, 0x0, 0x2c) 2.873120992s ago: executing program 4 (id=1392): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x4, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="000c000000000000000000007b8af8ff00000000c5f101000000cd2ad37d2836bfa2000000007a88ca9e8e40737300863affffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000007a, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x508, &(0x7f0000000600)="$eJzs3e9rVWUcAPDvufvlz6ZkVBa4qNAMN3UrNBLSehNEUGoihTnc/JHzR26BCpZSlvgiXwlBBJYRoRAjoRdS4X/Qi14ZEkLRC20I/aCwYHHu7p1Xd7epmzvk+Xzg6HOes/F87/lyznOf57lnN4DcaoqI/RFRHxHrI6KxVJ+UtnhqYEt/rre1d3O6JdHfv/JSUjx+vLV3c1T8Tmpq+k8hYlJErPg5ifkHh7bbvWfv1vaurs5dpf2Wnm07W7r37F2wZVv7ps5Nndtbl7a1ti1ZuLR1ybi91nOPXG5Y/dKKDQfbLr6VvPzw52m800rHKl/HeGmKpsFzcpUk4pnxbiwjNRFRW3EeU0nt8D9/V+eRbyYiLka37Os3vyhU5HB9NEZNDCTv38ZXfmuMo+1ZxwgAjL/+/v7+a/cBgNtdos8HgJwpj/uPt/ZuLm8TNfew9tREtcRw+pZHcaH2eGltt3cw/7WllaBJURcRU35PonJZL7lmze9mrDkf0RSXN/164rF30i1u0Tosw9t/ICLuqXb9J8X8ziiu4g/Nf01EzBpj2z/9neZ/w/zKOvmfWGPJ/91jbPuzfWn+1/1VWSf/+TH7hawjIEvfHco6ArL0fV/WEZClF1dmHQFZev7xrCMgSx9eyjoCziyPiCXVxn+FuL/4f/XxX0NETB9j2+9fTMd/na9X1g0d/xUujLEZRtC3POLJimc7eivyXzKjprQ3vTgfUJds3NLVuTAi7oiIeVHXkO4vGqGNI8lXz1arP702zf8/a8rzf+mWtl+eCyzFcaG24erf62jv8bn0cdJ3IGJ2bbX8J4Pzv8kw87+zr7ONX75ddbha/dSzaf7bPhg5/9xK/R9HzK16/V95cikZ+fmsluL9oKV8Vxjqy8uHV1erX/Z2mv/TC+Q/O+n1P2Xk/Bfv/4PP63XfeBtzVl6o+lZh8Xtp/tecuJn7f32yqhhgfalud3tPz65FEfXJc0PrF994zLer8vkon680//MerN7/D6zvVL//10XEfdfZ5sl17+6sVn/qk+L8/3nXf3bS/HeMcv0nV13/N15o+/PYQ9Xa3tee5v+1k6Nf/23FYOaVarz/G931JijrOAEAAAAAAAAYH4Xic9xJoXmwXCg0Nw/8De9ZMaXQtaO759GNO97Y3hGl50HrCuVPejVWfB50UbF8ZX/xNfutETEzIg41TC7uN2/Y0dWR9YsHgJyZFvHjDwufPjZ1mP4/da4h6ygBgPGU9v/nH7jz07T8h34eAHIh7f9f3f3R0dD/A0Bu6P8BIH/0/wCQP/p/AMgf/T8A5E+5/58558zZJCL2PzG5uEXFd2fUZRohcKsVsg4AyExN1gEAmanNOgAgM8b4QDLK8UnDHaj6za7A/8Hce83/Q16Z/4f8Mv8P+WX+H/LLGB8w/w/5071n79b2rq7OXQoKCgqDhazvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzkvwAAAP//h7ctEg==") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) iopl(0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_setup(0x487b, 0x0) syz_io_uring_setup(0x19b7, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105942, 0x5) unshare(0x6060600) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="2c000000000000001b04f1e2a6ee535827c560d15f597d6d7b3f98fa60ce0c8c22b98e9894c14120fa63783f46bf7eedd4484c56681d244419c5321e44f5eee78486a421c06a7e14701a106a44eb0ef2f4ede93c4c593c3df36c6f7e8898670ac4c5f86421ea2c4b9c7d293c8a50020000577bc48e", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000b40)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 2.745985008s ago: executing program 2 (id=1393): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BLKRRPART(r0, 0x125f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a15000/0x1000)=nil, 0x1000, 0x5) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000180)={0x0, 0x2, 0xfff8, 0x4}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x0, &(0x7f0000002d80)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x8) splice(r6, 0x0, r4, 0x0, 0x6, 0xb) write$binfmt_elf64(r7, &(0x7f0000000a80)=ANY=[@ANYBLOB="7f454c4605800d01000000000000000002003e000f000000de0100000000000040000000000000009b02000000000000050000000600380001000800bc049d0d060000000b00000008000000000000009f00000000000000010100000000000005000000000000000200000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096c100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"/632, @ANYRESHEX=r0], 0x278) close_range(r4, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r4, @ANYRESOCT, @ANYRES64=r3, @ANYRESDEC=r2, @ANYBLOB="60860200000000000000f1e5f54de03153425c5ba85349424a059544d0eeb039", @ANYRES64=r6, @ANYRES16], 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000100)=@ethtool_stats={0x1d, 0x6, [0xeb, 0xdf, 0x8000000000000001, 0x6, 0x400000008, 0x3]}}) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x2060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES64]) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7, 0xf83, 0x6}, 0x1c) 2.712103389s ago: executing program 3 (id=1394): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000001c0)=""/100, 0x64, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) r8 = socket(0x28, 0x5, 0x0) r9 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r12 = syz_open_pts(r7, 0x0) r13 = dup3(r12, r5, 0x80000) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0x17) close_range(r0, 0xffffffffffffffff, 0x0) 2.563007176s ago: executing program 3 (id=1395): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r0, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) chmod(&(0x7f0000000040)='.\x00', 0x35e) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000004c0)=[{r2, 0x1007}, {r2, 0x4004}], 0x2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) setuid(0xee01) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x40088d0}, 0x4040000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setreuid(0x0, 0xee00) listen(r7, 0x0) listen(0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000500)="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", 0x102}], 0x1) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x4) 2.504533138s ago: executing program 0 (id=1396): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000001c0)=""/100, 0x64, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) socket(0x28, 0x5, 0x0) r8 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r10 = syz_open_pts(r7, 0x0) r11 = dup3(r10, r5, 0x80000) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000000)=0x17) close_range(r0, 0xffffffffffffffff, 0x0) 2.420135693s ago: executing program 4 (id=1397): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x4, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="000c000000000000000000007b8af8ff00000000c5f101000000cd2ad37d2836bfa2000000007a88ca9e8e40737300863affffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000007a, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x508, &(0x7f0000000600)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) iopl(0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_setup(0x487b, 0x0) syz_io_uring_setup(0x19b7, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105942, 0x5) unshare(0x6060600) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="2c000000000000001b04f1e2a6ee535827c560d15f597d6d7b3f98fa60ce0c8c22b98e9894c14120fa63783f46bf7eedd4484c56681d244419c5321e44f5eee78486a421c06a7e14701a106a44eb0ef2f4ede93c4c593c3df36c6f7e8898670ac4c5f86421ea2c4b9c7d293c8a50020000577bc48e", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000b40)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 2.219949671s ago: executing program 4 (id=1398): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000001c0)=""/100, 0x64, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) r8 = socket(0x28, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r9 = syz_open_pts(r7, 0x0) r10 = dup3(r9, r5, 0x80000) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x17) close_range(r0, 0xffffffffffffffff, 0x0) 2.167401844s ago: executing program 1 (id=1399): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='rxrpc_tx_packet\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) mq_unlink(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4a23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000980)=@int=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_mreqn(r1, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000beb000/0x2000)=nil, 0x2000, 0xfffffffffefffff9, 0x10010, 0xffffffffffffffff, 0x4000) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020d00bf050005001201", 0x2e}], 0x1}, 0x54) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{0x4}]}, 0xffffffffffffffac}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x3, 0x8, 0x8, 0x4}]}) 2.054359259s ago: executing program 0 (id=1400): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffe6f, 0x0, 0x41000, 0x5b, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) unshare(0x8000000) semget$private(0x0, 0x1, 0xb4) semctl$GETALL(0x0, 0x0, 0xd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x800200a0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000300100000102"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.886143266s ago: executing program 2 (id=1401): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000001c0)=""/100, 0x64, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) r8 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r11 = syz_open_pts(r7, 0x0) r12 = dup3(r11, r5, 0x80000) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000000)=0x17) close_range(r0, 0xffffffffffffffff, 0x0) 1.680761855s ago: executing program 4 (id=1402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) shmat(0x0, &(0x7f000000e000/0x4000)=nil, 0x1000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) setgid(0x0) socket(0x40000000015, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) setuid(0x0) r7 = getgid() getpeername$qrtr(r6, &(0x7f0000000100), &(0x7f0000000140)=0xc) lchown(0x0, 0x0, r7) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) eventfd(0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$ARCH_SET_GS(0x1e, r9, 0x0, 0x1001) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, r7, r8, 0xee00, 0x140, 0x3ff}, 0x0, 0x0, 0xffffffff, 0xc, 0x5, 0xc0e, 0x7, 0x4, 0x1, 0x1, r9}) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.588674169s ago: executing program 3 (id=1403): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000001c0)=""/100, 0x64, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r5, 0x80000) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x17) close_range(r0, 0xffffffffffffffff, 0x0) 1.554202341s ago: executing program 0 (id=1404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000015b45e590000000000180000007710d20033ae8d121c2e5e5e23cb5d62366ee9caa594086ed2f0625f076477f2cc34bfa9aa4718383e0d00f47cab7a331973afe2cf92f224badd545990f614e791ec33c18f2cd3edd61c6fcf7566692c413d013e3dcf5866ed300c895cf62b62e342debdbd9ba0b7303f66f081264c188b1d02a27ee5f1d2bd569795f69a0ea9d6ba96b2e1ee3cb739c6fb16f69563db05eee222668ffebe77f36519f4d888a48723f7d7e748ce5c533b910120b3226603e71f977da242bdbcfe0ab0373732ed26189719ec0520f55f93654a98146231fa202773761146572e918d000000000000", @ANYBLOB="9e580c27656ba7d845d1a23afda28854f4ab3a7e72cc1300bc3a17f041266b0ec6c346757bc49c689280e37c00a8e9bab18473358c31dccd58b74d81ff0f6c4043356196aa7824ce829f45ce56", @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) r11 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r11, 0x0) 1.32975434s ago: executing program 2 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d00000008000200feffffff1400d531fbf0e9815603007866726d3000"/71], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) write$P9_RREADLINK(r7, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) 1.295284512s ago: executing program 1 (id=1406): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000001c0)=""/100, 0x64, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) r8 = socket(0x28, 0x5, 0x0) r9 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r12 = syz_open_pts(r7, 0x0) r13 = dup3(r12, r5, 0x80000) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0x17) close_range(r0, 0xffffffffffffffff, 0x0) 1.244521974s ago: executing program 4 (id=1407): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) io_uring_setup(0x3e14, &(0x7f0000000480)={0x0, 0x9250, 0x1, 0x1, 0x141}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000000000000020000000000a010800000000000000000a0000000900010073797a310000000034000000140a030000000000000000000300000008000340000000000900010073797a31000000000900"], 0xb0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfae21000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x100c404, &(0x7f0000000300)=ANY=[@ANYBLOB='dots,dots,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6ea2ba6f74732c6e6f646f747f2c6769643d", @ANYRESHEX=0xee00, @ANYBLOB=',nodots,dots,time_offset=0x00000000000000e5,dmask=00000000000000000000011,nodots,dots,check=relaxed,nodots,nfs,nodots,sys_immutable,flush,dots,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0xfffd, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0xcda0}, 0x0, &(0x7f00000001c0)=0x7ffffffd, 0x9, 0x5, 0x5, 0x7, 0x10, 0x7}}], 0xa0, 0x8004}, 0x0) 969.445547ms ago: executing program 3 (id=1408): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, 0x0) socketpair(0x8, 0x2, 0x6, &(0x7f0000000080)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) inotify_init1(0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000280)={r5, 0x1000, {0x0, 0x0, 0x0, 0x3, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) open(0x0, 0x80080, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x0, 0x0}) unshare(0x6020400) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 610.461113ms ago: executing program 0 (id=1409): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x18) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0xb, &(0x7f0000ffa000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) chdir(0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 346.237645ms ago: executing program 4 (id=1410): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21002, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0xfb, 0x1203, &(0x7f0000000a40)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000001c00)=ANY=[@ANYBLOB="73797374656d5f753a7b626a6563745f723a7379ea44e85a7374656d645f6c6f67696e645f73657373696f6e735f743a733020207573722f7362696e2f63757073642030"], 0x54) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000edd837fa427e50e0834a854cc65e9e2e08711bd34b9b31d1a9b19e7f14f427be81625a23122fe61b715669f93e67c2758b1a8a275a69618ace34b42dc477b29379ca791e2b195dd4c5d7366e00bb7632a8978761c0bf225991a79e993f235df25afee24d7c1026455845b3f9d3edd4150308b165fc1dd17cfdf03009b10d57b00718fab980bd2fbcf9149edb824d3bfba253bfcfb56cec04fbb6c7f24856735a99e97f008107f5072f911a6c42793e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_uring_setup(0x7268, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x11b}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7030000001f000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r7, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) fgetxattr(r0, &(0x7f00000001c0)=@known='security.selinux\x00', 0x0, 0x2) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000a00)={{}, {0x1, 0x1}, [], {0x4, 0x6}, [], {0x10, 0x1}, {0x20, 0x1}}, 0x24, 0x3) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) 321.404786ms ago: executing program 3 (id=1411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000d, 0x5d031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rpcgss_svc_seqno_low\x00', r2, 0x0, 0x3ff}, 0x18) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2000, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x120, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100001042cbd70000200000000000000", @ANYRES32=0x0, @ANYBLOB="c00104001d0000001400128009000100626f6e6400"], 0x34}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) sendmsg$inet(r7, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) getdents(r4, 0x0, 0x54) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xffff, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0xd, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)=':\x00', 0x0, 0x0) 268.564308ms ago: executing program 1 (id=1412): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000001c0)=""/100, 0x64, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) r8 = socket(0x28, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r9 = syz_open_pts(r7, 0x0) r10 = dup3(r9, r5, 0x80000) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x17) close_range(r0, 0xffffffffffffffff, 0x0) 174.359413ms ago: executing program 2 (id=1413): r0 = socket$nl_route(0x10, 0x3, 0x0) getuid() r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="834ec1d449594140ec7cd849b7c8102c41e3f0dca515470324ad4b0aa65364316fe674110b7c727744b2f37a93b77b35ccb8e87c616bc84d3297853814466c08ba6cae359bb1ce46140003c076f89f4cb267d0092e9c9634c7f7a2d05607208792276023dc797dbe05", @ANYRESHEX, @ANYRES32=r1, @ANYBLOB="51ed0b6e23267ed03d74bcc66308f1fbd562cdc245173478935ca1d1bc30029915b26caef9b72fb0de1a8be170931bc86650534531c7347e69d84140b4c41e5afc6ea7292657de0dc912fb7571f06f1d5a0eb6036265b5720207f761c09a83177a8e177a0c00", @ANYRES8, @ANYRES16=0x0, @ANYRESHEX=r1], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) socket$inet(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4005) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000006800010003001000fbffff7f00000000000000000c000200010000001100000014000c800800020009000000060001000a0000000600030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x400401a}, 0x4000080) 0s ago: executing program 3 (id=1414): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close_range(r6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r3, &(0x7f00000003c0), 0x4) recvmmsg(r3, 0x0, 0x0, 0x40000002, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000280)={0xa0, 0x19, 0x2, {0x10c0, {0x0, 0x4, 0x4}, 0x0, r2, r9, 0x1, 0x8, 0x1, 0x9, 0x10000, 0x3ff, 0x1, 0xeeb, 0x10000, 0x6, 0x9, 0x6, 0x10, 0xc, 0xfffffffffffffffd}}, 0xa0) kernel console output (not intermixed with test programs): error [ 142.849267][ T7425] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.922: corrupted inode contents [ 142.866034][ T7425] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.922: mark_inode_dirty error [ 142.878846][ T7425] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.922: mark inode dirty (error -117) [ 142.892440][ T7425] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 142.902520][ T7425] EXT4-fs (loop4): 1 orphan inode deleted [ 142.917207][ T7425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.994031][ T7442] bridge0: port 1(macsec1) entered blocking state [ 143.000729][ T7442] bridge0: port 1(macsec1) entered disabled state [ 143.007272][ T7442] macsec1: entered allmulticast mode [ 143.012656][ T7442] bridge0: entered allmulticast mode [ 143.018477][ T7442] macsec1: left allmulticast mode [ 143.023518][ T7442] bridge0: left allmulticast mode [ 143.033618][ T7443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.922'. [ 143.212627][ T7450] program syz.0.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.359792][ T7457] lo speed is unknown, defaulting to 1000 [ 143.366710][ T7457] lo speed is unknown, defaulting to 1000 [ 143.372865][ T7457] lo speed is unknown, defaulting to 1000 [ 143.409690][ T7447] vhci_hcd vhci_hcd.2: default hub control req: 0317 v0000 i0000 l0 [ 143.530194][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.575627][ T7467] loop1: detected capacity change from 0 to 732 [ 143.586947][ T7467] iso9660: Unknown parameter ' ' [ 143.620821][ T7468] hub 9-0:1.0: USB hub found [ 143.625805][ T7468] hub 9-0:1.0: 8 ports detected [ 143.636336][ T7468] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7468 comm=syz.4.932 [ 143.642454][ T7469] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 143.668818][ T7467] team0 (unregistering): Port device dummy0 removed [ 143.722735][ T7468] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=7468 comm=syz.4.932 [ 143.966573][ T7483] siw: device registration error -23 [ 144.182795][ T7491] bridge0: entered promiscuous mode [ 144.188687][ T7491] bridge0: port 1(macsec1) entered blocking state [ 144.195165][ T7491] bridge0: port 1(macsec1) entered disabled state [ 144.201781][ T7491] macsec1: entered allmulticast mode [ 144.207075][ T7491] bridge0: entered allmulticast mode [ 144.213304][ T7491] macsec1: left allmulticast mode [ 144.218330][ T7491] bridge0: left allmulticast mode [ 144.224189][ T7491] bridge0: left promiscuous mode [ 144.236066][ T7492] loop1: detected capacity change from 0 to 512 [ 144.248865][ T7492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.262281][ T7492] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.443460][ T7507] !yz!: rxe_newlink: already configured on team_slave_0 [ 144.833342][ T7526] infiniband syû: set down [ 144.837859][ T7526] infiniband syû: added bond_slave_0 [ 144.850947][ T7526] RDS/IB: syû: added [ 144.855470][ T7526] smc: adding ib device syû with port count 1 [ 144.861846][ T7526] smc: ib device syû port 1 has no pnetid [ 145.071595][ T7545] netlink: 'syz.3.957': attribute type 30 has an invalid length. [ 145.136732][ T7548] hub 9-0:1.0: USB hub found [ 145.141688][ T7548] hub 9-0:1.0: 8 ports detected [ 145.151923][ T7548] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7548 comm=syz.0.955 [ 145.173883][ T7550] siw: device registration error -23 [ 145.180114][ T29] kauditd_printk_skb: 477 callbacks suppressed [ 145.180126][ T29] audit: type=1326 audit(2000000860.203:19255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d654b65e7 code=0x7ffc0000 [ 145.209991][ T29] audit: type=1326 audit(2000000860.203:19256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d6545b829 code=0x7ffc0000 [ 145.233327][ T29] audit: type=1326 audit(2000000860.203:19257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6d654bf749 code=0x7ffc0000 [ 145.256725][ T29] audit: type=1326 audit(2000000860.233:19258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d654b65e7 code=0x7ffc0000 [ 145.280223][ T29] audit: type=1326 audit(2000000860.233:19259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d6545b829 code=0x7ffc0000 [ 145.293478][ T7553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=7553 comm=syz.0.955 [ 145.303683][ T29] audit: type=1326 audit(2000000860.233:19260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6d654bf749 code=0x7ffc0000 [ 145.323065][ T29] audit: type=1326 audit(2000000860.233:19261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d654b65e7 code=0x7ffc0000 [ 145.363280][ T29] audit: type=1326 audit(2000000860.233:19262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d6545b829 code=0x7ffc0000 [ 145.386633][ T29] audit: type=1326 audit(2000000860.233:19263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6d654bf749 code=0x7ffc0000 [ 145.410133][ T29] audit: type=1326 audit(2000000860.253:19264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d654b65e7 code=0x7ffc0000 [ 145.508654][ T7560] sz1: rxe_newlink: already configured on lo [ 145.649736][ T7568] __nla_validate_parse: 12 callbacks suppressed [ 145.649751][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.962'. [ 145.861488][ T7572] program syz.4.963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.939878][ T7576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.965'. [ 146.022555][ T7581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.967'. [ 146.197897][ T7585] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.208370][ T7585] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.261817][ T7585] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.271682][ T7585] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.331046][ T7585] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.340955][ T7585] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.361757][ T7595] bond2 (unregistering): Released all slaves [ 146.381938][ T7585] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.391729][ T7585] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.400516][ T7594] 9p: Bad value for 'rfdno' [ 146.458401][ T2181] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.466656][ T2181] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.478035][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'. [ 146.511125][ T2181] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.519387][ T2181] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.528341][ T2181] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.537304][ T2181] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.546515][ T2181] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.554883][ T2181] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.812927][ T7614] hub 9-0:1.0: USB hub found [ 146.823126][ T7614] hub 9-0:1.0: 8 ports detected [ 146.846386][ T7614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7614 comm=syz.4.976 [ 146.931814][ T7620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.978'. [ 146.977396][ T7614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=7614 comm=syz.4.976 [ 147.415526][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.982'. [ 147.424561][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.982'. [ 147.441354][ T7635] dummy0: entered promiscuous mode [ 147.446679][ T7635] dummy0: left promiscuous mode [ 147.477769][ T7640] loop1: detected capacity change from 0 to 8192 [ 147.599324][ T7643] lo speed is unknown, defaulting to 1000 [ 147.605844][ T7643] lo speed is unknown, defaulting to 1000 [ 147.637586][ T7643] lo speed is unknown, defaulting to 1000 [ 147.731018][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'. [ 147.753642][ T7648] loop4: detected capacity change from 0 to 128 [ 147.779711][ T7648] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.826097][ T7648] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.946702][ T7653] loop0: detected capacity change from 0 to 2048 [ 148.010297][ T3496] loop0: p1 < > p4 [ 148.015191][ T3496] loop0: p4 size 722688 extends beyond EOD, truncated [ 148.073587][ T7653] loop0: p1 < > p4 [ 148.079448][ T7653] loop0: p4 size 722688 extends beyond EOD, truncated [ 148.090314][ T168] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.114933][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.987'. [ 148.131969][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 148.212980][ T7653] loop0: detected capacity change from 0 to 1024 [ 148.488161][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 148.675154][ T7664] loop1: detected capacity change from 0 to 1024 [ 148.702396][ T7664] journal_path: Non-blockdev passed as './file1' [ 148.708766][ T7664] EXT4-fs: error: could not find journal device path [ 148.737513][ T7645] Set syz1 is full, maxelem 65536 reached [ 148.748580][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 148.789589][ T7664] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.799505][ T7664] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.856167][ T7670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.992'. [ 148.882083][ T7664] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.891920][ T7664] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.894958][ T7667] loop4: detected capacity change from 0 to 2048 [ 148.930601][ T7667] EXT4-fs (loop4): failed to initialize system zone (-117) [ 148.938179][ T7667] EXT4-fs (loop4): mount failed [ 148.944734][ T7664] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.954594][ T7664] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.964186][ T7667] loop4: detected capacity change from 0 to 512 [ 149.003128][ T7664] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.013074][ T7664] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.026579][ T7667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.039722][ T7667] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.054857][ T7667] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 149.071116][ T7667] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.991: Failed to acquire dquot type 1 [ 149.125970][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.163333][ T7684] loop0: detected capacity change from 0 to 512 [ 149.174373][ T7684] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 149.185137][ T7684] EXT4-fs (loop0): 1 truncate cleaned up [ 149.191451][ T7684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.207264][ T7684] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 149.215599][ T7684] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.994: Logical block already allocated [ 149.227268][ T7684] EXT4-fs (loop0): Remounting filesystem read-only [ 149.250850][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.287835][ T7693] loop4: detected capacity change from 0 to 2048 [ 149.290620][ T7697] loop0: detected capacity change from 0 to 512 [ 149.322031][ T7697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.335993][ T7697] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.358933][ T7693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 149.440623][ T7703] veth6: entered promiscuous mode [ 149.445718][ T7703] veth6: entered allmulticast mode [ 149.468791][ T7693] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 149.493076][ T7705] lo speed is unknown, defaulting to 1000 [ 149.499575][ T7693] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1388 with error 28 [ 149.512678][ T7693] EXT4-fs (loop4): This should not happen!! Data will be lost [ 149.512678][ T7693] [ 149.522497][ T7693] EXT4-fs (loop4): Total free blocks count 0 [ 149.528470][ T7693] EXT4-fs (loop4): Free/Dirty block details [ 149.534400][ T7693] EXT4-fs (loop4): free_blocks=2415919104 [ 149.540827][ T7693] EXT4-fs (loop4): dirty_blocks=1392 [ 149.546147][ T7693] EXT4-fs (loop4): Block reservation details [ 149.552160][ T7693] EXT4-fs (loop4): i_reserved_data_blocks=87 [ 149.581701][ T7706] lo speed is unknown, defaulting to 1000 [ 149.588894][ T7706] lo speed is unknown, defaulting to 1000 [ 149.595341][ T7706] lo speed is unknown, defaulting to 1000 [ 149.868966][ T7705] lo speed is unknown, defaulting to 1000 [ 149.880381][ T7705] lo speed is unknown, defaulting to 1000 [ 150.080231][ T981] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 150.121359][ T7716] wireguard0: entered promiscuous mode [ 150.126857][ T7716] wireguard0: entered allmulticast mode [ 150.219322][ T29] kauditd_printk_skb: 689 callbacks suppressed [ 150.219337][ T29] audit: type=1326 audit(2000000865.243:19952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe41482f749 code=0x7ffc0000 [ 150.250808][ T29] audit: type=1326 audit(2000000865.243:19953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41482f749 code=0x7ffc0000 [ 150.302306][ T29] audit: type=1326 audit(2000000865.243:19954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41482f749 code=0x7ffc0000 [ 150.302805][ T7702] siw: device registration error -23 [ 150.331180][ T29] audit: type=1326 audit(2000000865.243:19955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe41482df90 code=0x7ffc0000 [ 150.354667][ T29] audit: type=1326 audit(2000000865.243:19956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe414830f77 code=0x7ffc0000 [ 150.425484][ T29] audit: type=1326 audit(2000000865.243:19957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe41482f749 code=0x7ffc0000 [ 150.448920][ T29] audit: type=1326 audit(2000000865.243:19958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe414830f77 code=0x7ffc0000 [ 150.472533][ T29] audit: type=1326 audit(2000000865.243:19959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe41482e3aa code=0x7ffc0000 [ 150.495823][ T29] audit: type=1326 audit(2000000865.243:19960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41482f749 code=0x7ffc0000 [ 150.519228][ T29] audit: type=1326 audit(2000000865.243:19961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41482f749 code=0x7ffc0000 [ 150.790247][ T2472] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.798451][ T2472] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.821087][ T2472] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.829463][ T2472] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.845325][ T2472] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.853704][ T2472] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.863203][ T2472] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.871488][ T2472] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.879730][ T7733] __nla_validate_parse: 1 callbacks suppressed [ 150.879850][ T7733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1005'. [ 151.035526][ T7745] loop1: detected capacity change from 0 to 764 [ 151.043922][ T7745] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 151.083467][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1011'. [ 151.099723][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1008'. [ 151.112488][ T7751] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1011'. [ 151.121565][ T7751] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1011'. [ 151.140027][ T7751] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1011'. [ 151.149184][ T7751] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1011'. [ 151.170150][ T7755] loop4: detected capacity change from 0 to 1024 [ 151.179926][ T7755] EXT4-fs: Ignoring removed bh option [ 151.185484][ T7755] EXT4-fs: inline encryption not supported [ 151.196828][ T7751] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1011'. [ 151.206521][ T7751] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1011'. [ 151.216249][ T7755] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.240072][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1012'. [ 151.304151][ T7756] Symlink component flag not implemented [ 151.310259][ T7756] Symlink component flag not implemented (7) [ 151.317291][ T7755] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 151.326430][ T7755] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1011: lblock 2 mapped to illegal pblock 2 (length 1) [ 151.340868][ T7755] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1011: lblock 0 mapped to illegal pblock 48 (length 1) [ 151.355432][ T7755] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1011: Failed to acquire dquot type 0 [ 151.368061][ T7765] tipc: Enabling of bearer rejected, failed to enable media [ 151.385011][ T7755] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 151.396284][ T7755] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1011: mark_inode_dirty error [ 151.420899][ T7755] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 151.443169][ T7755] EXT4-fs (loop4): 1 orphan inode deleted [ 151.454730][ T7755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.467400][ T2472] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 151.493690][ T7770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.502895][ T2472] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 0 [ 151.513627][ T7770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.539828][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.549072][ T3322] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 151.629323][ T3322] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 151.638941][ T3322] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 151.690524][ T7776] loop4: detected capacity change from 0 to 512 [ 151.707936][ T7776] EXT4-fs (loop4): 1 truncate cleaned up [ 151.739059][ T7776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.771562][ T7776] program syz.4.1016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.885748][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.644784][ T7814] hub 9-0:1.0: USB hub found [ 152.649531][ T7814] hub 9-0:1.0: 8 ports detected [ 152.650144][ T7807] random: crng reseeded on system resumption [ 152.670314][ T7814] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7814 comm=syz.3.1027 [ 152.687685][ T7807] Restarting kernel threads ... [ 152.702872][ T7807] Done restarting kernel threads. [ 152.713130][ T7814] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=7814 comm=syz.3.1027 [ 152.914227][ T7824] bridge0: entered promiscuous mode [ 152.920801][ T7824] bridge0: port 1(macsec1) entered blocking state [ 152.927257][ T7824] bridge0: port 1(macsec1) entered disabled state [ 152.939586][ T7824] macsec1: entered allmulticast mode [ 152.944910][ T7824] bridge0: entered allmulticast mode [ 152.951969][ T7824] macsec1: left allmulticast mode [ 152.957029][ T7824] bridge0: left allmulticast mode [ 152.963693][ T7824] bridge0: left promiscuous mode [ 152.974748][ T7827] loop1: detected capacity change from 0 to 512 [ 153.032784][ T7827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.059725][ T7827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.401080][ T7836] EXT4-fs: Ignoring removed nobh option [ 153.425096][ T7836] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.449926][ T7836] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.677427][ T7850] bridge0: entered promiscuous mode [ 153.683648][ T7850] bridge0: port 1(macsec1) entered blocking state [ 153.690314][ T7850] bridge0: port 1(macsec1) entered disabled state [ 153.697093][ T7850] macsec1: entered allmulticast mode [ 153.702440][ T7850] bridge0: entered allmulticast mode [ 153.708583][ T7850] macsec1: left allmulticast mode [ 153.713635][ T7850] bridge0: left allmulticast mode [ 153.719159][ T7850] bridge0: left promiscuous mode [ 153.731320][ T7853] set_capacity_and_notify: 1 callbacks suppressed [ 153.731329][ T7853] loop1: detected capacity change from 0 to 512 [ 153.750925][ T7853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.766419][ T7853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.939534][ T7866] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.041968][ T7866] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.091279][ T7866] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.148739][ T7871] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\đĸ %šu@) failed with errno=-22 [ 154.169797][ T7866] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.215261][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.215621][ T7869] bond2 (unregistering): Released all slaves [ 154.252195][ T7879] loop4: detected capacity change from 0 to 128 [ 154.271643][ T42] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.283265][ T42] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.295525][ T42] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.307720][ T168] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.356456][ T7879] syz.4.1045: attempt to access beyond end of device [ 154.356456][ T7879] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 154.370002][ T7879] syz.4.1045: attempt to access beyond end of device [ 154.370002][ T7879] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 154.383523][ T7879] syz.4.1045: attempt to access beyond end of device [ 154.383523][ T7879] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 154.397186][ T7879] syz.4.1045: attempt to access beyond end of device [ 154.397186][ T7879] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 154.411080][ T7879] syz.4.1045: attempt to access beyond end of device [ 154.411080][ T7879] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 154.424752][ T7879] syz.4.1045: attempt to access beyond end of device [ 154.424752][ T7879] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 154.438414][ T7879] syz.4.1045: attempt to access beyond end of device [ 154.438414][ T7879] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 154.444856][ T7882] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 154.451961][ T7879] syz.4.1045: attempt to access beyond end of device [ 154.451961][ T7879] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 154.474301][ T7879] syz.4.1045: attempt to access beyond end of device [ 154.474301][ T7879] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 154.487890][ T7879] syz.4.1045: attempt to access beyond end of device [ 154.487890][ T7879] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 155.005437][ T7903] bridge0: port 1(macsec1) entered blocking state [ 155.012064][ T7903] bridge0: port 1(macsec1) entered disabled state [ 155.018803][ T7903] macsec1: entered allmulticast mode [ 155.024143][ T7903] bridge0: entered allmulticast mode [ 155.031289][ T7903] macsec1: left allmulticast mode [ 155.036335][ T7903] bridge0: left allmulticast mode [ 155.225654][ T7920] netlink: 'syz.2.1053': attribute type 4 has an invalid length. [ 155.235069][ T3482] lo speed is unknown, defaulting to 1000 [ 155.239678][ T29] kauditd_printk_skb: 936 callbacks suppressed [ 155.239693][ T29] audit: type=1400 audit(2000000871.263:20895): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.164 dest=40760 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 155.240925][ T3482] sz1: Port: 1 Link DOWN [ 155.242881][ T7906] netlink: 'syz.2.1053': attribute type 4 has an invalid length. [ 155.258142][ T29] audit: type=1400 audit(2000000871.273:20896): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.272597][ T3482] lo speed is unknown, defaulting to 1000 [ 155.276813][ T29] audit: type=1400 audit(2000000871.273:20897): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.286225][ T3482] lo speed is unknown, defaulting to 1000 [ 155.345348][ T3482] sz1: Port: 1 Link ACTIVE [ 155.350009][ T29] audit: type=1400 audit(2000000871.373:20898): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1060 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.376224][ T3481] lo speed is unknown, defaulting to 1000 [ 155.451210][ T29] audit: type=1400 audit(2000000871.443:20899): avc: denied { create } for pid=7921 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.472323][ T29] audit: type=1400 audit(2000000871.443:20900): avc: denied { map_create } for pid=7921 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 155.491785][ T29] audit: type=1400 audit(2000000871.443:20901): avc: denied { prog_load } for pid=7921 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 155.511613][ T29] audit: type=1400 audit(2000000871.453:20902): avc: denied { bpf } for pid=7921 comm="syz.0.1055" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.532529][ T29] audit: type=1400 audit(2000000871.453:20903): avc: denied { map_read map_write } for pid=7922 comm="syz.4.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 155.553113][ T29] audit: type=1400 audit(2000000871.453:20904): avc: denied { perfmon } for pid=7921 comm="syz.0.1055" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 156.046091][ T7936] bridge0: entered promiscuous mode [ 156.062699][ T7936] bridge0: port 1(macsec1) entered blocking state [ 156.069286][ T7936] bridge0: port 1(macsec1) entered disabled state [ 156.078361][ T7936] macsec1: entered allmulticast mode [ 156.083905][ T7936] bridge0: entered allmulticast mode [ 156.093888][ T7936] macsec1: left allmulticast mode [ 156.098940][ T7936] bridge0: left allmulticast mode [ 156.121683][ T7936] bridge0: left promiscuous mode [ 156.419025][ T7944] bond1 (unregistering): Released all slaves [ 156.547509][ T7957] __nla_validate_parse: 21 callbacks suppressed [ 156.547524][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1064'. [ 156.632951][ T7960] lo speed is unknown, defaulting to 1000 [ 156.639119][ T7960] lo speed is unknown, defaulting to 1000 [ 156.645285][ T7960] lo speed is unknown, defaulting to 1000 [ 156.780753][ T7966] netlink: 8 bytes leftover after parsing attributes in process `wÞĢĸ'. [ 156.851662][ T7968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.866439][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 156.930990][ T7974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'. [ 156.944999][ T7974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1069'. [ 156.954157][ T7974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1069'. [ 156.972558][ T7974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1069'. [ 156.981606][ T7974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1069'. [ 157.042165][ T7974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1069'. [ 157.051891][ T7974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1069'. [ 157.059339][ T7985] 9p: Bad value for 'wfdno' [ 157.072569][ T7980] loop1: detected capacity change from 0 to 2048 [ 157.105258][ T7985] bridge0: port 1(macsec1) entered blocking state [ 157.112273][ T7985] bridge0: port 1(macsec1) entered disabled state [ 157.154470][ T7985] macsec1: entered allmulticast mode [ 157.159834][ T7985] bridge0: entered allmulticast mode [ 157.167732][ T7980] EXT4-fs (loop1): failed to initialize system zone (-117) [ 157.183770][ T7980] EXT4-fs (loop1): mount failed [ 157.236013][ T7985] macsec1: left allmulticast mode [ 157.241141][ T7985] bridge0: left allmulticast mode [ 157.478902][ T7980] loop1: detected capacity change from 0 to 512 [ 157.502370][ T7980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.515641][ T7980] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.536760][ T7980] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 157.555777][ T7980] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1072: Failed to acquire dquot type 1 [ 157.599214][ T7998] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 157.612782][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.912340][ T8020] loop4: detected capacity change from 0 to 7 [ 157.918883][ T8019] tipc: Enabling of bearer rejected, failed to enable media [ 157.920335][ T3496] buffer_io_error: 4 callbacks suppressed [ 157.920347][ T3496] Buffer I/O error on dev loop4, logical block 0, async page read [ 157.979869][ T3496] Buffer I/O error on dev loop4, logical block 0, async page read [ 157.987776][ T3496] loop4: unable to read partition table [ 158.001033][ T8026] loop1: detected capacity change from 0 to 512 [ 158.002949][ T8024] pim6reg: left allmulticast mode [ 158.014162][ T3496] Buffer I/O error on dev loop4, logical block 0, async page read [ 158.022502][ T8020] Buffer I/O error on dev loop4, logical block 0, async page read [ 158.037402][ T8020] Buffer I/O error on dev loop4, logical block 0, async page read [ 158.045792][ T8020] loop4: unable to read partition table [ 158.051487][ T3496] Buffer I/O error on dev loop4, logical block 0, async page read [ 158.064289][ T3496] Buffer I/O error on dev loop4, logical block 0, async page read [ 158.065255][ T8026] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1084: bg 0: block 248: padding at end of block bitmap is not set [ 158.073074][ T3496] Buffer I/O error on dev loop4, logical block 0, async page read [ 158.092780][ T8020] loop_reread_partitions: partition scan of loop4 (úųƒåĄ™‰üūSęjĖ–ãĒP=Ã―?ã}X‹šÐ œëÜ%õŦ`Éæրų…ˆŠ5) failed (rc=-5) [ 158.107109][ T8026] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1084: Failed to acquire dquot type 1 [ 158.118838][ T8026] EXT4-fs (loop1): 1 truncate cleaned up [ 158.125012][ T8026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.138091][ T8026] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.225782][ T3496] Buffer I/O error on dev loop4, logical block 0, async page read [ 158.240972][ T3496] Buffer I/O error on dev loop4, logical block 0, async page read [ 158.472206][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.608215][ T8043] IPv6: NLM_F_REPLACE set, but no existing node found! [ 158.736905][ T3005] loop4: unable to read partition table [ 158.808260][ T8057] loop0: detected capacity change from 0 to 512 [ 158.828876][ T8057] EXT4-fs (loop0): 1 truncate cleaned up [ 158.842432][ T8057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.859933][ T8018] syz.3.1082 (8018) used greatest stack depth: 6008 bytes left [ 158.893195][ T8057] program syz.0.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.922257][ T8062] loop1: detected capacity change from 0 to 512 [ 158.938723][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.959243][ T8062] ext4: Unknown parameter 'smackfsdef' [ 158.976445][ T8062] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 159.041521][ T8072] loop4: detected capacity change from 0 to 128 [ 159.113327][ T8075] loop1: detected capacity change from 0 to 512 [ 159.135077][ T8075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.149822][ T8075] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.177013][ T8068] loop0: detected capacity change from 0 to 512 [ 159.223651][ T8068] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1095: EA inode hash validation failed [ 159.238509][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.248684][ T8068] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1095: corrupted inode contents [ 159.275003][ T8068] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.1095: mark_inode_dirty error [ 159.288727][ T8068] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1095: corrupted inode contents [ 159.324488][ T8068] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.1095: mark_inode_dirty error [ 159.356610][ T8068] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.1095: mark inode dirty (error -117) [ 159.372708][ T8068] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 159.391374][ T8068] EXT4-fs (loop0): 1 orphan inode deleted [ 159.402848][ T8068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.426583][ T8086] bridge0: entered promiscuous mode [ 159.440470][ T8086] bridge0: port 1(macsec1) entered blocking state [ 159.446949][ T8086] bridge0: port 1(macsec1) entered disabled state [ 159.459325][ T8086] macsec1: entered allmulticast mode [ 159.464763][ T8086] bridge0: entered allmulticast mode [ 159.477104][ T8090] loop1: detected capacity change from 0 to 512 [ 159.493140][ T8090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.505999][ T8086] macsec1: left allmulticast mode [ 159.506419][ T8090] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.511067][ T8086] bridge0: left allmulticast mode [ 159.525936][ T8086] bridge0: left promiscuous mode [ 159.758253][ T8096] 9p: Bad value for 'wfdno' [ 159.766999][ T8096] bridge0: entered promiscuous mode [ 159.786975][ T8096] bridge0: port 1(macsec1) entered blocking state [ 159.793696][ T8096] bridge0: port 1(macsec1) entered disabled state [ 159.811231][ T8096] macsec1: entered allmulticast mode [ 159.816531][ T8096] bridge0: entered allmulticast mode [ 159.830112][ T8100] loop1: detected capacity change from 0 to 512 [ 159.837131][ T8096] macsec1: left allmulticast mode [ 159.842813][ T8096] bridge0: left allmulticast mode [ 159.848557][ T8067] Process accounting paused [ 159.864600][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.904711][ T8096] bridge0: left promiscuous mode [ 159.915524][ T8100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.928961][ T8100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.945950][ T8104] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.030146][ T8106] loop0: detected capacity change from 0 to 512 [ 160.036825][ T8106] EXT4-fs: test_dummy_encryption option not supported [ 160.053063][ T8094] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 160.110075][ T8110] loop1: detected capacity change from 0 to 128 [ 160.155177][ T8104] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.184687][ T8113] program syz.2.1107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.201868][ T8106] loop0: detected capacity change from 0 to 2048 [ 160.301054][ T8106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.301123][ T8106] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.380328][ T29] kauditd_printk_skb: 1624 callbacks suppressed [ 160.380343][ T29] audit: type=1400 audit(2000000876.403:22525): avc: denied { read write } for pid=8103 comm="syz.0.1103" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.380868][ T8122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.386617][ T29] audit: type=1400 audit(2000000876.403:22526): avc: denied { open } for pid=8103 comm="syz.0.1103" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.419941][ T8119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 160.441975][ T29] audit: type=1400 audit(2000000876.403:22527): avc: denied { ioctl } for pid=8103 comm="syz.0.1103" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.456270][ T8104] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.501342][ T8122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.532025][ T29] audit: type=1400 audit(2000000876.553:22528): avc: denied { read append open } for pid=8118 comm="syz.1.1108" path="/206/file2/memory.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 160.592113][ T8104] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.665433][ T8125] veth6: entered promiscuous mode [ 160.670537][ T8125] veth6: entered allmulticast mode [ 160.764019][ T2445] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.772654][ T29] audit: type=1400 audit(2000000876.783:22529): avc: denied { create } for pid=8123 comm="syz.2.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 160.792961][ T29] audit: type=1400 audit(2000000876.783:22530): avc: denied { read } for pid=8123 comm="syz.2.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 160.827348][ T31] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.879301][ T31] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.896178][ T31] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.918108][ T8119] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 160.961665][ T29] audit: type=1400 audit(2000000876.843:22531): avc: denied { setopt } for pid=8123 comm="syz.2.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 160.981839][ T29] audit: type=1400 audit(2000000876.923:22532): avc: denied { write } for pid=8123 comm="syz.2.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 161.001267][ T29] audit: type=1400 audit(2000000876.933:22533): avc: denied { map } for pid=8118 comm="syz.1.1108" path="/206/file2/memory.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 161.024713][ T8119] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 161.024744][ T8119] EXT4-fs (loop1): This should not happen!! Data will be lost [ 161.024744][ T8119] [ 161.024757][ T8119] EXT4-fs (loop1): Total free blocks count 0 [ 161.024772][ T8119] EXT4-fs (loop1): Free/Dirty block details [ 161.024785][ T8119] EXT4-fs (loop1): free_blocks=2415919104 [ 161.024799][ T8119] EXT4-fs (loop1): dirty_blocks=3216 [ 161.024813][ T8119] EXT4-fs (loop1): Block reservation details [ 161.024889][ T8119] EXT4-fs (loop1): i_reserved_data_blocks=201 [ 161.083369][ T29] audit: type=1400 audit(2000000876.933:22534): avc: denied { write } for pid=8118 comm="syz.1.1108" path="/206/file2/memory.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 161.167951][ T8134] bridge0: port 1(macsec1) entered blocking state [ 161.175184][ T8134] bridge0: port 1(macsec1) entered disabled state [ 161.181908][ T8134] macsec1: entered allmulticast mode [ 161.187194][ T8134] bridge0: entered allmulticast mode [ 161.199345][ T8132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 161.211667][ T8134] macsec1: left allmulticast mode [ 161.216716][ T8134] bridge0: left allmulticast mode [ 161.273075][ T8132] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 161.288198][ T8132] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1480 with error 28 [ 161.300670][ T8132] EXT4-fs (loop4): This should not happen!! Data will be lost [ 161.300670][ T8132] [ 161.310331][ T8132] EXT4-fs (loop4): Total free blocks count 0 [ 161.316319][ T8132] EXT4-fs (loop4): Free/Dirty block details [ 161.322323][ T8132] EXT4-fs (loop4): free_blocks=2415919104 [ 161.328118][ T8132] EXT4-fs (loop4): dirty_blocks=1488 [ 161.333420][ T8132] EXT4-fs (loop4): Block reservation details [ 161.339416][ T8132] EXT4-fs (loop4): i_reserved_data_blocks=93 [ 161.392709][ T8143] macvtap0: refused to change device tx_queue_len [ 161.456064][ T2472] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 161.696602][ T2472] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2032 with error 28 [ 161.722630][ T8150] journal_path: Non-blockdev passed as './file1' [ 161.729040][ T8150] EXT4-fs: error: could not find journal device path [ 161.753341][ T31] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 161.770789][ T31] EXT4-fs (loop0): Remounting filesystem read-only [ 161.856788][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.913714][ T8156] __nla_validate_parse: 15 callbacks suppressed [ 161.913728][ T8156] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1117'. [ 161.929864][ T8156] bridge_slave_0: entered promiscuous mode [ 161.949266][ T8153] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1115: EA inode hash validation failed [ 161.985991][ T8153] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1115: corrupted inode contents [ 162.001192][ T8153] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.1115: mark_inode_dirty error [ 162.030873][ T8153] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1115: corrupted inode contents [ 162.044892][ T8153] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.1115: mark_inode_dirty error [ 162.069245][ T8153] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.1115: mark inode dirty (error -117) [ 162.089434][ T8153] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 162.106677][ T8153] EXT4-fs (loop1): 1 orphan inode deleted [ 162.141155][ T8153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.297160][ T8164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1115'. [ 162.327159][ T8167] 9p: Bad value for 'wfdno' [ 162.332572][ T8165] wireguard0: entered promiscuous mode [ 162.338056][ T8165] wireguard0: entered allmulticast mode [ 162.434797][ T8167] bridge0: port 1(macsec1) entered blocking state [ 162.441307][ T8167] bridge0: port 1(macsec1) entered disabled state [ 162.453626][ T8167] macsec1: entered allmulticast mode [ 162.459067][ T8167] bridge0: entered allmulticast mode [ 162.465179][ T8167] macsec1: left allmulticast mode [ 162.470332][ T8167] bridge0: left allmulticast mode [ 162.624746][ T8179] 9p: Bad value for 'wfdno' [ 162.636657][ T8179] bridge0: entered promiscuous mode [ 162.643128][ T8179] bridge0: port 1(macsec1) entered blocking state [ 162.649672][ T8179] bridge0: port 1(macsec1) entered disabled state [ 162.656695][ T8179] macsec1: entered allmulticast mode [ 162.662027][ T8179] bridge0: entered allmulticast mode [ 162.669053][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.678328][ T8179] macsec1: left allmulticast mode [ 162.683412][ T8179] bridge0: left allmulticast mode [ 162.696427][ T8179] bridge0: left promiscuous mode [ 162.725322][ T8182] lo speed is unknown, defaulting to 1000 [ 162.732461][ T8182] lo speed is unknown, defaulting to 1000 [ 162.738549][ T8182] lo speed is unknown, defaulting to 1000 [ 162.776421][ T8184] xt_connbytes: Forcing CT accounting to be enabled [ 162.818436][ T8184] Cannot find set identified by id 0 to match [ 162.855379][ T8188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1127'. [ 162.867838][ T8188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1127'. [ 162.876863][ T8188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1127'. [ 162.926480][ T8188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1127'. [ 162.935552][ T8188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1127'. [ 162.986171][ T8182] program syz.1.1125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.005031][ T8188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1127'. [ 163.014081][ T8188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1127'. [ 163.166418][ T8202] pim6reg: entered allmulticast mode [ 163.237937][ T8204] EXT4-fs: Ignoring removed oldalloc option [ 163.244153][ T8204] EXT4-fs: Ignoring removed bh option [ 163.262424][ T8204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.305335][ T8204] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 163.346332][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.347548][ T8215] bridge0: port 1(macsec1) entered blocking state [ 163.361842][ T8215] bridge0: port 1(macsec1) entered disabled state [ 163.380877][ T8215] macsec1: entered allmulticast mode [ 163.386176][ T8215] bridge0: entered allmulticast mode [ 163.403613][ T8220] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.415444][ T8215] macsec1: left allmulticast mode [ 163.420567][ T8215] bridge0: left allmulticast mode [ 163.456701][ T8219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.531853][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.686756][ T8227] bridge0: left promiscuous mode [ 163.692241][ T8237] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1139'. [ 163.693333][ T8227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.709826][ T8227] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.719596][ T8227] A link change request failed with some changes committed already. Interface 60ŠXđĶĀ may have been left with an inconsistent configuration, please check. [ 163.838148][ T8243] set_capacity_and_notify: 7 callbacks suppressed [ 163.838162][ T8243] loop4: detected capacity change from 0 to 512 [ 163.876646][ T8243] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1141: inode has both inline data and extents flags [ 163.939359][ T8243] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1141: couldn't read orphan inode 15 (err -117) [ 164.026412][ T8243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.168840][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.392094][ T8280] loop0: detected capacity change from 0 to 512 [ 164.413484][ T8280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.439830][ T8280] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.486117][ T8290] tipc: Enabling of bearer rejected, failed to enable media [ 164.523443][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.537465][ T8291] loop1: detected capacity change from 0 to 128 [ 164.674052][ T8293] infiniband syz!: set down [ 164.678649][ T8293] infiniband syz!: added team_slave_0 [ 164.717435][ T8290] bio_check_eod: 2005 callbacks suppressed [ 164.717506][ T8290] syz.1.1142: attempt to access beyond end of device [ 164.717506][ T8290] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 164.737735][ T8290] syz.1.1142: attempt to access beyond end of device [ 164.737735][ T8290] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 164.751557][ T8293] RDS/IB: syz!: added [ 164.755604][ T8293] smc: adding ib device syz! with port count 1 [ 164.771569][ T8290] syz.1.1142: attempt to access beyond end of device [ 164.771569][ T8290] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 164.771676][ T8293] smc: ib device syz! port 1 has no pnetid [ 164.817614][ T8297] SELinux: policydb version -249 does not match my version range 15-35 [ 164.834155][ T8290] syz.1.1142: attempt to access beyond end of device [ 164.834155][ T8290] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 164.837864][ T8297] SELinux: failed to load policy [ 164.897223][ T8290] syz.1.1142: attempt to access beyond end of device [ 164.897223][ T8290] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 164.911141][ T8297] netlink: zone id is out of range [ 164.916273][ T8297] netlink: zone id is out of range [ 164.944410][ T8290] syz.1.1142: attempt to access beyond end of device [ 164.944410][ T8290] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 164.978159][ T8297] netlink: zone id is out of range [ 165.010379][ T8290] syz.1.1142: attempt to access beyond end of device [ 165.010379][ T8290] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 165.027439][ T8297] netlink: zone id is out of range [ 165.039763][ T8297] netlink: zone id is out of range [ 165.045280][ T8297] netlink: zone id is out of range [ 165.050624][ T8297] netlink: zone id is out of range [ 165.056640][ T8297] netlink: zone id is out of range [ 165.061885][ T8297] netlink: zone id is out of range [ 165.087468][ T8290] syz.1.1142: attempt to access beyond end of device [ 165.087468][ T8290] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 165.104553][ T8290] syz.1.1142: attempt to access beyond end of device [ 165.104553][ T8290] loop1: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 165.135236][ T8290] syz.1.1142: attempt to access beyond end of device [ 165.135236][ T8290] loop1: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 165.402156][ T29] kauditd_printk_skb: 1078 callbacks suppressed [ 165.402176][ T29] audit: type=1326 audit(2000000882.363:23613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb8cad22005 code=0x7ffc0000 [ 165.432365][ T29] audit: type=1326 audit(2000000882.373:23615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb8cad22005 code=0x7ffc0000 [ 165.455948][ T29] audit: type=1326 audit(2000000882.373:23614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8cace65e7 code=0x7ffc0000 [ 165.479370][ T29] audit: type=1326 audit(2000000882.373:23616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8cac8b829 code=0x7ffc0000 [ 165.503254][ T29] audit: type=1326 audit(2000000882.373:23617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fb8cacef749 code=0x7ffc0000 [ 165.526844][ T29] audit: type=1326 audit(2000000882.373:23618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb8cad22005 code=0x7ffc0000 [ 165.550420][ T29] audit: type=1326 audit(2000000882.373:23619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb8cad22005 code=0x7ffc0000 [ 165.574046][ T29] audit: type=1326 audit(2000000882.373:23620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb8cad22005 code=0x7ffc0000 [ 165.597968][ T29] audit: type=1326 audit(2000000882.373:23621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb8cad22005 code=0x7ffc0000 [ 165.621447][ T29] audit: type=1326 audit(2000000882.373:23622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb8cad22005 code=0x7ffc0000 [ 165.954188][ T8321] loop1: detected capacity change from 0 to 1024 [ 165.983800][ T8324] bridge_slave_0: entered promiscuous mode [ 166.012386][ T8321] EXT4-fs: inline encryption not supported [ 166.416593][ T8321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.542448][ T8321] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1155: Allocating blocks 497-513 which overlap fs metadata [ 166.769047][ T8314] EXT4-fs (loop1): pa ffff88810604c930: logic 256, phys. 369, len 9 [ 166.777354][ T8314] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 166.801689][ T8334] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.850515][ T8334] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.963667][ T8334] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.010671][ T8334] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.027293][ T8341] bond2 (unregistering): Released all slaves [ 167.075810][ T2472] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.107750][ T2472] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.116210][ T2472] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.126535][ T2472] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.127073][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.175960][ T8348] bridge0: port 1(macsec1) entered blocking state [ 167.182512][ T8348] bridge0: port 1(macsec1) entered disabled state [ 167.209526][ T8348] macsec1: entered allmulticast mode [ 167.214849][ T8348] bridge0: entered allmulticast mode [ 167.228497][ T8348] macsec1: left allmulticast mode [ 167.234902][ T8348] bridge0: left allmulticast mode [ 167.260405][ T8352] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.270926][ T8352] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.287593][ T8346] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 167.297486][ T8356] loop1: detected capacity change from 0 to 512 [ 167.306801][ T8346] team0: Port device dummy0 removed [ 167.313503][ T8356] EXT4-fs: test_dummy_encryption option not supported [ 167.332173][ T8346] batman_adv: batadv0: Adding interface: dummy0 [ 167.338434][ T8346] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.364278][ T8346] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 167.390193][ T8356] loop1: detected capacity change from 0 to 2048 [ 167.418540][ T8352] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.429369][ T8352] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.532135][ T8356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.544855][ T8356] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.594054][ T8352] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.617392][ T8352] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.741271][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.768734][ T8371] lo speed is unknown, defaulting to 1000 [ 167.775745][ T8371] lo speed is unknown, defaulting to 1000 [ 167.782173][ T8371] lo speed is unknown, defaulting to 1000 [ 168.025776][ T8375] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.075101][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.160943][ T8352] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.174004][ T8352] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.185340][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.204359][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.232685][ T8375] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.245841][ T8379] __nla_validate_parse: 5 callbacks suppressed [ 168.245858][ T8379] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1169'. [ 168.314730][ T8379] bridge_slave_0: entered promiscuous mode [ 168.331851][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1171'. [ 168.353601][ T8384] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1170'. [ 168.379240][ T8381] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 168.493148][ T8375] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.707799][ T8375] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.257958][ T31] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.266235][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.520190][ T981] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.528425][ T981] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.599750][ T981] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.607970][ T981] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.656175][ T981] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.721386][ T981] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.736163][ T8384] net_ratelimit: 3 callbacks suppressed [ 169.736179][ T8384] Set syz1 is full, maxelem 65536 reached [ 169.744464][ T981] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.802291][ T31] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.813405][ T31] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.821667][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.993184][ T8393] lo speed is unknown, defaulting to 1000 [ 170.030136][ T8393] lo speed is unknown, defaulting to 1000 [ 170.039997][ T8393] lo speed is unknown, defaulting to 1000 [ 170.065454][ T8399] loop4: detected capacity change from 0 to 1024 [ 170.080158][ T8399] EXT4-fs: Ignoring removed bh option [ 170.122448][ T8399] EXT4-fs: inline encryption not supported [ 170.181357][ T8399] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.221070][ T8399] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 170.269390][ T8399] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1173: lblock 2 mapped to illegal pblock 2 (length 1) [ 170.293799][ T8399] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1173: lblock 0 mapped to illegal pblock 48 (length 1) [ 170.335447][ T8399] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1173: Failed to acquire dquot type 0 [ 170.431154][ T2445] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 345: padding at end of block bitmap is not set [ 170.449840][ T8399] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 170.464258][ T2445] EXT4-fs (loop1): Remounting filesystem read-only [ 170.492109][ T8399] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1173: mark_inode_dirty error [ 170.575387][ T8399] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 170.600255][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.699277][ T8399] EXT4-fs (loop4): 1 orphan inode deleted [ 170.719256][ T2445] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 170.744464][ T8399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.803062][ T2445] __quota_error: 284 callbacks suppressed [ 170.803080][ T2445] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 170.817268][ T2445] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 170.942892][ T8416] netlink: 'syz.0.1179': attribute type 3 has an invalid length. [ 170.951352][ T8416] netlink: 'syz.0.1179': attribute type 1 has an invalid length. [ 170.959082][ T8416] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1179'. [ 171.055276][ T8420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1181'. [ 171.078578][ T29] audit: type=1326 audit(2000000888.093:23905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 171.078702][ T8420] netlink: 'syz.3.1181': attribute type 13 has an invalid length. [ 171.103218][ T29] audit: type=1326 audit(2000000888.093:23906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 171.134706][ T29] audit: type=1326 audit(2000000888.093:23907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 171.158349][ T29] audit: type=1326 audit(2000000888.093:23908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 171.182561][ T29] audit: type=1326 audit(2000000888.093:23909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 171.206321][ T29] audit: type=1326 audit(2000000888.093:23910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 171.230539][ T29] audit: type=1326 audit(2000000888.093:23911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 171.254190][ T29] audit: type=1326 audit(2000000888.093:23912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 171.278456][ T29] audit: type=1326 audit(2000000888.093:23913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 171.311622][ T8420] gretap0: refused to change device tx_queue_len [ 171.318071][ T8420] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 171.378065][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1183'. [ 171.410572][ T8435] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 171.598977][ T8420] IPVS: set_ctl: invalid protocol: 24832 108.97.110.49:0 [ 171.761823][ T8441] veth8: entered promiscuous mode [ 171.766983][ T8441] veth8: entered allmulticast mode [ 171.950212][ T8445] 9p: Bad value for 'wfdno' [ 171.975704][ T8445] bridge0: entered promiscuous mode [ 171.993513][ T8445] bridge0: port 1(macsec1) entered blocking state [ 172.000020][ T8445] bridge0: port 1(macsec1) entered disabled state [ 172.025238][ T8445] macsec1: entered allmulticast mode [ 172.030615][ T8445] bridge0: entered allmulticast mode [ 172.056618][ T8445] macsec1: left allmulticast mode [ 172.061713][ T8445] bridge0: left allmulticast mode [ 172.106348][ T8445] bridge0: left promiscuous mode [ 172.181591][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.200450][ T3322] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 172.217136][ T3322] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 172.239315][ T3322] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 172.295802][ T8452] 9p: Bad value for 'wfdno' [ 172.305885][ T8452] bridge0: port 1(macsec1) entered blocking state [ 172.312471][ T8452] bridge0: port 1(macsec1) entered disabled state [ 172.332273][ T8452] macsec1: entered allmulticast mode [ 172.337594][ T8452] bridge0: entered allmulticast mode [ 172.343868][ T8452] macsec1: left allmulticast mode [ 172.348896][ T8452] bridge0: left allmulticast mode [ 172.923748][ T8480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1199'. [ 172.943663][ T8480] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 173.076021][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'. [ 173.328072][ T8483] loop4: detected capacity change from 0 to 32768 [ 173.380560][ T3496] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 173.391202][ T3496] loop4: p1 start 460800 is beyond EOD, truncated [ 173.397666][ T3496] loop4: p2 size 83886080 extends beyond EOD, truncated [ 173.420910][ T3496] loop4: p5 start 460800 is beyond EOD, truncated [ 173.427360][ T3496] loop4: p6 size 83886080 extends beyond EOD, truncated [ 173.435833][ T8492] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 173.442434][ T8492] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 173.450258][ T8492] vhci_hcd vhci_hcd.0: Device attached [ 173.471788][ T8483] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 173.478910][ T8495] vhci_hcd: connection closed [ 173.479278][ T31] vhci_hcd vhci_hcd.3: stop threads [ 173.489172][ T31] vhci_hcd vhci_hcd.3: release socket [ 173.490011][ T8483] loop4: p1 start 460800 is beyond EOD, [ 173.494553][ T31] vhci_hcd vhci_hcd.3: disconnect device [ 173.506193][ T8483] truncated [ 173.509465][ T8483] loop4: p2 size 83886080 extends beyond EOD, truncated [ 173.518939][ T8498] 9p: Bad value for 'wfdno' [ 173.524751][ T8483] loop4: p5 start 460800 is beyond EOD, truncated [ 173.531347][ T8483] loop4: p6 size 83886080 extends beyond EOD, truncated [ 173.543428][ T8498] bridge0: port 1(macsec1) entered blocking state [ 173.550667][ T8498] bridge0: port 1(macsec1) entered disabled state [ 173.557488][ T8498] macsec1: entered allmulticast mode [ 173.563014][ T8498] bridge0: entered allmulticast mode [ 173.569941][ T8498] macsec1: left allmulticast mode [ 173.575120][ T8498] bridge0: left allmulticast mode [ 173.657371][ T8501] 9p: Bad value for 'wfdno' [ 173.704203][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 173.704488][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 173.717616][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 173.725657][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 173.755472][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 173.755914][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 173.775827][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 173.780070][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 173.796028][ T8505] loop4: detected capacity change from 0 to 512 [ 173.845809][ T8505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.878877][ T8505] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.478745][ T8520] lo speed is unknown, defaulting to 1000 [ 174.487036][ T8520] lo speed is unknown, defaulting to 1000 [ 174.493466][ T8520] lo speed is unknown, defaulting to 1000 [ 175.421103][ T8548] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.430992][ T8548] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.611570][ T8548] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.621395][ T8548] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.752753][ T8548] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.762590][ T8548] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.844726][ T8558] 9p: Bad value for 'wfdno' [ 175.853292][ T8558] bridge0: entered promiscuous mode [ 175.858975][ T8558] bridge0: port 1(macsec1) entered blocking state [ 175.865624][ T8558] bridge0: port 1(macsec1) entered disabled state [ 175.972961][ T8558] macsec1: entered allmulticast mode [ 175.978293][ T8558] bridge0: entered allmulticast mode [ 175.985383][ T8558] macsec1: left allmulticast mode [ 175.990549][ T8558] bridge0: left allmulticast mode [ 175.997077][ T8558] bridge0: left promiscuous mode [ 176.040975][ T8548] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.050855][ T8548] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.108663][ T8569] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 176.126677][ T8569] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 176.193199][ T2274] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.201489][ T2274] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.213504][ T2274] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.221849][ T2274] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.247503][ T8575] 9p: Bad value for 'wfdno' [ 176.248511][ T2274] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.260227][ T2274] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.269392][ T2274] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.277572][ T2274] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.289048][ T8575] bridge0: port 1(macsec1) entered blocking state [ 176.295562][ T8575] bridge0: port 1(macsec1) entered disabled state [ 176.310260][ T8575] macsec1: entered allmulticast mode [ 176.315573][ T8575] bridge0: entered allmulticast mode [ 176.324543][ T8575] macsec1: left allmulticast mode [ 176.329646][ T8575] bridge0: left allmulticast mode [ 176.348998][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'. [ 176.410777][ T8580] loop4: detected capacity change from 0 to 512 [ 176.603180][ T29] kauditd_printk_skb: 808 callbacks suppressed [ 176.603193][ T29] audit: type=1400 audit(2000000893.623:24722): avc: denied { create } for pid=8586 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 176.629481][ T29] audit: type=1400 audit(2000000893.623:24723): avc: denied { setopt } for pid=8586 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 176.760566][ T8596] loop4: detected capacity change from 0 to 764 [ 176.778437][ T8596] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 176.791117][ T29] audit: type=1400 audit(2000000893.813:24724): avc: denied { mount } for pid=8595 comm="syz.4.1231" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 176.817252][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1231'. [ 176.866482][ T8603] syz!: rxe_newlink: already configured on team_slave_0 [ 176.935759][ T29] audit: type=1326 audit(2000000893.953:24725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 176.959391][ T29] audit: type=1326 audit(2000000893.953:24726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 176.982893][ T29] audit: type=1326 audit(2000000893.953:24727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 177.030896][ T8607] Symlink component flag not implemented [ 177.036894][ T8607] Symlink component flag not implemented (7) [ 177.045995][ T29] audit: type=1326 audit(2000000894.063:24728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 177.069799][ T29] audit: type=1326 audit(2000000894.093:24729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 177.096346][ T29] audit: type=1326 audit(2000000894.113:24730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 177.151250][ T29] audit: type=1326 audit(2000000894.173:24731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 177.177295][ T8613] 9p: Bad value for 'wfdno' [ 177.186929][ T8613] bridge0: port 1(macsec1) entered blocking state [ 177.193460][ T8613] bridge0: port 1(macsec1) entered disabled state [ 177.226545][ T8613] macsec1: entered allmulticast mode [ 177.232003][ T8613] bridge0: entered allmulticast mode [ 177.250153][ T8613] macsec1: left allmulticast mode [ 177.255184][ T8613] bridge0: left allmulticast mode [ 177.264255][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.274262][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.373648][ T8620] lo speed is unknown, defaulting to 1000 [ 177.381105][ T8620] lo speed is unknown, defaulting to 1000 [ 177.387601][ T8620] lo speed is unknown, defaulting to 1000 [ 177.693135][ T8620] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 178.333006][ T8630] syz.2.1240 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 178.344072][ T8630] CPU: 0 UID: 0 PID: 8630 Comm: syz.2.1240 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.344103][ T8630] Tainted: [W]=WARN [ 178.344110][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.344122][ T8630] Call Trace: [ 178.344189][ T8630] [ 178.344198][ T8630] __dump_stack+0x1d/0x30 [ 178.344220][ T8630] dump_stack_lvl+0xe8/0x140 [ 178.344267][ T8630] dump_stack+0x15/0x1b [ 178.344288][ T8630] dump_header+0x81/0x240 [ 178.344306][ T8630] oom_kill_process+0x295/0x350 [ 178.344326][ T8630] out_of_memory+0x97b/0xb80 [ 178.344381][ T8630] try_charge_memcg+0x610/0xa10 [ 178.344409][ T8630] charge_memcg+0x51/0xc0 [ 178.344440][ T8630] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 178.344470][ T8630] __read_swap_cache_async+0x17b/0x2d0 [ 178.344502][ T8630] swap_cluster_readahead+0x262/0x3c0 [ 178.344594][ T8630] swapin_readahead+0xde/0x820 [ 178.344619][ T8630] ? __rcu_read_unlock+0x4f/0x70 [ 178.344637][ T8630] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 178.344710][ T8630] ? __rcu_read_unlock+0x4f/0x70 [ 178.344730][ T8630] ? __rcu_read_unlock+0x4f/0x70 [ 178.344757][ T8630] ? swap_cache_get_folio+0x277/0x280 [ 178.344782][ T8630] do_swap_page+0x2b4/0x21e0 [ 178.344863][ T8630] ? _raw_spin_unlock+0x26/0x50 [ 178.344888][ T8630] ? __schedule+0x85f/0xcd0 [ 178.344911][ T8630] ? __pfx_default_wake_function+0x10/0x10 [ 178.344981][ T8630] handle_mm_fault+0x9d8/0x2c60 [ 178.345097][ T8630] do_user_addr_fault+0x630/0x1080 [ 178.345128][ T8630] exc_page_fault+0x62/0xa0 [ 178.345151][ T8630] asm_exc_page_fault+0x26/0x30 [ 178.345220][ T8630] RIP: 0033:0x7fb8cad22008 [ 178.345234][ T8630] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 178.345250][ T8630] RSP: 002b:00007fff1f5dc470 EFLAGS: 00010293 [ 178.345265][ T8630] RAX: 0000000000000000 RBX: 00007fb8caf45fa0 RCX: 00007fb8cad22005 [ 178.345348][ T8630] RDX: 00007fff1f5dc4b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.345419][ T8630] RBP: 00007fb8caf47da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 178.345431][ T8630] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002ba09 [ 178.345442][ T8630] R13: 00007fb8caf46180 R14: ffffffffffffffff R15: 00007fff1f5dc5f0 [ 178.345526][ T8630] [ 178.345533][ T8630] memory: usage 307200kB, limit 307200kB, failcnt 1137 [ 178.373709][ T8647] netlink: 'syz.1.1245': attribute type 1 has an invalid length. [ 178.374689][ T8630] memory+swap: usage 307784kB, limit 9007199254740988kB, failcnt 0 [ 178.601425][ T8630] kmem: usage 189312kB, limit 9007199254740988kB, failcnt 0 [ 178.608705][ T8630] Memory cgroup stats for /syz2: [ 178.639469][ T8630] cache 528384 [ 178.647778][ T8630] rss 12288 [ 178.651556][ T8630] shmem 0 [ 178.654494][ T8630] mapped_file 65536 [ 178.658295][ T8630] dirty 0 [ 178.661266][ T8630] writeback 0 [ 178.664539][ T8630] workingset_refault_anon 1599 [ 178.669360][ T8630] workingset_refault_file 1293 [ 178.674144][ T8630] swap 577536 [ 178.677416][ T8630] swapcached 8192 [ 178.681707][ T8630] pgpgin 192856 [ 178.685174][ T8630] pgpgout 192720 [ 178.688709][ T8630] pgfault 165000 [ 178.692093][ T8647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.692339][ T8630] pgmajfault 251 [ 178.702459][ T8630] inactive_anon 0 [ 178.706185][ T8630] active_anon 20480 [ 178.710646][ T8630] inactive_file 12288 [ 178.714635][ T8630] active_file 524288 [ 178.718523][ T8630] unevictable 0 [ 178.722016][ T8630] hierarchical_memory_limit 314572800 [ 178.727383][ T8630] hierarchical_memsw_limit 9223372036854771712 [ 178.733597][ T8630] total_cache 528384 [ 178.737518][ T8630] total_rss 12288 [ 178.741793][ T8630] total_shmem 0 [ 178.745247][ T8630] total_mapped_file 65536 [ 178.749605][ T8630] total_dirty 0 [ 178.753054][ T8630] total_writeback 0 [ 178.756866][ T8630] total_workingset_refault_anon 1599 [ 178.762171][ T8630] total_workingset_refault_file 1293 [ 178.767458][ T8630] total_swap 577536 [ 178.771909][ T8630] total_swapcached 8192 [ 178.776054][ T8630] total_pgpgin 192856 [ 178.780057][ T8630] total_pgpgout 192720 [ 178.784114][ T8630] total_pgfault 165000 [ 178.788163][ T8630] total_pgmajfault 251 [ 178.792263][ T8630] total_inactive_anon 0 [ 178.796490][ T8630] total_active_anon 20480 [ 178.801442][ T8630] total_inactive_file 12288 [ 178.806022][ T8630] total_active_file 524288 [ 178.810450][ T8630] total_unevictable 0 [ 178.814412][ T8630] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1240,pid=8630,uid=0 [ 178.829063][ T8630] Memory cgroup out of memory: Killed process 8630 (syz.2.1240) total-vm:96152kB, anon-rss:1140kB, file-rss:22476kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 178.934645][ T8653] loop4: detected capacity change from 0 to 512 [ 178.949762][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 178.999813][ T8653] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1246: bg 0: block 248: padding at end of block bitmap is not set [ 179.015346][ T8653] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1246: Failed to acquire dquot type 1 [ 179.029506][ T8653] EXT4-fs (loop4): 1 truncate cleaned up [ 179.035930][ T8653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.050127][ T8653] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.207739][ T8662] lo speed is unknown, defaulting to 1000 [ 179.214923][ T8662] lo speed is unknown, defaulting to 1000 [ 179.221256][ T8662] lo speed is unknown, defaulting to 1000 [ 179.301653][ T8671] 9p: Bad value for 'wfdno' [ 179.311503][ T8671] bridge0: port 1(macsec1) entered blocking state [ 179.318003][ T8671] bridge0: port 1(macsec1) entered disabled state [ 179.324927][ T8671] macsec1: entered allmulticast mode [ 179.330273][ T8671] bridge0: entered allmulticast mode [ 179.336458][ T8671] macsec1: left allmulticast mode [ 179.341648][ T8671] bridge0: left allmulticast mode [ 179.689851][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.733179][ T8680] geneve2: entered promiscuous mode [ 179.738445][ T8680] geneve2: entered allmulticast mode [ 179.740176][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1251'. [ 180.534721][ T8703] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.736788][ T8718] syzkaller0: entered promiscuous mode [ 180.742399][ T8718] syzkaller0: entered allmulticast mode [ 180.873032][ T8725] loop4: detected capacity change from 0 to 8192 [ 181.053583][ T8730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1267'. [ 181.070986][ T8733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1268'. [ 181.097957][ T8733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1268'. [ 181.107015][ T8733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1268'. [ 181.130201][ T8736] gretap2: entered promiscuous mode [ 181.131625][ T8733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1268'. [ 181.144546][ T8733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1268'. [ 181.237017][ T8733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1268'. [ 181.246065][ T8733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1268'. [ 181.718509][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 181.718525][ T29] audit: type=1400 audit(2000000898.733:25204): avc: denied { setattr } for pid=8753 comm="syz.4.1274" name="NETLINK" dev="sockfs" ino=26859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 181.819173][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1275'. [ 181.846597][ T8754] netlink: 'syz.4.1274': attribute type 13 has an invalid length. [ 181.848850][ T8756] 9p: Bad value for 'rfdno' [ 181.867224][ T8754] batman_adv: batadv0: Interface activated: dummy0 [ 181.873816][ T8754] batadv0: mtu less than device minimum [ 181.880111][ T8754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.891011][ T8754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.902015][ T8754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.913001][ T8754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.923879][ T8754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.934981][ T8754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.946294][ T8754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.957394][ T8754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.968292][ T8754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.986471][ T29] audit: type=1326 audit(2000000898.943:25205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 182.010005][ T29] audit: type=1326 audit(2000000898.943:25206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 182.033614][ T29] audit: type=1326 audit(2000000898.943:25207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 182.057264][ T29] audit: type=1326 audit(2000000898.943:25208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc188e1f783 code=0x7ffc0000 [ 182.080645][ T29] audit: type=1326 audit(2000000898.943:25209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc188e1e1ff code=0x7ffc0000 [ 182.103981][ T29] audit: type=1326 audit(2000000898.943:25210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc188e1f7d7 code=0x7ffc0000 [ 182.127451][ T29] audit: type=1326 audit(2000000898.953:25211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc188e1df90 code=0x7ffc0000 [ 182.151004][ T29] audit: type=1326 audit(2000000898.953:25212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc188e1e3aa code=0x7ffc0000 [ 182.174304][ T29] audit: type=1326 audit(2000000898.953:25213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 182.198301][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.207331][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.216429][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1275'. [ 182.293383][ T8764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.360880][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 182.410294][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 182.561071][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.574470][ T8776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8776 comm=syz.4.1280 [ 182.604461][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.615212][ T8774] lo speed is unknown, defaulting to 1000 [ 182.627534][ T8777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36419 sclass=netlink_route_socket pid=8777 comm=syz.4.1280 [ 182.634764][ T8774] lo speed is unknown, defaulting to 1000 [ 182.672988][ T8774] lo speed is unknown, defaulting to 1000 [ 184.080171][ T8792] serio: Serial port ptm2 [ 184.088573][ T8798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1284'. [ 184.098121][ T8798] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 184.322509][ T8803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 184.880351][ T8816] loop4: detected capacity change from 0 to 1024 [ 184.890322][ T8816] EXT4-fs: Ignoring removed nobh option [ 184.896101][ T8816] EXT4-fs: Ignoring removed bh option [ 184.915818][ T8816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.990594][ T8826] lo speed is unknown, defaulting to 1000 [ 184.998075][ T8826] lo speed is unknown, defaulting to 1000 [ 185.004769][ T8826] lo speed is unknown, defaulting to 1000 [ 185.275888][ T8827] usb usb8: selecting invalid altsetting 2047 [ 185.442217][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.517355][ T3409] IPVS: starting estimator thread 0... [ 185.629207][ T8843] IPVS: using max 2592 ests per chain, 129600 per kthread [ 185.713573][ T8841] netlink: 'syz.4.1298': attribute type 5 has an invalid length. [ 185.746608][ T8851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.770013][ T8851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.395089][ T8868] netlink: 'syz.2.1304': attribute type 12 has an invalid length. [ 186.474760][ T8872] netlink: 'syz.1.1306': attribute type 3 has an invalid length. [ 186.510656][ T8877] netlink: 'syz.2.1308': attribute type 1 has an invalid length. [ 186.518488][ T8877] __nla_validate_parse: 2 callbacks suppressed [ 186.518573][ T8877] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1308'. [ 186.554923][ T8877] lo speed is unknown, defaulting to 1000 [ 186.561786][ T8877] lo speed is unknown, defaulting to 1000 [ 186.567942][ T8877] lo speed is unknown, defaulting to 1000 [ 186.568575][ T8879] 9p: Bad value for 'rfdno' [ 186.586156][ T8879] netlink: 'syz.0.1307': attribute type 10 has an invalid length. [ 187.090539][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 187.228195][ T8889] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1311'. [ 187.253134][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1311'. [ 187.274358][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 187.274373][ T29] audit: type=1400 audit(2000000904.293:25531): avc: denied { ioctl } for pid=8888 comm="syz.1.1311" path="socket:[26516]" dev="sockfs" ino=26516 ioctlcmd=0x54da scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.324272][ T8892] 9p: Bad value for 'wfdno' [ 187.333647][ T8892] bridge0: port 1(macsec1) entered blocking state [ 187.340256][ T8892] bridge0: port 1(macsec1) entered disabled state [ 187.350645][ T8892] macsec1: entered allmulticast mode [ 187.355988][ T8892] bridge0: entered allmulticast mode [ 187.362895][ T8892] macsec1: left allmulticast mode [ 187.368073][ T8892] bridge0: left allmulticast mode [ 187.373616][ T29] audit: type=1400 audit(2000000904.393:25532): avc: denied { bind } for pid=8894 comm="syz.2.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.487002][ T8899] veth0: entered promiscuous mode [ 187.492750][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 187.623576][ T29] audit: type=1400 audit(2000000904.643:25533): avc: denied { accept } for pid=8903 comm="syz.4.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 187.689632][ T8910] netem: change failed [ 187.697308][ T29] audit: type=1326 audit(2000000904.713:25534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ef70f749 code=0x7ffc0000 [ 187.699041][ T8910] loop4: detected capacity change from 0 to 128 [ 187.727960][ T8910] EXT4-fs: Ignoring removed nobh option [ 187.740985][ T29] audit: type=1326 audit(2000000904.713:25535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ef70f749 code=0x7ffc0000 [ 187.764608][ T29] audit: type=1326 audit(2000000904.713:25536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ef70f749 code=0x7ffc0000 [ 187.788174][ T29] audit: type=1326 audit(2000000904.713:25537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f45ef70f749 code=0x7ffc0000 [ 187.811842][ T29] audit: type=1326 audit(2000000904.713:25538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f45ef70f783 code=0x7ffc0000 [ 187.829614][ T8910] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.835189][ T29] audit: type=1326 audit(2000000904.713:25539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f45ef70e1ff code=0x7ffc0000 [ 187.835248][ T29] audit: type=1326 audit(2000000904.713:25540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f45ef70f7d7 code=0x7ffc0000 [ 187.896224][ T8910] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.934033][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.301689][ T8923] lo speed is unknown, defaulting to 1000 [ 188.308651][ T8923] lo speed is unknown, defaulting to 1000 [ 188.315009][ T8923] lo speed is unknown, defaulting to 1000 [ 188.666486][ T8920] netlink: 'syz.4.1320': attribute type 13 has an invalid length. [ 188.692525][ T8920] batman_adv: batadv0: Interface deactivated: dummy0 [ 188.747402][ T8931] lo speed is unknown, defaulting to 1000 [ 188.755796][ T8931] lo speed is unknown, defaulting to 1000 [ 188.764032][ T8931] lo speed is unknown, defaulting to 1000 [ 188.787036][ T8942] 9p: Bad value for 'wfdno' [ 188.808525][ T8937] hub 9-0:1.0: USB hub found [ 188.813638][ T8937] hub 9-0:1.0: 8 ports detected [ 188.905951][ T8942] loop4: detected capacity change from 0 to 512 [ 188.942491][ T8942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.968333][ T8945] atomic_op ffff8881389ea128 conn xmit_atomic 0000000000000000 [ 188.977869][ T8942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.041467][ T8945] SELinux: security_context_str_to_sid () failed with errno=-22 [ 189.120870][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1327'. [ 189.994575][ T8964] 9p: Bad value for 'wfdno' [ 190.063375][ T8964] bridge0: entered promiscuous mode [ 190.077969][ T8964] bridge0: port 1(macsec1) entered blocking state [ 190.084466][ T8964] bridge0: port 1(macsec1) entered disabled state [ 190.092345][ T8964] macsec1: entered allmulticast mode [ 190.097749][ T8964] bridge0: entered allmulticast mode [ 190.110290][ T8964] macsec1: left allmulticast mode [ 190.115387][ T8964] bridge0: left allmulticast mode [ 190.132775][ T8964] bridge0: left promiscuous mode [ 190.253761][ T8967] lo speed is unknown, defaulting to 1000 [ 190.259873][ T8945] Process accounting resumed [ 190.266034][ T8967] lo speed is unknown, defaulting to 1000 [ 190.273145][ T8967] lo speed is unknown, defaulting to 1000 [ 190.328979][ T2274] Bluetooth: hci0: Frame reassembly failed (-84) [ 190.710222][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1336'. [ 190.815017][ T8992] netlink: 'syz.0.1337': attribute type 4 has an invalid length. [ 191.212075][ T9006] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.251264][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1343'. [ 191.263073][ T9006] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.286754][ T9009] tipc: Enabled bearer , priority 0 [ 191.304655][ T9009] tipc: Disabling bearer [ 191.313429][ T9006] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.351719][ T9013] netlink: 'syz.2.1342': attribute type 1 has an invalid length. [ 191.359577][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'. [ 191.370646][ T9006] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.428705][ T1543] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.449409][ T1543] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.458211][ T1543] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.481008][ T1543] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.516075][ T9017] 9p: Bad value for 'wfdno' [ 191.524839][ T9017] bridge0: entered promiscuous mode [ 191.531389][ T9017] bridge0: port 1(macsec1) entered blocking state [ 191.537848][ T9017] bridge0: port 1(macsec1) entered disabled state [ 191.545112][ T9017] macsec1: entered allmulticast mode [ 191.550451][ T9017] bridge0: entered allmulticast mode [ 191.556613][ T9017] macsec1: left allmulticast mode [ 191.562480][ T9017] bridge0: left allmulticast mode [ 191.568838][ T9017] bridge0: left promiscuous mode [ 192.369841][ T3514] Bluetooth: hci0: command 0x1003 tx timeout [ 192.370274][ T4124] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 192.420374][ T9040] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.420464][ T9040] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.522803][ T9040] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.522948][ T9040] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.580746][ T9045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.580998][ T9045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.615483][ T9040] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.615693][ T9040] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.734011][ T9040] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.734191][ T9040] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.888298][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 192.888314][ T29] audit: type=1326 audit(2000000909.903:25983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 192.894793][ T29] audit: type=1326 audit(2000000909.913:25984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 192.894826][ T29] audit: type=1326 audit(2000000909.913:25985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 192.894850][ T29] audit: type=1326 audit(2000000909.913:25986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 192.894950][ T29] audit: type=1326 audit(2000000909.913:25987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 192.894977][ T29] audit: type=1326 audit(2000000909.913:25988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 192.895005][ T29] audit: type=1326 audit(2000000909.913:25989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 192.895034][ T29] audit: type=1326 audit(2000000909.913:25990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 192.895117][ T29] audit: type=1326 audit(2000000909.913:25991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 192.895143][ T29] audit: type=1326 audit(2000000909.913:25992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc188e1f749 code=0x7ffc0000 [ 193.007492][ T2274] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.184119][ T2274] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.276508][ T981] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.284849][ T981] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.386031][ T981] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.394252][ T981] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.428650][ T2445] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.436933][ T2445] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.464450][ T9069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9069 comm=syz.0.1358 [ 193.602029][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1360'. [ 193.847868][ T9077] syz.0.1361 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 193.862058][ T9077] CPU: 0 UID: 0 PID: 9077 Comm: syz.0.1361 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 193.862090][ T9077] Tainted: [W]=WARN [ 193.862106][ T9077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.862118][ T9077] Call Trace: [ 193.862125][ T9077] [ 193.862132][ T9077] __dump_stack+0x1d/0x30 [ 193.862158][ T9077] dump_stack_lvl+0xe8/0x140 [ 193.862260][ T9077] dump_stack+0x15/0x1b [ 193.862280][ T9077] dump_header+0x81/0x240 [ 193.862337][ T9077] oom_kill_process+0x295/0x350 [ 193.862357][ T9077] out_of_memory+0x97b/0xb80 [ 193.862378][ T9077] try_charge_memcg+0x610/0xa10 [ 193.862407][ T9077] obj_cgroup_charge_pages+0xa6/0x150 [ 193.862449][ T9077] __memcg_kmem_charge_page+0x9f/0x170 [ 193.862475][ T9077] __alloc_frozen_pages_noprof+0x18f/0x360 [ 193.862539][ T9077] alloc_pages_mpol+0xb3/0x260 [ 193.862568][ T9077] alloc_pages_noprof+0x90/0x130 [ 193.862594][ T9077] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 193.862636][ T9077] __kvmalloc_node_noprof+0x492/0x6b0 [ 193.862717][ T9077] ? ip_set_alloc+0x24/0x30 [ 193.862745][ T9077] ? ip_set_alloc+0x24/0x30 [ 193.862833][ T9077] ip_set_alloc+0x24/0x30 [ 193.862981][ T9077] hash_netiface_create+0x282/0x740 [ 193.863009][ T9077] ? __pfx_hash_netiface_create+0x10/0x10 [ 193.863037][ T9077] ip_set_create+0x3cc/0x970 [ 193.863121][ T9077] ? __nla_parse+0x40/0x60 [ 193.863149][ T9077] nfnetlink_rcv_msg+0x4c6/0x590 [ 193.863188][ T9077] netlink_rcv_skb+0x123/0x220 [ 193.863224][ T9077] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 193.863251][ T9077] nfnetlink_rcv+0x167/0x16c0 [ 193.863316][ T9077] ? __list_del_entry_valid_or_report+0x65/0x130 [ 193.863345][ T9077] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 193.863368][ T9077] ? should_fail_ex+0x30/0x280 [ 193.863388][ T9077] ? selinux_nlmsg_lookup+0x99/0x890 [ 193.863418][ T9077] ? __rcu_read_unlock+0x34/0x70 [ 193.863436][ T9077] ? __netlink_lookup+0x266/0x2a0 [ 193.863543][ T9077] netlink_unicast+0x5c0/0x690 [ 193.863569][ T9077] netlink_sendmsg+0x58b/0x6b0 [ 193.863597][ T9077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.863717][ T9077] __sock_sendmsg+0x145/0x180 [ 193.863782][ T9077] ____sys_sendmsg+0x31e/0x4a0 [ 193.863913][ T9077] ___sys_sendmsg+0x17b/0x1d0 [ 193.863948][ T9077] __x64_sys_sendmsg+0xd4/0x160 [ 193.863975][ T9077] x64_sys_call+0x17ba/0x3000 [ 193.864010][ T9077] do_syscall_64+0xd8/0x2a0 [ 193.864040][ T9077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.864059][ T9077] RIP: 0033:0x7fc188e1f749 [ 193.864079][ T9077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.864147][ T9077] RSP: 002b:00007fc18787f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.864168][ T9077] RAX: ffffffffffffffda RBX: 00007fc189075fa0 RCX: 00007fc188e1f749 [ 193.864180][ T9077] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 193.864191][ T9077] RBP: 00007fc188ea3f91 R08: 0000000000000000 R09: 0000000000000000 [ 193.864202][ T9077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.864253][ T9077] R13: 00007fc189076038 R14: 00007fc189075fa0 R15: 00007ffcb18774e8 [ 193.864269][ T9077] [ 193.864529][ T9077] memory: usage 307200kB, limit 307200kB, failcnt 2147 [ 194.188373][ T9077] memory+swap: usage 24236kB, limit 9007199254740988kB, failcnt 0 [ 194.196260][ T9077] kmem: usage 23936kB, limit 9007199254740988kB, failcnt 0 [ 194.203498][ T9077] Memory cgroup stats for /syz0: [ 194.208778][ T9077] cache 4096 [ 194.217551][ T9077] rss 4096 [ 194.217558][ T9077] shmem 0 [ 194.217609][ T9077] mapped_file 4096 [ 194.217616][ T9077] dirty 0 [ 194.217621][ T9077] writeback 0 [ 194.217630][ T9077] workingset_refault_anon 153 [ 194.217639][ T9077] workingset_refault_file 3531 [ 194.217649][ T9077] swap 188416 [ 194.217656][ T9077] swapcached 8192 [ 194.217664][ T9077] pgpgin 243114 [ 194.217672][ T9077] pgpgout 243109 [ 194.217681][ T9077] pgfault 197720 [ 194.217689][ T9077] pgmajfault 146 [ 194.217697][ T9077] inactive_anon 0 [ 194.217705][ T9077] active_anon 12288 [ 194.217772][ T9077] inactive_file 0 [ 194.217779][ T9077] active_file 8192 [ 194.217786][ T9077] unevictable 0 [ 194.217792][ T9077] hierarchical_memory_limit 314572800 [ 194.217800][ T9077] hierarchical_memsw_limit 9223372036854771712 [ 194.217808][ T9077] total_cache 4096 [ 194.217814][ T9077] total_rss 4096 [ 194.217823][ T9077] total_shmem 0 [ 194.217875][ T9077] total_mapped_file 4096 [ 194.217882][ T9077] total_dirty 0 [ 194.217890][ T9077] total_writeback 0 [ 194.217899][ T9077] total_workingset_refault_anon 153 [ 194.217928][ T9077] total_workingset_refault_file 3531 [ 194.217938][ T9077] total_swap 188416 [ 194.217946][ T9077] total_swapcached 8192 [ 194.218011][ T9077] total_pgpgin 243114 [ 194.218020][ T9077] total_pgpgout 243109 [ 194.218029][ T9077] total_pgfault 197720 [ 194.218037][ T9077] total_pgmajfault 146 [ 194.218046][ T9077] total_inactive_anon 0 [ 194.218055][ T9077] total_active_anon 12288 [ 194.218127][ T9077] total_inactive_file 0 [ 194.218135][ T9077] total_active_file 8192 [ 194.218212][ T9077] total_unevictable 0 [ 194.218219][ T9077] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1361,pid=9076,uid=0 [ 194.218296][ T9077] Memory cgroup out of memory: Killed process 9076 (syz.0.1361) total-vm:95884kB, anon-rss:1140kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 194.344249][ T9084] netlink: 'syz.4.1363': attribute type 39 has an invalid length. [ 194.403341][ T9088] netlink: 'syz.2.1365': attribute type 3 has an invalid length. [ 194.524130][ T9087] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 194.541332][ T9087] 9pnet_virtio: no channels available for device syz [ 194.659506][ T9099] lo speed is unknown, defaulting to 1000 [ 194.666341][ T9099] lo speed is unknown, defaulting to 1000 [ 194.673425][ T9099] lo speed is unknown, defaulting to 1000 [ 195.609488][ T9113] netlink: 380 bytes leftover after parsing attributes in process `syz.1.1371'. [ 195.650504][ T9122] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1372'. [ 196.134664][ T3514] Bluetooth: hci0: command 0x1003 tx timeout [ 196.140828][ T4124] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.211060][ T9131] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.305651][ T9131] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.342040][ T9139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.362073][ T9139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.461265][ T9131] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.464203][ T9142] loop4: detected capacity change from 0 to 512 [ 196.497739][ T9142] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 196.533379][ T9142] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 196.568442][ T9131] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.585353][ T9142] EXT4-fs (loop4): 1 truncate cleaned up [ 196.597441][ T9142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.612627][ T9147] 9p: Bad value for 'wfdno' [ 196.624486][ T9147] bridge0: entered promiscuous mode [ 196.625233][ T9147] bridge0: port 1(macsec1) entered blocking state [ 196.625272][ T9147] bridge0: port 1(macsec1) entered disabled state [ 196.625404][ T9147] macsec1: entered allmulticast mode [ 196.625418][ T9147] bridge0: entered allmulticast mode [ 196.625979][ T9147] macsec1: left allmulticast mode [ 196.625992][ T9147] bridge0: left allmulticast mode [ 196.626417][ T9147] bridge0: left promiscuous mode [ 196.701691][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.738506][ T1543] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.760773][ T1543] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.804156][ T31] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.882295][ T31] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.482078][ T9178] loop4: detected capacity change from 0 to 512 [ 197.497098][ T9175] bond3: entered promiscuous mode [ 197.502274][ T9175] bond3: entered allmulticast mode [ 197.514280][ T9178] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.527186][ T9175] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.551244][ T9178] EXT4-fs (loop4): 1 orphan inode deleted [ 197.557098][ T9178] EXT4-fs (loop4): 1 truncate cleaned up [ 197.564654][ T9175] bond3 (unregistering): Released all slaves [ 197.586662][ T9178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.613689][ T9178] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.4.1388: path /265/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 197.667192][ T9178] EXT4-fs (loop4): Remounting filesystem read-only [ 197.685652][ T3423] IPVS: starting estimator thread 0... [ 197.780806][ T9182] IPVS: using max 2928 ests per chain, 146400 per kthread [ 197.790336][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.800487][ T9187] siw: device registration error -23 [ 197.880069][ T9194] 9p: Bad value for 'wfdno' [ 197.932852][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 197.932868][ T29] audit: type=1400 audit(2000000914.953:26309): avc: denied { execmod } for pid=9195 comm="syz.2.1393" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 197.988841][ T9194] loop4: detected capacity change from 0 to 512 [ 198.009663][ T9194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.069750][ T9194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.151384][ T9200] xt_connbytes: Forcing CT accounting to be enabled [ 198.160855][ T9200] set match dimension is over the limit! [ 198.262529][ T9211] 9p: Bad value for 'wfdno' [ 198.332081][ T9213] loop4: detected capacity change from 0 to 512 [ 198.352869][ T9213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.381188][ T9213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.500228][ T29] audit: type=1400 audit(2000000915.523:26310): avc: denied { bind } for pid=9217 comm="syz.1.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.519705][ T29] audit: type=1400 audit(2000000915.523:26311): avc: denied { name_bind } for pid=9217 comm="syz.1.1399" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 198.541573][ T29] audit: type=1400 audit(2000000915.523:26312): avc: denied { node_bind } for pid=9217 comm="syz.1.1399" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 198.574335][ T9218] sctp: [Deprecated]: syz.1.1399 (pid 9218) Use of int in max_burst socket option deprecated. [ 198.574335][ T9218] Use struct sctp_assoc_value instead [ 198.623725][ T9220] netlink: 'syz.1.1399': attribute type 39 has an invalid length. [ 198.807015][ T29] audit: type=1326 audit(2000000915.823:26313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d654bf749 code=0x0 [ 198.903827][ T29] audit: type=1400 audit(2000000915.923:26314): avc: denied { setattr } for pid=9222 comm="syz.0.1400" path="socket:[29012]" dev="sockfs" ino=29012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.940564][ T29] audit: type=1400 audit(2000000915.923:26315): avc: denied { listen } for pid=9222 comm="syz.0.1400" path=2F3238352FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 198.985100][ T29] audit: type=1326 audit(2000000916.003:26316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ef70f749 code=0x7ffc0000 [ 199.015177][ T29] audit: type=1326 audit(2000000916.023:26317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ef70f749 code=0x7ffc0000 [ 199.038712][ T29] audit: type=1326 audit(2000000916.033:26318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ef70f749 code=0x7ffc0000 [ 199.111229][ T9234] IPv6: NLM_F_CREATE should be specified when creating new route [ 199.240019][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 199.338741][ T9240] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.390783][ T9245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1405'. [ 199.399850][ T9245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1405'. [ 199.427180][ T9240] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.536495][ T3409] Process accounting resumed [ 199.550993][ T9240] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.629400][ T9250] loop4: detected capacity change from 0 to 256 [ 199.636344][ T9250] msdos: Unknown parameter 'nĒšots' [ 200.124287][ T9257] netlink: 'syz.0.1409': attribute type 6 has an invalid length. [ 200.176246][ T9258] netlink: 'syz.0.1409': attribute type 6 has an invalid length. [ 200.341115][ T9240] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.366615][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 200.405277][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.436565][ T9262] loop4: detected capacity change from 0 to 8192 [ 200.453966][ T9260] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.454046][ T9260] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.454146][ T9260] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.536213][ T9262] loop4: detected capacity change from 0 to 1024 [ 200.629038][ T9262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.661064][ T9277] netlink: 'syz.3.1414': attribute type 10 has an invalid length. [ 200.670324][ T3496] ================================================================== [ 200.670354][ T3496] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 200.685077][ T3496] [ 200.685084][ T3496] write to 0xffff88811bdb4610 of 8 bytes by task 3005 on cpu 0: [ 200.685099][ T3496] __dentry_kill+0x142/0x4b0 [ 200.685129][ T3496] finish_dput+0x2b/0x200 [ 200.704012][ T3496] dput+0x52/0x60 [ 200.704033][ T3496] lookup_one_qstr_excl+0x15a/0x250 [ 200.712827][ T3496] do_unlinkat+0x148/0x4b0 [ 200.712846][ T3496] __x64_sys_unlink+0x2e/0x40 [ 200.712865][ T3496] x64_sys_call+0x2f48/0x3000 [ 200.712898][ T3496] do_syscall_64+0xd8/0x2a0 [ 200.712927][ T3496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.712945][ T3496] [ 200.712950][ T3496] read to 0xffff88811bdb4610 of 8 bytes by task 3496 on cpu 1: [ 200.712963][ T3496] fast_dput+0x5f/0x2c0 [ 200.712981][ T3496] dput+0x24/0x60 [ 200.712998][ T3496] do_unlinkat+0x202/0x4b0 [ 200.713012][ T3496] __x64_sys_unlink+0x2e/0x40 [ 200.713029][ T3496] x64_sys_call+0x2f48/0x3000 [ 200.713050][ T3496] do_syscall_64+0xd8/0x2a0 [ 200.713074][ T3496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.713092][ T3496] [ 200.713096][ T3496] value changed: 0xffff8882375630d0 -> 0x0000000000000000 [ 200.713108][ T3496] [ 200.713112][ T3496] Reported by Kernel Concurrency Sanitizer on: [ 200.713128][ T3496] CPU: 1 UID: 0 PID: 3496 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 200.713159][ T3496] Tainted: [W]=WARN [ 200.713167][ T3496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.713180][ T3496] ================================================================== [ 200.735576][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'. [ 201.177414][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.